Who does what
Provider
- Baseline monitoring
- Initial alert triage
Your team
- Deeper investigation
- Containment and recovery
Details
Service scope
Best for Teams needing initial triage while retaining response
Package
Tier 1 Foundational SOC in the current quote tool.
Boundary
Higher tiers add escalation, investigation or engineering support.
Coverage
Confirm staffed hours and escalation terms in the statement of work.
Full service analysis
VectorUSA's Tier 1 Foundational SOC monitors alerts and performs initial triage. The buyer retains deeper investigation, containment and recovery unless those tasks are added to the contract.
- Your team owns
- Deeper investigation
- Containment and recovery
Pricing & contract
- Billing
- Custom
VectorUSA scopes the estimate by users, servers, sites and service tier, with separate onboarding and monthly charges. Existing tools, vulnerability management and an incident-response retainer affect the quote.
Tradeoffs & buying questions
Strengths
-
A named entry tier lets teams scope initial analyst support separately.
Considerations
-
Public descriptions use different tier labels and coverage wording. Resolve them in the contract.
Ask before buying
- Does our Tier 1 contract include staffed 24/7 triage and a response-time commitment?
- Where does initial validation end and chargeable investigation begin?
- Which SIEM and EDR licenses, onboarding work and incident-response costs are separate?
Common questions
Why is this in Investigate and advise?
The entry tier includes analyst triage. Its documented scope is narrower than the investigation and engineering support offered in higher tiers.