SOC as a Service: a 24/7 SOC built on NIST and MITRE.
Prima Secure's SOC as a Service gives you a fully staffed Security Operations Centre (SOC): AI-driven detection from Seceon aiSIEM, automated response through Cortex XSOAR, and analysts watching your environment around the clock, without the cost of building your own SOC.
Simulated view: Seceon aiSIEM detections with Cortex XSOAR response.
24/7/365
Monitoring and response
10+ years
Securing African businesses
500+ clients
Across the continent
100%
Vendor agnostic
THE STRUCTURE · NIST CSF 2.0
A SOC that runs security as a measurable program.
The NIST Cybersecurity Framework 2.0 defines six functions every mature security program must perform. Our SOC covers all six, and every SOC report we send maps back to them, so you always know where you're strong and where to invest next.
GV
Govern
Executive and board reporting, risk-based priorities, and service reviews tied to your business goals and regulatory obligations.
ID
Identify
Continuous asset discovery, external attack surface monitoring and vulnerability visibility, so we know what we protect.
PR
Protect
Hardening recommendations, configuration reviews and policy guidance that close gaps before attackers find them.
DE
Detect
24/7 AI-driven monitoring across endpoints, network, cloud, identity and email, with every alert triaged by an analyst.
RS
Respond
Automated containment and structured incident handling aligned to NIST SP 800-61, with clear communication throughout.
RC
Recover
Post-incident reviews, root cause analysis and guidance to restore operations and stop the same attack happening twice.
THE ADVERSARY · MITRE ATT&CK
Our SOC hunts for how attackers actually operate.
MITRE ATT&CK catalogues the real tactics and techniques used by threat groups worldwide. We use it to make detection specific, explainable and measurable.
Coverage mapping.Detections mapped to ATT&CK techniques show what you can see today, and where the blind spots are.
Context-rich alerts.Every alert names the tactic, the technique and the likely next move.
Threat hunting.Analysts proactively search for techniques linked to groups targeting your sector and region.
Continuous improvement.New techniques become new detections, and we report the progress.
ONE ATTACK, MAPPED TACTIC BY TACTIC
Initial AccessPhishing email lands in a user's inbox
Two proven platforms with AI at every layer, backed by people who investigate, contextualise and act, so our team spends its time on real threats instead of repetitive work.
01 · DETECT
Seceon aiSIEM
The detection engine. Machine learning and behavioural analytics catch threats as they happen, not after someone writes the right rule.
Unified visibilityacross logs, network flows, endpoints, cloud and identity
AI/ML anomaly detectionfor unknown, zero-day and insider threats
Noise reductionthat turns thousands of events into a few real alerts
02 · RESPOND
Cortex XSOAR
The response engine from Palo Alto Networks. Orchestration and automation turn a confirmed detection into action in minutes.
Automated playbooksfor phishing, malware, account compromise and more
Hundreds of integrationsthat orchestrate your existing tools
Machine learning assistancethat recommends next steps from past incidents
Threat intel enrichmenton every indicator, automatically
Full case recordsand audit trail aligned to NIST SP 800-61
03 · DECIDE
24/7 analyst team
The human layer. AI makes our SOC fast; our analysts make it smart, and accountable for every decision.
Every escalation validatedbefore it reaches you
Deep investigationof root cause, scope and business impact
Proactive threat huntingguided by ATT&CK and regional intel
The judgement callsautomation shouldn't make alone
Clear communicationin English and French
HOW IT WORKS
How SOC as a Service works, from onboarding to always-on protection.
01
Onboard and baseline
We connect your existing tools, identify critical assets and learn what normal looks like. Vendor-agnostic, no rip-and-replace.
02
Monitor 24/7/365
Seceon aiSIEM analyses your telemetry continuously while our analysts watch around the clock.
03
Triage and investigate
Alerts are validated by people. Confirmed threats are escalated with full ATT&CK context quickly.
04
Respond and contain
Cortex XSOAR playbooks isolate endpoints, disable accounts or block IPs where authorised, under analyst oversight.
