Cart total (0 items):
Billed monthly: per month
Sales tax (if applicable): Calculated on invoice
Key specifications
Illustrations are for reference. Service scope is defined by the plan you choose.
Pay monthly or annually — the contract value is the same.
Save 5% with a 2-year term or 10% with a 3-year term.
Round-the-clock security monitoring, threat hunting and incident response across endpoints, identities, cloud and network.
24/7 Managed SOC & MDR gives your company a security operations center without hiring and retaining a round-the-clock team. Our analysts monitor alerts from your endpoints, identities, email, cloud platforms and network devices, investigate what matters and take pre-approved containment actions — such as isolating a device or disabling an account — when an attack is in progress.
We work with the security tools you already have, such as Microsoft Defender, CrowdStrike Falcon, SentinelOne or Symantec Endpoint Security, and collect logs into a managed SIEM with ingestion included in your tier. Detection rules are mapped to the MITRE ATT&CK framework, tuned to your environment and reviewed every month so analysts spend their time on real threats rather than noise.
Every confirmed incident comes with a written timeline, root cause and recommendations. Each tier includes incident response hours for deeper investigation and recovery support, and higher tiers add a named security lead who briefs your leadership on trends, risks and improvements.
All prices in USD, per organization at the 1-year rate. Pay monthly or annually — the contract value is the same. Swipe the table sideways to see every plan.
| Feature | Business | Professional Recommended | Enterprise |
|---|---|---|---|
| Price | $11,000.00 /mo per organization or $132,000.00/yr | $28,000.00 /mo per organization or $336,000.00/yr | $66,000.00 /mo per organization or $792,000.00/yr |
| With a 3-year term | $9,900.00/mo Save 10% or $118,800.00/yr | $25,200.00/mo Save 10% or $302,400.00/yr | $59,400.00/mo Save 10% or $712,800.00/yr |
| Best for | For mid-size organizations that need 24/7 eyes on endpoints and identities. | For organizations with cloud workloads, several sites and compliance reporting needs. | A full SOC extension with deep hunting, detection engineering and response. |
| What’s included |
|
|
|
| Order |
Billed monthly · 1-year term Customize billing, term & quantity (Plan: Business) |
Billed monthly · 1-year term Customize billing, term & quantity (Plan: Professional) |
Billed monthly · 1-year term Customize billing, term & quantity (Plan: Enterprise) |
| SKU | TS-SEC-505 |
|---|---|
| Category | Security & Continuity |
| Pricing | Per organization, per year; payable monthly or annually |
| Contract | Annual commitment; 1-, 2- or 3-year term |
| Billing | Monthly or annual invoicing; same contract value |
| Endpoints covered | Up to 1,000 / 3,000 / 7,500 depending on tier |
| Log ingestion | 25 / 75 / 200 GB per day into the managed SIEM |
| Critical alert triage | 30 / 15 / 10-minute target, 24/7 |
| Incident response | 40 / 100 / 250 hours per year included |
| Team | Tier 1–3 analysts, threat hunters, detection engineers and incident responders |
| Not included | EDR licenses (see Symantec Endpoint Security Complete Licensing) and litigation-grade forensics |
| Lead time | Monitoring live within 30 days (phased onboarding) |
No. We work with leading EDR platforms, including Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne and Symantec Endpoint Security, plus common firewalls and identity providers. EDR licenses are not included; if you have none, we can supply Symantec Endpoint Security Complete or recommend an alternative.
Only the containment actions you approve during onboarding, such as isolating an endpoint, disabling a compromised account or blocking a malicious indicator. Everything else is discussed with your on-call contact first, and every action is logged and reported.
We review volumes every month. If you grow beyond your tier, you can move up a tier at any time, prorated to your renewal date. We never stop ingesting logs without telling you first.
Yes. Monthly invoices spread the same annual commitment over 12 payments and do not shorten it. To end the service, give written notice at least 30 days before renewal; we export your logs, detection rules and documentation and hold a handover call with your new provider.
Have another question? Ask a solutions architect
