OpsSecureHub
Straight answers.
A SIEM for SMBs, extended to AI use. From endpoints to decisions, data stays connected to the facts that justify action.
FAQ
Straight answers.
What is an AI-related threat?
An attack that goes through your AI tools: prompt injection, hijacked agent, exposed secret, compromised component.
Is my business covered by Bill C-8?
It is if it is designated in a federal critical sector, and indirectly if it supplies those operators. Take the self-assessment.
What is AI security?
It identifies and reduces risks specific to AI tools: overprivileged agents, misconfigured MCP servers, unapproved tools and exposed local models. OpsSecureHub inventories these components and explains triggered checks.
Does Bill C-8 apply to me?
As of October 22, 2026, the CCSPA is not yet in force and no operator categories are designated. Our self-assessment prepares your sector and supply-chain review; it does not determine legal applicability.
Which EDR tools are compatible?
Microsoft Defender XDR, Purview DLP, Defender for Cloud Apps, Microsoft Security for AI, SentinelOne, Netskope and Zscaler are part of the offer. CrowdStrike, Cynet and Sophos feed alerts through secure webhooks. Each connection’s scope is agreed with you.
Where is my data hosted?
The product positioning is data hosting in Canada. The exact scope, service regions and AI processing are confirmed before activation. This is not a guarantee that every subprocessor processes all data in Canada.
Does the agent collect my secrets?
The agent reports secret presence and names to identify risky configurations, not their values. Files, paths and useful metadata may contain sensitive information; never send a secret value through another channel.
Do I need to replace my antivirus?
No. OpsSecureHub complements your EDR/XDR and antivirus. It centralizes signals, prioritizes vulnerabilities and documents incidents; it does not replace endpoint protection.
How do I get access?
Send an enquiry. We validate your needs, connectors and terms, then invite an approved work email. Scope is validated before invitation.
How are capabilities activated?
The contract defines capabilities, connectors, permissions and scope activated for your account. The features enabled for your account are specified in your contract. Inventory, checks, attack scanning, agent monitoring, automated response and reports are discussed with your team before activation.
Does the extension read our prompts?
No. Analysis happens on the device: typed text never leaves the endpoint. Only the detected data type and count are transmitted, according to the chosen policy (log, warn, mask or block).
Does OpsSecureHub help with Law 25 and PIPEDA?
Yes: shadow AI detection, personal information detection in data sent to AI services, a draft privacy incident register and a PDF report. It supports compliance but is not legal advice: qualifying an incident and notifying the Commission d’accès à l’information remain with the privacy officer.
Can you manage security for us?
Yes. With the managed service, our team deploys the agents and extension, monitors and triages incidents, tracks patching and prepares executive reporting.
Do you work with Netskope, Zscaler and SentinelOne?
SentinelOne, Netskope and Zscaler are part of the connector offer. Scope, permissions and activation are agreed with you before connection.
What about Macs?
The agent offer covers Windows and macOS. Per-system collection capabilities and deployment are agreed in the contract; the Chrome and Edge extension adds browser-based collection.
Does OpsSecureHub integrate with our ticketing tool?
Yes: Autotask, ConnectWise PSA, HaloPSA, ServiceNow and Jira Service Management. One PSA per client account, with ITIL impact × urgency priority (P1–P4), assignment group, SLAs and bidirectional status synchronization. The connection scope is validated with you.
Can we fix a vulnerability without leaving the console?
Yes: a one-click software update is applied by the endpoint agent with mandatory approval to fix the affected vulnerabilities. Dual approval, alternates and delegations are supported; actions are audited. Remediation is verified against received evidence.
Who receives alerts, and how do we reduce noise?
Recipient lists identify technical teams and executives, linked to RACI and on-call coverage. Incident grouping, severity thresholds and quiet hours reduce noise; critical alerts and Bill C-8 deadlines can bypass quiet hours. Escalation engages on-call staff and alternates. External recipients provide express consent and can unsubscribe.
Which reports does leadership receive?
Weekly and monthly reports in executive and technical versions, in French or English. Lists and schedules identify recipients; a monthly notice is sent when the dossier is ready in the console.
Do you detect AI used without authorization?
The browser extension and DNS discovery identify observed AI services. Policy separates approved, unreviewed and refused services; visibility depends on sources and collection scope. Local analysis sends only types and counts, not typed text.
We are not in Quebec: does Law 25 apply to us?
PIPEDA applies federally and Law 25 applies in Quebec. OpsSecureHub covers both frameworks and follows Bill C-36, under study in Parliament. This is not legal advice.
OpsSecureHub
Your next security decision starts with a clear view.
Let’s discuss your AI use, your tools and your CCSPA readiness.