SOC services

Whatever the problem,
consider it solved.

Let’s build the SOC solutions you need together.

01 · SOC‑as‑a‑Service

Four tiers.
Each builds on the last.

Tier 01Foundation

Basic SOC‑as‑a‑Service

8x5 or 24x7 monitoring with security event detection, alerting and notification.

What you get

8x5 or 24x7
SLA-based detect & notify
Threat hunting and advisory
High-level support on customer-owned SIEM and SOAR solutions
SLA reports
Executive reports
Compliance reports

Talk to us about Basic

Tier 02Includes tier 01

Standard SOC‑as‑a‑Service

Includes SIEM capabilities with up to 400 days of live log retention for investigation and compliance purposes.

Basic SOC‑as‑a‑Service +

SIEM‑as‑a‑Service
Log management with up to 400 days of live log retention
Platform administration
Daily health check reporting
Activeboards (real-time dashboards)
Collaboration integrations
SecOps DFIR triaging
SecOps DFIR entity analytics
Compliance use cases

Talk to us about Standard

Tier 03Includes tier 02

Advanced SOC‑as‑a‑Service

Includes SOAR automation with 750+ integrations and 680+ pre-built security content packs.

Standard SOC‑as‑a‑Service +

SOAR‑as‑a‑Service
750+ integrations
680+ content packs
Workflow automations for active response
Security-focused automated case management
Threat intelligence management
Network security automation
Machine learning-based playbooks
Scheduled reporting
Consolidated dashboards for incidents, SLA and collaboration

Talk to us about Advanced

Tier 04Includes tier 03

Enterprise SOC‑as‑a‑Service

Adds external threat intelligence, UEBA and incident response. Monthly hours include 15 for support, 5 for training, 13 for preparation and 6 for red team testing.

Advanced SOC‑as‑a‑Service +

C.E.R.U. (CIRT) cyber emergency response
Standard 15 hours support per month
Co‑managed SOAR management and collaboration
Unlimited use case development
SIRP (Security Incident Response Program) management
Training (5 hours per month)
Preparation (13 hours per month)
Testing: red-teaming (6 hours per month)

Talk to us about Enterprise

02 · Standalone services

Add what you need.

SIEMaaS

Traditional log management falls short against today’s sophisticated threats. SIEMaaS provides advanced threat detection through predictive analytics, pattern recognition, and machine learning. This enables your team to identify and connect anomalous or dangerous behaviours across your organisation’s network, enhancing your ability to respond to emerging threats effectively.

XTI (External Threat Intelligence)

XTIaaS harnesses a broad array of intelligence from diverse sources, including proprietary research, to deliver tailored threat intelligence feeds. These feeds are customised based on your industry, geographic location, and technology stack, providing a clear view of your external footprint and enabling swift reduction of your attack surface.

Vulnerability Management

Continuous vulnerability scanning, assessment, prioritisation and remediation tracking across critical assets.

Penetration Testing

Simulated real-world attacks to identify and validate exploitable security weaknesses in systems, applications and infrastructure.

XDR as a Service

Extended Detection and Response across endpoints, identities, networks, email and cloud environments, with centralised threat visibility and response.

SOC Assessment

Comprehensive review of people, processes and technology to measure SOC maturity and identify improvement opportunities.

Threat Hunting

Proactive investigation of networks and systems to identify hidden threats, advanced persistent threats (APTs) and malicious activity not detected by automated tools.

Tabletop Exercises

Facilitated incident response simulations designed to test and improve readiness, communication, decision-making and cyber resilience.

Cyber Incident Response Team

Our Cyber Incident Response Team stands ready to respond to incidents around the clock. Our incident responders deep dive into investigations and digital forensics with robust tooling and comprehensive experience. Unused CIRT resources can be used for proactive development and refinement of incident response plans, conducting simulation exercises, and providing training, all to ensure your team is prepared for any cybersecurity eventuality.

03 · With Strike48

On top of your SOC,
or on its own.

Strike48 can be added on top of any SOC tier. It also stands on its own, for organisations that already run a SOC or only want penetration testing.

Explore Strike48

01AI agentsTriage, investigation and response agents working alongside our analysts.02Automated remediationA dedicated agent that carries out the fix once an analyst approves it.03WorkflowsLow-code automation connecting code, agents, APIs and webhooks. It can serve as your SOAR.04Agentic penetration testingPenetration tests and red team engagements run with StrikeKit.

Whatever the problem,consider it solved.

Four tiers.Each builds on the last.