SOC Providers.com Security Operations Center providers
Last reviewed: 3 Oct 2026

Bridewell Security Operations Center

Bridewell Security Operations Center runs daily monitoring, investigation and detection improvement under a fully outsourced SOC contract. You retain tenant access, response approvals and business remediation or recovery, while the hybrid option leaves more daily SOC work with your team.

Platform
Either
Price
G-Cloud: from £5.25/user/mo + £3.04/server/mo

Who does what

Provider

  • Run contracted daily SOC operations
  • Investigate, hunt and tune detections
  • Lead response within agreed playbooks

Your team

  • Maintain tenant access and connected telemetry
  • Define scope and response approvals
  • Handle business remediation and recovery

Coverage

  • Endpoints
  • Cloud Workloads
  • Network
  • OT/ICS

Details

Service scope

Best for Regulated teams seeking a UK-centered outsourced or hybrid SOC

  • Operating model

    Run the SOC describes the fully outsourced contract. Hybrid delivery shares daily work with your team. Separately sold Agentic SOC capabilities are outside this profile.

  • Tool and action scope

    Monitoring tools are deployed in your tenant and remain your intellectual property. Supported integrations, containment permissions and additional incident-response work need explicit scope.

  • Regional delivery

    The UK procurement offer specifies a UK SOC. For German or French entities, confirm eligibility, service language and each data location before relying on this delivery model.

Full service analysis

Bridewell Security Operations Center runs daily monitoring, investigation and detection improvement under a fully outsourced SOC contract. You retain tenant access, response approvals and business remediation or recovery, while the hybrid option leaves more daily SOC work with your team.

Your team owns
  • Select fully outsourced or hybrid responsibilities in the contract
  • Maintain source access, tenant permissions and licensing
  • Approve response authority and actions with business impact
  • Handle business remediation, recovery and work outside contracted response

Fully outsourced or hybrid

The Run the SOC lane applies to the fully outsourced model named on Bridewell’s SOC page. Hybrid contracts retain shared daily operations. Define queue ownership, detection tuning, response authority and out-of-scope recovery in the statement of work.

Tenant ownership

Bridewell says SOC monitoring tools are deployed as code in the client tenant and remain client intellectual property after non-renewal. This does not establish ownership of every license or platform. API and available event data can limit application and SaaS integrations.

Regional contract

I-TRACING completed its acquisition of Bridewell in the first half of 2025. The UK G-Cloud offer specifies UK delivery. Group operations in France and Germany do not establish local eligibility for this exact contract, so confirm the seller, support language and data locations.

Price scope

The May 2024 G-Cloud 14 managed SIEM/SOC sheet lists user and server starting units, plus deployment from £500/day. Stack and scope affect the total. Separate MDR tier prices and generic market-cost ranges are not prices for this fully outsourced SOC.

Pricing & contract

G-Cloud: from £5.25/user/mo + £3.04/server/mo

May 2024 managed SIEM/SOC reference · deployment from £500/day · stack and scope affect total

Billing
Per-user, Per-asset, Custom
G-Cloud 14 managed SIEM/SOC pricing (May 2024) ↗

Tradeoffs & buying questions

Strengths

  • Fully outsourced option transfers daily SOC work

  • Hybrid option supports an existing internal SOC

  • Client retains deployed monitoring code

  • Public procurement sheet exposes scoped user and server units

Considerations

  • Hybrid delivery does not transfer all daily SOC responsibilities

  • Tool support and action rights must be separately agreed

  • G-Cloud unit prices exclude a complete scoped total

  • German and French contract eligibility needs confirmation

Ask before buying

  • Which daily SOC tasks and containment actions are included, and which require our approval?
  • For our UK, German or French entity, which delivery team, support language and telemetry or case-data locations apply?
  • What do the G-Cloud units exclude, including licenses, ingestion, deployment and additional incident-response work?

Integrations

Platform / SIEM

  • Microsoft Sentinel
  • Supported customer SIEM

Endpoint

  • Microsoft Defender XDR (where scoped)

Other integrations

  • Supported application and SaaS event sources

Common questions
Does Bridewell run the SOC?Yes, under the fully outsourced model. Hybrid contracts share daily operations, so confirm the responsibility split.

Yes, under the fully outsourced model. Hybrid contracts share daily operations, so confirm the responsibility split.

Does this include Agentic SOC?This profile covers the conventional SOC service. Agentic SOC is a separate offer and needs its own scope and permissions.

This profile covers the conventional SOC service. Agentic SOC is a separate offer and needs its own scope and permissions.

What does the public price cover?The May 2024 G-Cloud sheet gives managed SIEM/SOC user and server units. Deployment starts at £500/day. Final cost depends on tooling and agreed scope.

The May 2024 G-Cloud sheet gives managed SIEM/SOC user and server units. Deployment starts at £500/day. Final cost depends on tooling and agreed scope.

Company details
Headquarters
Reading, United Kingdom
Founded
2013
SOC regions
Europe / UK