B.01
You get everything in Managed Workplace (updates and antivirus) plus a SIEM that analyses security events
Managed Security
Managed Workplace plus Wazuh SIEM. We detect attacks, monitor the security of your systems and send you a security report, weekly (recommended) or at an interval of your choice. It costs €10.71 incl. 19% VAT (€9.00 excl. VAT) per workstation.
01
Your Benefits
B.02
Wazuh detects attacks from the way systems behave (EDR light)
B.03
All security-relevant logs from devices, servers, cloud and network are collected in one place
B.04
Critical patterns such as ransomware, lateral movement or data exfiltration are detected automatically, and our service desk assesses the alerts during service hours
B.05
You receive a security report with threat analysis and recommendations, weekly (recommended) or at an interval of your choice
02
Service scope
L.01
Everything in Managed Workplace (NDS-MWS): Managed Client with patch management and inventory · Managed Antivirus with Microsoft Defender Antivirus (built into Windows), centrally via our RMM · Weekly compliance check
L.02
Everything in Wazuh SIEM Managed (NDS-SEC-WAZUH): Wazuh agent on all devices and servers · Shared, redundant Wazuh platform operated by Netsource, data largely separated by tenant · Standard detection rules for devices, servers and cloud audit logs · The Netsource service desk assesses alerts Mon–Fri · Security report as a PDF with threat analysis, weekly (recommended) or at an interval of your choice
L.03
Extended detection rules: Ransomware detection (file change rates, deleted shadow copies) · Lateral movement (pass-the-hash, SMB anomalies, RDP hops) · Data exfiltration (unusual data flows, cloud upload peaks) · Privilege escalation (token manipulation, UAC bypass attempts)
03
Requirements and exclusions
→ Prerequisites
- All prerequisites of Managed Workplace (NDS-MWS)
- All prerequisites of Wazuh SIEM Managed (NDS-SEC-WAZUH)
- Enough storage to retain logs (at least 90 days, 180 days recommended)
- NetBird or VPN, so that agents and the SIEM communicate securely
✗ Not included
- A full 24×7 SOC with a dedicated security analyst is not included, but is available on request
- In-depth forensic analysis after a security incident is charged by the hour (NDS-OP-KON25)
- Compliance audits (ISO 27001, BSI IT-Grundschutz) are a consulting service (NDS-PRJ-COMPL)
- Detection rules tailored to a single customer are possible. We charge the set-up by the hour
- Penetration testing and vulnerability assessments are separate projects
04
Related Services
NDS-MWS
Managed Workplace
The package for your devices, combining Managed Client and Managed Antivirus. We install updates, protect against malware and monitor your devices, at a package price of €8.93 incl. 19% VAT (€7.50 excl. VAT) per workstation.
NDS-SEC-WAZUH
Wazuh SIEM Managed
We collect and assess security events from your devices, servers and cloud services in one place. We run the platform and read the alerts, and critical incidents reach you as tickets.
NDS-SEC-AWARE
Managed Security Awareness
Every quarter we send simulated phishing emails. Anyone who clicks gets a short training session. We document the results for management and your insurer.
NDS-PRJ-COMPL
Compliance consulting
We advise you on GDPR, ISO 27001 and BSI IT-Grundschutz. The result is a list of measures, ordered by what matters most for your business.
Does this fit your business?
In 30 minutes we work out whether this service suits you. Free and without obligation.