Do I have to buy SecTepe Endpoint to use your SOC?

No. Our SOC is vendor-independent. It also runs the EDR or XDR platform you already have. SecTepe Endpoint is one option among several, not a condition.

May the SOC isolate a device without asking?

You decide that in the contract. Either the SOC acts on its own within clearly set limits. Then it isolates an infected device at once. Or it reaches you through an agreed channel and acts only once you approve.

Where is our data processed?

In Germany. The data stays in German data centres. The analysts work for us directly. Nothing is passed down a chain of subcontractors.

What does managed EDR cost?

It depends on the number and type of devices, the scope of action and how long data is kept. After a free call, you get a quote. Licence costs for the endpoint solution are not part of the SOC quote.

SecTepe Endpoint

Managed detection and response

Managed EDR: we assess your alerts

An EDR solution reports a lot. Someone has to decide which of it is a real attack. At 3 a.m. and at weekends, too. With managed EDR, our Security Operations Center takes this on. It checks the alerts and responds within the limits you set in the contract.

Request a demo

Why managed EDR?

Attackers like to strike at night, at weekends or on public holidays. Then nobody looks at the console. But an alert only helps if someone assesses it in time. Your own team around the clock means shifts, cover for holidays and constant training. For many mid-sized firms, that is hard to staff.

Managed EDR is also called managed detection and response. It means a service provider assesses the alerts of yourEDR solution and steps in when it counts. With us, this is ourSecurity Operations Center. It is staffed around the clock, with our own team in Germany.

What the SOC takes on for you

Checking alerts

Analysts assess every alert themselves. Is it a false alarm or the first step of an attack? They also hunt for traces that no rule has flagged.

Stepping in within agreed limits

When it counts, the SOC isolates infected devices. It locks accounts and sessions and stops the attack from spreading across the network. You set in writing how far it may go without asking. Either it acts at once within these limits. Or it gets your approval first.

Handover for real incidents

If an alert turns into an incident, ourincident response teamtakes over. It gets the context the SOC has gathered. Forensics is part of it too, for example after aransomware attack.

With SecTepe Endpoint or with your own solution

Our SOC is vendor-independent. It works with the EDR or XDR platform you already run. Switching is not a requirement. SecTepe Endpoint is one option among several.

If you use SecTepe Endpoint, alerts and actions sit in one console. Isolation, quarantine and restore then run through the familiarfour-eyes approval.Ransomware protection acts on the device at once if you set it up that way. The SOC sees the hit and assesses it.

How we get started

1
Scoping
Which devices count? Who can be reached in an emergency? How far may the SOC act without asking?
2
Connection
Your devices send their reports to the SOC. An existing solution is taken over, not replaced.
3
Baseline
The SOC learns what normal looks like for you. So it can tell odd from everyday and avoid false alarms.
4
Operation
Detect, assess, contain. With agreed playbooks and regular service reviews.

FAQ on managed EDR

Do I have to buy SecTepe Endpoint to use your SOC?: No. Our SOC is vendor-independent. It also runs the EDR or XDR platform you already have. SecTepe Endpoint is one option among several, not a condition.
May the SOC isolate a device without asking?: You decide that in the contract. Either the SOC acts on its own within clearly set limits. Then it isolates an infected device at once. Or it reaches you through an agreed channel and acts only once you approve.
Where is our data processed?: In Germany. The data stays in German data centres. The analysts work for us directly. Nothing is passed down a chain of subcontractors.
What does managed EDR cost?: It depends on the number and type of devices, the scope of action and how long data is kept. After a free call, you get a quote. Licence costs for the endpoint solution are not part of the SOC quote.

Talk to us about managed EDR

We work out which devices to include and how far the SOC should act.

Request a demo

How we work with you

We want to work with you for the long run, not just deliver once. Our way of working has four steps. So you always know what comes next, who does what and what you get.

1. Free initial conversation

We learn where you stand and what you want. In 30 to 45 minutes we check if we are a good fit. We show you options and answer your questions. There is no obligation.

2. Current state review

We check where you stand today: tech, processes and rules. You get a list of strengths and gaps, sorted by urgency. Our offer is based on it.

3. Delivery with a dedicated lead

An experienced lead guides you through the project. You get clear goals, an open plan for time and cost, and a status every week. All results are written down and belong to you.

4. Running and reviewing

After the project we stay with you. We run systems for you, check them at set times and keep track of open tasks. When new threats or new rules come up, we get in touch.