05
Report and improve
Regular reporting on incidents, detection coverage and posture, mapped to NIST CSF for technical teams and leadership.
CHOOSE YOUR PACKAGE
SOC as a Service, sized to your organisation.
Three SOC as a Service packages, the same frameworks, and 24/7 monitoring in every one. How many users do you have?
SMALL BUSINESS · POWERED BY SENTINELONE
Under 50 users
Small Business SOC
Big-company protection for small teams. AI-powered EDR on every device, an AI SIEM with Purple AI behind it, and Wayfinder threat experts on watch 24/7, all set up and supported by Prima Secure.
Stops malware and ransomware on every laptop and server in real time, with one-click rollback if an attack gets through.
DETECT & INVESTIGATE
Purple AI & Singularity AI SIEM
All your security data in one place, with Purple AI answering questions in plain language so threats are found and understood faster.
RESPOND 24/7
Wayfinder managed detection & response
SentinelOne's Wayfinder experts monitor, hunt and respond around the clock, backed by Prima Secure's local support.
SMALL & MEDIUM BUSINESS
50 – 149 users
SMB Managed Services
Attackers often target smaller businesses first, expecting weaker defences. Our SMB package brings the same SOC expertise and NIST/MITRE discipline to growing organisations, packaged simply and priced predictably.
24/7 monitoring and response from our SOC
Enterprise-grade protection without enterprise complexity
Simple packaging, predictable monthly cost
ALSO INCLUDED
External Vulnerability Assessment:scanning of your internet-facing systems as attackers see them
Internal Vulnerability & Posture Management:continuous checks of devices and configurations inside your network
Microsoft 365 Audit:a review of your M365 security settings, sign-ins and sharing
Deep Web / Dark Web Monitoring:alerts when your staff credentials or company data appear for sale
Our flagship managed detection and response platform for organisations that need complete visibility across complex environments. Start where you are and scale as you grow.
Detect
Insight
Insight+
Complete
24/7 monitoring and response from our SOC analysts
Four tiers, from detection to complete coverage
Vendor-agnostic: works with the tools you own
Asset-based pricing, no rip-and-replace
ALSO INCLUDED
Automated host vulnerability assessment:continuous scanning of every host for known weaknesses
Automated host security assessment:configuration checks against CIS Benchmarks
Proactive threat hunting:analysts searching for attackers your tools haven't flagged
File Integrity Monitoring (FIM):alerts on unauthorised changes to critical files and systems
Annual penetration test:a real-world attack simulation to prove your defences work
Every organisation starts from a different place. These options give you more control over scope, tools and budget than a standard SOC service, and each one is a clear path to full SOC as a Service when you're ready.
OPTION A · FIX WHAT MATTERS FIRST
SMB Vulnerability Management
For smaller businesses that want to close their biggest gaps first, with 24/7 monitoring included. We find the weaknesses attackers exploit first, rank them by real-world risk and guide your team through fixing them.
24/7 monitoring by our SOC
Continuous scanning of internal and external assets
Findings prioritised by exploitability and business impact, not just severity scores
Clear remediation guidance your IT team can act on
Regular reporting mapped to NIST CSF Identify and Protect
Already invested in EDR, firewalls or cloud security? Specula plugs into the tools you already own and turns them into full visibility, with our analysts watching the combined picture around the clock.
Vendor-agnostic: no rip-and-replace, no wasted investment
One view across endpoints, network, cloud, identity and email
Asset-based pricing, so you pay for what you protect
Four tiers, from Detect to Complete, to match scope and budget
Not sure which option fits?Ask our teamand we'll recommend a starting point.
FREE SECURITY ASSESSMENT · NIST CSF 2.0
How secure are you, and how much of your network can you actually see?
Answer 17 quick questions about your security controls and your visibility across endpoints, network, cloud and identity. You'll get an instant score, a NIST CSF breakdown, your top gaps and the SOC package that fits you best.
Get your security score in about 6 minutes.
17 questionsAbout 6 minutesAligned to NIST CSF 2.0Free, no obligation
