Scale · Managed services
Managed security services for Indian enterprises that want security monitoring in the same contract as their infrastructure support. NetScale monitors for threats, responds to incidents, scans for vulnerabilities and tracks each fix to closure, with a written report every month. Support windows and response times are agreed in writing before work starts.
Managed Security Services
A managed SOC is a security operations centre run for you under contract.
It watches the estate for threats, responds to incidents, and finds vulnerabilities and tracks them until they are fixed. Here it runs inside managed services, alongside remote infrastructure management and the service desk. One contract and one escalation path cover all three, so a security finding and the fix it needs are handled in one place.
Governance, risk and compliance reporting turns each month’s alerts, incidents and open findings into a written report your auditors can use.
Deeper detection and response, forensics and penetration testing sit under SOC and managed detection (MDR).
The governance system itself, from policies to risk processes, sits under Governance, risk and compliance frameworks.
Monitoring tools were added to catch everything. Alerts now outnumber the team. Who decides which ones go unopened?
Our answer: Threat monitoring
A laptop was cleaned after an infection. Who checked what else it reached?
Our answer: Incident response
The scan report lists the same findings every quarter. Who closes them?
Our answer: Vulnerability management
Security is reported as a count of alerts. What does the board learn from it?
Our answer: Governance, risk and compliance reporting
Threat monitoring, incident response, vulnerability management, and governance, risk and compliance.
Firewalls, endpoints, servers and sign-ins watched for threats, with alerts triaged by engineers in the support window stated in IST and agreed in writing.
Containment and investigation on a runbook agreed in advance, escalating to remote infrastructure management and the service desk when the fix touches servers or users.
Scanning with SecPoint, findings ranked by risk and given an owner, and each patch or configuration fix tracked to closure and scanned again.
Alerts, incidents and open findings reported every month in writing, set out so your auditors and your risk register can use them.
One detection path, endpoint to report, drawn three times.
You can stop at any phase boundary. The assessment is free, and each phase is priced in writing before it starts.How we engage
The Directions of April 2022 require logs of ICT systems kept for a rolling 180 days within India. Logs we monitor are kept in India for that period, and the location is written into the contract.
The CERT-In Directions require listed cyber incidents to be reported within 6 hours of being noticed. The incident runbook names who confirms an incident and who reports it.
From 13 May 2027, Rule 6 of the DPDP Rules asks for logs, monitoring and review of access to personal data. It also asks for those logs to be kept for one year. Legal interpretation stays with your counsel.
Source: Digital Personal Data Protection Rules, 2025 (external site)
Endpoints, servers and network devices in scope, and the log volume they send.
Support window and response times, stated in IST and agreed in writing.
Vulnerability scan scope and frequency: internal and external systems, and how often each is scanned.
Reporting depth: an operational monthly report, or governance, risk and compliance reporting for your auditors as well.
The most relevant engagement, with its numbers. Client names and the full write-up are shared in conversation.
Education technology · Laptops across departments
How an online learning company found out what was really on its laptops, in one working week.
Vulnerability scanning
Firewalls and secure networking
Endpoint, firewall and managed detection
Endpoint protection
Next-generation firewalls and cloud securityOur own information security and privacy management systems, run under both standards.
Certifications and technologyIt is narrower, and it sits inside a managed services contract. This service covers threat monitoring, incident response, vulnerability management and compliance reporting alongside infrastructure support. Managed SOC and MDR goes deeper, with EDR and XDR, threat modelling, digital forensics and penetration testing. The assessment says which one your estate needs, in writing.
A managed service provider (MSP) runs IT operations such as monitoring, patching and support. A managed security service provider (MSSP) runs security operations: threat monitoring, incident response and vulnerability management. NetScale runs both under one managed services contract, with one escalation path.
A scan finds weaknesses; vulnerability management gets them fixed. Each finding is ranked by risk and given an owner and a date. Patches and configuration changes are tracked to closure, and the system is scanned again to confirm. Anything still open is carried in the monthly report until it closes.
Yes, where they fit. The firewalls, endpoint protection and logs you already run are onboarded in fixed-scope phases, and you are not asked to replace everything. If you run a platform we do not support, we say so, and who does. A gap that needs a new control is priced in writing first.
One written report of the month’s alerts, incidents and vulnerability findings. It shows what was raised, what was acted on and what is still open, with an owner and a date for each open item. The governance, risk and compliance section is written so your auditors and your risk register can use it.
Only if the contract says so. Monitoring runs in the support window agreed in writing, stated in IST: business hours, extended hours or continuous. Continuous cover is a contract term, not a slogan: if it is not written down, we do not claim it. Response times for each priority are written in alongside it.
It costs nothing and commits you to nothing. You get a written list of where your IT environment is exposed, and your team can act on it with or without us.
