Managed IT &
Security Service
Your IT and security team — covering computers, servers, network and firewall, backup, and Microsoft 365 — at a monthly cost less than the salary of a single IT employee. Purpose-built for organizations of 20–100 people.
฿440
/device/month — EDR (≤฿90/mo) included
14
Modular add-ons — pay only for what you use
CIS v8.1
Operating to Implementation Group 1
4
Named, verifiable reference customers
-----The Reality
The Reality for Organizations of 20–100 People
Cyber threats don't wait until your organization is large enough to afford a full IT
department — but building your own team is rarely the economical answer.
IT Managers Are Expensive
A dedicated IT manager costs ฿80,000–120,000 per month — before benefits, and before the risk of them leaving.
Security Talent Is Scarce
Security specialists start at ฿100,000+ per month, and candidates with combined endpoint, patch, and cloud expertise rarely choose to work alone in a small organization.
One Incident = A Year's Budget
A single ransomware incident, misconfigured backup, or unpatched server can halt operations for days — at a cost that often exceeds an entire year's IT budget.
Single Point of Dependence
Hiring one person buys one person's effort. Our service gives you a structured team, mature operational processes, and enterprise-grade tools.
-----Our Honest Promise
An Honest Promise
— We Only Sell What We Can Deliver
We are not a large IT services company, and we don't claim to replicate a 24×7
enterprise Security Operations Centre. What we offer is realistic,
deliverable, and matched to the scale of organizations we serve.
IT Managers Are Expensive
Service levels we commit to are levels we can sustain — not aspirational marketing.
Transparent Tooling
Tools and processes are documented and open — you know what we use and why, auditable at any time.
No Surprise Invoices
Scope changes and out-of-scope items are flagged clearly, in advance, every time.
Honest About Our Limits
Where we don't offer a capability (24×7 SOC, full SIEM, penetration testing), we say so directly — and help you find the right partner.
-----GWSIS-Essential
One Tier. Transparent Pricing.
EDR License Included.
GWSIS-Essential is our single service tier — there is no Professional, Enterprise, or
premium upgrade. If you need more, you add the specific modules you actually use,
and pay for nothing else.
Single Tier
GWSIS-Essential
Single Tier
฿440/device (PC, laptop, mobile) /month
฿1,040/server (physical or virtual) /month
EDR subscription included (value up to ฿90/unit/month) — your choice of: Sophos · Bitdefender GravityZone · Kaspersky · Microsoft Defender for Endpoint
Minimum 20 devices total · Initial 12-month commitment · Billed monthly · Prices exclude 7% VAT · Volume discounts above 100 devices / 10 servers · Cancel with 60 days written notice after the initial period
vCIO Lite Advisory
Asset inventory & lifecycle tracking with end-of-warranty alerts 90 days ahead
vCIO Lite Advisory
Monthly patch deployment (PDQ Connect)
vCIO Lite Advisory
EDR/XDR license + administration on every device
vCIO Lite Advisory
Microsoft 365 tenant administration + security baseline (MFA, Conditional Access)
vCIO Lite Advisory
SharePoint administration and permission audit
vCIO Lite Advisory
Basic firewall policy management (single-firewall environments)
vCIO Lite Advisory
8×5 helpdesk via portal, email, phone — acknowledged within 1 hour
vCIO Lite Advisory
Annual vulnerability assessment (Nessus)
vCIO Lite Advisory
Quarterly health & security report
vCIO Lite Advisory
Annual CIS Controls v8.1 IG1 compliance review with evidence index
vCIO Lite Advisory
Risk Acceptance Log maintained throughout the engagement
Real-World Pricing Examples
We support any mix of cloud and on-premises infrastructure — pricing scales naturally with your actual environment.
SLA — Response Time by Severity
Helpdesk operates 8×5, Mon–Fri 8:00–17:00 Thailand time · Tickets acknowledged within 1 hour during business hours · For 24×7 P1/P2 coverage, see GWHWMA or contact us for a custom arrangement
-----What We Manage
Three Pillars, Managed Every Month
Device & Infrastructure Management
Screen recording, keystrokes, USB/print control, behavior analytics, forensic evidence — everything happening on PC/Notebook endpoints.
Software & Patch Management
DLP policies on Outlook/Teams/OneDrive, sensitivity labels, Intune MAM on mobile, conditional access — everything happening in the cloud.
Cybersecurity Operations
Third-party audit, monthly executive reports, privilege separation, immutable logs — managing both endpoint + cloud for you.
Note on SIEM and 24×7: GWSIS-Essential does not include full SIEM or 24×7 SOC monitoring. For light-touch log management at SME scale, see GW-LOGS (available Q4 2026). For 24×7 monitoring, we offer Sophos or Kaspersky MDR Endpoint instead.
-----Add-on Services
14 Modular Add-ons
Pay Only for What You Actually Use
Every add-on can be purchased standalone — no GWSIS-Essential subscription
required. GWSIS-Essential subscribers receive a 10% discount on most add-ons. All
prices exclude 7% VAT; specialist software licenses are priced separately where noted.
