The managed service between your infrastructure and cyber threats. Detection, incident response and threat intelligence, operated 24/7.
Rempart is the managed SOC of SecuLabs' CSIRT practice. A sovereign platform that collects your logs, detects malicious activity and mobilises our experts 24/7, without relying on any third party.
From the arrival of the raw log to the incident notification, every step is instrumented to guarantee traceability and response time.
Your logs are brought in through the agent, Syslog or API, then normalised into a common schema before feeding your Security Data Lake.
The detection engine queries the logs continuously and applies SecuLabs rules aligned with the MITRE ATT&CK framework.
Triage by LLM & RAG reduces false positives and brings back the context of your information system in detail, for a precise analysis.
Our analysts handle P1 and P2 alerts, qualify the malicious activity and notify you as soon as an incident is confirmed.
Beyond logs, Detect watches your cloud services and each host's exposure to known vulnerabilities, with no extra agent or connector.
The agent already deployed for collection also inventories the software installed on each host and checks it continuously against known vulnerabilities (CVE): an always up-to-date view, prioritised by severity, with no extra agent.
For cloud services, collection relies on the providers' secure APIs, with no intermediate connector to deploy or maintain. Microsoft 365 is the textbook case: its mail, identities, third-party applications and tenant administration are all monitored.
Your Microsoft 365 tenant
Mail
Files and Teams
Identities
Third-party applications
Tenant administration
Defender alerts
Your other cloud services
Your existing EDR
DMS & other SaaS
Four steps paced by our teams. You have no tooling to buy and no project to run.
Roles and points of contact defined, deployment of the solution begins.
Agents on your endpoints, Syslog & APIs for your specific equipment. Collection starts. First logs ingested within 48 hours.
Our analysts calibrate the rules to your context.
The SOC moves to active monitoring. You receive your portal access.
Days of expertise are included in the offer, to use at your own pace: equipment configuration, cyber advice, we are at your service.
We chose to build and run Rempart's infrastructure ourselves rather than rent capacity from a hyperscaler. No data you entrust to us leaves this perimeter, and a single provider is accountable to you for it.
Your systems
Tier 3 datacenter in Geneva, on our own hardware, with no outside third party.
A retention period aligned with your regulatory requirements and your needs.
Open-source models run on our own GPUs, locally, with no external cloud.
A Swiss SME does not necessarily have the human resources of a large group. Rempart gives it the visibility of a structured SOC, with the team it actually has.
Hugo BourgetTechnical Lead
Rempart is made of three modules that can be activated separately or together. Detect, respond and anticipate, on your perimeter as well as outside it.
Let's discuss your specific needs and build a solution suited to your context together.