€8 per unit / month Minimum €360 a month
Operational baseline
Monitoring, detection and automated response are in place - providing active protection without full compliance capability.
Cyber-SOC
24/7 cybersecurity for Your business
Operational cybersecurity — from security signals to incident response, evidence and audit-ready accountability.
What does Your business get?
24/7 cybersecurity event monitoring
Incident identification, investigation and response
Incident and log management to support NIS2 compliance
Preparation of evidence and reports aligned with NIS2 and DORA requirements
Regular identification of cybersecurity weaknesses and configuration risks
Root cause analysis and a post-incident improvement cycle
Clear accountability and management reporting
Continuous security monitoring, incident identification and response — without building your own SOC team or launching a major technology project.
HORTUS Digital Cyber-SOC isa managed Security Operations Center (SOC) service that provides continuous cybersecurity monitoring, incident identification, investigation and response 24/7.
30-minute initial consultation. No commitment. No system access required.
24/7
security event monitoring
From week 1
baseline monitoring starts
6–8 weeks
full operational capability
No data export
to an external SOC
to an external SOC
analysis takes place in your environment; your data remains under your control
It is unclear who analyses security tool alerts.
It is unclear who would investigate a suspicious sign-in or account takeover.
You may only discover an incident once business operations are already disrupted.
Management does not receive regular reporting on the actual security posture.
It would be difficult to provide evidence to an auditor, customer or regulator.
Check Your reality
Is Your business really protected 24/7?
Security technologies, firewalls, backups and IT support are all important. But on their own, they do not provide continuous security monitoring and incident response.
Tools vs. operations
Security tools alone are not enough
to protect Your business
Your business probably already has:
- Microsoft 365 security licences and technologies
- Firewall, MFA and endpoint protection
- Backups and documentation
- An IT administrator or managed IT service provider
But protection and compliance depend on operational processes:
- 24/7 monitoring and security signal correlation
- Incident identification and investigation
- Response, escalation and documentation
- Evidence preparation and management reporting
Cybersecurity is not what your business has.
Cybersecurity is what your business does.
Every business today needs operational cybersecurity — a business function that continuously monitors the digital environment, identifies and investigates incidents, responds to them, documents actions and provides evidence.
Service
What is HORTUS Digital Cyber-SOC?
HORTUS Digital Cyber-SOC is a managed Security Operations Center (SOC) service that provides operational cybersecurity for organisations, with extended NIS2 and DORA compliance capabilities for regulated organisations.
Monitors
Receives security signals from the digital environment.
Analyses
Correlates multiple signals into a unified view.
Identifies
Separates real threats from noise.
Investigates
Determines impact, root cause and risk.
Responds
Contains threats or escalates response actions.
Documents
Records facts, actions and evidence.
Reports
Provides reporting and supports continuous improvement.
Business benefits
What does Your business gain
from HORTUS Digital Cyber-SOC?
01
Early threat detection
Suspicious activity is identified before it develops into a visible business incident.
02
Active incident response
A threat is not only identified — investigation, containment and escalation are initiated.
03
Business continuity
Timely response reduces the risk of an incident disrupting business operations. Higher-tier plans include additional measures to strengthen continuity.
04
Reduced incident impact
Timely investigation and containment help reduce the technical, operational and business impact of an incident.
05
Continuous security improvement
Analysis of incidents and security events helps identify weaknesses and systematically strengthen protection.
06
Evidence-backed cybersecurity
Incident logs, evidence and reports are created as part of day-to-day operations — ready for management, customers, auditors and regulators.
Interactive self-assessment
How prepared is Your business for a cyber incident?
Many companies already have antivirus, Microsoft 365 security tools, a firewall and IT support. But a cyber incident tests something else —
whether someone notices it in time, assesses it and responds.
Here we won’t ask how many security tools your company has. We’ll ask —
what happens when the first sign of an incident appears?
Complete our 10-question cybersecurity readiness assessment. It takes 5 minutes and helps you assess:
your 24/7 monitoring and visibility level;
your incident response readiness;
management control and evidence readiness.
After the final answer, you’ll immediately see your result and the recommended next step.
