Mycelium 365 — Microsoft Solutions Partner Australia

    Managed Security Services for Australian Businesses

    A Managed Security Operations Centre (SOC) is a dedicated team of security analysts that monitors your business for cyber threats 24 hours a day, 7 days a week. Mycelium 365 delivers a fully managed SOC through a triple-layer approach — Microsoft Defender for prevention, Huntress for 24/7 human-led detection and response, and KnowBe4 for security awareness training — included in every helpdesk plan.

    Where security usually breaks down

    Security tools are not enough if nobody is watching them.

    Most organisations already have security products. What's missing is monitoring, detection and someone accountable when something happens.

    Alerts nobody reviews — detections sit unread until they become incidents
    No after-hours cover — attacks rarely happen during business hours
    No response plan — unclear who acts, and how quickly
    Fragmented visibility — identity, endpoint and email signals never correlated
    People untested — staff are the most targeted control and the least prepared

    What success looks like

    Threats detected sooner, contained faster, with someone accountable 24/7

    • Attacks detected in minutes, not weeks
    • Threats contained before they spread
    • Employees better protected against phishing
    • Clear visibility across identity, endpoint and email
    • Documented response actions and reporting
    • 24/7 monitoring backed by a named team

    The plan

    How we protect your organisation

    1. 1

      Prevent

      We harden identities, endpoints and email, and train your people.

    2. 2

      Detect

      We monitor signals continuously and investigate what matters.

    3. 3

      Respond

      We contain, remediate and report — then close the underlying gap.

    What is a Security Operations Centre?

    A Security Operations Centre (SOC) is a dedicated function — either an internal team or a managed service — that monitors your IT environment 24 hours a day, 7 days a week, for signs of compromise, threat activity, and security incidents. A SOC does not just run security tools. It has people watching the alerts those tools generate, triaging them to separate genuine threats from noise, and responding when something real is found.

    For most Australian businesses, building an in-house SOC is not practical. A minimum viable in-house SOC requires at least three security analysts to maintain 24/7 coverage ($150,000+ each), a SIEM platform ($50,000+/year), and a threat intelligence feed. A managed SOC replaces all of that with a fixed monthly cost — typically $15–50 per user per month — and the same 24/7 coverage.

    Modern threats — ransomware, business email compromise and adversary-in-the-middle session theft — bypass single-product defences, which is why Mycelium 365 structures its managed SOC as three coordinated layers: Microsoft Defender preventing what it can at the platform, Huntress detecting and responding to what gets through with 24/7 human analysts, and KnowBe4 hardening the human layer through training and simulated phishing. The ASD Essential Eight lists Respond to Cyber Security Incidents (Strategy #8) as one of the eight baseline mitigations every organisation is expected to implement — for organisations without a dedicated security team, a managed SOC is the practical way to satisfy that requirement.

    According to the Australian Signals Directorate's Annual Cyber Threat Report 2023–24, cybercrime costs organisations an average of $49,600 per incident for small businesses and $62,800 for medium businesses — figures that continue to rise year on year. (Source: ASD Annual Cyber Threat Report 2023–24)

    Do Australian businesses need a SOC?

    Businesses that should consider a managed SOC: organisations handling sensitive client data (legal, financial, healthcare, professional services), businesses with government contracts or DISP obligations, businesses required to carry cyber insurance with active monitoring requirements, and organisations that have already reached Essential Eight Maturity Level 1 and are working toward Level 2. Businesses that do not yet need a dedicated SOC typically have fewer than 20 users, no sensitive data handling obligations, and no cyber insurance requirement — for these, managed endpoint security via Microsoft Defender for Business is the right starting point.

    How Mycelium 365 delivers managed SOC

    Mycelium 365 delivers 24/7 managed SOC via Huntress — a purpose-built managed detection and response platform covering endpoint, identity, and email threats. Huntress runs alongside Microsoft Defender for Business, adding a human-reviewed layer on top of automated detection. Every alert that reaches Huntress's SOC analysts is reviewed by a human before a response action is taken — no automated blocking of legitimate business activity. The managed SOC is included in the Secure Cloud package from $150/server/month. Contact us to discuss your environment.

    Accounting firms can automate Microsoft Defender alert workflows to reduce manual triage burden on internal staff.

    Our approach

    A triple-layer managed SOC — Microsoft Defender, Huntress and KnowBe4

    No single product stops every modern attack. Mycelium 365 structures its managed SOC as three coordinated layers so a threat that slips past one layer is caught by the next — prevention at the Microsoft platform, 24/7 human-led detection and response, and a workforce trained to recognise social engineering before it succeeds. All three layers are included in every managed helpdesk plan.

