Skip to content

Wazuh SIEM Managed

We collect and assess security events from your devices, servers and cloud services in one place. We run the platform and read the alerts, and critical incidents reach you as tickets.

01

Your Benefits

4 points
B.01

You can see what happens on your systems, and we see it first

B.02

Shared, redundant platform operated by Netsource, your data largely separated by tenant

B.03

The Netsource service desk screens the alerts, so you only receive the incidents that matter

B.04

A security report documents anomalies and trends, weekly (recommended) or at an interval of your choice

02

Service scope

5 Building blocks
L.01

Wazuh agent on workstations and servers (Windows, Linux, macOS)

L.02

We set up your tenant with its own group structure

L.03

Standard detection rules for devices, servers and cloud audit logs

L.04

Netsource assesses alerts Mon–Fri

L.05

Security report as a PDF, weekly (recommended) or at an interval of your choice

03

Requirements and exclusions

What is needed and what is not included

→ Prerequisites

  • Integration with the GLPI service desk (NDS-APP-GLPI), so that tickets are created
  • Device management with TRMM (NDS-WP-TRMM) to deploy the agents
  • NetBird or VPN for access to the cluster

✗ Not included

  • A 24×7 SOC with someone watching the screen around the clock is not included, but is available on request
  • In-depth forensic analysis of individual incidents is charged by the hour (NDS-OP-KON25)
  • Compliance audits (ISO 27001, BSI IT-Grundschutz) are a consulting service (NDS-PRJ-COMPL)
  • Detection rules tailored to a single customer are possible. We charge the set-up by the hour
[ NDS-SEC-WAZUH ] [ netsource.de ]
Next step

Does this fit your business?

In 30 minutes we work out whether this service suits you. Free and without obligation.