Cybersecurity & Governance

Blue Mantis Cybersecurity and Governance services help clients identify risk, close security gaps, meet compliance requirements, and prevent incidents. We combine 24/7 MDR, threat hunting, vulnerability management, cloud security, GRC, ransomware defense, penetration testing, and red teaming to prioritize remediation and strengthen resilience.

Offensive Security

Validate exposure from the attacker’s view through penetration testing, social engineering, and red team operations.

Managed Cybersecurity

Baseline protection, unified detection and response, threat hunting, and GRC as a Service in one coordinated program.

Governance, Risk and Compliance

Risk, vendor, and asset management aligned to CMMC, GDPR, ISO 27001, NIST, and SOC 2 compliance requirements.

Network Security

Firewall, SASE, Zero Trust, and micro-segmentation evaluated and modernized to close exploitable network gaps.

Cloud Security

M365 controls assessment, cloud posture review, migration architecture, and FinOps-integrated security planning.

Secure Access

Identity-first Zero Trust access including SASE, identity and access management, and endpoint protection controls.

Microsoft Security

Sentinel and Defender deployment, Purview DLP, passwordless authentication, and hardened Entra ID and M365 controls.

AI and Data Security & Compliance

AI risk assessment, governance frameworks, data security for Copilot, and ongoing AI monitoring and compliance.

Business Resilience

Business impact analysis, continuity and disaster recovery planning, immutable backup design, and managed backup services.

State	Types of Residents To Whom The Law Applies	Exceptions For Employment-Related Information
Colorado	An individual who is a Colorado resident acting only in an individual or household context and does not include an individual acting in a commercial or employment context, as a job applicant, or as a beneficiary of someone acting in an employment context.	Data maintained for employment records purposes.
Connecticut	An individual who is a resident of Connecticut and does not include an individual acting in a commercial or employment context or as an employee, owner, director, officer or contractor of a company, partnership, sole proprietorship, nonprofit or government agency whose communications or transactions with us occur solely within the context of that individual’s role with the company, partnership, sole proprietorship, nonprofit or government agency.	Data processed or maintained in the course of an individual applying to, being employed by, or acting as an agent or independent contractor, to the extent that the data is collected and used within the context of that role.
Montana	An individual who is a resident of Montana and does not include an individual acting in a commercial or employment context or as an employee, owner, director, officer, or contractor of a company, partnership, sole proprietorship, nonprofit, or government agency whose communications or transactions with the controller occur solely within the context of that individual’s role with the company, partnership, sole proprietorship, nonprofit, or government agency.	Data processed or maintained in the course of an individual applying to, being employed by, or acting as an agent or independent contractor, to the extent that the data is collected and used within the context of that role.
Oregon	A natural person who resides in Oregon and acts in any capacity other than in a commercial or employment context.	Information processed or maintained solely in connection with, and for the purpose of, enabling an individual’s employment or application for employment; an individual’s ownership of, or function as a director or officer of, a business entity; or an individual’s contractual relationship with a business entity.
Texas	An individual who is a resident of Texas acting only in an individual or household context and does not include an individual acting in a commercial or employment context.	Data processed or maintained in the course of an individual applying to, being employed by, or acting as an agent or independent contractor, to the extent that the data is collected and used within the context of that role.
Utah	An individual who is a resident of Utah acting in an individual or household context and does not include an individual acting in an employment or commercial context.	Data processed or maintained in the course of an individual applying to, being employed by, or acting as an agent or independent contractor, to the extent the collection and use of the data are related to the individual’s role.
Virginia	A natural person who is a resident of Virginia acting only in an individual or household context and does not include a natural person acting in a commercial or employment context.	Data processed or maintained in the course of an individual applying to, being employed by, or acting as an agent or independent contractor, to the extent that the data is collected and used within the context of that role.