Spectre SOC 24/7

No fixed plans. Built around your infrastructure.

Every organisation monitors different technologies — firewalls, endpoints, cloud workloads, Active Directory, OT systems, SaaS platforms. Spectre SOC integrates with what you already have. There are no rigid tiers or predefined log limits: we scope the service together during the technical onboarding call, then build the right configuration for your environment, risk profile, and compliance obligations.

Full Managed — what's included

Italian analyst team Dedicated 24/7/365 monitoring by a native Italian team — your security notices in your language.

Log retention — 90 days All ingested logs retained for 90 days online. Exportable on demand for forensic or audit purposes.

Monthly report Alert summary, threat intelligence digest, vulnerability exposure update, and prioritised recommendations.

Passive vulnerability detection Continuous passive analysis of network traffic and log patterns to surface unpatched exposures without active scanning.

SOAR active response Automated containment actions triggered on confirmed threats: host isolation, account lock, firewall block.

Spectre client dashboard Real-time visibility portal for your team and resellers. Alert history, KPIs, detection timeline.

GDPR compliant — EU data All data stored and processed within the European Union. Full GDPR compliance documentation available.

Incident response escalation On confirmed incidents our team escalates to managed IR. DFIR support available as an add-on or included on request.

Additional modules

Extend Spectre to cover your full technology stack. Each module is integrated during onboarding.

NDR

Microsoft 365

Firewall Addon

Cloud — Azure / AWS / GCP

EDR

SOAR — Custom Playbooks

Process

How onboarding works

From contract to full monitoring in three steps. Minimal impact on your IT team — monitoring starts within days.

Contract & Subscription

We define the scope together: which assets, which log sources, which integrations. Service agreement signed.

Technical Call

Our engineers meet your IT team to map the infrastructure, choose connectors, and configure agents and log forwarders.

Spectre Installation

Agents and log integrations deployed. Baseline established, initial use cases tuned for your environment. First week of alert validation.

LIVE

Full monitoring active

24/365 operational mode begins. SOC team takes over continuous detection and response.

24 / 365

The operational cycle — once live

Continuous loop running every day, every hour, every year.

Monitoring

All log sources ingested and correlated in real time. Anomalies flagged automatically.

Detection

Analyst team reviews alerts, triages, and confirms threats. False positives filtered before escalation.

Response & Mitigation

Containment actions activated via SOAR. Your team notified with context, evidence, and recommended steps.

Monthly Report

Full summary delivered every month: incidents, vulnerabilities, threat intelligence, and improvement recommendations.

Detection

What we detect

Use cases configured for your environment. Each alert includes severity, context, and a suggested action.

Brute force and credential stuffing

Malware and ransomware early detection

Lateral movement and internal pivoting

Data exfiltration and traffic anomalies

Privilege escalation and account abuse

Post-click phishing and executed payloads

MFA bypass and session hijacking

Anomalous cloud and SaaS access

Monthly outputs

What you receive every month

Structured documentation for the technical team and management. Fully traceable, fully exportable.

Incident & Alert Report

Summary of all alerts detected during the month: severity, timeline, actions taken, tickets opened and closed.

Threat Intelligence Summary

IOCs relevant to your sector, active campaigns, in-the-wild exploited vulnerabilities affecting your technologies.

Vulnerability Exposure Update

Update on critical CVEs impacting your technology stack, with prioritisation recommendations.

Executive Dashboard

Synthetic KPIs for management: detection rate, response time, alert trends, security posture.

Trend Analysis

Analysis of attack patterns over time. Identification of recurring anomalies and correlations with external events.

Recommendations

Prioritised remediation plan: corrective measures, configuration updates, use case tuning for the following month.

Compliance

NIS2 monitoring requirements — covered by Spectre

Spectre SOC directly addresses the continuous monitoring and incident reporting obligations of the NIS2 Directive.

NIS2 Requirement	Spectre SOC
Continuous risk management and proactive monitoring	✓
Timely reporting of security incidents (24h early warning, 72h notification)	✓
Vulnerability assessment and management	✓
Configuration and security policy monitoring	✓
Documentation and reporting for compliant audits	✓

Need NIS2 gap assessment and full compliance support alongside the SOC? See our GRC & Compliance consulting →