    Layer 1 — Prevent

    Microsoft Defender

    Microsoft Defender for Endpoint, Office 365 and Identity forms the preventative baseline — antivirus, anti-phishing, attack surface reduction and Conditional Access enforced natively across your Microsoft 365 and Windows estate. It's the built-in first line of defence and the platform the rest of the stack integrates with.

    Layer 2 — Detect & respond

    Huntress SOC

    Huntress delivers the SOC itself — 24/7 human-led detection and response across endpoints, identities and logs. Managed EDR, Managed ITDR, Managed SIEM and posture management catch the hands-on-keyboard activity, ransomware precursors and AiTM identity attacks that preventative controls miss.

    Layer 3 — Educate

    KnowBe4 SAT

    KnowBe4 delivers world-class Security Awareness Training and simulated phishing so your people become an active defence layer. Measurable human-risk reduction closes the social-engineering gap that no piece of technology can fully cover. Read our guide to security awareness training as part of your managed SOC for more detail on what's included and how it compares to KnowBe4.

    Inside Layer 2 — how the Huntress SOC operates

    Huntress is the technology and human-analyst engine behind the detection and response layer of the triple-layer SOC. Purpose-built for organisations that fall below the Fortune 500, Huntress delivers enterprise-grade SOC capability at a mid-market and SMB price point.

    Microsoft research found that organisations using multi-layered security monitoring detect breaches 277 days faster on average than those relying on endpoint protection alone — reducing the average cost of a breach by $1.12 million. (Source: IBM Cost of a Data Breach Report 2024)

    Huntress operates a 24/7 AI-assisted SOC staffed by human security analysts
    The Huntress platform monitors telemetry from endpoints, identities, and logs simultaneously
    Threats are investigated by human analysts — not just automated alerts — before being escalated
    Sub-1% false positive rate means your team only sees incidents that actually matter
    Included as standard in every Mycelium 365 managed helpdesk plan — not an add-on

    What the triple-layer SOC covers

    Five capabilities delivered across the three layers — Defender-integrated prevention, Huntress-led detection and response, and KnowBe4 human-risk training.

    Managed Endpoint Detection and Response (EDR)

    The EDR layer combines Microsoft Defender for Endpoint with Huntress Managed EDR. Microsoft Defender for Endpoint provides the preventative platform — next-generation antivirus, attack surface reduction rules, exploit protection, network protection, tamper protection, automated investigation and remediation, and Defender Vulnerability Management — deployed and hardened through Microsoft Intune. Huntress then sits alongside Defender as the 24/7 human-led SOC layer, reviewing endpoint telemetry, hunting for persistent malware and hands-on attacker activity, and triggering one-click remediation. Together they detect the 18 stages of a ransomware attack and intervene before encryption occurs — Defender preventing what it can at the platform, Huntress catching what gets through.

    Managed Identity Threat Detection and Response (ITDR)

    Identity is the primary attack surface for modern cyber threats — Huntress Managed ITDR monitors Microsoft 365 accounts and Entra ID for account takeovers, business email compromise, adversary-in-the-middle (AiTM) attacks and unauthorised logins. The Huntress SOC detects compromised sessions in real time and takes action before damage occurs. This is especially critical for organisations subject to the Essential Eight, where multi-factor authentication bypass is an increasingly common attack vector.

    Managed SIEM — Security Information and Event Management

    Huntress Managed SIEM consolidates log data from endpoints, firewalls, identity systems and cloud services into a single monitored environment. Unlike traditional SIEMs that generate thousands of unactionable alerts, Huntress uses Smart Filtering to retain only security-relevant data and applies SOC-tuned detection rules to identify real threats. Compliance log retention of up to 7 years supports audit requirements including CMMC, PCI-DSS and Essential Eight compliance reporting.

    Identity and Endpoint Security Posture Management

    Huntress continuously scans your Microsoft 365 tenant and endpoints for misconfigurations, excessive permissions, policy drift and risky settings that attackers exploit before incidents occur. Microsoft 365 tenants are assessed against the CIS Microsoft 365 Benchmark and Huntress's own identity security framework, with automated or one-click remediation for identified gaps. This left-of-boom posture management closes the attack surface that most businesses leave open by default.

    Security Awareness Training — powered by KnowBe4

    Mycelium 365 delivers Security Awareness Training through KnowBe4, the world's largest security awareness and simulated phishing platform. Users receive engaging, bite-sized training on phishing, business email compromise, password hygiene and social engineering, backed by realistic simulated phishing campaigns that measure and improve human risk over time. Combined with the Huntress-powered SOC, KnowBe4 closes the human layer of your defence — because a strong security culture is the most cost-effective control in any organisation.

