Your 24/7 Cyber Defense Team: experienced analysts monitor, detect and neutralize threats — supported by AI agents that enrich and prioritize alerts. The analyst makes the call.
Our Security Monitoring & Analysis Services (MDR) provide experienced security analysts for your internal teams. Whether Level 1, Level 2, or Level 3 — we ensure you always have the right expertise on hand.
View service details →In addition to providing security analysts, we offer comprehensive supplementary services such as IT forensics and incident response using state-of-the-art technologies and tools.
View service details →Analyst capacity from L1 to L3 for your own SOC — in the coverage hours you define, without losing control.
View service details →We offer flexible operating hours in security analysis, tailored to your individual business requirements. Whether you need 24x7, 10x5, or 8x5, our service adapts to your needs to guarantee the best possible protection at all times.
With a full managed SOC we take over operations and accountability. With the Managed Capacity service your SOC stays yours: you keep processes, tooling and decisions — we supply the analyst capacity you are missing. From L1 triage through L2 analysis to L3 threat hunting, we provide exactly the levels you need within a freely defined coverage window: nights only, weekends only, off-hours to complete 24x7, holiday and sickness cover, or a permanent team extension. The agreed capacity is always available, even when individual analysts are out.
Stop worrying about alerts, false positives, and staffing shortages. CyStrat delivers a complete, turnkey SOC service. We provide the people, the process, and the platform to secure your business 24/7/365.
One team, several time zones: our shifts are staffed exclusively by CyStrat Services GmbH's own permanently employed analysts from Germany — including when colleagues temporarily work from another time zone. No outsourcing, no rotating subcontractors: the same people, the same processes, the same language — 24/7/365.
Direct access to native German-speaking experts around the clock. No language barriers in critical situations.
Uniform high standards across all shifts. Our "One Team" culture ensures excellence regardless of time zone.
| Service Dimension | Bronze | Silver | Gold | Diamond |
|---|---|---|---|---|
| Max. alarms/day | 25 | 50 | 100 | 150 |
| IR hours / month inclusive | 2 | 8 | 16 | 32 |
| Response time (L1/L2/L3) | 30m / 30m / 30m | 30m / 30m / 30m | 30m / 30m / 15m | from 15m / 15m / 15m |
| Service hours | 24x7 (on-call) | 24x7x365 FTS | 24x7x365 FTS | 24x7x365 FTS |
| Typical target group | Small SMEs | Mid-sized SMEs | Large SMEs/Enterprises | Enterprise/KRITIS |
Our Managed SOC service is built on modular capabilities. We configure the perfect defense mix for your specific risk profile.
View Underlying Technology (SOC Suite)We monitor your environment 24/7. Our analysts investigate suspicious activity and filter out false positives, relieving your team of that workload.
View service details →Your EDR feeds the SIEM as context. Analysts trigger containment from the case, response sessions are audited, and allow-listing stays traceable.
View service details →We proactively hunt for threats targeting your industry. We apply global threat intelligence to your local environment.
View service details →We continuously scan your infrastructure. We prioritize patches based on real-world risk and help you remediate.
View service details →We automate routine responses. Block IPs, isolate hosts, and reset passwords in seconds, 24/7.
View service details →Regular deep-dives into your network to find hidden threats that may have evaded real-time detection.
View service details →From detection to containment in minutes. Our automated SOAR playbooks handle routine threats instantly.
Our analysts act as an extension of your team, providing context and recommendations, not just alerts.
Threats don't sleep, and neither do we. Full "Follow the Sun" coverage for Diamond tier clients.
Optional modules that plug into your Managed SOC — bookable individually, whenever you need them.
Immediate containment and eradication of active breaches. The SWAT team for your infrastructure.
Explore module →Offensive security testing to identify vulnerabilities before they can be exploited.
Explore module →Strategic guidance for NIS2, DORA, and ISO 27001 compliance.
Explore module →Answers to the questions our customers ask most often.
Question not answered here? Ask us