Azure Security Services
Azure Security Services provide comprehensive protection from the following cloud compute concepts: IaaS, PaaS and Serverless. These services encompass threat detection, identity management, access controls, and compliance monitoring. Leveraging advanced analytics and Azure Security Services ensure robust security posture, safeguarding data, applications and infrastructure against evolving cyber threats and vulnerabilities.
Features
- Threat detection and response
- Data encryption and protection
- Compliance management tools
- Multi-factor authentication capabilities
- Ensure secure Azure network connections via IPsec/IKE VPNs.
- Auto-scaling feature ensures elasticity, adjusting based on workload.
- Safeguard applications against prevalent web threats such as SQL injection.
- Custom rule-based monitoring of web apps to eradicate false positives.
- Unified security management with advanced threat protection for workloads.
- Facilitates multi-region redirection, automatic failover, and zero-downtime operations.
Benefits
- Protect your Azure resources from denial of service threats
- Strong encryption helps to secure your data
- Control and help secure email, documents and sensitive data
- Protects your applications from common web vulnerabilities and exploits
- Simplified compliance adherence
- Predictive security analytics
- Secure software development lifecycle
- Endpoint protection against threats
- Centralized security event management
- Improved user authentication and authorization.
Pricing
- Education pricing available
- Free trial available
Service documents
Request an accessible format
Framework
G-Cloud 15
Service ID
6 4 2 3 4 6 4 1 1 7 8 6 3 8 7
Contact
GET SWARMS LIMITED
Amit Jain
Telephone: 07545641528
Email: Amit.Jain@getSwarms.com
About your service
- Service categories
-
PaaS
Application Development
- Software construction components
Service scope
- Service constraints
- NA
- System requirements
-
- A secure high speed internet
- Modern web browser such as Safari, Chrome, Firefox, Edge etc.
- Cloud deployment model
-
- Public cloud
- Private cloud
- Community cloud
- Hybrid cloud
User support
- Email or online ticketing support
- Yes
- Support response times
- Support response times We provide 24x7 prioritised service for the customer technical support staff. Our response times are as follows: P1: CRITICAL - 15 mins P2: URGENT - 1 Hour P3: IMPORTANT - 3 Hrs P4: COSMETIC/MINOR - 1 Day
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- WCAG 2.2 AAA
- Phone support
- Yes
- Phone support availability
- 24 hours, 7 days a week
- Web chat support
- Yes
- Web chat support availability
- 24 hours, 7 days a week
- Web chat support accessibility standard
- WCAG 2.2 AAA
- Web chat accessibility testing
- Accessibility Testing, Functional Testing, UAT Testing
- Onsite support
- Yes
- Support levels
- We provide a dedicated Technical Account Manager for the duration of contract who serves as an escalation point for any service-related issues. Additionally, we can offer Level 1, 2 and 3 support depending on the needs of our clients. Cost will vary depending upon the required service levels.
- Support available to third parties
- Yes
- AI chatbot
- Yes
Onboarding and offboarding
- Getting started
- There are online how-to videos, extensive help guides, documentation, community forums, comments, support desk available for users. The GUI itself is quite intuitive. We can provide onsite training at an extra cost.
- Service documentation
- Yes
- Documentation formats
-
- HTML
- ODF
- End-of-contract data extraction
- All the data of a user or organisation in any service reside in their own namespace. This is deliberately designed this way from ground up to maximise user control on their information. They can download all the info pertaining to them. Also they can raise SAR requests as per GDPR if required. At the end of the contract, data is provided to the user/organisation as per data retention policies, legal frameworks and their requirements
- End-of-contract process
- Buyer may terminate the relationship with Supplier for any reason by (i) providing Supplier with notice and (ii) closing Buyers account for all services for which Supplier provide an account closing mechanism. Buyers pay for the services they use to the point of account termination. Supplier customers retain control and ownership of their data. Supplier will not erase customer data for 30 days following an account termination. This allows customers to retrieve content from Supplier services so long as the customer has paid any charges for any post-termination use of the service offerings and all other amounts due.
