Who does what
Provider
- SIEM operation and tuning
- Detection and case management
- Service reporting
Your team
- Estate changes
- Response authority and recovery
Details
Service scope
Best for Teams sharing SOC work through selected managed components
Scope
Managed SIEM within a modular SOC-as-a-Service contract.
Options
Managed EDR, NDR and retained incident response have separate scope.
Retention
LogRhythm archive terms differ from Sentinel storage arrangements.
Full service analysis
LRQA's managed-SIEM SOC service operates detections and investigates incidents in the agreed logging environment. The buyer retains estate changes, response approvals and remediation beyond the selected service components.
- Your team owns
- Estate changes
- Response authority and recovery
Pricing & contract
£43,065/year + setup G-Cloud 14 core LogRhythm example: 50 EPS, £13,487.50 first-year setup, excluding VAT.
December 2024 G-Cloud 14 reference for the core LogRhythm configuration at 50 events per second. Annual service is £43,065, plus £13,487.50 first-year setup, excluding VAT. This is not a Sentinel or all-components price.
- Billing
- Custom
Tradeoffs & buying questions
Strengths
-
Platform management, detection upkeep and incident analysis are documented together.
Considerations
-
Optional response components materially change both capability and cost.
Ask before buying
- Which actions can LRQA execute, and which require our response team?
- Does our quote cover core LogRhythm or the separate Managed Sentinel XDR component, with what retention and consumption limits?
- Which incident-response hours and technical-account support are included?
Integrations
Platform / SIEM
- LogRhythm
Common questions
Does the core price include the incident-response retainer?
The pricing document lists the CIRT retainer separately. Its retained hours and activation terms must be agreed in addition to core SOC operations.