TopMDR Cloud

MANAGED DETECTION & RESPONSE: SIEM AND SOC COMBINED INTO ONE CONOVA SOLUTION

Cyberattacks are becoming increasingly sophisticated and targeted. Traditional security solutions are reaching their limits, often leaving companies with the challenge of protecting their complex IT infrastructures across all levels. This calls for solutions capable of detecting threats and responding to them in real time.

That’s exactly where Managed Detection and Response (MDR) comes in: this professional security solution, offered as a managed service, enables attacks to be detected, assessed as well as countered in real time by an external Security Operations Center (SOC).

With TopMDR Cloud from conova, you benefit from a fully managed cybersecurity solution that reliably protects your company from modern threats while also reducing your operational workload – whether your systems run in the cloud, in a conova data center or on-premises. Our 24/7 active Security Operations Center (SOC) detects and neutralizes threats in real-time – before any damage can occur. Cutting-edge technologies such as EDR/XDR, SIEM with SOAR, machine learning and AI are combined with proactive threat hunting and the expertise of experienced analysts in order to achieve this. Transparent reports and analyses additionally help you meet your compliance requirements efficiently.

Anführungsstriche der conova Corporate Identity
VORTEILE
  • SOC: 24/7 protection of your systems and rapid incident response by an expert team – relieving the workload of your internal IT department
  • Continuous monitoring of servers, clients, network infrastructure and cloud assets
  • Comprehensive agent and log management
  • Flexible and scalable, suitable for all environments – from cloud to on-premises
  • Short implementation time and predictable costs
  • Transparency via insightful reports and dashboards
  • Compatible with a wide range of other conova solutions

COMBINING XDR AND SIEM TECHNOLOGY AS A MANAGED SERVICE

By combining different technologies, your IT systems are analyzed in depth. With the use of a Security Information and Event Management Systems (SIEM) system, security-relevant information from various sources – such as servers, firewalls and endpoints – is collected and centrally evaluated. Extended Detection and Response (XDR) monitors endpoints (EDR), network traffic (NDR), and cloud systems. Anomalies and suspicious activities are immediately detected and forwarded as alerts to the SOC team.

SOC: THE HEART OF MODERN IT-SECURITY

The Security Operations Center (SOC) is the central hub for monitoring and responding to IT security incidents. It actively reacts to threats and contains potential risks through measures such as blocking accounts and access, enforcing encryption, or initiating patch management. In addition to 24/7 monitoring of your systems, our SOC also actively investigates the Deep Web and Darknet for emerging threat scenarios. All of the key findings are presented transparently in detailed reports and dashboards, providing valuable insight into your company’s current security status.

TopMDR Cloud 1)Set-up costs (one-time expense)Price per month
TopMDR Cloud Basic 2)upon requestupon request
Asset with log retention for 3 months, per assetupon request
Asset with log retention for 12 months, per assetupon request
TopMDR Cloud – Extensions (excerpt)
Individual setup of an asset, per assetupon request
Log Collector 3)upon requestupon request

1) SLA Economy included; SLA Business and First Class (24/7) optional – see SLA data sheet. The selected Service Level Agreement (SLA) only becomes effective once the initial onboarding has been fully completed. Until then, the “Economy” SLA applies to all customers. The onboarding phase can only be finalized if the customer completes the required onboarding steps on their side and on time, with conova’s support. For alerts and their processing, the currently active conova SLA applies. For assets running on unsupported versions, as well as for customer-managed or outdated agents, compliance with the agreed SLA cannot be guaranteed. All SLA conditions are based on the underlying AWS services. In the event of any degradation or unavailability of these services, the SLA guarantee does not apply.
2) Setup is performed via Autodeploy.
3) Corresponds to TopServer Managed VM small Linux. Required if the agent cannot be installed directly on the asset.

Notes:
• Incident handling is billed via the hourly account.

Contract details:
• Minimum contract period 12 months.
• Errors and changes reserved.

FREQUENTLY ASKED QUESTIONS REGARDING SOC, SIEM AND MDR

What is a SOC?
SOC stands for Security Operations Center and refers to a team responsible for an organization’s cybersecurity. This department continuously monitors IT systems to detect cyberthreats quickly and respond to them in real time.

What does SIEM mean?
SIEM stands for Security Information and Event Management. This technology collects security data from various sources within an IT infrastructure in order to identify potential security threats.

What is MDR?
An MDR (Managed Detection and Response) solution – such as TopMDR Cloud from conova – is a cybersecurity service in which an external provider takes over the monitoring of IT systems. Threats are detected, contained and mitigated in real time – before damage occurs.

We would be happy to advise you!

Last update: 21.01.2026