Request a proposal
Free Analysis
Cyber Security Services
Risk Assessments
Security Risk Assessment WorkbookFreeSMB Cyber ScoreFreeSMB Security Health Check$300Compliance Readiness Review$1,000
Vulnerability Management
Dark Web Exposure Report$300NOC Readiness Report$300External Attack Surface Assessment$1,497Patch & Vulnerability Management Program$997/mo
Incident Response
Cyber Incident Response ChecklistFreeIncident Response Plan Build$2,497Ransomware Readiness Tabletop Exercise$1,997Incident Response Retainer$1,500/mo
Cyber Defense Protections
Zero Trust
Zero Trust Audit$1,997Zero Trust Starter Assessment$397Network Segmentation Design$3,497Zero Trust Roadmap Sprint$4,997
Identity Management
Identity-First Starter Bundle$300Privileged Access Review$1,497Identity Lifecycle & Offboarding Audit$897MFA & SSO Rollout Program$2,997
Email Security
Phishing Exposure Report$300Email Authentication Hardening (SPF, DKIM, DMARC)$1,297Phishing Simulation & Awareness Program$497/moBusiness Email Compromise Defense Build$2,497
Application & AI Security
Secrets Detection & Remediation$2,497CI/CD Pipeline Security Hardening$2,997AI Model Security Assessment$4,997Penetration Test: Web Application$4,997
Cyber Security Programs
vCISO & Advisory
vCISO Lite — Monthly Security Advisory$750/moStonePath vCISO Complete$1,500/mo
GRC & Compliance
Security Compliance Suite$2,497/moRegulatory Compliance GRC$2,997/moSOC 2 Readiness & Automation Program$9,500
Vendor & Third-Party Risk
Vendor Security Risk ChecklistFreeTrust Center Care Plan$197/moCybersecurity Trust Center Build$4,997Trust Center Fit Check$197Trust Center Platform SetupBy applicationTrust Center Updates Desk$97/mo
Cloud & Data Security
Data Loss & Insider Risk Program$4,997Data Security Posture Management Build$5,997Cloud Security Posture Program$6,997
Cyber Security Solutions
Threat Intelligence
Free Training: Incident Readiness BriefingFreeDefender Circle$47/mo · $397/yrMulti-Modal Threat Intelligence Program$3,500/moAutonomous Threat Detection Deployment$2,500/mo
Managed Detection and Response
Managed SMB Security Plans$97–$797/moOperator Subscription Bundle$397/moSMB Security Servicesfrom $497Managed Security Programs$597–$3,497/moSOC-as-a-Service (SOCaaS)$2,500–$12,500/moManaged Endpoint Detection & Response$997/mo
Security Policies & Templates
SMB Security Policy Template PackFree
HomeAboutBlogContactRequest a proposal

StonePath Cyber · Managed Detection and Response

SOC-as-a-Service (SOCaaS)

A managed security operations center for your business: your logs, endpoints and cloud accounts monitored, alerts triaged and real threats escalated with clear next steps, without building an in-house SOC.

From $2,500/month

Compare the three tiers

Billed monthly · Cancel ahead of your next billing date · Secure checkout by Stripe · We email you after checkout to schedule onboarding

What it is

SOC-as-a-Service gives your organization the core functions of a security operations center on a monthly subscription. Security data from your agreed sources is collected in one place, watched for signs of attack, and reviewed by security analysts. Confirmed threats are escalated to your contacts with context and recommended actions, and you get regular reporting on what was seen and what to improve.

Choose your tier

Core

$2,500/month

  • Monitoring of agreed log and endpoint sources
  • Alert triage and escalation with context
  • Detection rules tuned to your environment
  • Monthly threat and activity report
  • Monthly review call
Subscribe — $2,500/month

Advanced

$5,500/month

  • Everything in Core
  • Expanded sources: cloud, email and identity accounts
  • Guided containment steps for confirmed threats
  • Threat hunting on a set schedule
  • Bi-weekly review call
Subscribe — $5,500/month

Complete

$12,500/month

  • Everything in Advanced
  • Approved automated response actions
  • Incident coordination within the agreed scope
  • Quarterly executive security briefing
  • Weekly review call
Subscribe — $12,500/month

Who it’s for

Small and mid-sized organizations that need continuous threat detection and expert alert review but don’t want to hire, train and retain a security operations team.

How delivery works

StonePath Cyber leads your engagement and stays your single point of contact. Day-to-day monitoring and alert handling are delivered with a vetted specialist security operations partner working under our oversight, so you get a full detection team without hiring one.

How it works

Subscribe
Pick a tier and start through Stripe.
Onboarding
Agree data sources, escalation contacts, monitoring hours and response terms.
Connect & tune
Sources connected and detection rules tuned to cut noise.
Ongoing
Monitoring, triage, escalation and regular reporting.

What we need from you

Escalation contacts, access to connect the agreed log, endpoint and cloud sources, and a decision-maker for the onboarding call.

Questions

Which tier should we pick?

Core fits organizations starting with managed monitoring. Advanced adds cloud, email and identity coverage plus threat hunting. Complete adds approved automated responses and incident coordination. You can move between tiers at your next billing date.

What hours are monitored?

Monitoring hours and escalation terms are agreed in writing during onboarding, so you know exactly what is covered before monitoring starts.

Will you take action in our systems?

Only the response actions you approve in writing. Everything else is escalated to your contacts with recommended next steps.

Does this replace our existing security tools?

No. It adds monitoring and expert review on top of the tools you already have, and we will tell you if a gap needs a new control.

Can we cancel?

Yes. Every tier is billed monthly and can be cancelled ahead of your next billing date.

SOC-as-a-Service (SOCaaS)

A managed security operations center for your business: your logs, endpoints and cloud accounts monitored, alerts triaged and real threats escalated with clear next steps, without building an in-house SOC.

From $2,500/month

Choose your tier

Service descriptions reflect general industry practice. Monitoring hours, response terms and scope are confirmed with you in writing during onboarding. Nothing on this page is a compliance determination, a certification, a license, or a guarantee of any outcome, and no service can prevent every attack.

Editorial & AI Disclosure