ANOBIS INC · Corona, California
Your security team, on retainer.
Worlds CyberSec runs 24×7 managed detection and response, penetration testing, compliance programs and incident response for companies with 25 to 2,500 employees, on published prices and a one-page agreement.
- Per-endpoint plans and fixed-price assessments, published
- US-based SOC, every alert triaged by a person
- Critical alerts acknowledged in 15 minutes, 24×7
- CRIT02:14Credential dump attempt on DC-02 · host isolated · on-call paged
- HIGH06:52Inbox rule forwarding to external domain · rule removed, session revoked
- MED09:31OAuth consent to unverified app · blocked, user coached
- LOW13:07Unmanaged device on guest VLAN · logged, ticket to IT
Median time to acknowledge: 4 min · SLA 15 min
Services
Six things, done well, on prices you can read before the first call. Open a service for what is included, what you receive and how it runs.
Managed detection & response
Analysts watching your endpoints, identities, email and cloud around the clock, with containment authority you set.
from $14 per endpoint per month
Penetration testing
Fixed-price tests of your external perimeter, internal network, web applications, cloud and wireless, with a free retest.
from $2,400 fixed price
Compliance & vCISO
A fractional security leader and the program behind them: SOC 2, HIPAA, PCI DSS, CMMC and NIST CSF without a full-time hire.
from $4,500 per month
Incident response
Prepaid retainers with a one-hour response, and emergency response for companies that call us on their worst day.
from $12,000 per year
Cloud security
Configuration reviews, hardening and continuous monitoring for AWS, Azure, GCP, Microsoft 365 and Google Workspace.
from $3,900 fixed price
Security awareness & phishing
Short monthly training, realistic phishing simulations and reporting that shows the auditor and the board the program works.
from $2.50 per user per month
Managed plans
Per endpoint, per month, with a monthly minimum. Licenses included, or bring your own EDR and pay less.
Essential
$14 / endpoint / month
$1,250 monthly minimum
Companies with 25 to 150 endpoints that need real monitoring without a security hire.
- 24×7 endpoint detection and response with EDR license
- Email and identity monitoring (Microsoft 365 or Google Workspace)
- Containment playbook: host isolation and account disable
- Quarterly vulnerability scan
Most chosen
Professional
$26 / endpoint / month
$2,950 monthly minimum
Companies with 100 to 1,000 endpoints, cloud workloads and a compliance obligation.
- Everything in Essential
- Cloud monitoring: AWS, Azure, GCP control plane and workloads
- Monthly vulnerability scanning with a ranked remediation list
- Security awareness training and phishing simulations for all users
Enterprise
$42 / endpoint / month
$7,900 monthly minimum
Companies with 500 to 2,500 endpoints, multiple sites, auditors and a board that asks questions.
- Everything in Professional
- SIEM with 12-month searchable log retention
- Network sensors for up to five sites
- Proactive threat hunting, weekly
How it starts
Scoping call to full coverage in about two weeks. The containment playbook is signed before the first agent goes out.
- 1
Scoping call
Thirty minutes with an analyst, not a salesperson. We count endpoints, users, cloud accounts and sites, learn what keeps you up at night, and send a written quote the same day with the plan, any assessments and the total.
- 2
Order and playbook
You sign a one-page order under our terms of service. Onboarding starts with the containment playbook: what we may do on our own (isolate a laptop at 2 a.m.) and what needs your call (disable the CFO's account).
- 3
Deployment
The EDR agent goes out through your existing tooling, or we deploy it. Microsoft 365 or Google Workspace, your identity provider and cloud accounts connect through read-only integrations. Most clients are fully covered inside two weeks.
- 4
Tuning
Thirty days of learning your environment. Every suppressed detection is documented with a reason you can read in the portal, and the baseline vulnerability scan produces the first remediation list.
Who we work with
Companies whose auditor, insurer, regulator or biggest customer asks hard questions about security.
Healthcare practices and clinics
HIPAA risk assessments, MDR on clinical workstations, and the breach-notification support nobody wants to need.
Community banks and credit unions
FFIEC and GLBA programs, examiner-ready reporting, and testing scoped the way your regulator expects.
Defense suppliers
CMMC Level 2 readiness, NIST 800-171 SSPs and POA&Ms, and monitoring that satisfies the DFARS clause.
SaaS and software companies
SOC 2 from zero to report, cloud reviews, application pentests, and the questionnaires your customers send.
Manufacturing and logistics
OT network monitoring, ransomware readiness, and recovery plans built around the plant floor and the dispatch desk.
Law, accounting and wealth management
Email compromise defense, client data handling, and the written program your carrier and your clients ask about.
Schools and nonprofits
Grant-friendly pricing, Google Workspace and Microsoft 365 hardening, and awareness training staff actually finish.
Hospitality and multi-site retail
PCI DSS scoping, point-of-sale network segmentation, and site sensors watched from one SOC.
- Orange Coast Title Company
- Southland Charter Schools Network
- Kern County Ag Cooperative
- Sierra Freight Systems
- Brea Semiconductor Supply
- Palm Springs Resort Holdings
- Riverside Precision Machining
- Inland Valley Medical Group
Questions we get every week
What size company is this for?
Most clients have between 25 and 2,500 employees. Below that, a Microsoft 365 or Google Workspace review and awareness training usually cover the real risk. Above it, we are often one of several providers and work inside your security team's process.
Are the prices on the site what we will pay?
Yes. Managed plans are per endpoint with the minimum shown; assessments are fixed price after a scoping call. The only things added are add-ons you choose and sales tax where it applies.
Where are your analysts?
In the United States. The SOC runs from Corona, California with analysts in three time zones for 24×7 coverage. No work is subcontracted offshore.
How fast can you start?
Managed plans are usually fully deployed within two weeks of signature. Assessments start within two to three weeks of scoping. Active incidents start today.
Do you work with our existing IT company?
Yes, and we prefer it. Your IT team or MSP keeps systems running; we watch for and respond to threats. Both sides work the same case in the portal.
What tools do you use?
CrowdStrike, SentinelOne or Microsoft Defender for endpoints; Tenable for vulnerability management; a Splunk-based SIEM; KnowBe4 for awareness; Vanta or Drata for compliance evidence. Licenses are included in the plan or you bring your own.
Tell us what you are protecting.
Thirty minutes with an analyst and a written quote the same day. No slide deck.