Security Operations Center aaS (SOC)

Effectively increase the level of protection for your business

Our SOC as a service uses state-of-the-art technology to analyze your IT environment according to your protection needs, providing visibility and identifying dependencies that may indicate targeted attacks such as ransomware or malware. Based on this analysis, you can better assess the threat posture of your infrastructure and cloud and take appropriate countermeasures. In addition, SOC as a service helps you improve and document your security level transparency and meet compliance requirements.

Protect your Infrastructure and Cloud
24x7 monitoring from our team of SOC analysts
Managed SOC Service from plusserver takes the burden off your IT department

Request now

Visibility and protection from cybercrime

Protect and monitor your IT operations, infrastructure, and cloud with our SOC as a Service. With our team of analysts, we monitor for anomalous behavior, such as changes in data, processes, or network connections, and help you effectively defend against threats.

Secure digitalization

In the course of digital transformation, IT security is essential to protect business processes. The ever-increasing threat landscape and new compliance regulations require a comprehensive security strategy. Our Managed SOC helps you align your security posture with your new business model.

Fast and flexible deployment

Respond now and gain access to comprehensive security services without the need for dedicated staff. Our SOC-as-a-Service includes comprehensive onboarding, SIEM platform operations, managed services, and a 24x7 team of analysts to respond quickly and effectively to cyber threats.

Attractive terms

Plan your investments more easily with our advantageous service model (Opex). Instead of investing in your own infrastructure, software (e.g. SIEM) and personnel to set up your own security operations center, you can get started quickly and easily with us.

24x7 monitoring

Our team of analysts monitors your IT environment and the results of integrated security solutions (including EDR) 24x7x365. Depending on your service level, they will also work with your IT team to initiate response actions in the event of a security incident.

Compliance and data protection

With our SOC as a Service, which is offered completely in Germany - including the operation of the SIEM platform in our sovereign pluscloud - we support you in the management of certain compliance challenges (e.g. SIG 2.0) as well as the use of insurance services.

Download the info sheet now

Put a stop to cybercrime!

Get an at-a-glance view of how you can dramatically improve risk visibility, detect and prevent cyber threats, and achieve your digitalization goals.

Download now

Security Operations Center: Features at a glance

SOC as a Service (core element)

plusserver takes over the complete management of all services required for our SOC as a Service offering. In addition to the managed service (rules and change management), this includes a German-speaking SOC analyst team and services such as:

Provision of the SIEM platform and log collectors (IBM QRadar)
Connection of defined IT systems (e.g. EDR platform, firewalls)
Automated event correlation
1st and 2nd level analysis of security events
Assistance to customer in case of threats (e.g. according to run- and playbook)
Maintenance, high availability and optimization of the SIEM platform
Reporting and analysis

SIEM platform

For our Managed SOC, we rely on the industry standard IBM QRadar for SIEM. The security-relevant data is processed in our own data-sovereign and BSI-C5-tested cloud infrastructure (pluscloud VMware).

Platform Provider: IBM QRadar (listed as a leader in the Gartner Magic Quadrant for SIEM for the 13th consecutive year).
Sensor technology: Security solutions and log collectors, including on-premise (virtual appliance).
Data sources: EDR, Windows, Linux, firewall, flow collectors.
Data source connectivity: Based on IBM standard. Individual use cases upon request.

MITRE ATT&CK – Use Cases

Our SOC use cases are based on MITRE's state-of-the-art standard for cyber threat detection.

The phases of the attack can be correctly identified at any time (cyber kill chain).
The SOC use case database for EDR solutions or domain controllers is continuously optimized and expanded.
Detection of zero-day vulnerabilities (as a complement to EDR and vulnerability management solutions)
SOC analysis and reporting on this basis

Customized onboarding

As part of our SOC offering, we provide a standardized onboarding* to help you successfully and sustainably deploy SOC as a Service, even without your own security experts.

Kick-off meeting
Inventory and goal definition
Creation of a customized onboarding plan
Connection of log sources (standardized sources)
Establish best practice rules and regulations
Fine-tune security solutions (e.g., EDR events)
Activate use cases based on MITRE ATT&CK
Refining the rule set in collaboration with the customer
Definition of runbooks and playbooks
Documentation

*One-time cost

Security Operations Center aaS (SOC)

SOC as a Service: Your advantages