SOC and managed services · IT and OT
One 24/7 SOC for the corporate network and the plant.
We monitor IT and OT networks, detect threats on industrial protocols too, and respond to incidents with agreed service levels and a single point of contact.
What we monitor
The same coverage, with dedicated expertise for the two worlds.
IT · SINCE 2005
Corporate infrastructure
- Firewalls, VPNs and remote access
- Endpoints and servers with EDR/XDR
- Identity, Active Directory and privileged access
- Cloud, Microsoft 365 and email
OT · SINCE 2017
Plant networks
- Industrial traffic: S7comm, Modbus TCP, OPC-UA, PROFINET, IEC 60870-5-104
- Conduits between zones and supplier remote access
- Industrial firewalls and switches
- Asset inventory and new vulnerabilities
How it works
- 01
Onboarding
Scope, log sources, escalation contacts and rules of engagement, agreed with the IT department and with production.
- 02
Detection
Event correlation on SIEM and traffic analysis, with rules specific to industrial environments.
- 03
Response
Alert analysis, notification according to agreed priorities and containment support, without actions that would stop the plant.
- 04
Reporting
Periodic reports on events, vulnerabilities and service levels, also useful for NIS2 obligations.
Managed services
Beyond monitoring, we manage the security components on your behalf, for a fixed fee and with a single point of contact.
Managed firewalls
Configuration, updates and periodic rule review, IT and industrial.
Managed endpoints
EDR/XDR on workstations and servers, with response coordinated by the SOC.
Vulnerabilities
Periodic scans and remediation priorities on IT and OT assets.
Backup
Immutable backup and verified restore tests.