Part of the Sovereign Stack · Family: Protect

Device Shield

Protect your team’s laptops, phones and servers, and separate printers from the rest of the office network. Choose the monitoring, response and reporting your organisation needs.

What Device Shield protects

Device software watches supported laptops, servers and phones for suspicious activity.
An office firewall separates printers, guest access and business systems.
Email and sign-in controls help protect company accounts. We agree supported systems and responsibilities with you.

How it works

Install and configure protection on the agreed devices and office network.
Review security alerts and take the actions included in your service level.
Explain what happened, what was done and what your team should do next.

Scroll sideways to read the full drawing.

The steps above explain this drawing. Terms are described below.

Protect the workplace. Know how to respond.

Your workplace: Computers and phones
Office network
People working remotely
Device Shield: Protect supported devices
Control access to the office
Isolate a suspected device
An agreed response: Review alerts in Europe
Agree who acts next
Keep useful incident records

Coverage and response are agreed for your organisation.

EDR: Endpoint Detection and Response. Software on supported devices that detects suspicious activity and takes configured actions.
XDR: Extended Detection and Response. Related device, account and network events reviewed together.
Firewall: Controls connections between office networks and outside services.
VPN: Virtual Private Network. An encrypted connection for authorised remote access.
MFA: Multi-Factor Authentication. Another type of sign-in proof, such as a phone confirmation alongside a password.

Device protection and website protection

Device Shield protects the systems your people use. Web App Shield filters traffic reaching public websites, online shops and application connections. They address different entry points and can be used together.

What happens after an alert?

The protection software can block suspicious activity and isolate a supported device when configured to do so. The response team reviews the evidence and agrees the next steps with you.

The Protect + Respond service adds 24/7 alert triage and device isolation. Protect + Respond + Comply also adds the evidence pack and quarterly review shown below. Response arrangements and supported actions are agreed in the service scope.

An affected device may need investigation, rebuilding or file recovery. Reports explain the actions taken and the work still required; example times in the film are illustrative.

Common questions

Does this replace our antivirus?

We check your existing software and supported devices before planning the change. We agree what will be replaced and how to avoid conflicting protection tools.

Can every device run the same protection?

Capabilities vary by operating system and device. Printers and other equipment that cannot run the software are protected through the office network.

Who can access the security records?

We agree the hosting region, administrator access, log retention and any connection to your own monitoring tools before deployment.

Technical details

For IT people: managed endpoint detection and response (EDR) + an on-premises FortiGate firewall + email and identity protection.

Service levels

Feature	Protect	Protect + Respond (recommended)	Protect + Respond + Comply
EDR on supported devices	✓	✓	✓
On-premises FortiGate firewall, configured and watched	✓	✓	✓
Monthly report	✓	✓	✓
24/7 triage and device isolation	—	✓	✓
NIS2 evidence pack, insurer questionnaire	—	—	✓
Quarterly review with you	—	—	✓
Price	On request — depends on how many devices, sites or people you have. Ask for a quote.

Training for your team

Length: Half a day
For whom: Office and IT managers
On the programme: Review device coverage and practise the first-hour plan.

Workshops →