Managed Response
We'll fix what we find.
Same team, by the hour.
Astrari surfaces what needs attention. Some teams want to act on that themselves; some would rather hand it to someone who's done it a thousand times. Managed Response is the second option — a retainer with the engineers who built and run the platform.
Essential
from £150/mo
2 hours / month · £75 / hour above the pool
A monthly safety net for self-managed teams that occasionally want a real engineer to hand a finding to.
Solo operators, freelancers, small in-house teams.
- ▸ Triage and interpretation of any finding on your dashboard
- ▸ Patching and configuration changes you don't want to do yourself
- ▸ Acknowledged within one business day
- ▸ Unused hours don't roll over — but you only buy what you need
Standard
from £400/mo
6 hours / month · £67 / hour above the pool
Regular patching cadence plus headroom for the occasional incident — the sweet spot for most agency portfolios.
Web agencies and SMBs with a handful of production assets.
- ▸ Everything in Essential
- ▸ Scheduled monthly patching window across all linked servers
- ▸ Quarterly review call covering posture trends and recommendations
- ▸ Same-day response for HIGH and CRITICAL findings during UK working hours
Active
from £950/mo
16 hours / month · £59 / hour above the pool
Proactive portfolio care — we work the dashboard with you, drive findings to zero, and own the remediation roadmap.
Agencies with growing portfolios; MSPs offering security to clients.
- ▸ Everything in Standard
- ▸ Proactive monthly remediation across the whole portfolio
- ▸ Custom hardening profiles per client / asset class
- ▸ Direct line for incident response — typically responded to within hours
- ▸ Optional custom monthly client reports written by us — branded for your clients on request
In practice
What we actually do for you
Concrete examples of work covered by a Managed Response retainer. If a thing isn't obviously here, ask — most of the time the answer is yes.
Trivy flagged 14 CVEs across 8 servers
We work through them in priority order, apply backported patches where available, restart services in a controlled window, and report back what's clear and what's deferred (and why).
A WordPress plugin is publicly exploited mid-week
Updates pushed to every affected site, .htaccess hardened against the exploit pattern, the database scanned for evidence of compromise, customer-facing communication drafted if needed.
An incident — something is reaching the server it shouldn't
We pull the relevant logs, trace the path, contain the issue, restore from a known-good baseline, and write up what happened in plain English. You get a real engineer on the other end of an email, not a ticket queue.
A new client asset needs onboarding properly
Server hardening to a baseline, agent install, alert routing wired to the right people, first scan reviewed and any issues at intake-time fixed before you hand the dashboard to the client.
Same engineers
The people who built it are the people who do the work
Managed Response isn't a separate outsourced team — it's the same UK group that develops Astrari and that has run Linux servers and WordPress sites for our own clients for over a decade. That means the engineer responding to your finding has working knowledge of the dashboard, the agent, your scan history, and the kinds of things that go sideways on real production servers.
We don't pretend to be a 24/7 SOC. We're a UK team with a long operations track record. If that sounds like the right fit — and for most agencies and SMBs it is — we're a good match.
Common questions
Is this a separate company?
Same UK group. Astrari is the monitoring product, run by Incus Technologies Limited. The Managed Response engineers are the same team that builds Astrari and runs servers for our own long-standing clients — so they know the platform inside-out and have actual operations experience to draw on.
How does billing work?
A monthly retainer at the tier price, billed alongside (or separately from) your Astrari subscription depending on what's easier for your accounts. Hours beyond the included pool are billed at the tier rate, with monthly limits we agree up-front so there are no surprises.
What if I don't use my hours one month?
They don't roll over. The retainer buys availability — a known engineer who knows your portfolio, ready to act. We'd rather size you correctly than push hours you don't need.
Can I scale up or down?
Yes — change tier with one month's notice, in either direction. No annual lock-in.
What's not included?
Net-new development (a new website, a new SaaS app), bulk migrations, or sustained projects beyond the monthly hour pool. We can quote those separately as project work — they're the kind of thing our parent company Incus Technologies has done for clients for over a decade.
Tell us about your portfolio
A two-line email — what you're running and roughly how much support you're after — is enough for us to come back with a sized proposal.
Email us about Managed ResponseOr just try Astrari free first and see what comes up.