- Documentation accessibility standard
- WCAG 2.2 AAA
Using the service
- Web browser interface
- Yes
- Using the web interface
- Add some details
- Web interface accessibility standard
- WCAG 2.2 AAA
- Web interface accessibility testing
- Add some details
- API
- Yes
- What users can and can't do using the API
- No limitations - API is fully secure, user can authenticate using various mechanisms. Users can use API keys or their login info to authenticate. The API offers full CRUD operations. There is a SWAGGER UI available to help users understand API better.
- API automation tools
-
- Ansible
- Chef
- OpenStack
- SaltStack
- Terraform
- Puppet
- API documentation
- Yes
- API documentation formats
-
- Open API (also known as Swagger)
- HTML
- ODF
- Command line interface
- Yes
- Command line interface compatibility
-
- Linux or Unix
- Windows
- MacOS
- Using the command line interface
- Add some details
Scaling
- Independence of resources
- The app is built on auto-scalable infrastructure and will automatically expand to use more instances/storage/memory when it experiences additional load
- Usage notifications
- Yes
- Usage reporting
-
- API
- SMS
- Optimising consumption
- Yes
- Automatic scaling
- Yes
Analytics
- Infrastructure or application metrics
- Yes
- Metrics types
- HTTP request and response status
- Reporting types
-
- API access
- Real-time dashboards
- Regular reports
- Reports on request
- Resource tagging
- Yes
- FOCUS resource tagging
- Yes
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Developed Vetting (DV)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
-
- United Kingdom
- European Economic Area (EEA)
- Other locations
- User control over data storage and processing locations
- Yes
- Datacentre security standards
- Complies with a recognised standard (for example CSA CCM version 4.0)
- Penetration testing frequency
- At least every 6 months
- Penetration testing approach
- ‘IT Health Check’ performed by a CHECK service provider
- Protecting data at rest
-
- Physical access control, complying with CSA CCM v4.0
- Physical access control, complying with SSAE-18 / ISAE 3402
- Physical access control, complying with another standard
- Encryption of all physical media
- Scale, obfuscating techniques, or data storage sharding
- Data sanitisation process
- Yes
- Equipment disposal approach
- Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
- Data sanitisation type
-
- Deleted data can’t be directly accessed / Cryptographic Erasure
- Explicit overwriting of storage before reallocation / Secure Erase
Backup and recovery
- Backup controls
- Add some details
- Datacentre setup
- Multiple datacentres with disaster recovery
- Scheduling backups
- Users schedule backups through a web interface
- Backup recovery
- Users can recover backups themselves, for example through a web interface
- Backup and recovery
- Yes
- RPO/RTO
- Yes
Data-in-transit protection
- Data protection between buyer and supplier networks
-
- Private network or public sector network
- TLS (version 1.2 or above)
- IPsec or TLS VPN gateway
- Legacy SSL and TLS (under version 1.2)
- Data protection within supplier network
-
- TLS (version 1.2 or above)
- IPsec or TLS VPN gateway
- Legacy SSL and TLS (under version 1.2)
Availability and resilience
- Guaranteed availability
- We provide 99.99% SLA for availability of our services. We are available on Multi-Cloud therefore please also check SLAs below pertaining to your chosen cloud. AWS provided here for Azure/GCP check their SLA: AWS currently provides SLAs for several services. Due to the rapidly evolving nature of AWS’s product offerings, SLAs are best reviewed directly on our website via the links below: • Amazon EC2 SLA: http://aws.amazon.com/ec2-sla/ • Amazon S3 SLA: http://aws.amazon.com/s3-sla • Amazon CloudFront SLA: http://aws.amazon.com/cloudfront/sla/ • Amazon Route 53 SLA: http://aws.amazon.com/route53/sla/ • Amazon RDS SLA: http://aws.amazon.com/rds-sla/ • AWS Shield Advanced SLA: https://aws.amazon.com/shield/sla/ Well-architected solutions on AWS that leverage AWS Service SLA’s and unique AWS capabilities such as multiple Availability Zones, can ease the burden of achieving specific SLA requirements.
