Managed SOC – SOC as a Service

Overview
Benefits & Capabilities
Onboarding
Why Defense.com?
FAQs
Resources

Protect your business with a managed SOC

Protect your business with a managed SOC

Defense.com Managed Security Operations Centre (SOC) is a cost-effective way to monitor your environment 24/7 for cyber threats without the need to hire your own security team.

Our expert SOC analysts will fully manage your SIEM deployment and detect suspicious activity in your network. We’ll raise genuine threats to your attention so you can respond quickly and prevent breaches.

Trusted by over 3,000 businesses

Virgin

NHS

Codestone

Tusker

OKA

United Bank for Africa

Agilico

Beaverbrook

Blck Rhino

Clear Talernts

Cloudian

Get Support

Locta

Mede Care

Medichecks

NEACH

Structure Flow

The Edge Picture Company

Transoft Solutions

Woodside Logistics Group

Virgin

NHS

Codestone

Tusker

OKA

United Bank for Africa

Agilico

Beaverbrook

Blck Rhino

Clear Talernts

Cloudian

Get Support

Locta

Mede Care

Medichecks

NEACH

Structure Flow

The Edge Picture Company

Transoft Solutions

Woodside Logistics Group

Benefits & Capabilities

Our SOC team will monitor your network 24/7 for suspicious activity. We’ll quickly learn what normal looks like for your environment, tune out any noise and alert you to genuine security threats.

When you choose to outsource your SOC to Defense.com you can be sure that your security is in the best hands. Our team of security professionals have a wealth of industry knowledge and experience in handling all types of cyber threats.

We’ll expertly manage the configuration, onboarding and tuning of your SIEM deployment based on the needs of your business, so you can focus on other tasks.

Our managed SOC service is delivered using our proprietary SIEM technology. Our cloud-native platform is quick to deploy and can collect data from all your existing security investments.

Each security event raised by our SOC team will contain a clear overview of the issue and the steps you need to take to remediate it, helping you to respond to threats faster.

AWS

Beaverbrook

Cisco

Crowdstrike

Fortinet

Google Cloud

AWS

Beaverbrook

Cisco

Crowdstrike

Fortinet

Google Cloud

Microsoft

Mimecast

Okta

Salesforce

Sentinel One

Sophos

Microsoft

Mimecast

Okta

Salesforce

Sentinel One

Sophos

Ingest security logs and alerts

From cloud to identity and everything in between, ingest security logs and alerts from any source.

SIEM onboarding made easy

See immediate security value with a simple SIEM deployment process.

Kick off

We’ll work with you to build a profile of your business to help tailor our managed SIEM service to your requirements. This will include defining a list of assets, network diagrams, maintenance schedules and escalation points. We’ll also provide an interactive onboarding tracker that outlines the process from start to finish, so you can keep track of progress throughout.
Implementation

When you’re ready to start, we’ll assist you with all aspects of the SIEM deployment process. This will include setting up log collectors for on-prem sources and making sure that any API calls are in place for cloud-based systems. Once that’s done, we’ll verify that everything is logging into the Defense.com SIEM platform correctly before moving into the baseline phase.
Baseline

At this point, you’ll get introduced to our SOC analysts who will serve as an extension of your internal team. First, we’ll monitor the activity in your environment to define what ‘normal’ looks like. We’ll then use machine learning to tune your SIEM alerts and eliminate any false positives, ensuring that you’re only getting notified about genuine security threats.
Live service

Once your environment has been baselined, our SOC team will deliver tailored alerts and flag any suspicious activity, giving you actionable remediation advice for any threats. We’ll continuously tune your runbooks in line with your business priorities and schedule regular service reviews to ensure that you’re always getting the maximum amount of value out of your SIEM.

Why choose Defense.com?

We believe that good cyber security doesn’t have to be complicated. That’s why Defense.com provides managed security services to make it easier for you to detect and respond to threats and reduce your cyber risk.

By combining security tools that identify threats across your environment, Defense.com enables you to prioritise and manage cyber threats with ease. Remediation advice provided by experienced SOC analysts ensures threats are dealt with quickly and efficiently.

Defense.com Customer Success team

Customer success stories

Why choose a managed SIEM solution?

A large housing provider chose Defense.com to deliver a 24/7 managed SIEM and SOC service and take the pressure off their internal team.

We helped them to:
- Overcome challenges with their existing MSSP
- Monitor their environment 24/7
- Eliminate alert fatigue
Read full case study

Managed SOC FAQs

The Defense.com Managed SOC service is included as part of our Managed SIEM or MDR solutions, which require our proprietary SIEM technology to be deployed.

Our outsourced SOC service currently does not support or manage SIEM deployments from other vendors. However, we can integrate with most other areas of your existing technology stack to help you keep costs and complexity to a minimum.

Our standard SLAs for our Managed SOC and SIEM service are based on the severity of the alert, and as follows:

Critical: Phone, portal and email communication within 30 minutes
High: Phone, portal and email communication within 30 minutes
Medium: Portal and email
Low: Portal and email
Informational: Portal only

Yes, we operate 24/7/365. We will work with you to identify what type of security alerts you’d like us to raise in and out of hours, and who your dedicated points of contact are.

We will also work with you to define the preferred method of contacting your team for different types of alerts, and align within your current incident response process.

Most larger vendors price their Managed SOC and SIEM service by log volumes, EPS or data storage capacity. However, this approach isn’t cost-effective and means you have to constantly calculate your usage.

We believe that good security doesn’t need to be complicated (or expensive!), so our service is priced based on how many log sources you have. 24/7 coverage from our SOC team is included within this price, which means you’ll get a consistent and predictable price per month.

Detect cyber threats and improve your security with our managed SIEM service.