Frequently asked questions.

A Security Operations Center (SOC) is a team that monitors your firewalls, servers, cloud accounts and other systems for signs of attack, investigates what it finds, and tells you what to do. With a managed SOC, you get that team and its tools as a service instead of hiring and training one yourself.

Managed Detection and Response (MDR) focuses on endpoints such as laptops, desktops and servers. It detects attacker behavior on those devices and responds, for example by isolating a device or stopping a malicious process. A managed SOC looks across your wider environment. Many organizations combine both.

Not always. If ransomware and compromised laptops are your biggest worry, MDR may be the right first step. If you need visibility across your network, cloud and servers, a SOC adds that. We'll recommend what fits your risks and budget, and what can wait.

Antivirus and firewalls block known threats, but determined attackers use stolen passwords, legitimate tools and new techniques that don't always trigger a block. Monitoring means someone notices the warning signs and acts, including at night, on weekends and on holidays.

Our services are delivered on Fortinet and Sangfor security platforms. If you already own equipment from either vendor, we can usually build on it. See our Fortinet and Sangfor pages for details.

We scope your environment, agree on escalation contacts and pre-approved response actions, connect your systems and deploy agents where needed, then learn what normal activity looks like before full 24/7 monitoring begins. The timeline depends on your size and complexity, and we agree on it with you during scoping.

It's a discovery call plus an automated, non-intrusive external scan of your public domains, websites and email security. We check DNS configuration, SPF, DKIM and DMARC, TLS certificates and settings, website security headers, and exposed internet-facing services. You receive a short findings report with plain-language next steps. A signed authorization is required before we scan.

It's a paid assessment in which we place a scanner, a mini PC or virtual machine, inside your network to see what an attacker could see once inside: devices, vulnerabilities and missing patches, weak or default configurations, and exposed file shares. You receive a detailed report and a prioritized remediation plan. If you sign a Managed SOC or MDR contract within 60 days, we credit the full assessment fee toward your service.

Our assessments are non-intrusive. We identify and report weaknesses, but we don't attempt to exploit them or disrupt your operations. Every assessment starts with your written authorization and an agreed scope, targets and timing.

Pricing on request. Each proposal is scoped to the number of users, endpoints and log sources you want covered, so you only pay for what you need. The free external assessment carries no obligation.

We use the security data and findings we collect only to deliver the service and prepare your reports. Findings are shared only with your nominated contacts and kept confidential, in line with the Data Privacy Act of 2012. Our Privacy Policy explains how we handle personal data.

No single service makes an organization compliant. Compliance also depends on your policies, people and privacy program. What a SOC and MDR do provide is continuous monitoring, faster detection and documented incident records, which support your security measures and breach reporting. Read more on our Data Privacy Act compliance page.