SOC & MDR
24/7 Security Operations & Managed Detection.
Always-on monitoring, threat hunting, and incident response — in your stack, on your runbooks.
Overview
Our analysts run a 24/7/365 operation from our SOC in Addis Ababa, Ethiopia. We ingest telemetry from your endpoints, cloud workloads, identity provider, and email gateway into a unified SIEM, build detections tuned to your environment, and respond inside your SLA windows. You get a named lead analyst, monthly threat reports, and quarterly business reviews.
What's included
- Telemetry onboarding (EDR, cloud, identity, email, network)
- Custom detection engineering and tuning
- 24/7 alert triage and investigation
- Containment and response within signed SLA
- Threat hunting cycles every 30 days
- Monthly executive and technical reporting
Deliverables
- Onboarding runbook and detection catalog
- Named lead analyst + escalation roster
- Monthly metrics: MTTD, MTTR, incident volume
- Quarterly threat landscape briefing
- Annual purple-team validation
Frequently asked
Do you replace our existing tools?+
No. We integrate with your stack — or recommend one if you don't have it. We're vendor-agnostic on EDR and SIEM.
What's the typical onboarding time?+
Onboarding is planned after assessment of your environment, integrations and agreed scope.
What SLAs do you offer?+
Response and resolution targets are defined by priority in your service agreement. Coverage depends on the selected package.
Where is your SOC located?+
Our 24/7 SOC operates from Addis Ababa, Ethiopia, with analyst coverage across every time zone.