# Cybersecurity companies: how to choose one

> Cybersecurity companies fall into four main types: product vendors that build security software, managed security service providers (MSSPs) that run it for you, managed detection and response (MDR) providers that watch for and stop threats, and consultancies that test and advise. Most businesses without a large security team need a service provider rather than another product.

This site is run by Vigilbase (https://vigilbase.com), a managed security provider. It covers: cybersecurity companies.

## Types of cybersecurity company

- Product vendors: build platforms for endpoints, identity, networks, email or cloud. Examples include CrowdStrike, Palo Alto Networks, Microsoft and Cloudflare.
- Managed security service providers (MSSPs): operate security tools and monitoring for many customers.
- MDR providers: focus on detecting and responding to active threats, around the clock.
- Consultancies and penetration testers: assess, test and advise, usually as projects.

## Which type of company fits

| You need | Look for |
| --- | --- |
| Someone to watch and respond around the clock | MDR provider or managed SOC |
| Tools run and maintained for you | MSSP |
| A one-off test or audit | Consultancy or penetration tester |
| A platform for your own security team | Product vendor |

## Checklist for choosing a cybersecurity company

- Certifications it holds itself, such as ISO 27001 and SOC 2 Type 2.
- Who responds out of hours, and in which time zones its team works.
- Whether it works with your existing tools or forces a full replacement.
- Clear reporting that shows what was stopped and what changed.
- References from companies of your size and industry.
- Contract terms: notice period, data ownership and what happens when you leave.

## Where Vigilbase fits

Vigilbase is a managed security provider. It runs security operations with Vigilbase OS, which investigates alerts with AI and brings verified threats to your team, and it protects websites with Vigilbase Shield, a managed Cloudflare WAF. Vigilbase is ISO 27001 and SOC 2 Type 2 compliant and a Preferred Cloudflare Partner, with follow-the-sun support around the clock.

## FAQ

### What does a cybersecurity company do?

It helps organisations prevent, detect and respond to cyber attacks, by selling security products, running them as a service, or testing and advising.

### Should I hire a cybersecurity company or build an in-house team?

A 24/7 in-house team needs several analysts plus tools. Most small and mid-sized businesses get better coverage for less by using a managed provider, often alongside one internal owner.

### How do I compare MSSPs?

Compare response times and authority, what is monitored, reporting, certifications and price per user or asset. Vigilbase publishes side-by-side comparisons with providers such as Arctic Wolf, Expel and Rapid7.

## Related

- [Compare managed security providers](https://vigilbase.com/comparisons)
- [Talk to the Vigilbase team](https://vigilbase.com/start)
- [Vigilbase Shield (managed WAF)](https://vigilbase.com/shield)
- [Vigilbase OS (security operations)](https://vigilbase.com/os)
- [Managed SOC](https://vigilbase.com/managed-soc)
- [DDoS protection](https://vigilbase.com/cloudflare/ddos-protection)
- [Free security tools](https://vigilbase.com/tools)