Sore Security

Expertise

Five practices,
one operating model.

Detection feeds response, response feeds hardening. These practices work together over time, and can be taken on their own: an audit, a migration, a few days of reinforcement.

Supply and integration across any kind of information system. Multi-vendor, with no forced brand commitment: equipment is chosen for the operations that follow.

  • Servers, storage and virtualisation
  • Network, Wi-Fi and perimeter security
  • Public, private and hybrid cloud
  • Workstations, licences and EDR
  • Supply, installation, commissioning
  • Manufacturer warranty and renewals

An information system held by the people who monitor it. Monitoring, support and continuity, with real on-call cover.

  • 24/7 monitoring and alerting
  • L1 / L2 / L3 helpdesk
  • Disaster recovery plan
  • Cloud and hybrid operations
  • Backup and tested restore
  • Ongoing operational support

Continuous monitoring, offensive testing and governance, operated from our platform. The goal is measurable: shorten the time between event and decision.

  • Managed SOC — detection and response
  • Pentesting, Red Team, CSIRT
  • GRC: policies, risks, controls
  • CNDP, GDPR and ISO 27001 compliance

Once an incident is declared, recovery comes first. Contain, prove, restore service, document.

  • 24/7 incident response
  • Forensic analysis
  • Threat hunting
  • Containment and remediation
  • Post-mortem report and corrective plan
  • Post-attack recovery plan

For companies abroad, wherever they are: a dedicated team based in Casablanca, embedded in your processes and tools.

  • L1 / L2 SOC analysts
  • User support and helpdesk
  • System and network administration
  • Reinforcement on integration projects
  • Time zone matched to your market
  • Monthly reporting and governance