Who does what
Provider
- Maintain contracted detections and tool workflows
- Investigate alerts through its 24/7 SOC
- Coordinate agreed response through ShieldVision
Your team
- Maintain source access and business context
- Set response authority and shared duties
- Complete recovery outside the agreement
Coverage
- Endpoints
- Network
Details
Service scope
Best for Teams seeking shared SIEM and security-tool operations with a US SOC
Shared operations
The SOC maintains contracted tool workflows and detection content. ShieldVision exposes cases, reports and response coordination to the customer or MSP.
Tool and response scope
SIEM, NDR and EDR/XDR technologies are scoped to the engagement. Response permissions, licenses, ingestion and recovery duties need explicit agreement.
Netsurion customers
Lumifi acquired Netsurion in 2024. Confirm how existing Open XDR or EventTracker contracts map to Lumifi support, ShieldVision and renewal terms.
Full service analysis
Lumifi MDR combines its US SOC with ShieldVision and co-managed security tooling. Lumifi acquired Netsurion in 2024. This profile now covers the current Lumifi service rather than assuming legacy Open XDR packages remain unchanged.
- Your team owns
- Agreeing source scope, tool ownership and license responsibilities
- Providing access, business context and approval rules
- Participating in assigned incident work and business recovery
- Confirming legacy Netsurion support and renewal transitions
Shared operations
Lumifi’s SIEM service includes remote management, detection tuning and content maintenance. ShieldVision lets customers inspect findings, coordinate incident work and escalate to analysts or engineering teams.
Response boundary
The service includes response workflows, but the supported controls and authority should be written into the engagement. A separate incident-response service does not make unlimited recovery part of every MDR contract.
Netsurion transition
Lumifi acquired Netsurion in May 2024 and now redirects the former service pages to Lumifi. Older Open XDR package tables and EventTracker reviews do not establish the current service package or migration terms.
Pricing & contract
- Billing
- Custom
Request a scope-specific quote covering security tools, licenses, ingestion, retention and response work. Existing Netsurion package terms should be reconciled with the current Lumifi agreement.
Tradeoffs & buying questions
Strengths
-
Supports shared SIEM operation and detection tuning
-
Customer access to cases and response workflows
-
US-based 24/7 SOC
Considerations
-
Tool licenses and response duties depend on scope
-
Legacy Netsurion packages do not establish current Lumifi entitlements
-
Broader incident recovery requires explicit contracting
Ask before buying
- Which tools, licenses, log volumes and retention are included in the quote?
- Which actions can analysts execute, which need approval and who leads recovery?
- For Netsurion customers, what changes at renewal or migration to ShieldVision?
Integrations
Platform / SIEM
- Microsoft Sentinel
- Exabeam
- Elastic
3 more integrations
- Stellar Cyber
- Palo Alto Cortex XSIAM
- NetWitness
Other integrations
- Lumifi ShieldVision
Common questions
What happened to Netsurion?
Lumifi acquired Netsurion in May 2024. The former Netsurion service website now points to Lumifi. Existing customers should confirm their platform, support and renewal transition rather than assuming every legacy entitlement carries over.
Does Lumifi replace the internal SOC?
This profile covers co-managed delivery with shared tool workflows, case access and incident decisions. Internal teams retain access, authority, business context and recovery work outside the agreement.
Does the quote include all security tools?
Confirm tool licenses, source coverage, ingestion, retention and response services individually. The public service describes supported technology choices, which does not make every tool or module part of one standard package.
Company details
- SOC regions
- North America