Who does what
Provider
- 24/7 alert investigation
- Detection engineering
- Assigned platform administration
Your team
- Shared operational decisions
- Response approvals
- Work outside the contract
Coverage
- Endpoints
- Cloud Workloads
Details
Service scope
Best for Teams sharing SOC and platform operation
Service
Shared SOC and MDR operations.
Platform
Customer or Thales environment, subject to regional scope.
Response
Playbook-led handling with agreed action permissions.
Full service analysis
Thales SOC and MDR investigates alerts, maintains detection rules and operates agreed security platforms alongside the customer's team. The buyer retains shared operational decisions, response approvals and remediation or recovery outside the contracted scope.
- Your team owns
- Shared SOC decisions, source selection and business context.
- Response authorization and the customer tasks in agreed playbooks.
- Remediation and recovery beyond the purchased service.
Tesserent is now under Thales
Thales completed its Tesserent acquisition in 2023. The former Tesserent SOC page now leads to this Thales service, so a separate Tesserent listing would duplicate the current offer.
Regional scope matters
The global service describes several deployment and operating models. UK procurement terms and ANZ delivery arrangements should be checked against the actual regional proposal.
Pricing & contract
- Billing
- Custom
Request a quote for the selected regional SOC and MDR service, including platform operation, licenses, ingestion, onboarding and response scope. Historic UK procurement rates are specific to that service schedule.
Tradeoffs & buying questions
Strengths
-
The offer includes ongoing detection engineering and platform administration.
-
Deployment can use customer tools or a Thales-operated environment.
Considerations
-
Global service options do not define the regional contract or response permissions.
-
Additional incident response and recovery work needs explicit scope.
Ask before buying
- Which detection, platform administration and incident tasks will Thales own, and which stay with our team each day?
- Which containment actions are preauthorized, and when do incident response retainers or recovery charges apply?
- Which regional entity and SOC will serve us, and what do the quote, data location and licensing terms cover?
Integrations
Platform / SIEM
- Microsoft Sentinel
- Google Security Operations
- Splunk
1 more integrations
- IBM QRadar
Common questions
Is this the former Tesserent SOC service?
Tesserent's SOC page now redirects to Thales SOC and MDR. ANZ buyers should confirm the local contracting entity, team and service schedule rather than applying another region's terms.
Does Thales take over every SOC task?
The service can manage all or part of the environment. This profile describes shared operations. A full outsourcing proposal needs its own responsibility schedule and response authority.