A Fortify 24x7 brand. Strongroom engineering for records a business could never re-create.Open your accountReach an engineer
Client Data Armor
Plan 01 / The strongroom

You already own a strongroom. It is a laptop, and the door is standing open.

Who buys from you. What you signed. What you are owed and what you owe. The drawings, the quotes, and a decade of correspondence explaining why anything was decided. That is the material a business could never re-create, and hardly any of it sits behind something you would honestly call a door. We fit the boltwork, then keep it working, on a subscription you can read end to end before spending a penny.

24 lines, 10 platforms, and a single monthly invoice
TIME LOCK1WHO BUYS FROM YOU2THE SIGNED ORIGINALS3THE MONEY RECORD4THE WORKING PAPERSPLAN01SUBJECTWHAT IS INSIDEBOLTS8 THROWNISSUEA
Lines you can take24, priced one by one
Platforms licensed10, every one named
BillingMonthly, ahead of the period
Who answersFortify 24x7 engineers
Survey / What actually walks out

Nobody reverses a van up to the loading bay any more.

What finishes a small business is quiet. Something is duplicated, and the only symptom for a year is a competitor whose guesses land unusually often. Four kinds of record account for most of what we are later asked to go hunting for.

FILE 01

Who buys from you

One spreadsheet, and it is the thing a competitor would actually write a cheque for. It duplicates in under a second. It leaves inside a resignation, inside an export nobody wrote down, or through a login that stayed live long after its owner stopped coming in.

FILE 02

The signed originals

Leases, supply terms, the agreement somebody negotiated hard for in 2019. There tends to be one copy, parked in a folder set up by a person who has since moved on, and nobody has counted what is in that folder for years.

FILE 03

The money record

Payroll, invoices, the ledger. Read it and you know the exact week cash lands. Encrypt it and the business stops billing anybody, which turns out to be a brisker way to get paid than sending a polite reminder.

FILE 04

The working papers

Specifications, revisions, quotes, and the thread where somebody explained the reasoning. Boring enough that nobody protects them, valuable on precisely the afternoon a client disputes something and the proof will not surface.

Rooms / Six vaults, one subscription

Six rooms. Fit only the ones you need.

There is no bundle here to swallow whole. Every line holds a rate of its own, charged by unit and by month, with the whole lot settling onto one invoice. A vault plan gives you the function, the price, and the moment where that line runs out of reach.

DETECTION AND RESPONSEBolted to SentinelOne + Fluency

Watch floor

Sensors on the hardware, one joined record sitting above them, and analysts on shift who take the decision themselves.

  • Conduct judged on Windows and macOS and Linux, and on the nodes sitting under your containers.
  • Fluency ties the sources together so an alert turns up with its surroundings attached.
  • Three levels. Watch and report. Watch, report and advise. Or sever it and reverse the damage.
Open the vault plan
EXECUTION CONTROLBolted to ThreatLocker

Boltwork

Approved software runs. The remainder is refused at the door, before it can argue its case.

  • A learning phase reads what your staff genuinely open and turns that into the starting list.
  • Supplier releases get followed centrally, which is why an update never shuts anybody out.
  • A ringfence fixes what an approved program can open, what it can start, and where it can dial.
Open the vault plan
EMAIL PROTECTIONBolted to Ironscales

Night drop

Cover for the one opening you are never going to close. It sits inside the mail tenant, Microsoft side or Google side, and it trains the people doing the reading.

  • Attached over the API, which means a message stays retrievable once it has arrived.
  • Impersonation and account takeover checks calibrated on your own traffic.
  • Simulations, plus one short lesson for whoever turns out to need it.
Open the vault plan
DEVICE FLEETBolted to N-able N-sight, Addigy, Zimperium

Box rows

Every machine numbered, patched, filtered and reachable. Macs counted in. Handsets counted in.

  • N-sight keeps the inventory and carries out updating, scripting and remote work.
  • Filtering is carried by that identical agent, so no new box goes into a rack.
  • Apple hardware goes to Addigy. Handsets, whether iOS or Android, go to Zimperium.
Open the vault plan
DATA PROTECTIONBolted to Actifile

Inner vault

Map the sensitive records, score what each machine exposes, and only then write rules on the routes out.

  • Endpoints and shares read for regulated and proprietary material.
  • One exposure figure for each machine, and that figure decides what gets dealt with first.
  • Encryption where files already sit, plus control on media, uploads and copies.
Open the vault plan
BACKUP AND CONTINUITYBolted to N-able Cove, Dropsuite

Reserve vault

A duplicate of everything, kept beyond reach of the original, and restores that get proved instead of presumed.

  • Images and file level duplicates lifted off workstations, off physical servers, and off virtual guests.
  • Cove holds the Microsoft tenant. Dropsuite holds Workspace, Entra and the ledger.
  • Verification runs to a timetable and leaves a dated result behind it.
Open the vault plan
Suppliers / Named, never invented

None of it was built on these premises. Every part of it is operated here.

This trade likes to hint that its managed service came out of the back office. Ours was not. Beneath the Client Data Armor name are ten commercial platforms. They were chosen because they hold up when loaded. Fortify 24x7 licenses them, and staff who do nothing else watch them from morning to morning. Something with a maker's name on it, and a telephone number attached, wins over an unnamed alternative.

