Documentation contents
AarSOC · The service
Offers
The four cumulative AarSOC offers: Sentinelle, Gardien, Citadelle and Souveraine. What each one adds to the previous one, and the pilot programme.
On this page
The offers are cumulative: each includes everything in the one before. Pricing on request; each offer can be operated by CyberAar or deployed in your own infrastructure.
Sentinelle: “I watch”
- Dashboard, KPIs and asset inventory
- Real-time alerts and incident tracking
- Exfiltration detection
- Vulnerability assessment, actively exploited flaws first
- Suspicious email reporting to the SOC
- On-call paging on critical alerts, with escalation
- Incident reports and tickets with the SOC
- Named analyst
- 6-month online retention
Gardien: “I analyse with you”
All of Sentinelle, plus:
- In-depth alert investigation
- Threat intelligence
- Posture checks (CIS hardening)
- On-site collector with network detection
- Analyst pair
- 12-month online retention
Citadelle: “I run your security”
All of Gardien, plus:
- Automated response (SOAR), actions approved by an analyst
- Remote digital forensics
- Weekly threat hunting
- Lookalike domain and password breach monitoring
- Named analyst team, 24/7 coverage
- AI assistant: triage and summaries, under human control
- 24-month online retention and on-site archive
Souveraine: “Nothing leaves”
All of Citadelle, with one difference: no data to any third-party service, no external AI assistant, no analysis by an outside service.
Pilot programme
For six months you get Citadelle’s features, without the AI assistant, with a referent analyst. At the end of the pilot, a report documents the detections made, the false positives encountered and the adjustments made; you then choose an offer, or stop and leave with your data. See the pilot programme.
Billing
Monthly, according to the chosen offer and the covered scope, set during scoping. No charges tied to the number of alerts or incidents.
Commercial details: AarSOC and Offers and terms.