# Attic Security

> Identity-First Agentic MDR for Microsoft 365. IVON, the agentic layer, performs the first triage, investigates what is happening and closes each case with a verdict. Attic remediates after the customer signs off, or automatically for the action types the customer released in advance. Attic Security is the trade name of Attic B.V., a Dutch company.

This is the short index. The full reference, with the complete service description, pricing and regulatory context, is at https://atticsecurity.com/llms-full.txt

## What Attic does

Most breaches do not start on the network. They start with an account: a forwarding rule in a mailbox, a stolen token after phishing, a consent screen someone clicks away too quickly. Microsoft Defender usually does see those signals, but rates them Low or Informational. With an IT team of zero to two people, that is where they stay.

That is where IVON comes in. IVON picks up those signals, performs the first triage, investigates what is happening and proposes an action. Attic carries it out after the customer signs off, or automatically for the action types the customer released in advance. What an organisation is left with is not an alert to figure out for itself, but a closed case with a trail it can read back.

- Self-service onboarding, live within 5 minutes
- Microsoft 365-native, no extra agents on endpoints
- Verdict with evidence within minutes, remediation after your sign-off or automatically if you switch that on
- Escalation by email, webhook or push notification. Attic does not call you.
- Continuous hardening with drift detection and one-click fixes
- Transparent pricing on the site, no minimum number of users, with a fixed entry price up to 5 users

Attic does not make an organisation compliant. It does cover the part that NIS2 and the Dutch Cyberbeveiligingswet expect operationally: actually handling incidents, so they can be reported in time.

## Company

- Name: Attic Security, the trade name of Attic B.V. The entity "Attic Security B.V." does not exist.
- Address: Molenstraat 36, 4761 CL Zevenbergen, Netherlands
- Chamber of Commerce (KVK): 83973206
- Contact: info@atticsecurity.com | +31 (0)168 794029 | support@atticsecurity.com
- Founded by people from DearBytes, Fox-IT and the Dutch national police
- ISO 27001 programme under way. Attic publishes once it is certified.
- All data is processed and stored in the EU

## Service and pricing

Attic MDR is the service that includes IVON. One tiered per-user model, no editions to choose between, 10% discount on annual payment.

- Attic MDR: from €30 per month for 1 to 5 users, then €6 per user per month, with the rate per user declining as the user count rises. Indicative monthly totals: €150 at 25 users, €275 at 50, €400 at 100.
- IVON capacity: the service includes a standard allowance for incident handling. If more is structurally needed, it can be extended with a monthly bundle of +2x up to +50x the standard allowance, priced per user per month. A bundle adds capacity on top of the standard allowance; it does not replace it.
- Attic Free: phishing protection against Adversary-in-the-Middle attacks. Free, unlimited users, no payment details.
- Prices exclude VAT. Calculator and full specification: https://atticsecurity.com/pricing

## Getting started

- Free one-time IVON incident investigation, available from 1 September 2026. It starts from the Microsoft admin consent screen and asks for read permissions only: https://atticsecurity.com/incidentonderzoek
- 14-day trial of Attic MDR, started from the trial page: https://atticsecurity.com/trial. No payment details are needed to start. The day before it ends the customer is asked to register a payment method to continue; without one the trial stops after 14 days.
- Book a meeting: https://atticsecurity.com/meeting

## Product and service pages

- Agentic MDR, the service: https://atticsecurity.com/agentic-mdr
- IVON, the agentic layer: https://atticsecurity.com/ivon
- Attic Free: https://atticsecurity.com/free
- Attic for Microsoft 365: https://atticsecurity.com/attic-for-microsoft365
- Pricing: https://atticsecurity.com/pricing
- Incident response: https://atticsecurity.com/incident-response

## Audiences

- SMBs (MKB): https://atticsecurity.com/mkb
- MSPs and IT partners: https://atticsecurity.com/msp
- Government and semi-public sector: https://atticsecurity.com/overheid

## Threat knowledge base

Each page explains how the attack works, how to recognise it, and how Attic defends against it.

- Business Email Compromise (BEC), pillar page: https://atticsecurity.com/bec (EN: https://atticsecurity.com/en/bec). Attic Security is a named co-author of the official NCSC publication "Business E-mail Compromise, praktische handvatten voor het mkb" (April 2026), together with Orange Cyberdefense, Invictus and Tesorion.
- CEO fraud, a sub-variant of BEC: https://atticsecurity.com/ceo-fraude
- Phishing: https://atticsecurity.com/phishing
- Adversary-in-the-Middle (AiTM): https://atticsecurity.com/adversary-in-the-middle
- Ransomware: https://atticsecurity.com/ransomware
- Domain hijacking: https://atticsecurity.com/domain-hijacking
- Website spoofing: https://atticsecurity.com/website-spoofing
- DNS and domain security: https://atticsecurity.com/dns-domein-security

## NIS2 and the Cyberbeveiligingswet

Attic sits in the operational layer: the part that reads the alerts, investigates and records what happened. Attic does not certify anyone and does not make anyone compliant.

- NIS2 (NL): https://atticsecurity.com/nis2
- NIS2 (EN): https://atticsecurity.com/en/nis2

## Other pages

- FAQ: https://atticsecurity.com/faq
- Blog: https://atticsecurity.com/blog
- Security alerts from our own research: https://atticsecurity.com/alerts
- Resources: https://atticsecurity.com/resources
- Triage tool: https://atticsecurity.com/triage-tool
- Plugins and apps: https://atticsecurity.com/plug-ins-apps
- Team: https://atticsecurity.com/ons-team
- Contact: https://atticsecurity.com/contact

## Languages

Dutch is the default and has no URL prefix. English lives under the /en/ prefix, for example https://atticsecurity.com/en/agentic-mdr

## Legal

- Terms and conditions: https://atticsecurity.com/voorwaarden (EN: https://atticsecurity.com/en/terms)
- Privacy statement: https://atticsecurity.com/privacy (EN: https://atticsecurity.com/en/privacy)
- Cookie policy: https://atticsecurity.com/cookiebeleid (EN: https://atticsecurity.com/en/cookie-policy)
- Sub-processors: https://atticsecurity.com/sub-verwerkers (EN: https://atticsecurity.com/en/sub-processors)
- Terms for the IVON incident investigation: https://atticsecurity.com/incidentonderzoek-voorwaarden

## Full reference

https://atticsecurity.com/llms-full.txt