Behavior analytics
Software learns typical user and system activity and flags changes such as unusual account behavior.
AI security
How FunctionOne uses AI to defend your company
FunctionOne uses AI to spot unusual account and system activity, adds threat intelligence for context, and has security analysts confirm each finding before acting within rules you approve. Against attacks that use AI, the AI security service watches for phishing email, alerts you to stolen passwords, adds multifactor sign-in, checks payment requests and sets rules for AI tools. We serve clients from Syracuse, New York and Tampa, Florida.
Book a security assessment
We'll review your systems and accounts, then agree scope and response rules with you before anything is switched on.
We use your details only to arrange your assessment.
How does FunctionOne use behavior analytics?
Behavior analytics is software that learns how your users and systems normally act. When an account starts behaving in an unusual way, the software highlights the change.
Our security analysts watch connected systems 24/7. They confirm what the software found and act only within response rules you approve.
How does threat intelligence help FunctionOne analysts?
Threat intelligence is information about known malicious addresses, domains and attack methods. When an alert involves one of them, our analysts see that context and can judge how serious the alert is.
What does FunctionOne AI security include?
FunctionOne starts with a security assessment of your systems and accounts, then agrees scope and response rules with you before anything is switched on.
Threat intelligence
Data on malicious addresses, domains and attack methods gives our analysts context for alerts.
Analysts on watch 24/7
Security analysts watch connected systems 24/7, confirm findings and contain threats only within response rules you approve.
Phishing email monitoring
Attackers use AI to write convincing phishing email, so we monitor email and watch Microsoft 365 sign-ins and forwarding rules for warning signs.
Stolen password alerts
Alerts tell you when company passwords appear on the dark web, and multifactor sign-in adds a second check when staff log in.
Payment request checks
Verification steps happen before payment or access is granted, so a cloned voice or video asking for money gets checked first.
AI tool rules
Clear rules set which AI tools staff may use, so people know where company data can and can't go.
Leadership reporting
Whether we fully manage your IT or work beside your in-house IT team, leadership gets a monthly summary and a regular security review.
Where can you learn more about FunctionOne AI defenses?
FunctionOne explains its main defenses against AI attacks in more detail on these pages.
Phishing email monitoring
Learn how we monitor phishing email and watch Microsoft 365 sign-ins and forwarding rules when attackers send convincing AI-written messages.
Payment request checks
See the verification steps we use before payment or access is granted. They apply to requests from cloned voices and video too.
AI tool rules
Read how FunctionOne helps set rules for which AI tools staff use when they work with company data.
Why does AI threat protection matter for FunctionOne clients?
IBM's Cost of a Data Breach Report 2026, published in 2026, found AI-driven attacks hit more than 1 in 4 organizations, up 56%, with deepfake impersonation behind 45% of them. A cloned voice or video can ask staff to move money or share access. Our payment request checks put verification steps in front of those requests.
Verizon's 2026 Data Breach Investigations Report, published in 2026, says attackers use AI across many attack steps, from targeting and initial access to malware and tool development. In that same Verizon 2026 Data Breach Investigations Report (2026), the median threat actor used AI in 15 documented techniques, and some used 40 or 50.
AI helps defenders too, according to the Microsoft Digital Defense Report 2026 from Microsoft, published in 2026: it can summarize incidents, write investigation notes and log searches, triage incidents and surface evidence across data sources. At FunctionOne, AI flags the unusual activity, and our analysts confirm findings before they act within the rules you approve. Leadership then gets a monthly summary and a regular security review with owners and next steps.
How FunctionOne starts AI security work
FunctionOne starts with a security assessment and agrees on the rules before anything is switched on.
Security assessment
FunctionOne reviews your systems and accounts first. All new clients start here.
Agree on scope
Your leaders and our team agree on what the service covers, from offices and laptops to phones, servers and cloud.
Approve response rules
You approve the response rules our analysts follow. Containment happens only within those rules.
Switch on monitoring
Behavior analytics and threat intelligence go live once scope and rules are set. Security analysts then watch connected systems 24/7.
Report to leadership
Leadership gets a monthly summary and a regular security review. Reports name owners and next steps.
AI attacks and how FunctionOne answers them
The table matches four attacks that use AI with the defense FunctionOne puts in place.
| Attack that uses AI | FunctionOne's answer |
|---|---|
| Convincing AI-written phishing emails | Microsoft 365 sign-in and forwarding rule monitoring |
| Automated attacks with stolen passwords | Dark web password alerts and multifactor sign-in |
| Cloned voices and video asking for payments | Verification steps before payment or access |
| Staff pasting company data into public AI tools | Rules for which AI tools staff use |
Who FunctionOne's AI security service fits
FunctionOne works with established mid-size and large organizations that have outgrown a help desk.
Leaders who report upward
Owners and executives who answer to a board, insurer, auditor or parent company get a monthly summary and a regular security review. Reports name owners and next steps.
IT directors with a team
FunctionOne can work co-managed beside your in-house IT team. We also run IT fully managed.
Companies with several offices
We run offices, laptops, phones, servers and cloud from one control point. Security stays part of everyday IT work at all locations.
High-stakes operations
Security analysts watch connected systems 24/7 and act first when something looks wrong. Containment happens only within rules you approve.
Questions leaders ask FunctionOne about AI security
How does AI help defend a company?
AI helps by highlighting unusual activity for people to check. FunctionOne uses behavior analytics to learn typical user and system activity and flag changes, such as odd account behavior. Threat intelligence adds context about malicious addresses, domains and attack methods. Analysts confirm findings before acting.
How are attackers using AI?
Attackers use AI for targeting, initial access, and malware and tool development. Verizon's 2026 Data Breach Investigations Report, released in 2026, says the median threat actor used AI in 15 documented techniques. FunctionOne answers with phishing monitoring, password alerts, payment checks and AI tool rules.
What is the biggest AI threat to businesses right now?
Deepfake impersonation leads the list. IBM's Cost of a Data Breach Report 2026, published in 2026, says deepfake impersonation makes up 45% of AI-driven attacks, which add about USD 1 million per malicious breach. FunctionOne adds verification steps before any payment or access request goes through.
Can AI stop a cyberattack on its own?
Not at FunctionOne. Security analysts confirm what AI tools find before anyone acts. Containment happens only within response rules your organization approves. Analysts watch connected systems 24/7, and leadership sees results in a monthly summary and a regular security review.
How does FunctionOne protect against AI phishing emails?
FunctionOne monitors phishing email and watches Microsoft 365 sign-ins and forwarding rules for unusual changes. Dark web password alerts flag stolen passwords, and multifactor sign-in asks for a second check at login. Security analysts review what these checks find.
Should our staff use public AI tools at work?
Staff can use AI tools that your organization approves. FunctionOne sets rules for which AI tools staff use, since pasting company data into public AI tools can expose it. These rules are part of FunctionOne's defense against attacks that use AI.
Do we have to replace our IT team to work with FunctionOne?
No. FunctionOne offers co-managed IT beside an in-house IT team, as well as fully managed IT. In both setups, security analysts watch connected systems 24/7, and FunctionOne reports to leadership with owners and next steps for open items.
Where does FunctionOne work?
FunctionOne has offices in Syracuse, New York, at 6216 Thompson Road, and in Tampa, Florida, at 401 East Jackson Street. Both offices use 315-437-6714 for now. Clients with staff across several offices get IT and security run from a single control point.
Sources
- Verizon, 2026 Data Breach Investigations Report, 2026
- IBM, Cost of a Data Breach Report 2026, 2026
- Microsoft, Microsoft Digital Defense Report 2026, 2026