Standard Add-ons
GWHWMA
Hardware Care & Spare Parts
Post-warranty hardware maintenance — servers (HPE, Dell, Lenovo, IBM), storage, network, HCI · Choose 8×5 NBD or 24×7 within 4 hours · New parts 12-month warranty / refurbished 6-month
GWSIS-BKU
Backup & DR Validation
Validation of your backup architecture (Synology / Active Backup), regular restore testing, ransomware-resilience checks (immutable snapshots, 3-2-1-1), with documented evidence of recoverability
GWFWA1
Firewall Quarterly Care (Fortinet)
Quarterly on-site visits (4/year) — firmware update, configuration audit, policy review, log analysis · Includes Fortinet support coordination (RMA, TAC escalation)
GW-M365-AUDIT
Microsoft 365 Security Audit
Point-in-time tenant audit — Entra ID, MFA, Conditional Access, Exchange, SharePoint, Teams, Defender, Purview against the CIS M365 Benchmark. Executive Summary + 30/60/90-day Remediation Roadmap
New Add-ons
GW-MON
Monitoring & Observability (Zabbix + Grafana)
Enterprise-grade monitoring with zero licensing cost — servers, network, applications, storage, virtualization, with dashboards and alerting · References: Jaymart Group, Yamato-Esulon Thailand
GW-PAM
Privileged Access Management (JumpServer)
Centralized privileged access — credential vault, session recording, just-in-time access, MFA, AD/Entra ID integration — at a fraction of enterprise PAM pricing · Delivered with LXware, the authorized JumpServer distributor in Thailand
GW-SWMA
Software License Management (Microsoft)
Most organizations overpay Microsoft licensing by 20–40% — we run the license audit, SKU optimization, renewal coordination, and true-up support, with quarterly utilization reporting
GW-HWMA-Extended
Extended Hardware Maintenance
Two new tracks — GW-HWMA-FGT for post-warranty FortiGate/FortiSwitch/FortiAP, and GW-HWMA-Bundled combining server + PC fleet coverage at 15–20% below separate contracts (5+ servers, 30+ PCs)
GW-DLP
Insider Threat & DLP (StaffCop)
User activity monitoring and DLP for organizations with a specific insider-threat use case, regulatory requirement, or board-level concern — legal/HR consultation on PDPA required before deployment · Reference: FujiSeal Thailand
GW-LOGS
Log Management & SIEM-Lite (Logease)
Centralized, searchable log aggregation for SMEs — firewall, servers, M365, EDR — with baseline alerting · Internal pilot through Q3 2026 · Pilot customers welcome: significant discount in exchange for feedback
GWvCISO-ESS
Policy Review & Governance
One-time engagement — review of existing security policies, gap identification against ISO 27001 / CIS Controls, delivery of a baseline policy set
GWCRA
Cyber Risk Assessment
Documented Cyber Risk Register — threats, vulnerabilities, likelihood, impact, treatment recommendations, aligned to CIS v8.1 IG1 + ISO 27005 · Fixed price up to 100 users
GWPDPA-QA
PDPA Quick Assessment
Focused 5-day engagement assessing Thailand PDPA readiness — gap analysis report and prioritized remediation plan (full implementation via specialist partner referral)
GWCIO-Lite / Pro
Executive IT Advisory
Retainer-based executive IT advisory — strategic planning, vendor selection, budget review · Lite: monthly 2-hour session · Pro: bi-weekly sessions + board presentation support
-----Our Team
Led by Credentialed, Verifiable Specialists
Our service operates under the direction of internationally certified leadership —
certification documents available on request.
Managing Director
Managing Director
Holder of the CQI/IRCA Certified ISO/IEC 27001:2022 Lead Auditor credential — directing the company's information security management system and service delivery standards across every engagement, with 20+ years in the IT industry.
Senior Security Consultant
Senior Security Consultant
PMP · CompTIA Security+ · Microsoft AZ-900 — 27+ years in telecommunications and IT, including enterprise cyber-security consulting on the CSOC team of Thailand's leading telecom operator (ISO 27001/27017/27018 for CSOC & IR as a Service, Thailand National Cyber Exercise 2022) · M.Eng Telecommunications (AIT)
-----Compare
Compared to Building Your Own Team
-----Reference Customers
Named References, With Permission
Every reference named here has explicitly granted permission to be cited. Reference
calls can be arranged subject to availability and use-case relevance —
we always coordinate with the reference first.
Jaymart Group
Multi-site retail infrastructure monitoring (GW-MON)
Yamato-Esulon Thailand
Manufacturing IT infrastructure monitoring (GW-MON)
FujiSeal Thailand
Production-floor activity monitoring & IP protection (GW-DLP)
Proud In Pro
Managed IT (GWSIS-Essential)
-----FAQ