Managed security monitoring and incident response support
VIAVIS SOC is an outsourced Security Operations Center combining an experienced security team with SIEM technology. The service is built on Wazuh, which collects, analyses and correlates security events from endpoints, servers, network devices, cloud platforms and other supported sources.
Delivered as a managed security service, VIAVIS SOC provides security monitoring, vulnerability management, incident assessment and reporting. Depending on the selected package, it also provides response to security events. Organizations can obtain these capabilities without building and maintaining a large in-house SOC team and its supporting technology.
VIAVIS SOC can operate in a VIAVIS-managed cloud or within the customer’s own infrastructure. The architecture, integrations, monitored systems, log retention, service-level agreements and other parameters are defined according to the customer’s environment and requirements.
The service can support organizations in meeting requirements under Czech cybersecurity legislation, NIS2 and DORA. Deploying a SOC alone, however, does not automatically establish full compliance with any particular legal or regulatory obligation.
Choose protection suited to your environment
The final scope and fixed price depend on your systems, data volume, integration requirements and initial assessment.
VIAVIS SOC Vulnerability
Understand the current security posture of your ITA preventive service providing continuous visibility into vulnerabilities, IT hygiene and the security posture of monitored systems. It does not include active incident monitoring or a 24/7 human on-call service.
- Wazuh platform implementation and basic administration
- Onboarding of supported endpoints
- System inventory
- Vulnerability detection and management
- Security posture overview
- Regular Vulnerability & IT Hygiene report
- Basic platform maintenance and updates
- Optional centralized log retention
VIAVIS SOC Protect
Expert monitoring and incident escalationOur standard SOC package adds active security monitoring, incident triage, continuous technical monitoring and 24/7 on-call support for P1 / Critical incidents.
- Everything in SOC Vulnerability
- 24/7 technical monitoring
- Expert team during business hours (5×8)
- 24/7 on-call for P1 / Critical incidents
- Expert handling of P1 cases initiated within 2 hours of classification and escalation
- Incident triage, analysis and prioritization
- Escalation and response guidance
- Standard 90-day log retention
- Microsoft 365, Docker and standard API integrations
- Ongoing detection tuning and false positive reduction
- Monthly management and technical report
VIAVIS SOC Complete
Advanced protection tailored to your needsAdvanced SOC services for complex environments, including individually defined SLAs, custom integrations and detection rules, threat hunting and regular security reviews.
- Everything in SOC Protect
- Individual SLA
- Custom Wazuh decoders and detection rules
- Custom API and non-standard integrations
- Tailored detection use cases and dashboards
- Extended active response scenarios
- Proactive threat hunting (normally monthly)
- Security review (normally quarterly)
- Ongoing refinement of detection capabilities
- Optional separately priced penetration testing or Purple Team validation
Security with measurable value
Visibility into your security posture
Maintain an ongoing overview of vulnerabilities, configurations and the security posture of the monitored environment.
Security event monitoring and assessment
Collect and correlate security events, with professional assessment in accordance with the selected service package.
Incident response support
With Protect and Complete, significant incidents can be escalated and handled under agreed SLAs and the customer’s authorizations.
Reporting and continuous improvement
Receive regular reports, detection-rule tuning and service optimization as your infrastructure and threat landscape evolve.
Common questions
What does 24/7 monitoring mean in VIAVIS SOC?
SOC Protect and SOC Complete operate technical monitoring and automated detection continuously. For a P1 / Critical incident outside standard operating hours, an on-call specialist is activated. This is not a model in which an analyst watches dashboards around the clock in three staffed shifts.
Does a two-hour SLA mean the incident will be resolved in two hours?
No. Under SOC Protect, the P1 / Critical SLA means expert handling begins no later than two hours after the event is classified and escalated as P1 / Critical. It is not a guarantee that the incident will be completely resolved within two hours.
Can VIAVIS SOC run in the cloud and on premises?
Yes. It may run in a VIAVIS-managed environment or directly in the customer’s infrastructure, on premises or in their own cloud. The architecture is designed around the agreed technical and security requirements.
Does the SOC help with NIS2, Czech cybersecurity law or DORA?
VIAVIS SOC can provide technologies, processes and evidence useful for meeting regulatory requirements. Deployment of the service does not, by itself, guarantee that an organization meets every applicable legal or regulatory obligation.
What technology underpins VIAVIS SOC?
The technical foundation is Wazuh, a SIEM/XDR platform supporting collection and analysis of security events, endpoint monitoring, vulnerability management, File Integrity Monitoring, Security Configuration Assessment and integrations with other supported technologies.
How long are logs retained?
The basic SOC Vulnerability package does not include centralized log retention. SOC Protect includes 90 days as standard. For SOC Complete the retention period is agreed individually, with a standard minimum of 90 days.
How is the final price calculated?
The final fixed price depends on the size of the environment, data volume and required retention, number and type of data sources, integration complexity, architecture and other requirements established during the initial assessment.