Frequently Asked Questions

True 24/7 monitoring needs a shift team of at least 8–10 people, a SIEM licence and detection engineering. A managed SOC provides this capacity on a shared basis; setup drops from months to weeks and cost is typically a third of an in-house team.

Tests follow the rules of engagement approved in the scoping document. Destructive techniques (DoS, data deletion) are not used; risky actions are announced in advance and preferably performed in a maintenance window.

A mid-sized web application takes 8–10 working days, a corporate internal network test 10–15. The report is delivered within five working days of test completion; retesting after fixes is included.

A data breach must be notified to the Personal Data Protection Board within 72 hours of becoming aware, and to affected individuals within a reasonable time. If you reach us through the incident form we manage forensics and the legal notification together.

Payment guarantees nothing and encourages attackers. First isolate, verify backups and check for decryptors. The decision belongs to senior management after a legal and business-impact analysis; we provide technical and strategic advice.

No. Our SOC platform and log storage run in data centres in Türkiye. Optionally we deploy the platform in the customer’s own environment (on-premise).

OWASP ASVS/Top 10, PTES, NIST SP 800-115, MITRE ATT&CK, ISO 27001/27002, PCI DSS 4.0 and CIS Controls. Findings are scored with CVSS 3.1/4.0.

Yes. The Essential SOC plan is designed for organisations with up to 100 endpoints. You can also start with an annual security assessment and staff awareness training.