    Why a managed SOC is more practical than building one in-house

    Standing up an in-house SOC means hiring security analysts across three rotating shifts to provide genuine 24/7 coverage, licensing an enterprise SIEM, subscribing to threat intelligence feeds, and building the detection engineering and incident response playbooks that turn raw telemetry into confirmed incidents. Realistically that's a seven-figure annual investment before a single threat is detected. The traditional alternative is outsourcing to a large MSSP, but those services are built around enterprise contracts, enterprise onboarding timelines and enterprise price points — the mid-market and SMB segment rarely gets a well-fitted product. Huntress was specifically designed for organisations that fall below the Fortune 500, and by delivering it through Mycelium 365 the same detection outcomes are packaged into a per-user managed service. You get the SOC capability the threat landscape demands, without the capital cost or the headcount, and it's already included in your helpdesk plan.

    How does a managed SOC help organisations meet Essential Eight requirements?

    The ACSC Essential Eight is the Australian Government's baseline set of mitigation strategies for protecting internet-connected IT systems. A managed SOC materially strengthens a business's position against five of the eight requirements — through both preventative posture management and active detection and response.

    Mitigation Strategy #3 — Patch applications

    Huntress ESPM identifies and prioritises unpatched vulnerabilities across endpoints and Microsoft 365 workloads so critical patches are actioned before exploitation.

    Mitigation Strategy #6 — Application control

    Huntress ESPM controls which applications can run and flags unauthorised software or living-off-the-land binaries used in attacker tradecraft.

    Mitigation Strategy #7 — Multi-factor authentication

    Huntress ITDR detects MFA bypass attacks — including adversary-in-the-middle (AiTM) session theft and OAuth consent phishing — that defeat MFA at the token layer.

    Mitigation Strategy #8 — Regular backups

    SOC monitoring detects ransomware precursor behaviour and the 18 stages of a ransomware attack before backup destruction is attempted.

    Respond to Cyber Security Incidents

    The managed SOC is the incident response capability — 24/7 detection, investigation and remediation by human analysts, with documented reports for audit and insurance evidence.

    For a wider gap assessment against the Essential Eight and other Australian frameworks, see our governance and compliance readiness advisory service.

    Which organisations benefit most from a managed SOC?

    Professional services firms — legal, accounting, financial advisory and consulting practices — handling sensitive client data under Privacy Act and industry confidentiality obligations gain the most immediate risk reduction. Healthcare organisations subject to the Australian Privacy Act, My Health Records Act and state-based health privacy requirements need continuous monitoring to detect and contain breaches within mandatory notification timeframes. Defence contractors with Defence Industry Security Program (DISP) membership or Essential Eight compliance requirements use a managed SOC as core evidence of active security monitoring. And any organisation that has been told by their cyber insurer to demonstrate continuous security monitoring, EDR deployment or documented incident response capability can point to the Huntress-powered SOC as the operational answer.

    KnowBe4 Security Awareness Training

    KnowBe4 is included in Mycelium 365's SOC service — not sold as a separate add-on. We integrate KnowBe4 into the managed security stack so the human layer is measured and improved alongside the technical layers: simulated phishing campaigns test how your people respond to realistic lures, compliance training modules are assigned automatically to users who need them, and reporting dashboards give leadership a clear view of human-risk trends over time.

    Because KnowBe4 sits inside the same Microsoft 365 environment the SOC already monitors, setup is clean: user provisioning syncs from Entra ID, phishing simulations are delivered through Exchange Online without disrupting mail flow, and allow-listing is coordinated with Microsoft Defender for Office 365 so simulations reach inboxes safely while real threats stay blocked.

    Read the full breakdown of KnowBe4 pricing, tiers and how it works for Australian businesses in our KnowBe4 Australia guide.

    Managed cybersecurity services and consulting

    Beyond managed SOC monitoring, Mycelium 365 provides cybersecurity consulting services for Australian businesses — security architecture advice, incident response planning, audit readiness, and advisory support for businesses preparing for APRA CPS 234, Essential Eight, or ISO 27001 assessments.

    Last Updated:

    Frequently Asked Questions

    Managed security combines preventative controls with active threat detection and response. Microsoft Defender provides the preventative baseline, while managed Security Operations Centre (SOC) services focus on detecting and responding to active cyber threats — 24/7 monitoring of endpoints, identities and logs by human security analysts, threat hunting, incident investigation, and remediation of confirmed compromises. Mycelium 365 delivers a triple-layer approach — Microsoft Defender for prevention, Huntress for 24/7 human-led detection and response, and KnowBe4 for security awareness training — included in every managed helpdesk plan, so you get enterprise-grade protection without a separate contract, add-on fee, or minimum user count.

