Prismara SOC overview

Prismara SOC is a 24/7 security operations service from SovSec. It acts as your SIEM and your managed extended detection and response (managed XDR) service: SovSec analysts watch the security signals from your environment around the clock, triage what matters and tell you what to do about it.

Prismara SOC takes signals from the Prismara apps — including Prismara Endpoint Security, Prismara Identity and Prismara Spaces — and from Microsoft 365, Microsoft Defender and Microsoft Entra if you use them. So you’re covered before, during and after your move from Microsoft.

SOC incidents also appear in Prismara Portal, your view of the whole managed service.

• Analyst triage. SovSec analysts review the security signals from Prismara and, where connected, your Microsoft tenant, and raise incidents that need your attention.
• A single portal. See every incident, its severity and status, and the actions we recommend you take.
• A direct line to the SOC. Comment on an incident to ask a question or confirm an action.
• Reports. A monthly summary of activity that you can export as PDF for management or auditors.

• Security and IT teams who act on incidents and recommended actions.
• Managers and auditors who need visibility. A read-only viewer role lets them see incidents and reports without changing anything.
• Administrators who connect your Microsoft tenant by granting consent in Microsoft Entra.