- Approach to resilience
- This information is available on request. For quick reference, we use auto-scaling with multi-AZ, multi-region deployments. We are using AWS cloud. Also see AWS services resilience approach below: The AWS Business Continuity plan details the process that AWS follows in the case of an outage, from detection to deactivation. AWS has developed a three-phased approach: Activation and Notification Phase, Recovery Phase, and Reconstitution Phase. This approach ensures that AWS performs system recovery and reconstitution efforts in a methodical sequence, maximizing the effectiveness of the recovery and reconstitution efforts and minimizing system outage time due to errors and omissions. AWS maintains a ubiquitous security control environment across all regions. Each data centre is built to physical, environmental, and security standards in an active-active configuration, employing an n+1 redundancy model, ensuring system availability in the event of component failure. Components (N) have at least one independent backup component. All data centres are online and serving traffic. In case of failure, there is sufficient capacity to enable traffic to be load-balanced to the remaining sites. Customers are responsible for implementing contingency planning, training and testing for their systems hosted on AWS
- Outage reporting
- Publicly available dashboard; personalised dashboard with API and events; configurable alerting (email / SMS / messaging)
Identity and authentication
- User authentication needed
- Yes
- User authentication
-
- Multi-Factor Authentication (MFA)
- Public key authentication (including by TLS client certificate)
- Identity federation with existing provider (for example Google Apps)
- Limited access network (for example PSN)
- Dedicated link (for example VPN)
- Username or password
- Access restrictions in management interfaces and support channels
- The Identity and Access Management (IAM) module ensures controlled user access to our services, APIs, and resources. It incorporates various parameters like time, IP address, SSL usage, and multi-factor authentication (MFA) for authorized users. Customers sign API calls with their Secret Access Key, which could be either the root Account’s or a user's created through IAM. Without access to this key, customers' API calls cannot be executed. API calls are further secured via TLS/SSL encryption, ensuring confidentiality. Additionally, customers have the option to utilize TLS/SSL-protected API endpoints for enhanced security measures.
- Access restriction testing frequency
- At least every 6 months
- Management access authentication
-
- Multi-Factor Authentication (MFA)
- Public key authentication (including by TLS client certificate)
- Identity federation with existing provider (for example Google Apps)
- Limited access network (for example PSN)
- Dedicated link (for example VPN)
- Username or password
- Devices users manage the service through
-
- Dedicated device on a segregated network (providers own provision)
- Any device but through a bastion host (a bastion host is a server that provides access to a private network from an external network such as the internet)
- Directly from any device which may also be used for normal business (for example web browsing or viewing external email)
Audit information for users
- Access to user activity audit information
- Users have access to real-time audit information
- How long user audit data is stored for
- User-defined
- Access to supplier activity audit information
- Users have access to real-time audit information
- How long supplier audit data is stored for
- User-defined
- How long system logs are stored for
- User-defined
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
-
- CSA CSM version 4.0
- ISO/IEC 27001
- Information security policies and processes
- Get Swarms follows a formal set of information security policies aligned to ISO/IEC 27001, UK GDPR, and NCSC Cyber Assessment Framework (CAF) principles. These include policies for Information Security, Access Control, Data Protection, Secure Development, Incident Management, Supplier Security, Business Continuity, and Acceptable Use. Overall accountability for information security sits with senior management. Day-to-day responsibility is delegated to a designated security lead, with clear escalation routes for incidents, risks, and policy breaches. Security risks, vulnerabilities, and incidents are logged, assessed, and tracked to closure through defined risk and incident management processes. Policies are embedded into operational delivery through mandatory on boarding training, regular refresher awareness, role-based access controls, and secure-by-design delivery practices. Technical controls include least-privilege access, environment segregation, encryption in transit and at rest, audit logging, vulnerability management, and regular patching. Compliance is assured through periodic internal reviews, third-party security testing where appropriate (e.g. penetration testing), supplier assurance checks, and management oversight. Any non-conformities are formally recorded with corrective actions and ownership assigned. These controls ensure that information security policies are consistently applied, monitored, and continuously improved across Get Swarms’ operations and client engagements.
Operational security
- Configuration and change management standard
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Configuration and change management approach
- Changes to our services and features follow secure software development practices, including security risk reviews prior to launch. Developer access to production environments is via explicit access system requests, subject to owner review and authorisation. Teams set bespoke change management standards per service, underpinned by standard guidelines. All production environment changes are reviewed, tested and approved. Stages include design, documentation, implementation (including rollback procedures), testing (non-production environment), peer to peer review (business impact/technical rigour/code), final approval by authorised party. Emergency changes follow incident response procedures.
