U.S. based 24x7 security operations including threat hunting, forensic investigations, and remediation recommendations.

24/7 Threat Hunting

The entire Blueshift XDR platform is delivered, monitored and maintained as a service by Blueshift and the SOC. All alerts are handled by the SOC and customers are notified when anomalies are detected with recommended remediation instructions and what actions have already been taken by the SOC to isolate the issue.

Always Online

Security Operation Center (SOC) Blueshit’s SOC is a virtual operation that is hosted in Amazon Web Services (AWS). Access to systems hosted in our virtual SOC is tightly controlled and logged through both 2FA VPN access, ED25519 key exchanges, and hardware OTP keys. While Blueshift does maintain secure areas at our corporate headquarters for SOC operations, our platform is designed for zero-trust, virtual SOC operations from anywhere in the world, allowing our analysts to work remotely at any time for any reason.

SOC Alerts

The Blueshift Security Operations Center (SOC) receives aggregated alerts from our XDR platform installations that allows the SOC to monitor many different types of events.

These events come from these high level breakdowns:

• Network Events

• Cloud Events

• Agent Events

• Vulnerability Events

• Integration Events