The published per-endpoint, per-month price includes 24/7 monitoring, alert triage, escalation, investigation, incident response, and detection engineering tuning for your platform. The underlying EDR or XDR platform licence is billed separately, since most clients already hold this directly with their chosen vendor. Custom configurations beyond standard onboarding, such as bespoke playbook development or non-standard integrations, are priced separately and scoped before work begins.

Detection engineering is the process of replacing generic, out-of-the-box vendor rules with detection logic built specifically for your threat profile, industry, and environment. Without it, most deployments run at a fraction of their potential, with false positive rates around 46% and a significant share of alerts going uninvestigated simply because there is too much noise to act on. Detection engineering is the difference between a platform that generates noise and one that generates decisions your team can actually act on.

Our SOC begins 24/7 monitoring immediately after deployment. For CrowdStrike specifically, our status as Ireland's only Partner Services Delivery partner means a tested, well-established onboarding process from day one. No extended setup period and no blind window where your environment is unmonitored. Microsoft-centric environments can typically be live within five business days, since onboarding builds directly on your existing E3 or E5 licensing.

EDR covers endpoints only. Laptops, servers, and workstations. XDR correlates signals across endpoints, identity, cloud, and network, building a full attack chain view rather than isolated alerts. Which one fits your environment depends on your attack surface and existing stack, not the acronym. Organisations with disparate identity, email, and cloud signals typically benefit most from XDR's cross-domain correlation. We'll help you assess which is the right starting point.

No. We integrate into what you have. If CrowdStrike, SentinelOne, Microsoft Defender, or Palo Alto Cortex is already deployed, we wrap our managed service around it: agent deployment, policy configuration, exclusion tuning, and 24/7 analyst response. No rip and replace. No migration risk. Your existing licence and platform investment stay exactly where they are.