Suspect a breach? Email gill@watchkeelsecurity.com or use the form or call (813) 513-1206
WatchkeelSecurity
Watchkeel Security

Someone on watch for your business.

Cybersecurity, incident response and cyber-insurance readiness for small and mid-size businesses. Based in the Tampa Bay Area, working remotely with clients across the US.

  • Veteran-owned: US Navy veteran
  • Fixed scope, agreed in writing
  • One named person on every case
What we do

Four services, one standard

Small businesses get hit by the same handful of attacks: a stolen email login, a fake invoice, ransomware, an insurance form answered from memory. We help before, during and after.

During

Incident response

Breach and business email compromise response. Containment first, evidence preservation, forensic analysis of how they got in, then recovery.

Incident response
Before

Insurance readiness (CoverProof)

Plain-English evidence for your cyber-insurance application or renewal, pulled from your systems instead of answered from memory.

Readiness and evidence
Ongoing

Security monitoring

Managed endpoint and identity threat detection (EDR and ITDR), with a named contact when something needs a person.

Security monitoring
Ongoing

Security compliance

FTC Safeguards Rule WISPs, IRS Publication 4557 safeguards for tax offices, and security assessments.

Security compliance
How we work

Plain answers, written scope, no surprise bill

  • A short call first. You tell us what you see; we tell you what we would do and when we can start.
  • A written engagement letter with a fixed scope and a fixed fee before work begins.
  • The same person from the first call to the final report.
  • Reports written for owners, insurers and attorneys, not for other engineers.
  • AI tools help sort large volumes of logs quickly. A person checks every finding.

Having an incident now?

  1. Call your cyber insurer firstIf you have a cyber policy, call the claims line on your declarations page. Some policies require a vendor from the carrier's own list.
  2. Then contact usEmail gill@watchkeelsecurity.com or use the form or call (813) 513-1206. We tell you in our reply when we can start.
  3. Don't wipe anything yetDisconnect affected machines from the network. Don't wipe or rebuild computers, and don't delete mailboxes or strange mail rules, until the evidence is preserved.
For MSPs and IT providers

A security bench you can call

We work alongside IT providers, not against them. CoverProof readiness evidence for your clients' renewals, and an incident response retainer so you have a named responder before a client gets hit.

Partner with us
Who we are

Owned and run by a US Navy veteran

On a ship, the watch stays alert while everyone else sleeps, and the keel keeps her steady in rough water. That is the job here too: notice early, stay calm, and keep the business upright.

About Watchkeel

Not sure where to start?

Tell us what you are seeing or what your renewal asks for. We reply with a plain next step.