24×7 security monitoring
Our analysts watch your environment around the clock and escalate real threats.
Now taking early clients24×7 · Multi‑tenant · Hosted on AWS
NetCore Managed SOC & SIEM
Round‑the‑clock monitoring of your devices, networks and cloud, next‑generation antivirus and EDR on every endpoint, and expert analysts who respond when it matters — delivered from our secure, multi‑tenant platform on AWS, with your own client portal.
What’s included
One service, complete visibilitySIEM log monitoring
Logs from your servers, network and cloud correlated to spot attacks early.
Next‑gen antivirus & EDR
Centrally managed protection on every laptop and server.
Device health monitoring
Uptime and health of your servers and network, from NetCore Ops.
Vulnerability & integrity checks
Missing patches, vulnerable software and unexpected changes found early.
Incident response
When a threat is confirmed we contain it — isolating devices, blocking accounts or IPs — guide recovery, and help you meet your regulator’s breach‑notification deadline — in Zimbabwe, 24 hours to POTRAZ.
Client Portal
Security alerts in your Client Portal alongside your service tickets.
Reports & compliance
Monthly reports and evidence for ISO 27001, PCI DSS and data protection laws.
Security services
Find weaknesses before attackers doVulnerability management
Regular scans, with the flaws attackers are actively exploiting fixed first.
Phishing simulations & training
Test campaigns and short training that show who needs a refresher.
Leaked‑account monitoring
We check for staff passwords exposed in data breaches so they can be reset in time.
Microsoft 365 security checks
Daily checks for risky settings and accounts in your Microsoft 365.
Fast containment
Confirmed attacks blocked within minutes — every action logged and reversible.
File‑integrity monitoring
Unexpected changes to critical system files raise a security ticket — evidence for PCI DSS.
Security posture report
One view of your security, in your portal and quarterly review.
Incident response
A clear plan when it matters mostWhen an attack is confirmed, our analysts follow a proven playbook to contain it, remove the threat and get you back to normal — and keep you on track with your regulators.
Fast containment
Attackers blocked and affected devices or accounts isolated quickly — every action logged and reversible.
Evidence preserved
Evidence collected and kept intact for investigators, insurers and regulators.
Regulator deadlines
Notification deadlines — Reserve Bank, POTRAZ and card brands — tracked from the first minute.
Full incident report
A report your auditors and board can rely on.
Incident‑response hours are included on the Enterprise plan and available as an add‑on on others. Suspect an attack now? Get emergency help.
How it works
Your devices → our AWS platform → our analysts → your portal1 · Collect
Agents and connectors securely send telemetry and logs from your devices, network and cloud.
2 · Detect
The SIEM correlates events with threat intelligence and detection rules to surface real threats.
3 · Respond
SOC analysts investigate, contain threats and notify your team with clear next steps.
4 · Report
Live dashboards in your portal plus monthly reports and compliance evidence.
What we monitor
Supported devices & log sources- Windows & Linux servers
- Windows, macOS & Linux workstations
- Fortinet, Cisco, Check Point & Juniper firewalls
- Switches, routers & Wi‑Fi (syslog / SNMP)
- Microsoft 365 & Entra ID
- AWS CloudTrail & GuardDuty
- Azure & Google Cloud logs
- Active Directory
- Web servers & databases
- VPN & remote‑access gateways
- Email security gateways
- Custom apps (via syslog / API)
Plans
One plan covers your network, IT and securityManaged SOC is part of every NetCore plan: Essentials protects every device with next‑gen antivirus and EDR; Professional and Enterprise add full 24×7 SIEM and SOC.
SMEs
Essentials
See and protect.
Monitoring, endpoint protection and a service desk — the starting point for SMEs.
Get a quoteGrowing organisations
Professional
Managed and defended 24×7.
NetCore actively runs your environment — patching, configurations and backups — with full 24×7 SIEM and SOC.
Get a quoteBanks, fintechs & regulated
Enterprise
Governed and resilient.
Compliance, threat hunting, incident response and a named security manager — for banks, fintechs and regulated organisations.
Get a quoteOnboarding
From sign‑up to 24×7 protection- 1
Scope & agree
We confirm devices, log sources, retention and service levels, and set up your private tenant.
- 2
Deploy agents
Lightweight agents are installed on servers and endpoints — remotely, via your tools or on site.
- 3
Connect sources
Firewalls, network devices, Microsoft 365 and cloud accounts are connected over encrypted channels.
- 4
Tune & baseline
We learn what “normal” looks like for you and tune rules to cut noise and false positives.
- 5
Go live
Portal access for your team, 24×7 monitoring starts, and the first report is scheduled.
Security & data protection
How we protect your dataHosted on AWS
Built on Amazon Web Services infrastructure, with the hosting region and data residency agreed with you.
Tenant isolation
Each client is a separate tenant — your data, dashboards and users are never visible to anyone else.
Encryption
Data is encrypted in transit (TLS) from your devices to the platform, and encrypted at rest in storage.
Strict access
MFA for all portal and analyst access, role‑based permissions and full audit trails of who accessed what.
Retention you control
Log retention periods agreed per client to meet operational, audit and regulatory needs.
Compliance‑aligned
Processes aligned with ISO 27001 and African data protection laws such as Zimbabwe’s Cyber and Data Protection Act.
Breach‑ready
Evidence and timelines that help you meet breach‑notification deadlines — such as 24 hours to POTRAZ in Zimbabwe.
You own your data
Export your reports and logs at any time; data is securely deleted when the service ends.
Frequently asked questions
Where is our data stored?
On Amazon Web Services (AWS). Each client is a separate, isolated tenant, and data is encrypted in transit and at rest. We agree the hosting region and retention period with you during onboarding.
Can other clients see our data?
No. The platform is multi‑tenant by design: every organisation has its own isolated tenant, dashboards and user accounts, and access is restricted by role.
Will the agents slow down our computers?
The agents are lightweight and designed to run continuously in the background with minimal impact. We tune policies during onboarding.
Do we need to replace our current antivirus?
Usually yes for managed devices, so a single, centrally monitored protection runs on each endpoint. We plan the switch‑over to avoid any unprotected window.
What do you need from us to start?
A list of devices and locations, admin access (or a contact) for agent deployment, firewall/syslog access, and the people who should receive alerts and portal access.
Can our security logs stay in our country?
Yes. Your servers can send their security events to your own SIEM in your data centre, while our analysts monitor it. Many banks choose this.
How is it priced?
Per monitored device or user per month, depending on the plan and log volume. Ask for a quote — it is tailored to your environment.
Already a client?
Sign in to the Client Portal to see security tickets, device and antivirus status, reports and service tickets. Need help? Email support@netcore.co.zw.
Suspect an active attack? Get emergency help.