017-355 5725
24/7 Managed SIEM · Bank Negara RMiT Ready

SOC-as-a-ServiceMalaysia · 24/7 Threat Detection

Full Security Operations Center function — SIEM, threat hunting, incident response — as a subscription. SME-affordable tier positioned below LGMS/Firmus enterprise rates. From RM15,000/month for up to 50 endpoints.

Get SOC ProposalWhatsApp Us
  • 24/7Coverage
  • 15 minTriage SLA
  • RM15K/moFrom
  • 30 daysDeploy

What your SOC delivers

Full detection + response loop, not just tool administration.

24/7 Monitoring

Round-the-clock analyst coverage. Log aggregation from email, endpoints, identity, and cloud.

Threat Hunting

Proactive searches for indicators of compromise beyond signature-based detection. Hypothesis-driven investigations.

Real-Time Alerting

15-minute triage SLA for suspicious activity. 4-hour full incident report for confirmed breaches.

Detection Engineering

Custom rules tuned for your environment. MITRE ATT&CK-aligned playbooks. False positive rate < 5%.

Incident Response

Contain → eradicate → recover. Co-managed with your team or fully outsourced. Ties into our ransomware recovery framework.

Compliance Reporting

Bank Negara RMiT, MAS TRM, cyber insurance, ISO 27001, PDPA — quarterly attestations suitable for regulators + auditors.

Service tiers

Priced by endpoint count + log volume. Scale up as you grow.

Essential

Up to 50 endpoints

From RM 15,000/mo
  • 24/7 monitoring (email + endpoint + identity)
  • Baseline detection rules (MITRE ATT&CK)
  • Tier-1 incident triage
  • Weekly executive summary report
  • 15-min alert triage SLA
  • SIEM hosted in your M365 tenant or managed Azure
MOST POPULAR

Advanced

Up to 150 endpoints

From RM 30,000/mo
  • Everything in Essential
  • Proactive threat hunting
  • Custom detection rules + tuning
  • Tier-2 incident response
  • Monthly tabletop exercises
  • Dedicated analyst pod
  • Integration with on-prem systems

Enterprise

Up to 500 endpoints

From RM 60,000/mo
  • Everything in Advanced
  • Named analyst hours (20 hrs/mo)
  • Bi-weekly executive + board reporting
  • SOC-2 + ISO 27001 attestation support
  • Cross-boundary correlation (OT/IT)
  • Custom threat intel feed
  • Red team exercises (quarterly)

Scope your SOC deployment

Tell us your endpoint count and we'll propose a tier within 2 hours.

Get Your Free Quote

Fill in your details and we'll respond within 2 hours.

100% Secure2hr ResponseNo Obligation

Frequently asked questions

What is SOC-as-a-Service and how is it different from MSSP?

SOC-as-a-Service delivers the full Security Operations Center function — SIEM (log aggregation), threat detection, threat hunting, incident response — on a subscription. Traditional MSSP (Managed Security Service Provider) typically only manages specific tools (firewall, AV). We cover the full detection + response loop, not just device administration.

Why would an SME need a SOC?

Three compelling reasons: (1) cyber insurance carriers now require demonstrable 24/7 monitoring for coverage or better rates; (2) Bank Negara RMiT (Risk Management in Technology) + MAS TRM compliance for financial institutions and regulated entities mandates continuous monitoring; (3) enterprise customers + GLCs increasingly require SOC attestations from SME suppliers in procurement. Plus — every ransomware case we respond to, 90% had no real-time detection in place.

How is this different from LGMS / Firmus / BAE Systems?

They serve enterprise (RM100K+/month price points). We serve Malaysian SMEs (RM15-60K/month) with the same underlying technology stack but smaller endpoint counts and simpler service catalogs. Enterprise SOCs do custom threat intelligence work — we standardise on proven playbooks + co-managed response with your internal team.

What tools do you use?

SIEM: Microsoft Sentinel (primary) or Elastic for cost-sensitive customers. EDR: Microsoft Defender for Business + CrowdStrike (enterprise tier). Threat intel: OpenCTI + commercial feeds. Case management: TheHive + MISP. Deployment: tools run in your M365 tenant or our managed Azure environment — you own the data.

What's covered at RM15,000/month vs RM60,000/month?

Essential (RM15K/mo, up to 50 endpoints): 24/7 monitoring of email/endpoints/identity, baseline detection rules, weekly report, Tier-1 incident triage. Advanced (RM30K/mo, up to 150 endpoints): + threat hunting, custom detection rules, Tier-2 response, monthly tabletops. Enterprise (RM60K/mo, up to 500 endpoints): + dedicated analyst hours, integration with on-prem systems, bi-weekly executive reporting, SOC-2 attestation support.

How long does SOC deployment take?

30-day onboarding: Week 1 — SIEM deployment, log source enumeration, agent rollout. Week 2 — baseline rules tuning, false positive calibration. Week 3 — runbook customisation, escalation policy agreement, on-call schedule. Week 4 — tabletop exercise, SOC go-live. Customers with existing Microsoft Sentinel/Defender shorten this to 14 days.

What happens when you detect something?

Tier-1 (suspicious activity): analyst triages within 15 minutes, enriches alert with context, calls you if verified. Tier-2 (confirmed incident): immediate isolation of affected asset, credential rotation trigger, full incident report within 4 hours. Tier-3 (active breach): emergency response team engaged, parallel ransomware-recovery workflow activated (see our Ransomware Recovery page for the full 5-phase framework).

Do you support Bank Negara RMiT and MAS TRM?

Yes. Our SOC deployment includes RMiT-aligned controls: continuous monitoring, incident response, audit logging retention (7 years), segregation of duties, and regulatory breach notification workflows. Similar coverage for Singapore MAS TRM for orgs serving Singapore. We provide quarterly compliance reports suitable for regulatory submissions.

Under attack, not monitored, or insurance-bound?

Call the hotline for active incidents. For planned SOC deployments, start with a scope call.

017-355 5725Active Ransomware?