Managed security for companies that don’t have a security team.

We monitor your devices, email and network, investigate the alerts and report what happened and how to act. Every client gets its own platform, isolated from the rest, and a SOC that works in Spanish and English.

Response times
Committed by contract and measured on every case.
Language
SOC in Spanish and English.
Platform
Dedicated per client. Your data is never mixed with anyone else’s.

Four services, each available separately.

Prices are fixed by environment size and are provided in the first meeting.

The Khromas services
ServiceWhat it isHow it’s contracted
Managed SIEM/XDR We collect and correlate the logs from your devices, firewall, accounts and cloud. An analyst validates every alert and carries out the response we agreed on in writing. Monthly, fixed plan by size
Posture Assessment A review of your security against a recognized controls framework. You receive a diagnosis, a baseline and a prioritized 30, 60 and 90-day plan. There is an Express version for small companies. One-off project
Incident Response Retainer Incident response hours already contracted for when you need them. The ones you don’t use become tabletop exercises, threat hunting or procedure reviews. Annual, prepaid
SOC for IT ProvidersPreview For IT companies that serve small businesses: we run the SOC behind your brand and you keep the relationship with your client. Monthly, through partners

How to start

  1. Assessment

    We review your environment without intrusive testing and measure the starting point.

  2. 90-day plan

    You get a report with the findings ranked by severity and the priorities for action.

  3. Operation

    If you continue with the managed service, we size it with the real data from the assessment.

What our services do not include

We clarify this before the first meeting.

  • We don’t replace your antivirus or EDR.If you already have one, we add its alerts to the investigation.
  • We do not perform remediation on your systems.*We indicate what to correct and in what order. Remediation remains with your team or your provider.
  • We don’t do penetration testing.We review configurations and evidence, without attacking your systems.

* Available as an additional service, subject to an agreed scope and access.

Healthcare works by different rules

You can’t scan a clinic’s network the way you scan an office. We work in passive mode by default and coordinate windows with the equipment vendors before any intervention.

How we work in healthcare and other sectors

Let’s schedule a first meeting

Your company’s size and your main concern are enough to get started.

Write to us