Who does what
Provider
- Operate contracted SIEM and monitoring workflows
- Investigate alerts and manage cases
- Contain when approved Active Defense is included
Your team
- License tools and connect required telemetry
- Set response approvals and change controls
- Remediate and own business response decisions
Coverage
- Endpoints
- Cloud Workloads
- Identity & Access
- Network
- SaaS Applications
Details
Service scope
Best for Teams wanting hosted-SIEM MDR or co-managed Sentinel and Splunk operations
Response add-on
Base MDR investigates and guides. Containment requires Active Defense, supported controls, approval rules and compatible change-management procedures.
SIEM model
Choose hosted ProSOC MDR or customer-owned Sentinel or Splunk variants. Other endpoint, XDR and exposure services require explicit scoping.
Order and exit terms
Onboarding counts toward the committed term, but service commitments begin after onboarding. Published terms do not require retention after termination; agree export and handover in the order.
Full service analysis
Proficio ProSOC MDR is a managed detection and response service that combines a Proficio-hosted SIEM, 24/7 SOC monitoring, analyst investigation, threat hunting, case management and optional Active Defense response. After an alert, Proficio investigates and escalates actionable findings with guidance, and can run automated or semi-automated containment when Active Defense and approval rules are in scope; the buyer still owns log-source coverage, change controls, remediation and business response decisions.
- Your team owns
- Choosing and licensing the SIEM, EDR, identity, cloud and ticketing tools in scope
- Connecting log sources and validating that critical assets, users and cloud workloads are covered
- Defining which Active Defense actions can run automatically, semi-automatically or only after approval
- Remediating affected systems, users, vulnerabilities and business processes after containment
- Confirming retention, reporting, compliance evidence and termination log-access terms in the order
Why co-managed SOC
Proficio does more than monitor and notify: it operates 24/7 SOC workflows, investigates alerts, manages SIEM content, handles cases and can run containment through Active Defense. The buyer still owns the environment, approvals and remediation, so co-managed SOC is a better primary lane than full SOC.
Response boundary
Base ProSOC MDR material emphasizes investigation, actionable alerts and guided remediation. Automated or semi-automated containment is tied to Active Defense and supported integrations, so buyers should not assume every quote includes under-four-minute containment across every tool.
Platform boundary
Proficio can bring a hosted SIEM or operate around customer-owned Microsoft Sentinel or Splunk. This profile is scoped to ProSOC MDR and its named variants, not every Proficio professional-service, exposure-management or breach-simulation offer.
Pricing boundary
No current numeric list price was found. AWS Marketplace uses private offers, and Proficio's service terms point to order-specific scope, quantities and fees, so this profile avoids invented monthly ranges.
Contract and exit
The published terms include onboarding in the commitment but defer service obligations until onboarding completes. They also permit increased quantities to become the new minimum and impose no log-retention duty after termination. Resolve those points before signing.
Pricing & contract
- Billing
- Custom
Quote-based, with order-specific service quantities and licensing. The published terms include onboarding in the committed term, while service commitments start only after onboarding. Unless the order changes them, annual renewals require 90 days’ notice; increased scope becomes a new minimum for the term. Agree retention and log export before termination.
Tradeoffs & buying questions
Strengths
-
Hosted SIEM or customer-owned Sentinel and Splunk delivery
-
SIEM management, detection tuning and investigation workflows
-
Optional Active Defense actions across supported controls
Considerations
-
Response needs Active Defense scope, supported controls and change approvals
-
Managed endpoint, XDR and exposure services have separate scopes
-
Onboarding, quantity increases, renewal and log-export terms affect total cost
Ask before buying
- Does the order cover hosted ProSOC MDR, Sentinel, Splunk or another separately scoped service?
- Which Active Defense actions can run, and how do they follow our change controls?
- When does service coverage begin, and what minimum quantities, renewal notice and log-export arrangements apply?
Integrations
Platform / SIEM
- Microsoft Sentinel
- Splunk
Endpoint
- CrowdStrike
- Microsoft Defender for Endpoint
- SentinelOne
3 more integrations
- Cisco Secure Endpoint
- Trend Micro Apex One
- Carbon Black
Cloud
- AWS
- Azure
- GCP
Other integrations
- ServiceNow
- Okta
- Microsoft Entra ID
7 more integrations
- Microsoft Defender for Cloud
- Microsoft Defender for Office 365
- Palo Alto Networks
- Fortinet
- Cisco
- Zscaler
- Microsoft 365
Common questions
Is Proficio ProSOC MDR a full SOC replacement?
This profile classifies it as Co-manage the SOC. Proficio can provide 24/7 monitoring, SIEM operations, investigation, case management and optional containment, but buyers still own environment scope, change controls, remediation, business approvals and follow-through.
Can Proficio contain threats for the buyer?
Yes, when Active Defense is included and integrated with supported controls. Proficio describes automated or semi-automated actions such as blocking malicious traffic, isolating endpoints and suspending compromised users, but buyers should confirm which actions are pre-approved and which need review.
Is Proficio pricing public?
No current numeric list price was found for ProSOC MDR. Proficio publishes service terms and marketplace private-offer paths, so buyers should request a scoped quote that separates SIEM model, log sources, endpoint management, Active Defense and retention.
Company details
- Founded
- 2010
- SOC regions
- North America, Europe / UK, APAC