Welcome to your one stop for everything security as a service.
Our fully managed security suite extends far beyond traditional managed firewall and endpoint solutions. Where others fall short and send you looking for additional services to fill in the gaps, Bullroar has assembled a soup to nuts portfolio that enables identity driven security from the edge to the desktop.
NGFWaaS
Centralized core firewall unifies identity and security across offices, remote users, and third parties.
Enterprise Consulting
You can lean on us for any facet of your Enterprise IT needs. Whether it's identity-based networking or automation security, Bullroar has the expertise you need to succeed.
Secure Private Cloud
Bullroar's secure private cloud was designed from the ground up with a focus on security and maleability that conforms to any company's needs.
LAN/WIFI Edge
Transform your branch, home, or micro office into an extension of your private FWaas core from anywhere.
Endpoint Security
Comprehensive AI powered endpoint protection including EDR/XDR, ZTNA, posture assessment and more.
AUTHaaS
A critical toolset of authentication resources provides internal CA, DNS, Radius, LDAP, SAML, and more...
FAQ
Getting Started and Scope
What does a managed security service provider (MSSP) do that an in-house IT team or MSP doesn't?
We run, monitor, and tune your security stack (firewall, identity, endpoint, wireless edge) as a dedicated engineering function. An MSP keeps users and systems running. We focus on keeping the network defensible.
Do you only work with large enterprises?
No. We serve businesses of all sizes, and our branch and micro-office options scale down to a single site.
Do we have to replace our existing equipment?
Not always. We assess what you have first, then keep, integrate, or replace based on what is supportable. [CONFIRM: support for customer-owned gear.]
How long does onboarding take?
[CONFIRM: typical timeline by service.] We deploy in phases so protection goes live before the full build is done.
Can you start with an assessment before we commit?
Yes. Our Cyber Threat Assessment Program (CTAP) shows what is actually crossing your network before any long-term commitment.
Managed Firewall (NGFWaaS)
What is NGFWaaS?
A managed next-generation firewall delivered as a service. We provide, configure, monitor, patch, and update it, so you don't carry the hardware lifecycle or the policy upkeep.
What security features are included?
Web filtering, application control, IPS/IDS, deep packet inspection, network antivirus, DNS protection, and sandboxing.
Do you inspect encrypted traffic?
Yes, through deep packet inspection. Because it affects privacy and performance, we scope it with you and exclude sensitive categories such as banking and healthcare.
Who handles firmware updates and vulnerability patching?
We do, on a scheduled maintenance process with advance notice. [CONFIRM: emergency-patch window.]
Who owns the firewall configuration, and what happens if we leave?
You own your policies and data. [CONFIRM: exit and config-handoff terms.]
Remote Access, VPN, and SD-WAN
What is ZTNA and how is it different from a VPN?
ZTNA grants access to specific applications after verifying the user, the device, and its posture. A traditional VPN puts the user on the network. ZTNA limits what a stolen credential can reach.
Do you still support traditional VPN?
Yes: SSL VPN, IPsec tunnels, and dial-up, along with ADVPN for site-to-site meshes.
Can you connect multiple offices securely?
Yes. We use IPsec and SD-WAN to link sites with centralized inspection, so a branch gets the same protection as headquarters.
Identity and Authentication (AUTHaaS)
What is AUTHaaS?
Hosted identity infrastructure we run for you: managed certificate authority, RADIUS (including RadSec), TACACS+, LDAP, OAuth, and MFA.
Do you integrate with Microsoft Entra and Active Directory or Google?
Yes, with Entra ID, on-prem Active Directory, and Google IAM.
Can you secure Wi-Fi and wired access with certificates?
Yes. We deploy EAP-TLS with a managed CA, plus captive portals for guest access.
Endpoint Protection
What does your endpoint protection include?
AI-driven endpoint protection (EPP/ATP), a ZTNA client, endpoint web filtering and application firewall, and posture assessment and remediation.
Do you offer EDR/XDR and a SOC?
Yes, EDR/XDR and SOC-as-a-Service are optional add-ons. [CONFIRM: hours of coverage.]
What is posture assessment?
Before a device connects, we check that it meets your standards (patched, protected, compliant). Noncompliant devices are blocked or remediated.
LAN, Wi-Fi, and Private Cloud
Can you manage our switches and access points?
Yes: 8 to 48 port, PoE, and industrial switches, plus Wi-Fi 6/7 access points, all managed as an extension of the firewall.
What is the Secure Private Cloud offering?
Hyperconverged compute and storage with cross-region protection and optional geo-redundancy, hosted across our service nodes. [CONFIRM: OS and workload support details.]
Compliance, Response, and Commercial
Does your service help with compliance (HIPAA, PCI DSS, CMMC, cyber insurance)?
Our logging, segmentation, access control, and monitoring support the technical controls these frameworks require. Compliance still depends on your policies and processes as a whole. [CONFIRM: frameworks to name.]
What happens when there is an incident?
[CONFIRM: response steps, who is contacted, response-time targets.]
What are your support hours and response times?
[CONFIRM: SLA tiers and contact path.]
How is pricing structured?
[CONFIRM: flat monthly per service / per site / per user.] Equipment is part of the service, so there are no surprise hardware refresh bills. [CONFIRM.]
Where is my data stored, and who can access it?
Logs and configurations are stored in our US-based service nodes (New Orleans, Fremont, and Tampa from Q4 2026). Access is limited to authorized Bullroar engineers. [CONFIRM.]
Do you work with our existing IT provider?
Yes. We can handle security alongside your current MSP or internal team.
