Managed Security Operations Center
Your dedicated cybersecurity department — 24/7, without the headcount.
End-to-end SOC service: threat detection, incident response, vulnerability management, and compliance support. We monitor your network 24/7, detect and respond to threats in real time, and run regular compliance audits against GDPR, HIPAA, and PCI-DSS.
01 — The problem
In-house SOC is brutally expensive. Generic MSSPs are brutally bad.
Hiring an in-house SOC
8–12 analysts on a 24/7 rota, plus a SOC manager, plus SIEM licenses, plus an EDR. €1.5M+/year before you've caught a single intrusion. Most mid-sized businesses can't justify it.
Generic MSSP alert factories
You pay €3K/month, you get 4,000 alerts/month, you triage them yourself. The MSSP claims they're 'monitoring' but the work is back on your team. You bought noise.
EDR vendors playing 'managed'
Most EDR vendors offer 'managed XDR' as an upsell. Their incentive is selling product features, not closing your detection gaps. You get bias dressed up as service.
Compliance auditors that don't operate
Compliance consultancies write you a policy and walk. They've never run a SOC. When the auditor asks 'show me the runbook', you're improvising.
02— What's included
Scope of work
- 24/7 follow-the-sun monitoring with senior analysts
- Real-time threat detection and rapid response
- Vulnerability management with monthly reporting
- GDPR, HIPAA, PCI-DSS compliance audits
- Incident response retainer (4 hours/month included)
- Cloud, hybrid, and on-premises support — EDR/XDR-agnostic
03 — Comparison
Why not just hire?
| Feature | AnySec | Generic firm | DIY |
|---|---|---|---|
| Annual cost (full stack) | €54K/year (Tier 1) | €36–60K/year MSSP — alerts only | €1.2–1.8M/year in-house |
| P1 response SLA | < 15 minutes, 24/7 | 1–4 hours, business hours | Depends on rota coverage |
| Compliance audits included | GDPR · PCI · HIPAA · ISO 27001 · NIS2 | Add-on | External auditor needed |
| EDR / SIEM choice | Agnostic — we use what you have | Locked to vendor stack | You buy and integrate |
| Threat hunting | Weekly, with current TTPs | Quarterly if at all | Depends on team |
04 — Methodology
How we run it
- 01Onboarding: SIEM connector + use-case baseline
- 02Detection content tuned to your environment
- 0324/7 triage with documented runbooks
- 04Monthly compliance review and tuning cycle
- 05Quarterly executive readout
05 — Deliverables
What you receive
- Monthly metrics: alerts, true positives, MTTR
- Compliance audit reports (GDPR / HIPAA / PCI-DSS)
- Threat-hunt findings summary
- Incident reports for any P1/P2 events
06 — Case study
Real engagement, anonymized.
Mid-sized European bank (post-incident replacement)
Incumbent MSSP had missed a foothold during a ransomware investigation. Board demanded 24/7 monitoring with provable MTTR.
Emergency onboarding in 4 days. Connected client's existing EDR + cloud trail + on-prem SIEM. Wrote 23 client-specific detections in week one.
Detected and contained second-stage attacker activity within 6 hours of cutover. 12-month P1 MTTR averaged 11 minutes. Passed the next regulator inspection with zero monitoring gaps.
“We replaced a generic MSSP with AnySec on day 30 of a ransomware investigation. They caught the second-wave persistence within 6 hours — which the previous MSSP had missed for 90 days.”
— Head of Security · EU mid-market bank
07 — Pricing
Pick the scope that fits.
All tiers include signed Rules of Engagement, an executive summary, and a 30-day free retest where applicable.
Core
24/7 monitoring + alert triage + monthly reporting. Up to 250 endpoints.
- 24/7 follow-the-sun coverage
- Alert triage and incident response retainer (4h/mo)
- Monthly compliance reporting
- EDR/SIEM-agnostic
Standard
Core + weekly threat hunts + dedicated detection engineer.
- Everything in Core
- Up to 750 endpoints
- Weekly threat hunts using current TTPs
- Dedicated detection engineer
- Incident response retainer (12h/mo)
Enterprise
Standard + named team + custom integrations + 24/7 IR availability.
- Everything in Standard
- Up to 2,000 endpoints (more on quote)
- Named SOC team with rotating lead
- Custom detection content + threat intel
- Unlimited IR hours
08 — Our commitments
Skin in the game.
- P1 MTTR target under 15 minutes — refunded if missed two months in a row
- 30-day onboarding or money back
- Detection content portable to you if you leave (no vendor lock-in)
- Quarterly executive readout to your board
09 — FAQ
Questions we get asked
What if our compliance need is not GDPR/HIPAA/PCI-DSS?+
We also cover ISO 27001, SOC 2, NIS2, and most financial-regulatory frameworks. Tell us the framework on the discovery call.
Endpoint limit?+
Tier covers up to 250 endpoints. Larger fleets add €15/endpoint/month above 250.
What if you exceed the 4-hour IR retainer in a single month?+
Additional IR hours billed at €350/hour. We check in before crossing the threshold.
Can we keep our own EDR/SIEM?+
Yes — we are tooling-agnostic. We tune to what you have rather than forcing a new stack.
How fast is onboarding?+
Standard onboarding is 10 business days. Emergency onboarding (active incident) can start same day.
Ready to start?
Buy the engagement to lock the slot, or book a free 30-minute call first if you want to discuss scope. 30 minutes response either way.
When Wise opens, enter:
We email you within 1 business day to start
ROE signed before any test fires · monthly retainer