Cybersecurity services for small businesses in Richmond and Delta
Lock out ransomware and invoice fraud before they cost you a week of business.
Star X protects small and mid-sized businesses from ransomware, phishing and payment fraud with practical controls: multi-factor authentication, managed endpoint protection, email security, tested backups and staff training. We also help you answer cyber insurance questionnaires honestly and pass them.
- Free security health check
- Cyber insurance readiness
- 24/7 incident response line
- Plain-English reports
60 minUrgent issues: a technician is working on it within the hour
24/7Support line answered day and night, by a technician
No contractPay per job with no retainer, or choose a monthly plan
No fix, no feeIf we can't solve it, you don't pay for that service
Why small businesses are targeted
Attackers go after small businesses because they often run without multi-factor authentication, without anyone watching security alerts, and with backups nobody has tested. A single phished email password can lead to fraudulent invoices sent to your customers, or ransomware that locks every file in the office.
The good news: a small set of well-run controls stops most of these attacks. We put them in place, keep them working, and explain them in plain English.
The most common attacks we see
- Phishing emails that steal Microsoft 365 passwords.
- Business email compromise: a criminal inside a real mailbox changes payment details on invoices. Import, logistics and wholesale businesses that pay overseas suppliers are frequent targets. How to prevent it
- Ransomware that encrypts servers and backups, then demands payment.
- Malware from fake downloads, browser extensions and infected USB drives.
- Hacked websites that serve spam or malware to your visitors.
Quick win: a free security health check
We review your MFA coverage, admin accounts, endpoint protection, email security settings, patch status and backups. You get a one-page summary with the five fixes that matter most.
Our cybersecurity services
Pick individual services or bundle them into a managed IT plan.
Multi-factor authentication
MFA on Microsoft 365, Google Workspace, VPN and admin accounts, with conditional access and phishing-resistant options for high-risk users.
Endpoint protection (EDR)
Managed endpoint detection and response on every computer and server, with alerts reviewed by a technician.
Email security
Spam and phishing filtering, plus SPF, DKIM and DMARC set up so criminals can't easily send email pretending to be you.
Firewalls and network security
Business firewalls (including Fortinet), secure Wi-Fi, VPN for remote staff, DNS filtering and network audits.
Backups that survive ransomware
Offsite, immutable or offline copies, monitored daily and restore-tested. See backup and disaster recovery.
Security awareness training
Short staff sessions on spotting phishing, fake invoices and MFA fatigue attacks, with optional phishing simulations.
Vulnerability assessments
Internal and external scans, a prioritized fix list, and penetration testing scoped per project.
Incident response
24/7 line for suspected breaches: containment, clean-up, recovery and post-incident hardening.
Website security
SSL certificates, malware removal and post-hack restoration, security patching and web application firewalls.
Cyber insurance readiness
Cyber insurance applications have become detailed. Insurers commonly ask whether you enforce MFA, run EDR, keep offline or immutable backups, patch regularly, train staff and have an incident response plan.
We go through your questionnaire with you, check each control on your actual systems, fix what's missing, and give you documentation to support your answers. Read our guide to cyber insurance requirements
Privacy and compliance
Businesses covered by PIPEDA must report breaches that pose a real risk of significant harm to the Privacy Commissioner of Canada and keep a record of every breach for 24 months. BC organizations covered by BC PIPA have their own obligations. We help with the technical controls, logging and breach response plan behind those obligations. BC privacy breach rules explained
Our security baseline
Our assessments follow the Canadian Centre for Cyber Security's baseline controls for small and medium organizations, including:
- Incident response plan
- Automatic patching
- Security software and firewalls
- Strong authentication (MFA)
- Employee awareness training
- Encrypted, tested backups
- Access control and separate admin accounts
- Secure cloud and outsourced IT
Try us on one job
No contract, no retainer, no sales pitch. Give us your most annoying IT problem. If we can't fix it, you don't pay. Most clients who start this way stay.
Questions we hear a lot
Still unsure? Call (778) 312-2227 and ask a technician directly.
What does a small business actually need for cybersecurity?
Start with the basics that stop most attacks: multi-factor authentication on email and remote access, managed endpoint protection on every computer, automatic patching, email filtering, backups that are offline or immutable and tested, and short staff training on phishing. The Canadian Centre for Cyber Security publishes a baseline list for small and medium organizations, and our assessments follow it.
Will this help with our cyber insurance application?
Yes. Insurers commonly ask about MFA, endpoint detection and response (EDR), backups, patching, staff training and an incident response plan. We check each requirement, close the gaps, and give you documentation so your answers are accurate. Inaccurate answers can put a claim at risk.
What should we do if we think we've been hacked?
Call (778) 312-2227 right away. Don't turn computers off or pay a ransom. Disconnect affected machines from the network if you can. We'll contain the incident, preserve evidence, restore systems from clean backups and help you work out whether you have privacy breach reporting obligations.
Do you offer phishing and security awareness training?
Yes. We run short, practical sessions for staff and can follow up with simulated phishing emails so you can see who needs a refresher.
Do you do vulnerability assessments or penetration testing?
Yes. We scan your network and internet-facing systems for vulnerabilities and misconfigurations, then give you a prioritized list of fixes. Deeper penetration testing is scoped and quoted per project.
Can you help with PIPEDA and privacy compliance?
We help with the technical side: access controls, encryption, logging, backups, breach response plans and record-keeping. For legal interpretation of your obligations, we work alongside your lawyer or privacy officer.
Stop fighting your IT. Hand it to us.
Call now for urgent problems, or book a free, no-obligation IT assessment for your office.