Question 1

What sets the ANOMAL SOC apart?

Accepted Answer

A Swiss SOC as a Service without tiers, operated 24/7 from the Zurich region. You get one contract, one flat fee per year and a team that works your cases instead of a queue that forwards them. No raw alerts ever reach a human. Benign, duplicate and low-risk cases are auto-closed inside your mandate with a full audit trail. Every case that needs a decision is validated by an analyst before it closes.

Question 2

What is the difference to MDR or other MSSPs?

Accepted Answer

Classic MSSPs and MDR providers rely on tiered L1/L2/L3 analyst queues, where humans manually triage noisy alerts. ANOMAL has no tier 1: Hyper Automation prepares every case in full context before it reaches an analyst. Result: most of the noise is removed before an analyst ever sees it, 78% of cases are auto-closed inside your mandate, and decisions land in minutes, not hours, across live tenants.

Question 3

Do you use AI? Who is accountable for decisions?

Accepted Answer

Yes, Agentic AI is used surgically, only inside investigation and scoring, where judgement is needed. Everything else runs on deterministic, testable workflows. Every case is validated by an analyst. Autonomous response actions execute only within the mandates you explicitly approve, and always start with the least invasive, reversible option (e.g. revoke session before isolating a host). You stay in control at all times.

Question 4

Can you support us in a regulated environment?

Accepted Answer

Yes. ANOMAL is ISO 27001 certified and data residency is Switzerland and EU only. Compliance is always the regulated company's own obligation, so what we deliver is the evidence side of it: documented case handling, an immutable case log per tenant, monitoring and response evidence you can hand to an auditor, and a DPA aligned to revDSG (nDSG / nLPD) and EU GDPR. Which specific FINMA, DORA or NIS2 requirements your mandate has to meet, we clarify with you before onboarding.

Question 5

What does SOCaaS cost per endpoint?

Accepted Answer

One flat fee per year, based on the number of endpoints: 24/7 detection, response inside your mandate, tuning, playbooks, threat intelligence, KPI reporting and every severity. No per-alert charges, no hidden fees. An incident response engagement for a major incident is billed separately. Halcyon, including its Ransomware Warranty, is available as an optional add-on. Contact us for a mandate-specific quote.

Question 6

Which company size is ANOMAL suited for?

Accepted Answer

ANOMAL works for Swiss SMEs as well as large enterprises. The flat fee per year is based on the number of endpoints, so a company with 100 endpoints gets the same 24/7 SOC, the same analysts and the same reporting as a group with several thousand. Smaller teams usually choose fully managed; companies with their own security team often choose co-managed.

Question 7

Which services does ANOMAL offer besides the SOC?

Accepted Answer

Besides SOC as a Service, ANOMAL delivers penetration testing, vulnerability management, hardening and security consulting, plus the Halcyon anti-ransomware add-on including its Ransomware Warranty. Findings from these services flow directly into the SOC, so detection rules and playbooks are tuned to your real attack surface.

Your SOC as a Servicefrom Switzerland.24/7 in operation.

One service.
Everything included.

SOC as a Service · flat fee

Hyper Automation

SOC Delivery

ANOVIEW

Every detection source

Halcyon Add-on

What a tiered SOC
can't deliver.

Our partners.
Selected, certified, operated by us.

We are a FIRST member.

Built for Swiss organisations.

Sovereign by design.
Precise by nature.

Your SOC, delivered as a service.
Or build your own, with us.

Direct answers.
To the questions we hear most.