A software company knows more about technology than most of its vendors, which is exactly why its own IT tends to be neglected. Developers run whatever they like on whatever they like, accounts accumulate across GitHub, cloud consoles and a dozen SaaS tools, and nobody owns the laptops, the identity setup or the offboarding until a customer sends a security questionnaire. We run the company side of IT for software and technology firms across the Twin Cities: endpoints, identity, email, security and support, in a co-managed arrangement with your engineers or as a full service, priced per device with no long-term contract.
Your product runs in the cloud and your engineers can fix anything, so why pay for IT? Because the company is not the product. Someone has to issue and encrypt the laptops, make multi-factor authentication universal, remove a departed contractor from GitHub and the cloud console the same day, keep email off the phishing lists, and produce evidence of all of it when a customer, an auditor or an insurer asks. When that someone is a senior engineer, it is the most expensive help desk in the city.
The environment is also unusual: Macs beside Windows and Linux, developers who need local admin rights, secrets that must not sit in chat, and customers whose security teams grade you before they buy.
Help desk for Mac, Windows and Linux. One dedicated technician who learns your stack and your people, backed by a team. Remote support resolves most issues in minutes without asking an engineer to stop what they are doing. See how IT support works.
Identity and access, done once. Microsoft 365 or Google Workspace as the identity source, single sign-on and multi-factor authentication into GitHub, the cloud consoles and your SaaS tools, and offboarding that removes everything the same day. See our Microsoft 365 support.
Laptops managed, developers not micromanaged. Encryption, updates and endpoint protection on every machine through device management, with local admin rights handled by policy rather than by argument.
Security evidence on demand. Endpoint detection with a 24/7 response team, email security, account monitoring, backups and training, each producing the records a questionnaire asks for.
Co-managed, if you have a DevOps or IT person. They keep the product infrastructure; we take the company. The split is written down. See co-managed IT services.
Software companies are targeted for their customers’ data and their cloud credentials, and they are judged by their customers on how well they resist. Our managed cybersecurity services layer the defences: Huntress managed detection and response on every computer and server, SentinelOne antivirus beside it, identity monitoring for takeover attempts, email filtering, and security awareness training with phishing tests for the whole company, engineers included. The results feed straight into the answers you give buyers.
Two free checks show where a company stands today: the cyber insurance readiness check and the email spoofing check.
Enterprise buyers ask for a SOC 2 report or a completed questionnaire before they sign, and a startup that cannot produce one loses the deal or the pricing. We have been through our own SOC 2 audit every year and know what the auditor wants to see on the corporate side: access control, device management, offboarding, backups, awareness training, incident response. Our vCISO service runs the readiness work and owns the policies, so your engineers write code instead of control narratives.
We are not here to lock down engineers. Developers keep the tools they need and the rights their work requires, through a policy that grants them rather than a standing argument about them. What changes is that every machine is encrypted, patched and protected, every account is behind MFA and single sign-on, secrets live in a vault rather than a channel, and a departure closes every door in one step.
We price by device, not by user, at a flat monthly rate with no long-term contract, and the security layers are priced separately so you pay only for the ones a customer or an auditor will ask about. See a ballpark in about a minute on our managed services pricing calculator; every rate is published on our pricing page.
We support startups, SaaS companies, custom development shops and technology teams across Minneapolis, St. Paul and the surrounding suburbs, with remote support for developers wherever they work. OAC Technology has supported Twin Cities businesses since 2000 and is audited every year under SOC 2.
Yes, all three platforms, and most software companies are a mix. The remote support tool covers Windows, Mac and Linux, and device management is set up for each.
Only if you ask. Our default is the company side: laptops, identity, email, security and support. Your engineers or DevOps team keep the product, and the split is written down in a co-managed agreement.
Yes, through a policy that grants them and keeps the machine encrypted, patched and protected. What we remove is standing admin rights for people who do not need them.
Yes. Our vCISO service runs the readiness assessment, writes the policies and gathers the evidence, and our managed services put the corporate controls in place. We have been through the audit ourselves every year.
One offboarding step disables the identity, which removes access to email, GitHub, the cloud consoles and every SaaS tool behind single sign-on, and the laptop is collected and wiped.
If a customer questionnaire is sitting in someone’s inbox, or your best engineer is also your help desk, call 952-548-5558 or contact us for a free consultation. We will review your current setup, tell you plainly what we would change, and give you a flat monthly price.
