SERVICES

When you license the platform, our team doesn't disappear.

Solutions are what you run. Services are what our team does — before, during, and after deployment. Available standalone or bundled into a support tier.

IR RETAINER

Incident Response Retainer

An IR retainer secures priority access to our response team before an incident happens — scope, rates, and escalation paths are agreed in advance, not negotiated while something is actively on fire.

Unused retainer hours can typically be applied to proactive work instead, such as tabletop exercises or a readiness assessment, so the retainer isn't dead weight in a quiet quarter.

MANAGED / CO-MANAGED

Managed & Co-Managed Detection

For teams that want the platform's autonomous defense without staffing a 24/7 SOC themselves, we operate it directly on your behalf.

For teams with an existing SOC, co-managed puts our engineers alongside yours — you keep visibility and control, and hand off only the operational load you choose to.

DEPLOYMENT

Deployment & Onboarding

Structured onboarding from signed contract to full coverage: environment scoping, deployment model selection, initial tuning, and integration with existing identity and logging infrastructure.

See deployment models on Platform Architecture — Platform Architecture
ADVISORY

Advisory & Architecture Review

A structured, periodic review of your deployment architecture, coverage gaps, and configuration drift against current best practice — not a one-time assessment that goes stale the week after delivery.

Included quarterly at the Enterprise support tier — Support

Not sure which service fits?

Tell us what you're trying to solve and we'll tell you honestly whether it's a Solution, a Service, or both.