Technology partner
BlueVoyant, and what we do with it
Three of our services run on BlueVoyant’s platform and analyst centre. This page sets out what they supply, what we supply, who you sign with, and who acts when something is found.
Your contract is with Spirity
BlueVoyant works underneath us. The monitoring platform and the Risk Operations Center analysts are theirs, and the platform, the findings and the analyst content are in English.
Localisation and the local expert bench are ours. You have a Spirity contact who works in your language, and correspondence to your suppliers goes out in Hungarian or German where that is what they read.
This matters more than an organisation chart usually does. When a finding lands at two in the morning, the question of who is allowed to act on it and who you call has one answer, and it is us.
Three services, three different parts of the platform
The same partner sits behind all three, but not in the same way — and the third one differs in kind rather than in degree.
Digital Risk Protection
External cyber defense: six monitoring modules covering impersonation, credential exposure, fraud campaigns, data leakage, executive exposure and your external attack surface. BlueVoyant supplies the collection and the analyst curation; takedown requests go out once you approve them.
Supply Chain Defense
The same collection pointed outward at your suppliers, with the Risk Operations Center added. Its analysts approach the supplier themselves rather than handing you a list to chase — in the directed tier, which is a commercial choice and is covered below.
Managed Detection and Response
This one differs in kind. BlueVoyant does not replace your tooling here; it operates the Microsoft security products you already license, adding automation, case handling and threat intelligence around them, staffed around the clock. MDR is not another product to buy and run — it is somebody running what you already pay for.
Managed does not mean the same thing in every tier
How much the analysts do on your behalf is a commercial choice rather than a technical one, and the tiers differ sharply.
On supplier work, analyst-led outreach to your third parties exists in the BlueVoyant-Directed tier. In Client-Directed the analysts prepare and support the approach, but your team makes contact. In High Volume Monitoring there is no engagement and no escalation at all — you get a risk level.
On detection work, analysts contain incidents only within the response authority you agree in advance. That boundary is set during onboarding and it is written down.
And a limit worth stating before you sign rather than after: a supplier may simply not respond. Nobody can guarantee that a third party engages with a finding. Where that happens the programme falls back on your own commercial influence, and we will say so at the time rather than keep escalating into silence.
What is ours in every tier
First-line technical support is Spirity’s, directly. You raise an issue with us rather than with a vendor portal in another timezone, and client success management is ours too — so the person who knows your environment is the person who picks up.
We are also the escalation point. Anything urgent, anything outside the standard flow, any special request comes to us, and we carry it into BlueVoyant rather than leaving you to. The tier decides how much analyst work happens on your behalf. It never decides whether you have someone to call.
Narrow on purpose
We carry three technology partners, not a catalogue. Running a platform on a client’s behalf is a different commitment from reselling it, and it does not scale past a handful of products without the depth becoming a claim rather than a fact.
With BlueVoyant the familiarity predates the partnership: our VP of Product & Strategy spent years as BlueVoyant’s Sales Director for Central Eastern Europe, the Middle East and Africa before joining Spirity.
Frequently asked questions
The questions we hear most often from security and IT leaders.
Something not covered here? Ask us directly
Spirity’s own desk — first-line technical support, client success and escalation — runs from 07:00 to 21:00 Central European Time, fourteen hours a day. On business days that covers everything. For high-severity cases the same window runs seven days a week, weekends included.
Keep two things separate from it. Those are Spirity’s hours, not the service’s. The monitoring underneath runs continuously, and on Managed Detection and Response the analysts are staffed around the clock — a detection at three in the morning is still a detection at three in the morning. What the window describes is when you can reach a named person at Spirity who knows your environment.
What counts as high severity is set out in your service description rather than decided case by case, so nobody is arguing about the label while the clock runs.
You could, and for some organisations that is the right answer. What changes is everything around the platform. Buying direct, the contract, the first line of support and the account relationship all sit with a global vendor working in English. Through us the contract is Hungarian or Austrian, the first call is answered by people who know your estate, and your suppliers are approached in the language they actually read. The platform and the analyst centre are identical either way — we are not reselling a different product, we are carrying the parts of the job that travel badly across a language and a timezone.
No, and we would rather be plain about that than let you find it out at go-live. The portal, the findings and everything the analysts write are in English, because that is the language the Risk Operations Center works in. What is localised is the layer around it: your Spirity contact, the reporting and the walkthroughs, and the outbound correspondence to suppliers, which goes out in Hungarian or German where that is what the supplier reads. In practice the people who live in the portal daily are usually comfortable in English; the people who need the output in their own language get it from us.
No. They are sold separately and most clients start with one. Digital Risk Protection and Supply Chain Defense are both the outward-facing parts of the same platform — one pointed at your own brand and estate, the other at your suppliers — so they sit naturally together. Managed Detection and Response looks inward, at the environment you run yourself, and stands on its own. What usually decides the order is whatever prompted the conversation: a supplier questionnaire, a brand impersonation, or an audit finding about monitoring.
Would you rather see the platform than read about it?
We can walk you through whichever service fits your problem — the external monitoring, the supplier programme, or detection and response on the Microsoft tooling you already own.