Managed SOC service

The Defense.com Managed SOC service is included as part of our Managed SIEM or MDR solutions, which require our proprietary SIEM technology to be deployed.

Our outsourced SOC service currently does not support or manage SIEM deployments from other vendors. However, we can integrate with most other areas of your existing technology stack to help you keep costs and complexity to a minimum.

Our standard SLAs for our Managed SOC and SIEM service are based on the severity of the alert, and as follows:

• Critical: Phone, portal and email communication within 30 minutes
• High: Phone, portal and email communication within 30 minutes
• Medium: Portal and email
• Low: Portal and email
• Informational: Portal only

Yes, we operate 24/7/365. We will work with you to identify what type of security alerts you’d like us to raise in and out of hours, and who your dedicated points of contact are.

We will also work with you to define the preferred method of contacting your team for different types of alerts, and align within your current incident response process.

Most larger vendors price their Managed SOC and SIEM service by log volumes, EPS or data storage capacity. However, this approach isn’t cost-effective and means you have to constantly calculate your usage.

We believe that good security doesn’t need to be complicated (or expensive!), so our service is priced based on how many log sources you have. 24/7 coverage from our SOC team is included within this price, which means you’ll get a consistent and predictable price per month.