Security operations around the clock, with you still in control.
Managed detection and response, managed SOC and managed firewall across the full technology stack, delivered as a co-managed service aligned to the NIST Cybersecurity Framework. Xcelocloud runs the platforms and the response cycle; you keep administrative control and approve remediation.
A ransomware attempt begins in a hybrid on-prem, Azure and AWS environment at 2:47am on a Saturday.
2:49am: anomalous lateral movement detected. 2:52am: affected endpoint isolated. 3:15am: root cause, a misconfigured Fortinet rule, identified and remediated. Dwell time under three minutes, zero data exfiltration, zero production downtime.
What the SOC covers
How many devices do you need watched?
Volume tier sets the data allowance and governance cadence. Service depth is chosen separately, so a 300-device estate can run a full managed SOC and a 3,000-device estate can start with triage.
Choose the level of effort
- Platform monitoring and automated correlation
- Analysts review alerts, suppress false positives, classify severity
- Validated indicators escalated to your team
- Follows the Monitor model
Response by priority, financially backed
Measured monthly, published in XceloHub by the fifteenth business day, reviewed with you at every business review. Where a target is missed, you see the root cause and the corrective action, with an owner.
Operational targets: MTTD 15 minutes or less (P1/P2), MTTC 60 minutes or less (P1), MTTR 30 minutes or less (P1), false-positive rate 15% or less at steady state.
| Priority | Initial response | Status cadence | Coverage |
|---|---|---|---|
| P1 | Within 30 minutes | Every 60 minutes until contained | 24x7x365 |
| P2 | Within 2 hours | Every 4 hours until contained | 24x7x365 |
| P3 | Within 8 business hours | Daily until resolved | Business hours |
| P4 | Within 24 business hours | On material change | Business hours |
Every ticket, alert, change and report lives in one place.
XceloHub is the platform Xcelocloud built to run every service it delivers. Managed Security runs on it alongside every other Xcelocloud service you buy, so the record, the governance model and the SLA are the same whether the work is reactive, always-on, scoped or on site. Integrates with the ITSM you already run.
Talk to an engineer about Managed Security.
A free advisory session, scoped to your environment and your vendors. Partners: ask about delivering this under your own brand.