Managed SOC: packages for devices, network, cloud and identities
Xcitium offers the SOC in packages, from guided support to full monitoring of network, cloud and identities.
The packages
Managed SOC Guided
Threat intelligence, automated containment, incident triage and prioritisation, and guided response. Without 24/7 monitoring.
Managed SOC Device
24/7 SOC monitoring with network traffic analysis, user behaviour analytics, log analysis, cloud monitoring and insider threat detection.
Managed SOC Network
IDS/IPS, firewall rule auditing, lateral movement detection and encrypted traffic analysis.
MDR-Cloud
Monitoring of AWS, Azure and Google Cloud, with user behaviour analytics and log management.
Managed ITDR
Protection of identities in Microsoft 365, Entra ID, Google Workspace and AWS IAM.
Managed SIEM
Central log correlation validated by the SOC.
What Managed ITDR monitors (according to Xcitium)
- Identity behaviour analytics
- Detection of compromised accounts
- Abuse of privileged accounts
- Cloud identities in Microsoft 365, Entra ID, Google Workspace and AWS IAM
- OAuth abuse
- Password spraying
- Risk score per identity
Managed SOC: local point of contact
The service itself is delivered by Xcitium's 24/7 Security Operations Center. Spiredesk is your point of contact in the Netherlands: we agree the scope, set up the integrations, translate reports into actions and liaise with the SOC during incidents.
- ✓ Intake and scoping
- ✓ Onboarding and integrations
- ✓ Periodic review of reports
- ✓ Escalation point during incidents
Frequently asked questions
Which package suits us?
That depends on your environment. We usually start with Device and add Network, Cloud or ITDR where the risks are.
Managed SOC packages in your environment?
In a short demo we show you how it works, discuss your situation and make a proposal. No obligation, in English or Dutch.
Product information: xcitium.com. Xcitium, ZeroDwell, OpenEDR and related logos are trademarks of Xcitium Inc.