As part of our fully managed security services, we put EDR on every PC and Mac and ITDR on every email and cloud account, and our in-house team acts on what both find.
Attackers get in two ways: they put malicious software on a computer, or they get into a user account. Phishing emails are good now, and the person who clicks a convincing link is not the problem. They are human. Detection is the safety net.
Endpoint detection and response (EDR) watches every computer and what software is doing. Identity threat detection and response (ITDR) watches every email and cloud account, including who comes in, whether they should be there, and what they do once inside.
Our in-house team acts on what both find, as part of our fully managed IT service for Toronto and Durham Region businesses. Together, that is managed detection and response (MDR).
Software on every PC and Mac that watches what happens on the machine in real time.
A connection to your email and cloud accounts that watches sign-ins, permission changes and account behaviour.
Each tool is blind to what the other one watches. Modern attacks often start with a stolen identity, not with malware, and attacks that get past MFA have been ramping up since spring 2025. We see the same pattern in our own client base. An attacker who gets onto one laptop or into one account does not stop there, so our team stops the first step before the next one.
An attacker steals a session token, signs in to your email and starts working as you. Nothing malicious runs on your computer, so EDR has nothing to flag. ITDR sees the suspicious sign-in and shuts it down.
Malicious software gets onto a laptop through a download or an attachment. No account does anything unusual, so ITDR has nothing to flag. EDR sees the behaviour on the device, stops it and isolates the computer.
Our in-house security experts respond to alerts as they come in. Critical issues get a response in under 15 minutes.
Meet regulatory requirements with detailed security reporting and audit trails for your devices and your accounts.
We offer EDR for both PC and Mac, and ITDR for your email and cloud accounts. Both work together with our recommended cybersecurity services and tools for small business and non-profits. We monitor and maintain the toolsets for you.
MDR is part of our fully managed IT service, with end-to-end IT support from the same in-house team. No call centre, and no handoff between your security and your helpdesk.
We work with many industries, including:
they persist until they get the tech-ache solved
“Have been working with Kieran and Berj for a while and have always had excellent service from those guys! Ali has recently joined the team and is equally responsive, easy to work with and does a great job! You know that they really want to help and they persist until they get the ‘tech-ache’ solved.”
just the tech support we needed
“Very efficient and helpful. Thanks TUCU for all of your help moving our systems and setting up our office seamlessly. Just the tech support we needed!!”
TUCU is your full service IT support company in Toronto and Durham Region.
EDR (endpoint detection and response) is the software on each device. It watches for attack behaviour, blocks it and records what happened.
MDR (managed detection and response) adds the people. Our in-house security team receives the alerts from EDR and ITDR, investigates them and acts on them for you.
ITDR (identity threat detection and response) watches your user accounts instead of your devices. It connects to your email and cloud environment and looks for signs that an account is compromised: sign-ins from unusual locations, sudden admin rights, and stolen session tokens used to get past MFA.
EDR protects the computer. ITDR protects the account. If malware runs on a laptop, EDR catches it and ITDR does not see it. If an attacker signs in to your email with a stolen session, ITDR catches it and EDR does not see it, because nothing runs on your computer.
That is why we run both.
Yes. MFA protects the sign-in, but attackers now steal the session that MFA creates and use it to work as you. ITDR watches what happens after the sign-in, so it catches the attacker MFA let through.
Antivirus looks for known malicious files. EDR also watches how programs behave, so it catches attacks that do not use a known file.
EDR works where antivirus cannot, which is why it is part of our security baseline.
Yes. EDR and ITDR are part of the security baseline for our fully managed IT service. In June 2025 we dropped our lighter tier, because clients on it were compromised.
Yes. We offer EDR for both PC and Mac, and we monitor and maintain it on every device we manage.
Book a free discovery call to review your fully managed IT needs. If we’re a good fit, we’ll send you a tailored proposal and quote.
