Services

IT services, security and software development under one agreement

CIRRUS Information Technology Resources operates three connected practices: managed IT services, website development and custom application development. Clients use one, two or all three — with the same engineers, the same documentation and the same accountability.

Three Practices

Where to start

Most engagements begin with one urgent problem and expand once the environment is documented and stable.

Managed IT Services

The complete operating stack: 24/7 helpdesk, remote monitoring and management, patching, managed SOC and endpoint detection and response, email security, backup and disaster recovery, Microsoft 365 administration, compliance management and IT documentation.

Website Development

Design, development, hosting and care for business, nonprofit and public sector websites. Technically search-optimized, WCAG 2.1 AA and Section 508 accessible, and fast enough to pass Core Web Vitals.

App Development

Custom web and mobile applications, workflow automation, portals, database design and systems integration — built on mainstream frameworks with source code you own.

What We Do

Build & Protect. Run & Sustain.

Every managed IT and security service CIRRUS delivers falls under one of two pillars: the projects that build a secure, compliant foundation, and the managed services that keep it running every day.

Pillar One

Build & Protect

Assess, design, migrate and harden. Fixed-scope engagements that establish a secure, documented and compliant environment.

  • ✓IT & Cyber Risk Assessment — automated environment assessment with a prioritized remediation roadmap
  • ✓Compliance Program Build-Out — gap analysis and control mapping for HIPAA, PCI DSS, CMMC, NIST 800-171, NIST CSF, CIS and GDPR
  • ✓Security Policy Development — written policies and procedures generated from your framework and kept current
  • ✓Microsoft 365 & Cloud Migration — tenant setup, email and file migration, Azure workloads and virtual desktop
  • ✓Identity & Access Hardening — Entra ID, multi-factor authentication, conditional access and privileged credential management
  • ✓Endpoint & Email Security Deployment — EDR, next-gen antivirus and advanced email protection rolled out to every device and mailbox
  • ✓Network & Zero Trust Design — firewall, switching, wireless and zero-trust remote access
  • ✓Backup & Disaster Recovery Planning — continuity architecture, recovery objectives and a tested DR plan
  • ✓Security Awareness Program — staff training and phishing simulation
  • ✓IT Documentation & Asset Baseline — documented environment, asset inventory and secrets management
  • ✓Cyber Insurance Readiness — controls and evidence that meet underwriter requirements
Pillar Two

Run & Sustain

Monitor, support, defend and report. Subscription services that keep users productive and the environment secure after the build.

  • ✓24/7 Help Desk & End-User Support — phone, email and portal support with defined response times
  • ✓Remote Monitoring & Management — proactive monitoring, automation and self-healing remediation across desktops, servers and mobile devices
  • ✓Patch & Software Update Management — operating system and third-party patching on a defined schedule
  • ✓Managed Detection & Response — 24/7 security operations center monitoring, threat hunting and containment
  • ✓Managed Endpoint Protection — EDR with ransomware detection and rollback
  • ✓Managed Email Security — phishing, impersonation and malware filtering
  • ✓Managed SIEM & Log Retention — centralized log collection and retention for investigations and audits
  • ✓Microsoft 365 & SaaS Security Monitoring — alerts on risky sign-ins, mailbox rules and configuration drift
  • ✓Vulnerability Scanning & Penetration Testing — continuous scanning with scheduled automated network penetration tests
  • ✓Dark Web Monitoring — alerts when company credentials appear in breach data
  • ✓Managed Backup & Business Continuity — endpoint, server, Microsoft 365 and Google Workspace backup with verified restores
  • ✓Continuous Compliance Monitoring — evidence collection, automated assessments and audit-ready reporting
  • ✓Cloud, Server & Network Administration — day-to-day administration of Microsoft 365, Azure, servers and network hardware
  • ✓Virtual CIO & Quarterly Reviews — strategy, budgeting, lifecycle planning and procurement
Capability Index

Everything CIRRUS delivers

A quick reference for buyers, contracting officers and prime contractors evaluating scope coverage.

Support & Operations

  • ✓24/7 help desk and end-user support
  • ✓Remote monitoring and management
  • ✓Patch and third-party software management
  • ✓Automation and self-healing remediation
  • ✓Asset discovery, inventory and lifecycle
  • ✓Mobile device management
  • ✓Vendor management and escalation

Cybersecurity

  • ✓24/7 managed SOC and detection response
  • ✓Endpoint detection and response, next-gen antivirus
  • ✓Ransomware detection and rollback
  • ✓Managed SIEM and log retention
  • ✓Microsoft 365 and SaaS security monitoring
  • ✓Advanced email security and anti-phishing
  • ✓Security awareness training and simulations
  • ✓Dark web monitoring
  • ✓Vulnerability scanning and network penetration testing

Continuity & Compliance

  • ✓Endpoint and server backup
  • ✓Business continuity and disaster recovery
  • ✓Microsoft 365 and Google Workspace backup
  • ✓Secure file sync and share
  • ✓Compliance management for HIPAA, PCI, CMMC, NIST and CIS
  • ✓Policy generation and automated assessments
  • ✓IT documentation and credential management
  • ✓Cyber insurance readiness support

Cloud & Infrastructure

  • ✓Microsoft 365 migration and administration
  • ✓Entra ID identity and conditional access
  • ✓Azure cloud migration and virtual desktop
  • ✓Firewall, switching and wireless management
  • ✓Zero trust remote access
  • ✓Server and virtualization administration
  • ✓Hardware and software procurement

Development

  • ✓Website design and development
  • ✓Website redesign and migration
  • ✓Technical SEO and local search optimization
  • ✓Accessibility testing and remediation
  • ✓Mobile applications for iOS and Android
  • ✓Web applications, portals and dashboards
  • ✓Workflow automation and API integration
  • ✓Managed hosting and care plans

Public Sector

  • ✓State and local government contracting
  • ✓IT staff augmentation by labor category
  • ✓Section 508 conformance and remediation
  • ✓Independent security assessments
  • ✓Document digitization and records support
  • ✓Prime, subcontract and teaming arrangements

Not sure which service you need?

Describe the problem. We will tell you whether it is an operations issue, a security gap or a software gap — and what it would take to fix.