Ctrl Alt Defeat is a Colorado managed service provider built for the threat landscape your business actually lives in. CMMC Level 2 implementation, FortiGate-managed networks, 24/7 EDR/MDR, and custom-built software when off-the-shelf falls short — operated by a single accountable engineer, not a ticket queue.
Every engagement is staffed and executed by Derek Rhea directly. No outsourced NOC, no junior tech rotations. The deliverable is a hardened business — not a ticket count.
Full CMMC Level 2 implementation for DoD-adjacent manufacturers. Policy authoring, control mapping, POA&M, and the hardened toolchain to back it up.
NinjaOne RMM, automated patching, monitoring, and lifecycle management — quietly running so your team forgets we’re here.
FortiGate firewall design and lifecycle. SD-WAN, VLAN segmentation, fiber, and structured cabling executed end-to-end.
Microsoft 365 and Google Workspace tenant administration — identity, mail flow, conditional access, and DKIM/DMARC done correctly.
ClickUp, AIMSIO, and custom automation. Mapping the parts of the business that bleed time and rebuilding them on rails.
When your business outgrows the off-the-shelf stack, we build what's missing — internal dashboards, API bridges, automated reporting, and full custom applications. Same operator, same accountability, written for the way you actually work.
Scope a Build →Four phases. Fixed scope per phase. No “discovery calls” that go nowhere — every step ends in a deliverable you can hand to a regulator, a partner, or the next operator on the team.
Asset inventory, control gap mapping, identity audit. End-state: a single document describing every surface and every weakness.
EDR rollout, FortiGate baseline, conditional access, backup verification. Every control turned on, tested, and documented.
MDR-backed monitoring, patch cadence, monthly evidence collection. The boring, unglamorous discipline that keeps audits clean.
24/7 incident response, root-cause forensics, and post-incident hardening. When something does happen, one operator owns the resolution.
Ctrl Alt Defeat exists because too many small businesses are sold cybersecurity software and called "covered." Derek runs this practice from the operator's seat — the one accountable for what actually happens at 2am when an alert fires. The work is opinionated, documented, and delivered by the same person you met on the consult call.
The operating values behind the work.
Tell us what you’re running, what’s breaking, and what regulator is breathing down your neck. We’ll respond within one business day with a scoped path forward.