Enterprise-Grade Cybersecurity for Western Canadian Business
Layered defense, not theatre. EDR, MDR, email security, phishing training, dark web monitoring, MFA, and penetration testing. We assume breach and design from there.
North Star delivers managed cybersecurity for businesses in Prince George and across BC. We scope layered controls, monitoring, and response around your systems and priorities. The work is intended to reduce exposure and support investigation; it does not promise that every attack will be prevented or detected within a particular time.
That starts with reviewing which devices and accounts are in scope for endpoint detection and response (EDR) and identity controls. We covered the difference in our guide on EDR vs antivirus. We also plan multi-factor authentication and identity changes around your applications, users, and recovery needs. Our MFA rollout guide covers staged deployment and user support. We offer dark web monitoring for exposure alerts from the sources covered by the selected service, and our blog explains whether dark web monitoring is worth it for a small business.
We offer phishing simulations and security awareness training with an agreed campaign schedule and reporting. A scoped security assessment or penetration test documents findings within the tested systems and methods. An incident response retainer can establish contacts, responsibilities, and escalation terms before an incident. If you do not have one yet, start from our incident response plan template.
This is built for small and mid-sized BC organisations, including those handling sensitive data or carrying cyber insurance obligations: professional services, trades and construction, forestry, non-profits, and local government across Prince George and Northern BC. Remote delivery is available across Alberta, Yukon, and Canada; physical work is scheduled separately according to scope and location. Cybersecurity is also available as part of our broader managed IT services.
Choose the cybersecurity work you need.
Pick a workstream, then agree the systems, responsibilities, reporting, and access needed to deliver it.
Test the agreed scope and prioritise findings.
External, internal, and web application penetration testing, or social engineering, with written authorisation and agreed boundaries. The deliverables are a findings report and remediation priorities. Confirm any required evidence format before commissioning work.
Learn more →Practice recognising and reporting phishing.
Phishing simulations, role-based follow-up, and reporting on observed participation and responses. Agree campaign frequency and reporting needs in the scope. A simulation result is not a guarantee of future behaviour or insurer acceptance.
Learn more →Review credential exposure alerts.
Monitor the domain and sources included in your service. Review reported matches, notify the agreed contact, and coordinate account checks or resets where authorised. Source coverage is limited: an alert may arrive after misuse, and a clean report does not prove that credentials have never leaked.
Learn more →Agree incident responsibilities before a crisis.
An incident response retainer can document runbooks, contacts, and escalation arrangements. Coverage hours, response targets or SLAs, included hours, charges, and any unused-hours rollover must be agreed in writing. A retainer does not imply an immediate response or a guaranteed recovery time.
Learn more →Plan MFA with users and recovery in mind.
Plan Conditional Access policies, application integrations, user support, and recovery flows for the agreed environment. Microsoft 365 identity, Duo, or Okta can be considered according to your requirements. Rollout includes testing and follow-up rather than a promise of zero user friction.
Learn more →Cybersecurity Pricing
Transparent cybersecurity pricing.
Security options include 24/7 SOC monitoring, EDR, MDR, and SIEM. The selected tier and written agreement define monitoring coverage, response hours, escalation, and service levels. Founding prices lock in for clients signing before December 1, 2026 and hold for the life of the agreement. All prices CAD, per user, per month. GST 5% applies.
MSSP Advanced
$175/ user / month
EDR + MDR + 24/7 SOC + monthly threat hunting report. For SMBs that need defense without a full compliance program.
MSSP CIS-Aligned
$225/ user / month
MSSP Advanced + CIS Controls v8 implementation, SIEM with 90-day log retention, and quarterly evidence packs for cyber insurance.
Security Awareness Training
$8/ user / month
Phishing simulations, microlearning modules, dark web monitoring, and quarterly reporting. Add-on to any tier.
Penetration Test
$4,500+per network, one-time
External and internal network penetration test with remediation roadmap. Agree testing scope and frequency against your assessment and audit needs.
All prices estimated and vary by project. Final pricing depends on user count, scope, on-site vs remote delivery, compliance requirements, hardware costs, third-party licensing, and travel. We issue a fixed-fee Statement of Work after the Free IT Assessment. See the complete price list for every billable service.
Looking for around-the-clock eyes on your environment? Our 24/7 SOC services in Canada can pair analysts with managed detection and response. Confirm covered systems, alert handling, and response hours in the service agreement.
Need someone accountable for security at the leadership level, not just the tooling? That is our vCISO service.
Cybersecurity services by city
Explore cybersecurity service options by city: EDR, MDR, phishing training, and incident response. Delivery arrangements depend on scope and location.
What a managed SOC costs in Canada
Want a real conversation about your IT?
Book a 30-minute scoping call. We'll look at what you have, what's hurting, and what's worth changing. No quote-or-die pressure.
Get a Free Assessment Contact usCybersecurity across BC, Alberta, and Yukon.
Pick your city to review service coverage, then confirm delivery arrangements and response terms for your scope.
Frequently asked questions
Do you provide cybersecurity services in Prince George?
Yes. North Star is based in Prince George, BC, and offers cybersecurity services across BC, Alberta, Yukon, and Canada through remote delivery. Physical work is scheduled separately. Monitoring coverage, response hours, and on-site arrangements depend on the agreed service scope.
What is included in managed cybersecurity?
Available workstreams include endpoint detection and response (EDR), MFA and identity hardening, email security, dark web monitoring, phishing simulation and awareness training, vulnerability management, and incident response. An assessment helps define priorities; the proposal specifies which workstreams, systems, and deliverables are included.
Will this help us meet cyber insurance requirements?
We can review your insurer's questionnaire, document relevant controls, and prepare evidence within an agreed scope. Confirm required controls and evidence with your insurer or broker. This work does not promise policy approval, renewal, a particular premium, or claim payment.
How do you respond when there is a security incident?
Agree the escalation contacts, coverage hours, response targets, and authority to act before an incident. Work can include alert triage, investigation, authorised containment, recovery coordination, and a written follow-up. Response and recovery timing depend on the incident and contracted scope. If you do not have a plan yet, start from our incident response plan template.
A clear scope before you commit