Adlumin MDR by N-able investigates and contains threats through a shared XDR and SIEM platform. Your team maintains controls and handles work outside the package.
You still own Connected tools, response permissions, escalation rules and work outside the package
SecurityHQ runs contracted SOC operations, investigating threats and coordinating containment through agreed playbooks and supported security controls.
You still own Source coverage, response approvals, internal remediation and recovery
What they doRun the SOCSOCaaS
Price£30,664.70 / year · 5 GB/day The May 2024 G-Cloud example covers a 12-month, bring-your-own-license Sentinel service at 5 GB/day, with three connector types and containment automation. These are guidance prices subject to technical and commercial scoping. Confirm current licensing, ingestion, retention and onboarding costs.
About this list
A general NIST reference can describe different publications, control mappings or service activities. Ask the provider to identify the exact framework and version relevant to your scope.
Map the purchased service to specific responsibilities and evidence. Confirm what remains with your team instead of treating a framework mapping as complete coverage.
Questions
What does NIST alignment mean for a SOC service?
Ask the provider to show which service activities map to which parts of the named publication. The label alone does not establish implementation across your environment.
What evidence should we compare?
Compare coverage records, incident documentation, response responsibilities and sample reports against the controls or outcomes your organization has selected.
