Loggerhead Dynamics FAQ
605-519-3772
About Loggerhead Dynamics
Who is Loggerhead Dynamics?
Loggerhead Dynamics is a Central Florida cybersecurity company. We protect homes and help businesses and defense contractors secure their systems and meet compliance requirements.
Who owns the company?
Loggerhead Dynamics is owned and run by Mathew Burch, Owner & President. He is a service-disabled veteran, and you work with him directly on every job.
Are you veteran-owned?
Yes. Loggerhead Dynamics is a certified Service-Disabled Veteran-Owned Small Business (SDVOSB) and a State of Florida certified veteran-owned business.
What does SDVOSB mean?
SDVOSB stands for Service-Disabled Veteran-Owned Small Business. It means the company is at least 51% owned and controlled by a veteran with a service-connected disability. Government agencies and prime contractors often have goals for working with SDVOSBs.
Where are you located?
We are based in Central Florida.
What areas do you serve?
We serve Central Florida, including Tampa and Orlando. Business and defense clients across the Southeast can also work with us, on site or remotely.
Do you work remotely or in person?
Both. Much of our work, including monitoring and support, is done securely and remotely. We also visit homes and businesses in person when it's needed.
Are you a big company or a local business?
We're a local small business. You won't be passed between departments or sent to an overseas call center; you'll work with the same person every time.
What makes you different from a big-box tech service?
You get a local, veteran-owned business that knows its clients by name, plain-English explanations, and honest advice about what you actually need.
Home Cybersecurity
What is your home cybersecurity service?
It's a monthly protection plan for your household's computers, phones, and tablets. Think of it like pest control for your internet: it runs quietly in the background and keeps threats out, and we handle the upkeep.
Who is it for?
Anyone who wants their devices protected without having to become a tech expert. Many of our clients are retirees across Central Florida, but it works for any household.
What devices does it cover?
Windows PCs, Macs, iPhones, Android phones, iPads, and other tablets.
How many devices are included?
Up to 5 devices.
What's included for computers?
PCs and Macs get professional antivirus protection (SentinelOne) and remote monitoring (SuperOps), so we can spot problems and often fix them before you notice anything.
What's included for phones and tablets?
Phones and tablets get mobile security from Lookout, which helps protect against dangerous links, malicious apps, and unsafe Wi-Fi networks.
Is this the same antivirus I can buy at the store?
No. We use business-grade tools that are professionally managed. Instead of software you install and forget, someone is actually watching over it.
Will it slow down my computer?
It's designed to run quietly in the background without slowing down everyday use like email, browsing, and video calls.
Do I need to do anything once it's set up?
Not much. We handle the monitoring and updates. If something needs your attention, we'll contact you and walk you through it.
Can you see my personal files or watch what I do?
No. Monitoring checks the health and security of your devices, not your personal activity. We only connect remotely to your device when you ask for help, and you can see when we're connected.
Support, Setup, and In-Home Visits
Do you help set everything up?
Yes. We offer in-home setup, installing and configuring protection on your devices and making sure everything works before we leave.
How does tech support work?
Most issues are handled remotely. With your permission, we securely connect to your computer and fix the problem while you watch. If that doesn't solve it, we come to your home.
What kind of problems can you help with?
Level 1 support covers everyday problems like pop-ups, suspicious emails, software updates, login trouble, and devices acting strangely.
How do I contact you for help?
Call or email us, and we'll get back to you. Call me at 605-519-3772 or
What are your support hours?
M-F 8-6
Sat 8-4
Sun - Closed
Emergencies as needed
How quickly will you respond?
Usually within 1 hour
I think I clicked a bad link or got scammed. What should I do?
Stop and contact us right away. Don't call any phone number shown in a pop-up, and don't give anyone remote access or payment information. If you shared banking details, call your bank using the number on the back of your card.
Can you help me set up a new computer or phone?
Yes.
Can you help with printers, email, or general computer problems?
Yes.
Pricing, Billing, and Cancellation
How much does home protection cost?
$29.99 per month for up to 5 devices.
Are there setup fees?
There is a $29.99 set-up fee.
Is there a contract?
Our pricing runs month to month.
How do I pay?
We set up all payments through QuickBooks.
Can I cancel anytime?
Yes.
What happens to the software if I cancel?
We remove our monitoring and security tools from your devices.
How much do business services cost?
Business pricing depends on your size, systems, and goals. We start with a free consultation and give you a clear written quote before any work begins.
Is there a free option?