Your answer is saved immediately
IT support
- Helps users and resolves technical issues
- Maintains infrastructure and configures systems
- Keeps systems available and supports day-to-day operations
HORTUS Digital Cyber-SOC
- Continuously monitors the digital environment and processes security signals
- Identifies, investigates, contains and escalates cyber incidents
- Maintains incident logs, evidence and management oversight
Roles and responsibilities
IT support keeps systems running. HORTUS Digital Cyber-SOC monitors threats.
Good IT support is essential, but it does not replace a specialised 24/7 cybersecurity function.
Microsoft-native sources
- Entra ID and Microsoft 365
- Defender and endpoints
- Email, SharePoint, OneDrive and Teams
- Azure and administrator activity
Additional sources based on risk
- Firewalls, VPN and DNS
- Network devices and servers
- APIs, databases and business applications
- Third-party security solutions
Microsoft-native approach
Your Microsoft 365 environment already has the data needed to detect incidents
Microsoft-native. But not Microsoft-only.
Microsoft 365 security signals provide a natural foundation for the solution. Additional data sources are connected based on your organisation’s risks and actual IT architecture.
Who is it for?
When does a business need managed SOC?
01
NIS2-regulated organisations
Monitoring, incident handling, log management, reporting and management oversight.
02
Businesses working with large organisations
The ability to demonstrate monitoring and incident response increasingly becomes a prerequisite for cooperation.
03
Businesses without regulatory requirements
Real 24/7 protection without building an in-house SOC team.
04
Critical infrastructure operators and DORA-regulated organisations
Resilience and recovery. Crisis coordination.
HORTUS Digital Cyber-SOC plans
Choose the level of protection that
matches Your business risk
#1 Operational Protection
Risinājumā ietilpst:
-
24/7 monitoring and alerting
-
Automated response with standardized SOAR playbooks
-
Identity, endpoint and email coverage
-
Basic reporting and visibility
-
Includes active response, but does not provide full investigation depth, structured reporting or compliance lifecycle. Not sufficient for NIS2 / regulatory requirements.
#2 Verifiable Compliance
€17 per unit / month Minimum €850 a month
Regulatory baseline
Full operational capability with integrated compliance functions. Monitoring, investigation, response and reporting as required by NIS2/national cybersecurity law.
Risinājumā ietilpst:
-
Everything in Plan #1
-
Full incident lifecycle management
-
Investigation and validation of incidents
-
Structured reporting and evidence generation
-
Compliance-aligned processes
-
Weekly summaries and management reporting
-
Minimum level required for NIS2 / national cybersecurity law compliance.
#3 Managed Cyber Resilience
€45 per unit / month Minimum €3'600 a month
Operational resilience
Extended capability for resilience, continuity and crisis-level incident handling.
Risinājumā ietilpst:
-
Everything in Plan #2
-
Advanced incident classification in DORA context
-
Crisis coordination support
-
Business continuity alignment
-
Resilience and recovery support
-
Required for DORA-regulated and critical infrastructure environments.
Pricing is based on the number of protected units: users, devices and systems. The exact scope is confirmed during the initial assessment.
Indicative estimate
How much could 24/7 cybersecurity
cost your business?
Enter the size of your environment to get an initial estimate of protected units and monthly cost.
Economic reality
HORTUS Digital Cyber-SOC or Your own SOC team?
| Criterion | In-house SOC | Partial in-house solution | HORTUS Digital Cyber-SOC |
|---|---|---|---|
| Time to operational readiness | 6–18 months | 3–9 months | Baseline monitoring from week 1 |
| Specialist team | Must be built from scratch | Must be built partially | Provided by HORTUS Digital |
| Automated 24/7 coverage | Expensive and complex | Often incomplete | Included |
| Compliance capabilities | Must be developed | Often incomplete | Included in Plans 2 and 3 |
| Cost predictability | Low | Medium | Clear service model |
Implementation
Connect a ready-to-run operational cybersecurity function — without having to build and develop it in-house.
01
Initial consultation
Your environment, risks, regulatory status and business priorities.
02
Data source assessment
We identify the priority Microsoft 365, cloud and network data sources.
