SOC providers for ISO 27001 requirements

Arctic Wolf's Aurora MDR investigates alerts and contains threats through configured integrations, supported by a named Concierge Security Team.

You still own Connected tools, response permissions and remediation outside configured containment

eSentire MDR investigates and contains threats through supported tools under agreed response rules.

You still own EDR licensing, tool access, response permissions and recovery outside agreed incident support

Field Effect supplies an MDR platform and SOC that investigate threats and contain them under buyer-selected response policies.

You still own Agent deployment, response policies, recovery and incident response beyond MDR scope

Microsoft analysts investigate Defender incidents and execute permitted containment in MDR Plan 1.

You still own Defender licensing, deployment, access, exclusions and out-of-scope remediation

Zscaler MDR, formerly Red Canary, investigates connected alerts and executes permitted endpoint, identity and network containment.

You still own Underlying security tools, response approvals and remediation outside the contracted scope

Bridewell's fully outsourced SOC runs daily monitoring, investigation and detection tuning, then leads response within agreed playbooks.

You still own Telemetry, tenant permissions, response approvals, business remediation and recovery