Flotek Group, a leading Managed IT and Cybersecurity provider, has announced the launch of its new Cloud Detection & Response (CDR) service — a proactive security solution designed to close critical gaps in Microsoft 365 and SaaS security before breaches can happen.

This launch builds on the success of CyberGuard MDR, powered by Huntress, which has helped businesses rapidly identify and contain breaches. While CyberGuard focuses on detecting and locking down after an incident, Flotek’s new CDR service takes security a step further — ensuring that the Microsoft 365 environments Flotek manages are continuously monitored for changes and hardened against threats before attackers can exploit vulnerabilities.

Jay Ball, CEO of Flotek Group, commented:
“CyberGuard has been a game-changer for businesses, but reacting to breaches isn’t enough. Today, it’s incredibly easy for a single click on a phishing email to compromise sensitive data — emails, files, and more. We need to not only lock environments down but continuously harden them using Microsoft’s best practices across the 10,000+ accounts we manage. Our CDR service is designed to do exactly that.”

With over 85% of business applications now cloud-based, attackers have more opportunities than ever to gain access. Yet most businesses — and even many IT providers — rarely monitor their Microsoft 365 tenant for changes. Security settings are often applied once and forgotten, leaving organisations exposed if an admin account is downgraded or a critical setting is altered.

Flotek’s CDR service provides an intelligent, always-on security layer that:

• Continuously monitors and enforces Microsoft-recommended security settings across all tenants.
• Integrates with Microsoft Secure Score to automatically tighten security in line with Microsoft’s evolving best practices.
• Provides premium support customers with ongoing security improvements as part of their service, ensuring their environments stay aligned with the latest standards.
• Delivers a detailed Microsoft 365 security report for all new and existing partners, showing current risks, recommended actions, and how to increase Secure Score using existing licensing or by upgrading to premium licensing.
• Detects and blocks suspicious activity such as inbox rule changes, token hijacking, and logins from blacklisted countries or TOR nodes.
• Monitors for unusual data downloads and exfiltration attempts — whether from external attackers or even disgruntled employees — to prevent sensitive information from leaving the organisation.
• Correlates SaaS activity with known company devices to reduce false positives and alert fatigue.

To deliver this service effectively, Flotek has created a dedicated security team focused on prevention and continuous monitoring, supported by AI-driven threat protection that can automatically respond and lock down environments when risks are detected. This combination of proactive human oversight and intelligent automation ensures customers stay protected against evolving threats — because this is what true support is all about.

As part of its commitment to continuous improvement, Flotek actively participates in the Kaseya Action Group, meeting weekly to review emerging threats and implement new security measures across its customer base.

Craig Jones, Group IT Director at Flotek, added:
“Many businesses only take security seriously after a breach. The reality is that most tenants are left unmonitored, and even small changes can go unnoticed for months. It’s so easy to change a setting in a tenant and not realise the security impact this has — whether it’s a customer making a change or even one of our own team. That’s why constant monitoring is essential to protect our customers and their data. Our CDR service is a forward step — proactively managing security, monitoring for improbable travel, suspicious behaviour, and even insider threats, giving customers confidence that their environment is being protected 24/7.”

Priced at just £3.00 per user, per integration, per month, the service includes setup, training, and a complimentary Microsoft 365 security report.