SentinelOne

Endpoint detection driven by behavior, with response that does not wait to be told. Desktop, server and container host operating systems, and it keeps deciding offline.

Fluency

The correlation and retention layer. Sources land here together, which is why one alert turns up carrying the remainder of its hour.

ThreatLocker

Allowlisting, ringfencing and elevation. Fixes what is permitted to execute, then fixes what a permitted program may lay hands on.

Ironscales

Protection at the mailbox, reached over the API, at work within a tenant you already run. Delivered mail is still within its reach. Gateway is the wrong noun, so the noun does not appear anywhere on this site.

N-able N-sight

A solitary agent handling monitoring, delivery of updates, scripting, remote sessions, name filtering.

Addigy

Management for Apple hardware. Enrollment, configuration, encryption state and staged updates across Mac, iPad and iPhone.

Zimperium

Threat defense that executes on the handset. Inspects the network, the device and whatever is installed, and needs no call home to do it.

Actifile

Locates sensitive records, scores what each exposes, encrypts them, and rules whichever channels they could travel down.

N-able Cove

Duplicates at image and file level. Workstations, physical servers, guests on a hypervisor, plus one Microsoft 365 tenant.

Dropsuite

Duplicates covering a Workspace tenant, Entra ID exactly as it stands, and a ledger kept in QuickBooks Online.

Ten named platforms, licensed and run by Fortify 24x7
Fitting out / Your first fortnight

The fit out, week by week.

Nothing here needs a steering group. Most businesses are running and settled within a fortnight, and the time goes on tuning, never on installing.

The measure up

Half an hour by telephone. How many machines, on what platforms, who holds administrative keys, and which records would be worst to part with. That call finishes with a line list in your hand and one number per month. No deck is involved.

Card on file

Pick the lines on this page, then settle up at Stripe. Card details never pass through us. Charging runs monthly and ahead of the period. FORTIFY 24X7 is the descriptor a statement carries.

Agents out

Installers plus enrollment links show in the portal, usually before the working day has finished. Each platform reaches a machine its own way, and none of those routes require you to sit inside a management console.

Tuning

The allowlist finishes learning. Filters acquire their exceptions. Backup timetables get sized on volumes somebody measured, not on volumes anybody estimated. This is the week that determines whether the rest of it is peaceful.

Standing watch

Alerts land on our desk. Yours stays clear. Lines, installers and the entire claim history stay put inside the portal, which has a person behind it.

Honest scope / Where the door ends

Things we are never going to claim.

Every security page opened this month promised protection with no gaps in it. This page declines, on the grounds that no such product exists for sale. Here is the honest edge of what a subscription reaches.

  • We are not an insurer. Nothing on this site underwrites a loss. Buy a policy for that. Expect more than one carrier to insist on controls of roughly this kind before quoting you anything at all.
  • Nothing here makes you compliant. The lines operate controls and produce evidence. Whether a framework regards your business as compliant is somebody else's judgement about the whole of it, and no badge issued by us would move that judgement an inch.
  • Somebody allowed in can still walk out with it. A person cleared to read a document is equally able to retain it. The answers there are a leavers process, a periodic access review, and whatever the employment contract says. All three sit with you.
  • We do not test the thing you build. Code review, application testing and penetration testing are separate crafts practised by separate people. Naming those trades is a better use of a page than selling you something adjacent and leaving you to assume.
  • A line protects what is enrolled. Registration is the boundary. Hardware that never reached the register, or a tenant nobody ever joined up, falls outside all twenty four lines. Quality of product makes no difference to that.
Rate card / Every line and its price

Twenty four lines. Every one priced by the unit, charged by the month.

Each figure here is fetched from billing while the page opens, so what you read is what the card sees. Put lines on the manifest, set the counts, and settle once it reads correctly. It leaves here as one subscription.

Rates would not come through. Refreshing usually settles that. Should the lines stay blank, mail support@clientdataarmor.com and somebody there will price it by hand.
Vault 01

Watch floor, detection and response

Bolted to SentinelOne + Fluency

Endpoint and node across six lines, at three levels of response. Open the plan.

Reading the price board
Vault 02

Boltwork, execution control

Bolted to ThreatLocker

One line only. Nothing executes that nobody approved first. Open the plan.

Reading the price board
Vault 03

Night drop, email protection

Bolted to Ironscales

Cover at the mailbox across two lines, plus practice for the people reading it. Open the plan.

Reading the price board
Vault 04

Box rows, device fleet

Bolted to N-able N-sight, Addigy, Zimperium

Laptops, Macs and handsets across four lines, counted and kept current. Open the plan.

Reading the price board
Vault 05

Inner vault, data protection

Bolted to Actifile

Map the records first across two lines, then rule the routes out. Open the plan.

Reading the price board
Vault 06

Reserve vault, backup and continuity

Bolted to N-able Cove, Dropsuite

Hardware, servers, and the accounts people forget to duplicate, across nine lines. Open the plan.

Reading the price board
BILLING NOTE 07

Heads up: card statements show FORTIFY 24X7 - Client Data Armor is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.

Manifest0 on the manifest$0.00/mo