- Vulnerability management type
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Vulnerability management approach
- Security team performs vulnerability scans on the host operating system, web applications, and databases in the AWS environment. Approved 3rd party vendors conduct external assessments (minimum frequency: quarterly). Identified vulnerabilities are monitored and evaluated. Countermeasures are designed and implemented to neutralise known/newly identified vulnerabilities. Our underlying cloud e.g. AWS Security monitors newsfeeds/vendor sites for patches and receives customer intelligence via http://aws.amazon.com/security/vulnerability-reporting/. We are responsible for all scanning, penetration testing, file integrity monitoring and intrusion detection for our Amazon EC2 and Amazon ECS instances/ applications and other services.
- Protective monitoring type
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Protective monitoring approach
- We deploy (pan-environmental) monitoring devices to collect information on unauthorized intrusion attempts, usage abuse, and network/application bandwidth usage. Devices monitor: • Port scanning attacks • Usage (CPU, processes, disk utilization, swap rates, software-error generated losses) • Application metrics • Unauthorized connection attempts Near real-time alerts flag incidents, based on AWS Service/Security Team- set thresholds. Requests to AWS KMS are logged and visible via the account’s AWS CloudTrail Amazon S3 bucket. Logs provide request information, under which CMK,and identify the AWS resource protected through the CMK use.
- Incident management type
- Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
- Incident management approach
- We adopt a three-phased approach to manage incidents: 1. Activation and Notification Phase 2. Recovery Phase 3. Reconstitution Phase To ensure the effectiveness of the Incident Management plan, conducts incident response testing, providing excellent coverage for the discovery of defects and failure modes as well as testing the systems for potential customer impact. The Incident Response Test Plan is executed annually, in conjunction with the Incident Response plan. It includes multiple scenarios, potential vectors of attack, the inclusion of the systems integrator in reporting and coordination and varying reporting/detection avenues.
- Post-quantum cryptography secure
- Yes
Secure development
- Approach to secure software development best practice
- Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)
Separation between users
- Virtualisation technology used to keep applications and users sharing the same infrastructure apart
- Yes
- Who implements virtualisation
- Third-party
- Third-party virtualisation provider
- AWS, Google, Azure
- How shared infrastructure is kept separate
- Different organisations sharing the same infrastructure are kept apart through logical and technical isolation controls provided by the cloud platform. Each organisation operates within its own isolated tenant/account, with strict separation of compute, storage, and networking resources. Network isolation is enforced using virtual private networks (VPCs), subnets, security groups, and firewalls. Data is segregated at rest and in transit using tenant-specific encryption keys and access controls. Identity and access management (IAM) ensures users and services can only access authorised resources. The underlying hypervisor and cloud control plane prevent cross-tenant access, ensuring confidentiality, integrity, and availability between organisations.
Energy efficiency
- Energy-efficient datacentres
- Yes
- Description of energy efficient datacentres
- Our datacentres are operated in alignment with the EU Code of Conduct for Energy Efficient Datacentres and its best-practice principles. We actively monitor and manage energy consumption across compute, storage, networking, and supporting infrastructure, with a strong focus on efficiency, resilience, and sustainability. Key measures include the use of energy-efficient hardware, virtualisation and consolidation to maximise utilisation, and continuous monitoring of power and cooling performance (including PUE metrics where available). Cooling systems are optimised through hot/cold aisle containment, temperature set-point optimisation, and the use of free-air or efficient cooling technologies where feasible. Power management features are enabled at both hardware and platform levels, including dynamic resource scaling, workload scheduling, and automated shutdown of unused resources. Environmental performance is reviewed regularly, and efficiency improvements are incorporated as part of ongoing capacity planning and infrastructure refresh cycles. Where third-party hyperscale or colocation providers are used, we select providers that publicly commit to the EU Code of Conduct or equivalent energy-efficiency standards and sustainability frameworks. This ensures that our services are delivered in a manner consistent with EU best practice for energy-efficient and environmentally responsible datacentre operations.
Pricing
- Discount for educational organisations
- Yes
- Free trial available
- Yes
- Description of free trial
- The free version offers limited access for evaluation, including core UI, basic configuration, templates and restricted API use. Advanced modules, AI, integrations, hosting, SSO and support are excluded. It is available as a 14–30 day trial, after which customers can upgrade to full functionality and support.
