Signal Watch / endpoint coverage observatory

An endpoint detection and response proposal: the client’s situation, a recommended coverage tier, how detection, alert review, response and reporting work, a who-does-what table for each tier, what is included, a four-week deployment, client results, the team, three per-endpoint tiers with a billing toggle and common questions.

Cybersecurity Software Sales Proposal

Endpoint Detection and Response Proposal

Introduction

<h2 style="font-weight:600;line-height:1.1"><span style="font-size:clamp(28px,4.2cqw,44px)">Your situation</span></h2>

<p style="font-size:clamp(20px,2.1cqw,23px);line-height:1.5;color:var(--proposal-heading)">Here is your situation as you described it. If anything has changed, let us know.</p>

<p>Your console raises dozens of alerts a week. Your IT team checks them when they can, which can be days later.</p>

Alerts go unread

<p>Most of your devices are online in the evening and at weekends, when nobody on your team is watching.</p>

No cover outside office hours

<p>Your laptops, desktops and servers are spread across offices and homes, and you are not sure every one is protected.</p>

You do not have a full device list

Your situation

<p style="font-size:clamp(20px,2.1cqw,23px);line-height:1.5;color:var(--proposal-heading)">No software stops every attack. This table shows what the software does on its own, what our analysts do, and what stays with your team.</p>

<p>Response times are targets for alerts our analysts confirm as critical. Each month’s report shows the time we actually took.</p>

Who does what

Our recommendation

<h2 style="font-weight:600;line-height:1.1"><span style="font-size:clamp(28px,4.2cqw,44px)">How it works</span></h2>

<p style="font-size:clamp(20px,2.1cqw,23px);line-height:1.5;color:var(--proposal-heading)">Your devices run a small agent. Here is what happens from detection to your monthly report.</p>

<p>The agent records process, file and network activity on each of your devices and blocks known malware on its own, even when the device is offline. Suspicious activity becomes an alert in your console.</p><ul><li>Windows, macOS and Linux</li><li>Works on and off your network</li><li>Policies agreed with you before rollout</li></ul>

Detection

<p>On the Managed tiers, an analyst reviews each alert, checks it against your device list and your approved exceptions, and closes false positives with a written note you can read.</p><ul><li>24 hours a day, every day</li><li>Each alert closed with a reason</li><li>Your exceptions list kept up to date</li></ul>

Alert review

<p>If an alert is confirmed, the analyst follows the runbook you approve during deployment: isolate the device from the network, stop the process and phone your named contact. You decide what happens to the device next.</p><ul><li>Isolation only for device groups you approve</li><li>Phone call for critical alerts</li><li>Written incident summary within one working day</li></ul>

Response

<p>A monthly report shows your device coverage, alerts by severity, how fast each was handled and any devices that stopped reporting. You can share it with your leadership or auditors.</p><ul><li>Coverage against your device list</li><li>Response times against target</li><li>Devices that need your attention</li></ul>

Reporting

How it works

<h2 style="font-weight:600;line-height:1.1"><span style="font-size:clamp(28px,4.2cqw,44px)">Deployment timeline</span></h2>

<p style="font-size:clamp(20px,2.1cqw,23px);line-height:1.5;color:var(--proposal-heading)">Deployment starts on {{DEPLOYMENT_START}}. Billing starts when the acceptance test is signed off.</p>

<p>We reconcile your device export against your directory, agree policies and exceptions, and write the alert runbook with you.</p>

Plan

<p>The agent goes on 15 to 20 devices from different teams in detect-only mode, so nothing is blocked while we tune it.</p>

Pilot

<p>The agent goes on the remaining devices in groups, and blocking is switched on group by group.</p>

Rollout

<p>On test devices you authorise, we demonstrate the agreed detections, exceptions and escalation calls. 24/7 review starts once you sign off.</p>

Handover

Deployment timeline

<h2 style="line-height:1.14;font-family:var(--proposal-font-heading)"><span style="font-size:clamp(32px,3.8cqw,48px);font-weight:700;letter-spacing:-.015em">What is included</span></h2>

<p style="font-size:clamp(20px,2.1cqw,23px);line-height:1.5;color:var(--proposal-heading)">What every tier covers, and what it does not.</p>

What is included

<h2 style="font-weight:600;line-height:1.1"><span style="font-size:clamp(28px,4.2cqw,44px)">Client results</span></h2>

<p style="font-size:clamp(20px,2.1cqw,23px);line-height:1.5;color:var(--proposal-heading)">A recent deployment for a company of similar size, and what changed.</p>

Client results

<p style="font-size:clamp(20px,2.1cqw,23px);line-height:1.5;color:var(--proposal-heading)">{{SELLER_NAME}} is your main contact. These three roles stay with your account during deployment and after.</p>

<p>Runs the planning sessions and monthly reviews, and is your contact for contract and coverage questions.</p>

Account lead

<p>Builds the coverage matrix, rolls out the agent with your IT team and runs the acceptance test.</p>

Deployment engineer

<p>Writes your alert runbook, leads the analysts who review your alerts and prepares your monthly report.</p>

Lead security analyst

Your team

<h2 style="font-weight:600;line-height:1.1"><span style="font-size:clamp(28px,4.2cqw,44px)">Questions</span></h2>

Questions

<h2 style="font-weight:600;line-height:1.1"><span style="font-size:clamp(28px,4.2cqw,44px)">Pricing</span></h2>

<p style="font-size:clamp(20px,2.1cqw,23px);line-height:1.5;color:var(--proposal-heading)">Prices are for 150 endpoints. We recommend Managed. Choose a tier and any extras on this page.</p>

<p>Prices are in USD and exclude tax: $7, $12 and $18 per endpoint per month. Billed monthly in advance, or yearly in advance at 10% less. Endpoints added later are billed at the same rate.</p>

Software only; your team reviews alerts. Yearly billing saves $1,260.

Detect

Our analysts review every alert, 24/7. Yearly billing saves $2,160.

Managed

Adds hands-on removal and threat searches. Yearly billing saves $3,240.

Managed Plus

<p>Prices are fixed for the 12-month term. This proposal is valid until {{VALID_UNTIL}}.</p>

Pricing

<h2 style="line-height:1.14;font-family:var(--proposal-font-heading)"><span style="font-size:clamp(32px,3.8cqw,48px);font-weight:700;letter-spacing:-.015em">Next steps</span></h2>

<p style="font-size:clamp(20px,2.1cqw,23px);line-height:1.5;color:var(--proposal-heading)">How we get started.</p>

<p>Accept the tier that suits you on this page, or reply to this email with any changes to your endpoint count.</p>

Choose a tier

<p>Within five working days we meet your IT team, collect the device export and agree the deployment start date.</p>

Planning call

<p>In the second week the agent goes on your pilot group, and you review the first alerts with our analyst.</p>

Cybersecurity Software Sales Proposal - Preview