    Yes. Every Mycelium 365 managed helpdesk plan includes the full triple-layer managed SOC as standard — Microsoft Defender as the preventative baseline, Huntress delivering Managed EDR, Managed ITDR, Managed SIEM and identity and endpoint security posture management, and KnowBe4 delivering security awareness training and simulated phishing. There is no separate SOC subscription, no per-alert charge, and no minimum seat count that unlocks the capability. This is a deliberate design choice: a helpdesk without an active SOC is an operational risk in 2026, and we don't think SMBs should have to negotiate security monitoring as a premium add-on.

    Huntress SOC analysts investigate suspicious activity in real time, 24 hours a day, 7 days a week. When an incident is confirmed as a real threat rather than a false positive, an incident report with recommended or one-click remediation actions is delivered immediately — most active intrusions are contained within minutes, not hours. For high-severity events (ransomware precursors, confirmed account takeover, hands-on-keyboard attacker activity) Mycelium 365 is notified in parallel and coordinates containment with your team so you're never woken up by an alert with no path to resolution.

    Yes. Huntress Managed ITDR monitors Microsoft 365 and Entra ID for account takeover, business email compromise, adversary-in-the-middle (AiTM) session hijacking, malicious inbox rules, unauthorised OAuth app consent and anomalous sign-ins — alongside Huntress Managed EDR watching every enrolled endpoint. Because Huntress correlates endpoint, identity and log telemetry in one platform, an attacker who compromises a Microsoft 365 account and then pivots to a workstation is detected as a single incident, not two disconnected alerts. This unified coverage is the practical answer to modern hybrid attack chains.

    Australian cyber insurers increasingly require evidence of continuous security monitoring, endpoint detection and response, MFA enforcement and a documented incident response capability before they'll bind a policy — or before they'll pay a claim. A managed SOC directly satisfies the monitoring and response requirements, and Huntress produces the audit-ready logs and incident reports underwriters ask for. Mycelium 365 can supply the evidence pack (EDR deployed, ITDR active, log retention configured, incident response process documented) that most cyber insurance renewal questionnaires now demand.

    A Security Operations Centre (SOC) is a team that monitors, detects, and responds to cyber threats 24 hours a day. Australian businesses processing sensitive data, subject to Essential Eight requirements, or holding cyber insurance typically need active threat monitoring — not just security tools. Mycelium 365 provides a fully managed SOC via Huntress, integrated with Microsoft Defender and Microsoft Sentinel.

    Mycelium 365's managed security service includes 24/7 SOC monitoring via Huntress, Microsoft Defender for Business or Endpoint management, Conditional Access policy administration, Essential Eight implementation and reporting, KnowBe4 security awareness training, and incident response. All services are delivered at a fixed monthly rate with a named account manager.

    Mycelium 365's managed security services are included in the Secure Business package from $135/user/month for organisations from 20–300 users. This includes 24/7 SOC monitoring, Microsoft Defender management, Essential Eight controls, and KnowBe4. Standalone SOC monitoring can also be quoted separately.

    Managed security services is the broad category — it includes endpoint protection, policy management, and compliance controls. A SOC (Security Operations Centre) is the active monitoring and response component, where analysts watch for threats in real time and contain incidents. Mycelium 365 provides both: managed security tools plus 24/7 SOC monitoring via Huntress.

    Further reading on cyber security and managed SOC

    Explore how Huntress-powered monitoring, security awareness training, and modern Microsoft security controls fit together for organisations.

    Serving businesses across Australia

    We provide managed security operations for businesses across Australia — Managed security Melbourne, Managed security Sydney, Managed security Brisbane, Managed security Perth, and Managed security Gold Coast.

    What our clients say

    5.0from 15 Google reviews

    Verbatim client reviews, grouped by responsiveness, technical expertise, security and ongoing support, sit on one page alongside the case studies and Microsoft Solutions Partner credentials behind them.

    Read our client reviews

    When your environment is monitored 24/7, your team stops worrying about what they might have missed — and you have the evidence to show any auditor, insurer, or board that security is being taken seriously.

    Ready to simplify and secure your technology?

    Book a free, no-obligation Discovery Call to talk through your Microsoft 365, Azure, security, or support needs — no sales pitch, just a straight conversation.

    Book a discovery callCall +61 1300 116 418