SOC SERVICES

Security monitoring that never clocks out.

24/7/365 threat detection, incident response and active threat hunting for GCC enterprises, run to SAMA and NCA requirements.

Plans

Managed SOC tiers.

Start with round-the-clock detection, and add hunting, automation and on-site response as you need them.

SOC Essentials (Tier 1)

$2,500/mo

  • 24/7 security threat detection
  • Log collection and correlation
  • Standard SAMA and NCA rulesets
  • Weekly alert summary reports
  • Support response within 2 hours
  • SaaS endpoint coverage included
Choose Essentials
Recommended for GCC enterprises

SOC Advanced (Tier 2)

$5,800/mo

  • Everything in Essentials
  • Continuous active threat hunting
  • Automated SOAR playbooks
  • Compliance reporting (SAMA / NCA)
  • Incident response under 30 minutes
  • Hybrid and on-premises host integration
Choose Advanced

SOC Elite (Tier 3)

Custom

  • Everything in Advanced
  • Dedicated threat intelligence feeds
  • Red team adversary simulation
  • SSO and dynamic security architecture
  • Response SLA under 15 minutes
  • On-site crisis response experts
Talk to us
Integrated defense

The stack behind the SOC.

SIEM engineSOAR pipelineEDR monitoringXDR firewallThreat intelligenceSIEM engineSOAR pipelineEDR monitoringXDR firewallThreat intelligence
SOC STACK
Incident response

What happens when something fires.

Six phases, each one pre-calibrated to Saudi regulatory reporting timelines.

PHASE 01

Preparation

Playbooks configured and detection rules tuned.

PHASE 02

Detection

Anomalies evaluated automatically and alerts raised.

PHASE 03

Containment

Affected hosts isolated immediately.

PHASE 04

Eradication

Exploit artifacts removed and secrets rotated.

PHASE 05

Recovery

Servers verified clean and systems restored safely.

PHASE 06

Lessons learned

Findings reviewed and SAMA and NCA records updated.

Why EhsanLab

Built for critical GCC environments.

GCC-native SOC analysts

Our analysts have spent years defending regional infrastructure and know the tactics used against Gulf enterprises.

Arabic & English support

Incident reports, notifications, executive updates and handoffs in both languages.

SAMA & NCA playbooks

Every response step is set up to meet national reporting standards and deadlines.

Dedicated threat hunting

We don't wait for alerts. Our analysts search the logs for quiet, persistent threats.

15 minAverage response timeFrom critical alert to containment
ZeroUndetected breachesAcross our operations history
50+SOC analystsWorking from our Riyadh centre
Partner · Grow · Win

Need eyes on your systems around the clock?

GCC-native security operations, set up to meet strict regulatory frameworks.

Free initial consultationResponse within 24 hoursNo commitment required