Managed SOC
A managed SOC that handles incidents, not just alerts on them.
A SOC isn't a product.It's a commitment to an outcome.
We monitor, detect and respond, and you hear from us only when it really matters.
View the full SOC deckInteractive deck, 20 slides · English & HebrewManaged SOC
What you get, in plain words
- 01
Eyes on your organization 24/7/365
A SOC team watching all your systems: nights, weekends and holidays.
- 02
Handling, not just alerting
We investigate, block and contain the incident, not just tell you there's a problem.
- 03
Updates only when it matters
A dedicated Slack channel: what happened, what we did and what we need from you, with one-click actions.
- 04
Full transparency
The MARA portal: every incident, action and report, available to you at any moment.
- 05
Committed response times
SLA by severity: 10 minutes for a critical incident.
- 06
A system that improves, and stays yours
Detection and reports keep getting sharper. If you leave, every setting and all the knowledge stay with you.
Thursday · 02:14
What happens at Sysec at 02:14?
Someone is trying to log in to your VPN for the 400th time. The question isn't if it will happen, but who will see it, and how fast.
- 02:14DetectionThe SIEM spots a pattern of abnormal login attempts and correlates events from different sources.
- +1 minAutomatic enrichmentAn incident opens. AI checks IP reputation, the users involved and history.
- +3 minFirst responseA playbook blocks the source address automatically, per a policy agreed with you.
- +7 minAnalyst verifiesAn expert analyst reviews, confirms and isolates the endpoint if needed.
- +10 minYou're informedA Slack message: what happened, what we did, what we need from you.
- 08:00MorningA full report in MARA, and the rule is tuned to detect faster next time.
Illustrative scenario · actual response times are set in the SLA by severity
AI-Driven SOC
How it works: an AI-driven SOC
- 01CollectionAll your data sources flow over a secure channel, without replacing any system.
- 02SIEMNormalization, correlation and analytics. Only real events move on.
- 03XSOAREvery incident enters a dedicated playbook. Security products also connect directly.
- 04AI + analystAI agents enrich and analyze; a 24/7 SOC analyst decides.
- 05OutcomeResponse, containment, updates and reporting, all visible to you in MARA.
We work with the leaders, and with what you already have
- Palo Alto NetworksCortex XDR · XSIAM · XSOAR
- CrowdStrikeFalcon EDR · Next-Gen SIEM
- SentinelOneSingularity XDR · AI SIEM
- MicrosoftDefender XDR · Sentinel
- CoralogixSIEM · Observability
234+ integrations: firewall, email, identity, cloud and EDR/XDR. We connect to your whole stack without replacing anything.
SLA
A commitment, not a promise
- CRITICAL10minActive threat / broad impact
- HIGH1hourSignificant threat
- MEDIUM6hoursSuspected anomalous activity
- LOW12hoursInformational alert
Availability 24/7/365 · response time is measured by incident severity
Service tracks
Start where it's right for you
- ESSENTIAL
Monitoring & detection
- 24/7 monitoring on a dedicated SIEM
- Tailored detection rules
- Alerts and regular reporting
- ADVANCED
Monitoring & response
- Everything in Essential
- Incident handling and automation
- MARA portal and Slack
- FULL MDR
Full MDR 24/7
- Everything in Advanced
- Investigation, documentation and containment
- Backup from the PS expert team
Simple pricing: by daily data volume, not by the number of systems.
What happens once we start
- 01Scoping & mapping
- 02Connect
- 03Tailor
- 04Full monitoring
What do we need from you? One point of contact, access to the log sources and one scoping meeting. We do everything else.
In the full deck
- 5 questions to ask any SOC provider, and our answers
- Screens from MARA, XSOAR and the SIEM
- People and AI: the three layers of handling
- What it means for the CISO, management, IT and audit
- 12 things that set the service apart
Our offer: a posture review, with no commitment
A map of what's monitored today and where the visibility gaps are, a prioritized list of recommendations, and a tailored proposal.
Book a posture reviewCommon industries
Proud partners of
Official professional-services partner of leading cybersecurity vendors.
- Palo Alto Networks
- Check Point
- Fortinet
- Cisco
- Trellix
- Varonis
- SentinelOne
- Trend Micro
- Forescout
- F5
- Ivanti
- Elastic
- XM Cyber
- Forcepoint
- Portnox
- AWS
More services
Ready to talk?
Let's build your organization's digital defense together.