Discount
- Provide your minimum discount applicable to your baseline prices
- 5%
Formula for calculating price of your services
- Formula for calculating price of your services
-
Which of the core deployment models you intend to offer
- Public Cloud
- Private Cloud
Public Cloud - Formula for calculating price of your services
- Total Cost
- The Total Cost for a buyer's call off requirement in a Public Cloud Deployment
- =
- Baseline Pricing
- Baseline infrastructure pricing is provided at-cost, based on the live public list prices of the selected cloud vendor (e.g., AWS, Azure, GCP, or Oracle). These prices represent the core consumption rates before any managed service fees or markups are applied. primary vendor link (e.g., https://aws.amazon.com/pricing/ or https://azure.microsoft.com/en-gb/pricing/).
- Baseline Pricing - Web link
- https://aws.amazon.com/pricing/
- -
- Minimum Discounting
- 5%
- +
- Onboarding Activity
- Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
- +
- Additional sources of cost
- Monthly charges include a fixed £500.00 Cloud Management Fee and a 5% Infrastructure Management Markup on total monthly vendor consumption. Mandatory vendor support plans (e.g., AWS Business Support) are passed through at the vendor's official list price.
- -
- Additional sources of cost reduction
- Buyers can reduce infrastructure costs through vendor-native commitments (e.g., AWS Savings Plans or Reserved Instances). We offer a volume discount on our Cloud Management Fee: 2.5% for annual spend over £100k and 5% for spend over £500k and an automatic 2% for registered Educational and Non-Profit bodies.
Private Cloud - Formula for calculating price of your services
- Total Cost
- The Total Cost for a buyer's call off requirement in a Private Cloud Deployment
- =
- Baseline Pricing
- Baseline infrastructure pricing is provided at-cost, based on the live public list prices of the selected cloud vendor (e.g., AWS, Azure, GCP, or Oracle). These prices represent the core consumption rates before any managed service fees or markups are applied. primary vendor link (e.g., https://aws.amazon.com/pricing/ or https://azure.microsoft.com/en-gb/pricing/).
- -
- Minimum Discounting
- 5%
- +
- Onboarding Activity
- Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
- +
- Additional sources of cost
- Monthly charges include a fixed £500.00 Cloud Management Fee and a 5% Infrastructure Management Markup on total monthly vendor consumption. Mandatory vendor support plans (e.g., AWS Business Support) are passed through at the vendor's official list price
- -
- Additional sources of cost reduction
- Buyers can reduce infrastructure costs through vendor-native commitments (e.g., AWS Savings Plans or Reserved Instances). We offer a volume discount on our Cloud Management Fee: 2.5% for annual spend over £100k and 5% for spend over £500k and an automatic 2% for registered Educational and Non-Profit bodies.
Mandatory certifications
- Mandatory certifications
-
Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure
ResellerCloud service suppliers you intend to resell with evidence
Organisation 1
Organisation name
Amazon Web Services (AWS)Website address/upload for organisation
Website addressWebsite address
https://aws.amazon.com/marketplace/seller-profile?id=seller-sb4bavf23ibwcOrganisation 2
Organisation name
MicrosoftWebsite address/upload for organisation
Website addressWebsite address
https://marketplace.microsoft.com/en-us/marketplace/partner-dir/af17128d-f3a0-4cd4-85f4-7b162df29aa9/overviewOrganisation 3
Organisation name
Google Cloud (Google Ireland Limited)Website address/upload for organisation
Website addressWebsite address
https://cloud.google.com/find-a-partnerISO 9001 certification
ProvidedISO 27001 certification
ProvidedISO 20000-1 certification
ProvidedAre you reliant on the Cloud Service Provider for some accreditations
Yes
Cyber Essentials
- Do you have a Cyber Essentials Plus certificate?
- Yes
- Cyber Essentials Plus certificate Number
- 13eac52b-45a5-4212-86ee-ca3e04e265b1
Non-mandatory Standards and certifications
- ISO 28000:2022 certification
- No
- Quality management systems (QMS)
- Yes
- CSA STAR certification
- No
- PCI certification
- No
- Other security certifications
- No
Social value
- Section B - Commitment for Future: Delivery
-
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority
- New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
-