The 30-minute home cybersecurity review is free, with no obligation to buy anything.
Free 30-Minute Review
What is the free 30-minute review?
It's a no-cost conversation where we look at your devices and setup together, then tell you honestly what you need, even if the answer is "not much."
Is it really free?
Yes. There's no charge and no obligation. We won't pressure you to sign up for anything.
Is the review in person, by phone, or by video?
This is an in-person appointment so I can evaluate your home network.
What should I have ready?
Just the devices you use regularly, like your computer, phone, and tablet, and a list of any concerns you have. Don't share passwords during the review; we'll never ask for them.
What will I get at the end?
A plain-English summary of where your home stands and any recommended next steps.
Can businesses book a free consultation too?
Yes. Businesses and defense contractors can book a free consultation to talk through security, IT, or CMMC goals.
Scams and Everyday Safety
How do I know if my home Wi-Fi is secure?
Signs of a secure network include a strong, unique Wi-Fi password, a changed router admin password, and up-to-date router software. We can check all of this during your free review.
How can I spot a scam text or email?
Watch for urgent threats, requests for payment or gift cards, links you didn't expect, and messages that claim to be from your bank, Amazon, or a delivery company. When in doubt, don't click; contact the company directly using a number you trust.
I got a pop-up saying my computer is infected and to call a number. Is it real?
No. Real antivirus and companies like Microsoft and Apple never ask you to call a number from a pop-up. Close the browser and contact us if it won't go away.
Someone called saying they're from Microsoft, Apple, or my bank. What should I do?
Hang up. Call the company back using the number on their official website or your card. Never give remote access or payment details to someone who called you.
Do I really need antivirus on a Mac or iPhone?
Yes. Macs, iPhones, and iPads are safer than they used to be, but scams, malicious links, and fake apps still target them.
Is public Wi-Fi safe to use?
Public Wi-Fi at restaurants, clubs, and recreation centers can expose what you do online. Avoid banking or shopping on it unless your device has protection in place.
How should I manage my passwords?
Use a different password for every important account, and turn on two-step verification where you can. A password manager makes this easy. We can help you set one up.
Can you help protect a family member who lives somewhere else?
Yes, our software works worldwide.
Business IT and Security
What services do you offer businesses?
We provide IT and cybersecurity services for small and medium-sized businesses, including security assessments, penetration testing, and compliance readiness.
What size businesses do you work with?
Mostly small and medium-sized businesses that don't have a full-time security team.
What industries do you serve?
Defense contractors and other small businesses across Central Florida and the Southeast. We are able to provide IT, cybersecurity & compliance for any industry.
Do you offer ongoing monitoring and protection for businesses?
Yes. We provide managed monitoring and protection for your computers, servers, and mobile devices on a monthly plan. Every workstation and server is enrolled in remote monitoring and management, so we can track device health, apply patches and updates, and spot problems before they cause downtime. Endpoints are protected with SentinelOne, an AI-driven endpoint detection and response (EDR) platform that stops malware and ransomware and can isolate a compromised machine from your network. Phones and tablets are covered by Lookout mobile security, which guards against malicious apps, phishing links, and risky networks. Through our partner marketplace we can also add email security, cloud backup, Microsoft 365 protection, and other services so your protection fits your business rather than a one-size-fits-all bundle.
Can you help us write security policies?
Yes. We help businesses create the written policies and procedures that auditors, insurers, and customers increasingly expect, including incident response plans, acceptable use policies, access control and password policies, remote work and BYOD policies, and backup and recovery procedures. We tailor each document to how your business actually operates, so your policies reflect real practice rather than boilerplate. For defense contractors, we align policies with CMMC and NIST SP 800-171 requirements as part of our readiness services.
Can you train our employees?
Yes. Most breaches start with a person clicking something they shouldn't, so we offer security awareness training for your staff along with simulated phishing campaigns. Employees receive short, practical lessons on recognizing phishing, scams, and social engineering, and the simulated phishing emails show who may need extra coaching. You receive reports on participation and results, which also help document training for insurance and compliance purposes.
We had a security incident. Can you help?
Yes, and contact us immediately. The first hours matter most. Don't wipe or reboot affected machines, and don't pay any ransom demand before talking to us. We will help contain the threat, isolate affected devices, identify what happened, and restore your systems. If you carry cyber insurance, call your insurer's claims hotline as well, since many policies require prompt notice and may assign a breach response team. We will coordinate with them. Existing clients get priority response, and we can also assist businesses that aren't yet clients.
