Services › Agdiwo SOC
Agdiwo SOC 24/7 security monitoring and incident response
Agdiwo SOC is our security operations centre that monitors your IT environment around the clock. Threats are detected, isolated and remediated straight away, whatever the time of day. On the next working day, our security analysts follow up, take action and report in the same reporting flow as your other services. The service can be bought on its own.
How the service is built
Add-ons
24/7
Detect, isolate, remediate
Agdiwo SOC · our analysts
During office hours
Always included
Tickets, documentation, reporting
Contents
What is included in Agdiwo SOC?
Two layers work together: automated 24/7 monitoring and response, and our security analysts who follow up and take action. The foundation of ticket management, documentation and reporting is always included.
24/7 monitoring and response
Endpoint detection and response (EDR)
Threats on computers and servers are detected and isolated straight away, around the clock.
Identity protection
Suspicious sign-ins and hijacked accounts are stopped before they can be used.
Log analysis (SIEM)
Events from the whole environment are collected and analysed to find anomalies.
Incident response and reporting
Every incident is handled and documented: what happened and what was done.
Our security analysts
Security analysis
We review alerts, security settings and your external attack surface, and prioritise what needs fixing.
Remediation hours
A set amount of time to fix what we find, without you having to order each task.
Add-ons
Which add-ons are available?
Security advisory
Advice on security strategy, requirements and priorities.
Agdiwo Domain Protection
Protection against spoofed senders. Read about Agdiwo Domain Protection
Security awareness training
Training that turns your employees into part of your defence.
Boundaries
What is not included?
Manual action at night
Threats are isolated automatically around the clock. Manual follow-up happens on the next working day.
Work beyond the remediation hours
Larger tasks are billed separately, by agreement.
Penetration testing
Can be carried out together with a partner when needed.
Network and OT
Monitoring of network equipment and industrial systems is not included.
The foundation
Always included
The same foundation as in Agdiwo Operations and Agdiwo Endpoint. Read more about what is always included →
FAQ
Frequently asked questions about Agdiwo SOC
Want your whole IT operation in one place? See Agdiwo Operations.
What is a SOC?
A SOC (Security Operations Centre) monitors your IT environment, detects threats and acts on them. With Agdiwo SOC, monitoring runs 24/7, and our security analysts follow up during office hours.
What happens if something is detected in the middle of the night?
The threat is isolated and remediated straight away, around the clock. On the next working day, we follow up, fix anything that remains and report to you. Manual action at night is not included.
Can we buy Agdiwo SOC without Agdiwo Operations?
Yes. Agdiwo SOC is sold as a standalone service. 24/7 security monitoring is also included in Agdiwo Operations.
What are remediation hours?
A set amount of time our analysts use to fix what is detected. Work beyond that is billed separately, by agreement.
Is penetration testing included?
No. Penetration testing is not included, but we can carry it out together with a partner when needed.
Want to know more?
Tell us about your IT environment and we will show you what Agdiwo SOC would look like for you.
