Skip to content
Totem Tech confidently recommends the following technologies to help small businesses meet cybersecurity compliance mandates or for general cybersecurity hygiene. These are technologies that Totem Tech, uses, knows, and trusts.
If you’d like to recommend a technology for inclusion on this list, contact us. Note: we have no paid relationship with these vendors. We don’t do kickbacks, so don’t ask.
Table of Contents
Networking
Ubiquiti Unifi Cloud Gateway (UCG)
Unifi Cloud Gateway (UCG) devices are American-designed small business priced network routers.
They pack a ton of features in a small footprint, including DNS and content filtering, as well as Intrusion Detection.
"Ultra" is the base model, but they have "Fiber" optic option as well as a "Max" for running a security camera NVR.
NIST 800-171 alignment:
Device authorization, controlling and monitoring external and internal boundaries, DMZ, monitoring all inbound and outbound traffic, identifying unauthorized use
Allowlisting
PC Matic
PC Matic is workstation application allowlisting software.
Application allowlisting (whitelisting) is one of the most difficult technologies for small businesses to get their head around, but PC Matic makes it as simple as possible.
"Adaptive" mode puts control in the users' hands, and the organization can learn what applications need allowance over time.
Also scans for outdated OS and application files.
NIST 800-171 alignment:
Application allowlisting, endpoint protection, vulnerability scanning
PermitUSB
PermitUSB is an affordable removable device allowlisting application.
Administrators manage PermitUSB from a simple cloud-console, which allows per-endpoint policy granularity and quick block/allow actions.
Dozens of known device types such as USB hubs are already loaded in the tool, saving you time building your allowlist.
NIST 800-171 alignment:
Removable media / portable storage device control
Secure Fileshares
FileCloud
FileCloud is a FedRAMP Authorized fileharing solution for CUI and ITAR.
It allows for in-situ document editing as well, so it can be a replacement for SharePoint or Google Docs.
FileCloud offers and on-premises server option as well.
NIST alignment:
CUI flow control, Encryption of CUI in transmission and at rest
Cocoon Data
Cocoon Data is a FIPS Validated CUI and ITAR file sharing, backup, and editing US-hosted cloud service.
Cocoon Data has no minimum user count and per-user monthly pro-rated pricing, so you only pay for your active license use.
Offers very granular access control options including geolocation.
NIST alignment:
CUI flow control, Encryption of CUI in transmission and at rest
Keeper Security
Keeper Security Government Cloud (KSGC) unifies password management, secrets management, session monitoring, secure remote access and remote browser isolation in a single, intuitive FedRAMP Authorized platform to streamline cybersecurity while supporting compliance mandates.
NIST alignment:
CUI flow control, Encryption of CUI in transmission and at rest, Key management
Security Information & Event Management (SIEM)
ManageEngine EventLog Analyzer
A locally-installable lightweight feature-rich SIEM priced for small businesses.
Comes with dozens of pre-defined Windows, Linux, and syslog alerting criteria.
Easy to setup and immediately start collecting and analyzing local event logs.
NIST alignment:
Audit and Accountability
Secure Removable Media
Apricorn
Apricorn offers FIPS 140-3 Validated encrypted USB flash drives and removable hard drives.
At about $100/TB, small businesses can use their products for secure CUI backup and transfer.
The products are unlocked by entering a PIN on an integrated keypad. Made in the USA. Pretty cool.
NIST alignment:
Media protection, Encryption of CUI in transmission and at rest