Do you work with cyber insurance requirements?
Yes. Cyber insurance carriers now ask detailed security questions before issuing or renewing a policy, and a wrong answer can raise your premium or put a claim at risk. We help you complete insurance security questionnaires accurately and close the gaps that carriers commonly flag, such as multi-factor authentication, endpoint detection and response, reliable backups, patching, and employee training. Many of these requirements are already covered by our managed protection plans, and we can provide documentation to support your application or renewal.
Do you sign NDAs?
Yes. We're happy to sign a non-disclosure agreement before discussing sensitive details.
CMMC Readiness for Defense Contractors
What is CMMC?
The Cybersecurity Maturity Model Certification (CMMC) is the Department of Defense's program for confirming that contractors protect sensitive government information. It is being phased into DoD contracts, so companies that handle that information need to meet its requirements to win and keep work.
Does my company need CMMC?
If you do business with the DoD, directly or as a subcontractor, and handle Federal Contract Information (FCI) or Controlled Unclassified Information (CUI), you will likely need it. We can help you figure out which level applies to you.
What are the CMMC levels?
Level 1 covers basic safeguarding of FCI and is met through an annual self-assessment. Level 2 covers CUI and follows the 110 requirements of NIST SP 800-171, verified by self-assessment or a third-party assessment depending on the contract. Level 3 is for the most sensitive programs and is assessed by the government.
Which CMMC levels do you help with?
[List the levels you support.]
What does CMMC readiness involve?
We review your current systems against the requirements, find the gaps, and help you close them. That includes preparing your System Security Plan (SSP), Plan of Action and Milestones (POA&M), and the evidence an assessor will want to see.
Can you certify my company?
No. For Level 2 certification, the official assessment is performed by an authorized third-party assessment organization (C3PAO). Our job is to get you ready so the assessment goes smoothly. [If you are a Registered Practitioner or RPO, say so here.]
What is NIST SP 800-171?
It's the federal standard listing 110 security requirements for protecting CUI on contractor systems. CMMC Level 2 is built directly on it.
What is an SPRS score?
The Supplier Performance Risk System (SPRS) score reflects how well your company meets NIST SP 800-171. Many DoD contracts require you to submit it. We can help you calculate it accurately and improve it.
How long does CMMC readiness take?
It depends on your size and how much is already in place. Some companies need a few weeks; others need several months. A gap assessment gives you a realistic timeline.
We're a small subcontractor. Does this really apply to us?
Often, yes. Prime contractors must pass CMMC requirements down to subcontractors that handle FCI or CUI, so small companies are frequently asked about their status.
Why work with an SDVOSB on CMMC?
You get a veteran who understands the defense mission, and working with an SDVOSB can support prime contractors' small business subcontracting goals.
Penetration Testing and Assessments
What is a penetration test?
A penetration test is an authorized, controlled attempt to break into your systems the way a real attacker would. It shows you which weaknesses are actually exploitable, so you can fix them before someone else finds them.
What's the difference between a vulnerability scan and a penetration test?
A scan automatically lists known weaknesses. A penetration test goes further: a person works to see which weaknesses can really be used to get in and how far an attacker could go.
What types of testing do you offer?
[List the tests you offer, such as external network, internal network, web application, wireless, or phishing simulation.]
Will testing disrupt my business?
We plan every test with you in advance, agree on what's in scope and when, and avoid disrupting normal operations.
What do I receive after a test?
A written report explaining what we found, how serious each issue is, and clear steps to fix it. We walk you through the results and next steps.
How often should we test?
Most businesses should test at least once a year and after major changes to their systems. Some compliance frameworks and insurance policies require it.
Do you offer a general security assessment?
Yes, we offer a security assessment via penetration testing.
Privacy, Trust, and Contact
How do I know you're legitimate and not a scammer?
Fair question. We'll never call you out of the blue claiming your computer is infected, and we'll never ask for gift cards or payment over the phone. You can verify us through our website, [Google Business Profile], our SDVOSB certification, and our State of Florida veteran-owned business certification, and you're welcome to call us back at our listed number.
Will you ever ask for my passwords?
No. We'll never ask you to tell us your passwords. If a task needs one, you'll type it in yourself.
How do you protect my information?
We only access what we need to do the job, use secure tools, and never sell or share your information. [Link to your privacy policy.]
How do I contact Loggerhead Dynamics?
Phone: 605-519-3772, Email: mathew.burch@loggerheaddynamics.com. To book a free 30-minute review, use our online calendar: