Managed security, baseline reviews and incident support. Start by agreeing the scope, records and support arrangements your business needs.
Compare when each service fits, what it covers and the records you receive.
Ongoing care for agreed devices, accounts and security work.
Review current controls and prioritise improvements.
Confirm available support, then plan the agreed response.
Equipment, subscriptions, specialist testing and work outside the agreed scope are confirmed and quoted separately where needed.
A clear starting point for small businesses without a dedicated firewall: establish basic network-boundary protection with annual equipment rental and management.
Equipment models, basic usage rights, management scope and service hours are confirmed in the formal quotation and contract. Advanced plan amounts are proposed prices.
The PDF covers the three standard MFS plans. Compliance support and hardware options are quoted separately.
Each plan includes the rental of 1 physical firewall and agreed management for 1 site. The model, rule complexity and access arrangements must be checked first.
12 months paid annually in one payment. Monthly figures are equivalents only; monthly payment is not available.
Rental equipment, not a purchase. The equipment belongs to GDMME; renew the rental or return it at expiry. Detailed contract terms are agreed separately.
These prices cover MFS equipment rental and firewall management. MSS endpoint, account and other management services are quoted separately.
Within the selected plan’s agreed firewall-management scope and service hours
First standard on-site installation included · up to 4 hoursHK$850/ month equivalent
Annual paymentHK$ 10,200Equipment rental + management
Entry annual price
First standard on-site installation included · up to 4 hours
For small businesses without a dedicated firewall, starting with basic network-boundary protection and routine maintenance.
Within the selected plan’s agreed firewall-management scope and service hours
At vendor security-support end (EOL/EOS), equivalent replacement and standard configuration migration follow the valid rental contract.
Routine checks are the focus. Major changes are quoted separately.
Enquire about this plan — Routine maintenanceHK$1,280/ month equivalent
Annual paymentHK$ 15,360Equipment rental + management
Proposed price · confirmed in the formal plan
First standard on-site installation included · up to 4 hours
For routine rule changes and remote-access needs.
Within the selected plan’s agreed firewall-management scope and service hours
At vendor security-support end (EOL/EOS), equivalent replacement and standard configuration migration follow the valid rental contract.
For a single site with routine configuration changes.
Enquire about this plan — Rules and VPN managementHK$2,480/ month equivalent
Annual paymentHK$ 29,760Equipment rental + management
Proposed price · confirmed in the formal plan
First standard on-site installation included · up to 4 hours
For more complex firewall policies that need review.
Within the selected plan’s agreed firewall-management scope and service hours
At vendor security-support end (EOL/EOS), equivalent replacement and standard configuration migration follow the valid rental contract.
More in-depth management. Additional equipment is quoted separately.
Enquire about this plan — Advanced policy managementScope support with your IT and compliance leads around your licence, business systems and existing controls.
Review firewall rules, network segmentation and remote access; arrange multi-factor authentication where supported.
Explore network controlsReview permissions, updates and equipment support lifecycles. Huorong licensing and endpoint management are quoted separately as needed.
Explore accounts and endpointsOrganise access reviews, change approvals, maintenance and log records. Agree retention periods and access scope in advance.
Explore audit recordsReview backup records, recovery and incident arrangements. Scope actual recovery tests or exercises separately.
Explore recovery preparationStart with your confirmed requirements, review the current position, arrange improvements and keep traceable work records. Agree each task and deliverable before the engagement.
Scoped to the engagementNetwork and access inventory, rule review, change approvals and test records.
Access review, device version and lifecycle inventory, and update follow-up records.
Evidence index, change records and improvement tracker, updated at the agreed frequency.
Backup and recovery summary and incident contact checklist; test results depend on separately agreed work.
Your compliance lead confirms the licence, applicable requirements, review objectives and timing.
List assets, current providers, scope and responsible owners, then confirm the quotation.
Configure, review or test within the authorisation, recording changes and outstanding improvements.
Provide a record index and action tracker; agree the next review and handover.
These are deliverable formats we can agree, rather than actual client reports. Content and frequency depend on the engagement.
No passwords, client data or full logs are needed for an initial enquiry. Agree authorisation and a secure delivery method if technical documents are required later.
Check applicability to your business and licence. These references do not imply regulatory approval of GDMME.
Your compliance lead confirms the applicable regulatory requirements. This service supports technical controls and audit preparation; it provides no regulatory certification or compliance guarantee.
Necessary basic software usage rights listed in the contract are included. Additional security-intelligence and commercial subscriptions are quoted separately; not all vendor subscriptions are included.
When contract-specified rental equipment reaches the manufacturer's security-support end date (EOL/EOS), equivalent replacement is arranged according to the vendor lifecycle and contract. Standard configuration migration is included within the agreed scope of the valid rental contract. Specification upgrades and major changes are quoted separately.
Help small businesses establish sustainable protection first, then add endpoint protection and broader management according to their needs.
Start with 1 rented firewall and agreed management for 1 site, with configuration, version and risk-follow-up records.
Add computer endpoint protection as needed, confirming licences, central management, endpoint deployment and follow-up arrangements.
Agree additional management tasks and responsibilities for accounts, data, backups and other business needs.
The annual entry package equivalent to HK$850 per month does not include Huorong Enterprise. Huorong licences, central management, endpoint deployment and management services are quoted separately. Feature compatibility and scope must be confirmed first.
Explore Huorong Enterprise endpoint protection| Compare rental and management scope | Routine maintenance | Rules and VPN management | Advanced policy management |
|---|---|---|---|
| Management basis | MFS ESSENTIAL1 firewall / 1 site | MFS BUSINESS1 firewall / 1 site | MFS ADVANCED1 firewall / 1 site |
| Remote support | MFS ESSENTIALUnlimited requests and work hours within the contract scope and service hours | MFS BUSINESSUnlimited requests and work hours within the contract scope and service hours | MFS ADVANCEDUnlimited requests and work hours within the contract scope and service hours |
| First standard on-site installation | MFS ESSENTIALIncluded, up to 4 hours | MFS BUSINESSIncluded, up to 4 hours | MFS ADVANCEDIncluded, up to 4 hours |
| Health, versions and configuration backups | MFS ESSENTIALMonthly routine checks | MFS BUSINESSMonthly routine checks | MFS ADVANCEDMonthly routine checks |
| Work summary and action list | MFS ESSENTIALMonthly | MFS BUSINESSMonthly | MFS ADVANCEDMonthly |
| Alerts and risk notices | MFS ESSENTIALReviewed during routine checks | MFS BUSINESSFollow-up during agreed hours | MFS ADVANCEDFollow-up during agreed hours |
| Firewall rule changes | MFS ESSENTIALSimple maintenance of existing settings | MFS BUSINESSChanges based on approved requirements | MFS ADVANCEDIncludes more complex access policies |
| Existing VPN maintenance | MFS ESSENTIALQuoted separately | MFS BUSINESSWithin the agreed scope | MFS ADVANCEDWithin the agreed scope |
| Segmentation rules and connectivity analysis | MFS ESSENTIALQuoted separately | MFS BUSINESSQuoted separately | MFS ADVANCEDWithin the agreed scope |
| Basic usage rights and additional subscriptions | MFS ESSENTIALContract-listed basic rights included; extra subscriptions quoted separately | MFS BUSINESSContract-listed basic rights included; extra subscriptions quoted separately | MFS ADVANCEDContract-listed basic rights included; extra subscriptions quoted separately |
| Rental equipment | MFS ESSENTIALContract-specified equipment included; not a purchase | MFS BUSINESSContract-specified equipment included; not a purchase | MFS ADVANCEDContract-specified equipment included; not a purchase |
| 12-month annual payment | MFS ESSENTIALHK$10,200 paid annually in one payment | MFS BUSINESSHK$15,360 paid annually in one payment | MFS ADVANCEDHK$29,760 paid annually in one payment |
| Vendor support lifecycle and replacement | MFS ESSENTIALAt security-support end (EOL/EOS), equivalent replacement and standard configuration migration follow the valid contract | MFS BUSINESSAt security-support end (EOL/EOS), equivalent replacement and standard configuration migration follow the valid contract | MFS ADVANCEDAt security-support end (EOL/EOS), equivalent replacement and standard configuration migration follow the valid contract |
IncludedFirst standard on-site installation included · up to 4 hours
The first standard on-site installation and initial configuration are included, up to 4 hours. Check compatibility, access, settings and backups; complete standard deployment and handover records within the contract scope. Extra cabling, complex or major migrations, new scope and upgrades are quoted separately.
HK$ 600per hour
Proposed price · confirmed in the formal plan
Proposed rate for work outside the agreed scope, billed in 30-minute units after fees are confirmed. Remote firewall work within the contract scope and service hours is not charged by request count or work hours.
First-year payment = the 12-month equipment rental and management fee. Includes the first standard on-site installation and initial configuration (up to 4 hours), plus unlimited remote requests and work hours within the contract scope and service hours. Additional subscriptions and confirmed out-of-scope work are charged separately.
These annual equipment rental and management fees are paid in one payment. The first standard on-site installation and initial configuration (up to 4 hours) are included. Remote requests and work hours are unlimited within the contract scope and service hours. Extra cabling, major migrations, upgrades, subscriptions and out-of-scope work are charged separately.
First standard on-site installation included · up to 4 hoursHK$ 10,20012-month annual fee
First-year payment totalHK$ 10,200
Entry annual price
First standard on-site installation included · up to 4 hoursHK$ 15,36012-month annual fee
First-year payment totalHK$ 15,360
Proposed price · confirmed in the formal plan
First standard on-site installation included · up to 4 hoursHK$ 29,76012-month annual fee
First-year payment totalHK$ 29,760
Proposed price · confirmed in the formal plan
Monday–Friday, 10:00–18:00 Hong Kong time, excluding public holidays. These are proposed service hours; response SLAs are not yet confirmed.
The service covers the agreed firewall only. Alert follow-up depends on available logs and service hours; it does not represent continuous monitoring or any security guarantee.
Discuss vulnerability scanning, defence integration and security exercises around your environment and objectives. Scope and deliverables are agreed in the proposal.
Scope vulnerability checks, findings review and remediation retesting with RayScan.
Explore the scopePlan staged integration of behaviour detection, threat intelligence and compatible remediation components, with ongoing configuration review and improvements. Actual scope depends on configuration and validation results.
Explore the scopeUse authorised scenarios to jointly validate attack paths, detection and response.
Explore the scopeOpen a scenario and switch between the animated risk path and protective steps.
AI can tailor convincing messages to a role or business context. Fluent wording is no proof of identity.
Verify payment changes through an established contact. Open services from a known bookmark and report suspicious messages.
Practise spotting phishingSynthetic voice and video can imitate trusted people. Treat an urgent request as something to verify.
Call an independently held number and use a second approver before changing payees or releasing funds.
Practise identity checksDevice-code phishing can trick someone into authorising an attacker’s session, even with MFA enabled.
Keep MFA enabled. Review phishing-resistant authentication, unnecessary device-code access and unusual mailbox rules.
Explore two-factor authenticationHKCERT identifies weak AI governance as a 2026 risk. Unapproved tools may expose sensitive business information.
Approve tools and permitted data types. Review retention and access settings before using customer or contract information.
Explore a security reviewAn AI agent or supplier connection can extend access beyond the intended task. Permissions need a named owner.
Limit access to necessary systems, require approval for consequential actions and review unused integrations.
Explore ongoing managementMicrosoft’s September research describes remote access, lateral movement and data theft before ransomware. It does not establish AI use.
Review remote access, network separation, patching and tested recovery. Escalate suspicious activity before files become encrypted.
See incident support arrangementsTell us your company size and what you want to improve.