Talk to us

Someone watching, after the test is over.

Security operations run for you, so someone is watching after the test is over.

What we run for you

  • SOC-as-a-ServiceSecurity monitoring and response run as a service.
  • EDR ManagementYour endpoint detection and response tooling, managed.
  • Firewall ManagementYour firewall rules and changes, managed.
  • WAF ManagementYour web application firewall, managed.
  • Threat Intelligence & AdvisoriesAdvisories on the threats that matter to your stack.
Schematic, not live data. One lane per managed service. A raised mark is an event that needs a person.

Coverage: Business hours, IST (Monday to Friday). Out-of-hours cover by arrangement.

The problem

Security work has a short shelf life.

The day after an assessment, someone ships a change. A new endpoint goes live, a rule is loosened, a laptop misses a patch. The report describes a system that no longer quite exists.

Testing tells you where you stood. Somebody still has to watch where you are.

How it works.

You keep the decisions. We take the watching and the day-to-day running.

  1. Agree what we watch and manage.

    Which of the five services, covering which systems.

  2. We take on the day-to-day.

    Monitoring, and the management of the controls you hand over.

  3. You hear from us when it matters.

    When something needs a decision from you, not for every event.

  4. Advisories, as threats change.

    Notes on the threats that are relevant to what you run.

What changes for you.

  • An answer to “would we know if it happened again?”
  • Security controls that are looked after, not just installed.
  • Your engineers spend their time on the product.

Questions we get asked.

What hours do you cover?

Business hours, IST (Monday to Friday). Out-of-hours cover by arrangement. We agree response times for each service in writing before work starts.

Do we have to take all five services?

No. Start with the one that covers your biggest gap. If you are not sure which that is, tell us what you run and we will recommend one.

What does “Threat Intelligence & Advisories” mean in practice?

Advisories about threats that are relevant to your stack, so you hear about what matters to you rather than everything that happened this week.

We have not had an assessment or a penetration test. Can we start here?

You can. Most teams get more from monitoring once they know what they are protecting, so we may suggest a short assessment first.

Tell us what needs watching.

Talk to a security expert