Who does what
Provider
- SIEM and detection operation
- Alert investigation
- Agreed endpoint containment
Your team
- Access and response permissions
- Business decisions and recovery
Details
Service scope
Best for Organizations outsourcing recurring SOC operation
Model
Fully Managed SOC rather than the targeted Hybrid Cloud option.
Operations
Monitoring, detection engineering, managed EDR and incident coordination.
Response
Confirmed threats can lead to endpoint isolation within agreed permissions.
Full service analysis
Precursor Fully Managed SOC runs daily monitoring, detection engineering and incident investigation, including agreed endpoint containment. The buyer supplies access, sets response permissions and retains business decisions and recovery work outside the contract.
- Your team owns
- Access and response permissions
- Business decisions and recovery
Pricing & contract
From £900/month Provider-published entry price for 50–100 users and basic log sources. Scope is set by quotation.
Published entry price for 50–100 users and basic log sources. Larger estates, richer telemetry and service tiers cost more. Confirm licenses, ingestion, response entitlements and optional EdgeProtect in the quote.
- Billing
- Flat-fee, Custom
Tradeoffs & buying questions
Strengths
-
One contracted team operates the detection platform and recurring analyst workflow.
Considerations
-
The entry price covers a small basic-log deployment, not every advertised capability at any scale.
Ask before buying
- Which assets and response actions are included in our fixed monthly price?
- Which containment actions are preauthorized, and who approves disruption?
- What are the limits on incident-response hours, recovery and forensic work?
Integrations
Platform / SIEM
- Microsoft Sentinel
- Elastic Security
Common questions
Is attack-surface monitoring included?
The pricing and deliverables sections list EdgeProtect as optional. Have its inclusion and fee stated in the quote.