SAGEN SIEM · MANAGED SOC · INCIDENT RESPONSE

SIEM & SOC service assessment

Sagen provides the SIEM platform and SOC service. Tell us about your environment so we can scope your connection and prepare a tailored proposal. Incident Response is an optional additional service.

Complete your connection request

Fill in your company and environment details, then click Submit. Your answers will be saved and our Sales team will be notified. No email attachment is needed.

Required fields are marked *. Leave unknown counts blank; enter 0 only when there are none.

1. Company & contacts

Legal company name *Contact full name *Contact email *PhoneCountry *Billing addressWebsiteCompany registration / business IDEmployee count (blank if unknown)Technical contact nameTechnical contact emailBilling company (if different)Billing contactBilling email

2. Onboarding & connection requirements

RelationshipOnboarding assistanceGoals and expected coveragePreferred start datePreferred contract termConnection methods available (API, syslog, agent, collector)Data location, access and connectivity constraintsAlert handling, support hours and time zoneOther requirements

3. Environments to connect

Add one environment per organization. Count each asset once. Cloud accounts are separate from the virtual servers hosted in them. Log volume is the total per month, not per day.

Choose the main platform in each row. Add additional products where needed. Product examples do not confirm integration support; Sagen will review compatibility.

Organization / environment

Organization name *

Environment typeAdditional products / version (optional)

Workstations / endpointsAdditional products / version (optional)

Workstations / endpoints

ServersAdditional products / version (optional)

Servers, including cloud VMs (count once)

Network / security appliancesAdditional products / version (optional)

Network / security appliances

Cloud accounts / subscriptions / projectsAdditional products / version (optional)

Cloud accounts / subscriptions / projects

Total log GB per month (blank if unknown)Required retention in days (blank if unknown)Log sources, vendors, products and measurement methodLog volume quality

4. SOC coverage & Incident Response

This form is not an emergency response channel. Submission does not initiate incident response or confirm response times. Do not upload incident evidence or credentials.

Requested SOC coverageIncident Response requirement

EDR / XDRAdditional products / version (optional)

FirewallsAdditional products / version (optional)

IdentityAdditional products / version (optional)

Email securityAdditional products / version (optional)

TicketingAdditional products / version (optional)

Locations, countries and time zonesCritical applications, databases and business servicesCurrent SIEM/SOC provider and any migration requirementsLog source vendors, products, integrations and estimated source countEstimated daily alert volume and highest-priority threatsEscalation contacts, phone numbers and out-of-hours availabilityRequested notification and response targets (subject to agreement)Who approves containment actions? What actions require approval?Incident plan, internal response team, backups and forensic readinessIR scope, remote/on-site needs, locations, insurance requirements and desired annual hoursIf an incident is suspected: detection time/time zone, affected systems, business impact and actions takenBudget range, decision date, procurement requirements and NDA needs

I confirm these details may be used to prepare a proposal. Estimates and unknowns will be reviewed by Sagen.

Do not include passwords, API keys, access tokens or raw logs. Completing this form does not place an order, approve a price or activate a service.

Opening your questionnaire…