DNS (Domain Name System) is how your devices find websites. Attackers use malicious domains to host phishing pages, deliver malware, and control compromised systems. DNS security blocks these domains before your device ever connects — stopping attacks at the very first step.

Antivirus scans files after they arrive on your device. Umbrella prevents the connection to malicious sources in the first place — it's prevention before infection, not detection after the fact.

No. Cisco Umbrella is cloud-delivered and requires no on-site hardware. Deployment typically takes minutes.

Our team of security analysts review your Umbrella environment, investigate suspicious activity, and proactively alert you to threats targeting your business — rather than leaving you to interpret security dashboards yourself.

You can purchase it as a standalone subscription. You can also purchase with our identity protection as per above. It's also included as a component of our Cybersecurity Essentials and Advanced packages for businesses wanting a fully managed, end-to-end solution.

Not at all. That's the point of Small Robot managing it. You don't need to understand DNS security to benefit from it. We handle everything.

You can purchase it as a standalone subscription. You can also purchase it with our internet protection as per above. It's also included as a component of our Cybersecurity Essentials and Advanced packages for businesses wanting a fully managed, end-to-end solution.

MFA means verifying your identity with something beyond just a password — typically a second factor like a phone app approval or a code. Since most breaches involve stolen credentials, MFA stops attackers even when they have a legitimate password.

Microsoft's built-in MFA is a baseline, but it doesn't include AI-powered threat detection, risk-based access decisions, session theft protection, Active Directory monitoring, or cross-application identity visibility. Duo Advantage provides a unified, managed identity security layer across your entire environment — not just Microsoft apps — and gives Small Robot's team the visibility to detect and respond to identity threats before they become breaches.

Standard MFA (like SMS codes) can still be intercepted or spoofed by sophisticated phishing attacks. Duo uses modern authentication standards (like FIDO2/passkeys) that can't be replicated by a fake login page — making it dramatically harder for attackers to bypass.

No — Duo is specifically designed to be easy for legitimate users. Risk-based authentication means your team won't be bombarded with approval requests for every routine login. Friction is reserved for unusual or suspicious access attempts.

SSO lets your team log in once and access all their business apps — email, file storage, CRM, project tools — without logging in separately to each one. It's more secure (fewer passwords to steal) and far more convenient for staff. Most businesses with 10+ staff benefit significantly from SSO.

Trusted endpoint verification checks that the device trying to log in meets your security requirements — like having up-to-date software, encryption enabled, or an approved operating system. Unrecognised or non-compliant devices are blocked, even with correct credentials.

Risk-based authentication evaluates signals like the user's location, the device they're using, the time of day, their normal behaviour patterns, and network context — then decides how much verification to require. A staff member logging in from their usual device on the office network might get through seamlessly. The same account logging in from an overseas IP at 2am gets challenged with additional verification or blocked entirely. It's security that's proportionate to the actual risk.

ITDR is the identity equivalent of endpoint detection and response (EDR). It continuously monitors your identity infrastructure — including your Microsoft 365 or Google Workspace directory — for signs of compromise: unusual privilege escalation, suspicious login patterns, lateral movement between accounts, and other attacker behaviours. When threats are detected, Small Robot's team investigates and responds.

Yes. Protection follows the user, not just the office network, so remote and hybrid workers are covered wherever they connect.

Small and medium-sized Australian businesses up to Small Enterprise — particularly those handling sensitive customer data, financial information, or operating in regulated industries. It's ideal for teams of 5–2000 users who want real security without a full-time cybersecurity team.

Essentials covers endpoint protection, business-wide internet security, access controls, and 24/7 monitoring — everything most SMBs need. Advanced adds identity intelligence, deeper cloud visibility, AI-powered threat detection, mobile/roaming user protection, and expert threat hunting. See the Advanced plan for more.

No. Our team handles installation with step-by-step guidance. You (or someone you nominate) will need to assist with a few end-user-side steps. Admin access to Microsoft 365 or Google Workspace may be required.

Most businesses are up and running within a few business days of purchase.

No minimum. Each licence covers one user — just select the quantity that matches your team size.

Most security tools respond to known threats. Threat hunting means our analysts are actively looking for signs of compromise that automated tools may miss — unusual patterns, early-stage intrusions, and adversaries trying to stay hidden. It's the difference between reactive and proactive security.

Shadow IT & AI refers to apps, tools, or services your staff use without IT approval — things like personal cloud storage, ChatGPT/Claude, or messaging apps. These can create data leaks or security gaps. Advanced lets you discover and control them.

Not if you handle sensitive data, serve clients in healthcare, legal, finance, or government, or simply can't afford the cost and reputational damage of a breach. The Advanced plan is priced per user, so it scales to your team size.

Yes. Mobile and roaming user protection is built in, so your team is covered whether they're in the office, at a café, or travelling internationally.

In most cases, our solution complements or replaces fragmented security tools with a unified, managed platform. Our team will assess your current setup during onboarding.