03
Baseline monitoring
We connect the key data sources and start monitoring.
04
Tailored configuration
Response scenarios, escalation paths and responsible contacts.
05
Ongoing operations
Monitoring, investigation, response, evidence and reporting.
Accountability
Clear roles before an incident.
Faster response when it happens.
HORTUS Digital
- Monitors and correlates security signals
- Identifies and investigates incidents
- Executes or coordinates the response
- Documents incidents and prepares reports
Client IT team
- Maintains systems and infrastructure
- Implements agreed technical changes
- Provides information and participates in incident response
Management and governance
- Defines risk tolerance
- Approves policies and responsibilities
- Makes business decisions
- Oversees compliance and regulatory communication
Execution can be outsourced.
Management accountability cannot.
Why HORTUS Digital
Microsoft expertise, cybersecurity operations and business insight — all in one team
Built for Microsoft 365 environments
We use the security signals your environment already generates.
25+ years of experience
Microsoft technologies, IT infrastructure, Dynamics 365 and Business Central.
Security across business systems
Visibility does not stop at infrastructure.
Your logs remain under your control
Security data remains within your infrastructure.
EU-based team
Direct access to experienced specialists, clear communication in English, and practical understanding of EU cybersecurity and regulatory requirements.
Managed service
A working cybersecurity function — not just licences or a consulting document.
HORTUS Digital Cyber-SOC consultation
30 minutes to discuss your business situation
No technical presentation and no commitment. We will discuss your environment, regulatory status and the level of operational cybersecurity your business needs.
- A clear recommendation on the most suitable plan
- An indicative implementation scope and cost estimate
- Answers to your questions about NIS2 and the SOC service model
Individual consultation
Discuss your situation with a HORTUS Digital specialist
Get a clear starting point without a complex technical presentation or granting access to your systems.
Choose your preferred consultation day
30-minute Teams consultation
You will select the exact available time in Microsoft Bookings.
FAQ
Frequently
Asked Questions
Answers to common questions about the Cyber-SOC service.
If you have additional questions,
our experts are always ready to help.
What is a Security Operations Center (SOC)?
A Security Operations Center, or SOC, is not a single system or tool.
It is a continuous operational process that monitors the digital environment, identifies and investigates security events, responds to cyber incidents, documents actions and provides visibility — 24 hours a day, 7 days a week.
Is SOC something I can buy as a product?
No.
You can buy security tools.
But SOC is what makes those tools actually work.
Most organizations already have the tools. What they lack is the operational capability.
We already have security tools. Why isn’t that enough?
Because tools do not operate themselves.
They can:
But they do not:
Without operation, security remains passive.
What is a managed SOC service?
A managed SOC provides the operational layer as a service:
It replaces the need to build and run this internally.
Do regulations (NIS2 / National Cybersecurity Laws) require a SOC?
They do not explicitly say “SOC”.
But they require the functions:
These together constitute a SOC function in practice.
Can we be compliant without operational capability?
No.
Without continuous operation:
Compliance becomes theoretical — not provable.
What do most SOC services actually deliver?
Many services focus on monitoring and alerting:
As a result:
What is fundamentally different about HORTUS Digital Cyber-SOC?
HORTUS Digital Cyber-SOC is built around active response — not just detection.
This creates a different operating model:
| Typical SOC | HORTUS Digital Cyber-SOC |
|---|---|
| Alerts you | Acts on your behalf |
| Requires your team to respond | Responds immediately |
| Focus on detection | Focus on resolution |
| Outcome unclear | Outcome controlled |
How does HORTUS Digital Cyber-SOC handle response?
Response is built into daily operation:
The goal is simple: reduce impact immediately — not just report the problem.
What exactly is monitored and analyzed by HORTUS Digital Cyber-SOC?
The service covers the primary areas where modern cyber incidents originate:
These are the signals where the majority of real incidents occur.
Who remains responsible for cybersecurity?
Management remains responsible.
This includes:
The SOC executes operations. Management retains control and accountability.
What is the real risk of doing nothing?
Not just a cyber incident — but:
The key question is not if something happens — but how well you can respond when it does.