SOC providers for SOC 2 requirements
Review the provider’s report scope separately from the evidence it supplies for your organization’s own examination.
8 providers
Browse all providersArctic Wolf's Aurora MDR investigates alerts and contains threats through configured integrations, supported by a named Concierge Security Team.
You still own Connected tools, response permissions and remediation outside configured containment
Blackpoint's CompassOne MDR investigates endpoint and cloud threats, isolating devices or disabling accounts within agreed response authority.
You still own Deployment, response policies, remediation, recovery and MSP client communication
Dell analysts investigate supported XDR alerts and take pre-approved containment actions such as host isolation and file blocking.
You still own Endpoint coverage, platform access and remediation beyond the contracted response scope
eSentire MDR investigates and contains threats through supported tools under agreed response rules.
You still own EDR licensing, tool access, response permissions and recovery outside agreed incident support
Field Effect supplies an MDR platform and SOC that investigate threats and contain them under buyer-selected response policies.
You still own Agent deployment, response policies, recovery and incident response beyond MDR scope
Huntress analysts investigate endpoint, identity and SIEM alerts, then perform supported containment within enabled modules and permissions.
You still own Deployment, permissions, manual remediation, recovery and client communication
Binary Defense co-manages SIEM and XDR configuration, detection rules and alert investigation.
You still own Tool licensing, telemetry quality, response authority and business remediation
Bridewell's fully outsourced SOC runs daily monitoring, investigation and detection tuning, then leads response within agreed playbooks.
You still own Telemetry, tenant permissions, response approvals, business remediation and recovery
About this list
Request the relevant SOC 2 report and review its covered system, period and exceptions. Match that scope to the platform and managed service you intend to use.
Then agree what the provider delivers for your own control activities: monitoring records, investigation histories, access evidence or service reports. Confirm the format, retention and audit-support process before onboarding.