We run detection and response 24/7.
For clients that need measurable, auditable security operations — not a resold remote service. We combine SOC, SIEM, EDR, vulnerability management and incident response under SLA.
Eight lines contracted as a set or modularly within scope. Each operates with its own runbook, SLA and reporting.
Managed detection & response
Triage, containment and response with on-site Chihuahua shifts. Per-client documented escalation, not a generic inbox.
- Cobertura
- 24/7/365
- Turnos
- 3 · sitio
- MTTA crit.
- ≤ 15 min
SIEM-as-a-Service
FortiSIEM with industry use-cases, custom source parsing and CNBV / NIST / client-aligned retention.
- Retención hot
- ≥ 12 meses
- Retención cold
- 7 años
- Use cases
- 120+
Managed EDR
FortiEDR under inheritable policy. Process blocking, host containment and inline forensics from the console.
- Plataformas
- Win · Mac · Lin
- Acciones
- Block · Isolate
Vulnerability management
Authenticated scans, real-exposure prioritization (not CVSS alone) and business-aligned criticality SLAs.
- Escaneos
- Mensual · ad-hoc
- Reporte
- Ejecutivo · técnico
Offensive testing
Internal, external and application pentests. Actionable technical reports with remediation verification included.
- Alcance
- Web · API · Infra
- Verificación
- Incluida
Phishing & awareness
Simulated campaigns and training modules. Per-department metrics and HR / security reports.
- Plataforma
- KnowBe4
- Ciclo
- Trimestral
Incident response
24/7 IR retainer. Containment, eradication, forensics and lessons learned with our own reportable runbook.
- RTO IR
- ≤ 60 min
- Forensia
- Hot · cold
Compliance
Audit support for ISO, NIST CSF, CNBV and PCI-DSS: evidence, controls and remediation plan.
- Evidencia
- Lista para QSA
- Sectores
- Gobierno · Banca
Repeatable 4-to-8 week onboarding. We don't hand you a dashboard and wish you luck.
- 01FASE
DESCUBRIMIENTO
Entrevistas con TI/seguridad, inventario de fuentes, criticidad de activos, mapeo regulatorio.
DURACIÓNSem 1-2 - 02FASE
INTEGRACIÓN
Conexión de fuentes al SIEM, despliegue de agentes EDR, casos de uso priorizados por industria.
DURACIÓNSem 3-4 - 03FASE
RUNBOOKS
Procedimientos por activo, criterio de escalación, contactos de cliente, hand-off entre turnos.
DURACIÓNSem 5 - 04FASE
VALIDACIÓN
Tabletop con escenarios reales, ajuste de umbrales, baseline de falsos positivos antes de go-live.
DURACIÓNSem 6 - 05FASE
OPERACIÓN
Turnos rotativos en sitio Chihuahua. Threat hunting periódico, mejora trimestral, reporte mensual.
DURACIÓNContinuo - 06FASE
REPORTE
Semanal técnico para TI, mensual ejecutivo para dirección, trimestral para cumplimiento.
DURACIÓNContinuo
Default contractual commitments. Can be tightened for regulated clients (CNBV, energy, healthcare) per the client's risk matrix.
Mean Time To Acknowledge para alertas críticas. Activación inmediata de runbook y comunicación a contactos del cliente desde el SOC.
- MTTA · CRITICALAcknowledge≤ 15 min
- MTTA · HIGHAcknowledge≤ 30 min
- MTTR · CRITICALHasta contención efectiva≤ 4 h
- COBERTURATurnos en sitio Chihuahua24/7/365
- RETENCIÓN HOTConfigurable por industria≥ 12 meses
- RETENCIÓN COLDCumplimiento regulatorio7 años
- RTO · IRActivación de célula IR≤ 60 min
- REPORTE EJEC.Comité ejecutivoMensual
End-to-end Fortinet specialization with third-party integrations where it makes sense for the client.
- FortiSIEM
- FortiEDR
- FortiAnalyzer
- FortiSOAR
- FortiSandbox
- FortiDeceptor
- FortiMail
- FortiRecon
- Tenable
- KnowBe4
- Microsoft Defender
- CrowdStrike
The questions we hear most in pre-sales. If yours isn't here, an engineer answers on a 30-min call.
In-house SOC in Chihuahua, engineers on payroll, dedicated monitoring infrastructure. We don't resell. SOC visits are possible under NDA.
Yes. We operate what you already have; with Fortinet we gain depth through specialization, but the service covers heterogeneous sources. We bring our own connectors.
4–8 week onboarding: discovery, source integration, use-cases, asset runbooks, tabletop validation, transition to 24/7 operation.
Weekly technical (alerts, tickets, SLAs) and monthly executive (trends, risk, recommendations). Real-time dashboard access under client identity control.
Yes. Operation is aligned to ISO/NIST controls and evidence is audit-ready. For CNBV we've supported regulated clients for several years.
2-to-3 week diagnostic. No mandatory follow-on contract.
Ends with a gap map, prioritized risks and a remediation plan. If you decide not to move forward with us, the report is yours either way.