Tools raise alerts, but often nobody responds
Alerts without response
Firewalls, endpoint protection and monitoring report reliably. But nobody is awake at 3:14 a.m. to respond to the alert.
Siloed tools
SIEM, EDR and NDR report past each other. The result is a flood of alerts without a complete picture.
The SOC dilemma
For most organizations, an in-house 24/7 SOC is out of reach in staffing and budget. An outsourced SOC service is expensive and often oversized.
Automation takes over the routine
The platform automates the work a SOC team would otherwise have to stay awake for. This includes detection, SIEM correlation, SOAR playbooks, automated response and complete documentation.
When human judgment is needed, our SOC team is ready. You choose the tier that fits your business, up to around-the-clock MDR.
3,106
Detection rules in real time
48,764
Network signatures inline
160,000+
Threat IOCs from 30+ feeds
< 100 ms
Response at the endpoint
Capacity figures as per the platform's delivery scope, not guaranteed values.
Detect. Respond. Govern. Prove.
The platform covers all four steps.
Detect
SIEM correlation, EDR/HIDS and NDR/NIDS detect attacks along MITRE ATT&CK. Threat intelligence provides the context.
Respond
SOAR playbooks respond automatically and contain incidents. Nobody has to sit at a screen at 3:14 a.m. for that.
Govern
Continuous threat exposure management (CTEM) assesses and prioritizes risks. Important findings do not get lost in a flood of alerts.
Prove
The platform documents incidents and measures without gaps. This supports evidence for BSI OH SzA, ISO 27001, NIS2, NIST and PCI DSS.
The platform in detail
SIEM correlation
Central log collection: events from endpoints, network and servers are correlated in real time.
EDR/HIDS
Host-based detection with behavioral analysis, process trust scoring and forensics.
NDR/NIDS
Network-based attack detection with DNS, flow and IOC correlation.
SOAR playbooks
Automated incident response from ticket creation to containment.
Threat Intelligence
Curated feeds, synchronized hourly, aligned with MITRE ATT&CK.
CTEM
Continuous threat exposure management with a risk register and maturity measurement.
Compliance evidence
Live coverage reports and exportable evidence packs support compliance evidence for BSI OH SzA, ISO 27001, NIS2, NIST and PCI DSS.
Sovereign operation
The platform runs on-premises in your environment. The core is open source. There is no vendor lock-in.
SOC out of the box
The platform ships as a ready-to-run AIMSTRONG appliance. Once connected, it is ready for operation. Assembled in Germany. Large environments run on AIMcompute servers.
More about AIMSTRONGAIMcompute for large environmentsPlatform from €190 per month
SOC service from €990 per month
Indicative prices for businesses only, excluding statutory VAT. The offer comprises the subscription and the delivery of the appliance. Configuration and terms are agreed individually.
SOC service in three tiers
The platform works automatically at every tier. The tier defines who responds to incidents and when our SOC team is there for you.
Co-Managed 8×5
Our SOC team reviews the alerts during business hours on weekdays. Your IT team takes action, with our support.
Co-Managed 24/7
Our SOC team reviews the alerts around the clock and recommends next steps for critical incidents. Your IT team takes action.
MDR 24/7
Our SOC team reviews the alerts and handles incident response for you, around the clock, including nights and weekends.
Every tier includes support for BSI reporting readiness. Get in touch and we will work out which tier fits you.
AIM and AIMsec together
AIM-GRC runs your ISMS. AIMsec delivers the matching detection evidence. Governance and evidence thus fit together.
More about the AIM platformA brand of Secure 2 Fiber GmbH
AIMsec and AIMsoc form the “Operate & Prove” phase of the AIM ecosystem. Digital. Secure. For every company size.