Services · SOC Setup and expert work

Same capability. Delivered by the team.

The operators who build DHRUVA also do the work by hand. Scoped, priced, and reported so you know exactly what you got. Start with a complete SOC stood up on Wazuh, or bring us in for a specific engagement.

$3,299 fromSOC Setup, one-time
5 wks avgKickoff to handoff
100% yoursOpen source, you own it
SOC Setup · day 36 handover delivered ●
✓ Wazuh manager, indexer, dashboard live on your infra
✓ Agents deployed, all endpoints fleet-managed config
✓ Custom decoders, your stack AWS, Okta, GitHub, whatever
✓ Alert rules tuned to your environment FP rate under 2 percent
✓ DHRUVA Community installed AI triage from day one
✓ Compliance evidence pipelines ISO, SOC 2, HIPAA, DPDP
✓ Team trained, runbooks handed over you own the keys
ownershipkeys transferred · you run it
01 · What we deliver

Six ways to bring us in.

Same standard of proof as the platforms. Scoped and reported so there are no surprises.

SVC-01

SOC Implementation

We stand up your SOC on Wazuh and hand it over running, not half-built.

from $3,299
SVC-02

Penetration Testing

Manual, human-led testing. Real exploits, clear proof, fixes you can action.

project-based
SVC-03

Smart Contract Auditing

Line-by-line review before on-chain code holds real money. Foundry PoC per bug.

project-based
SVC-04

ISO 27001

Gap analysis, policy, and audit evidence. Get certified, stay audit-ready.

retainer
SVC-05

DevSecOps & vCISO

Security wired into your pipeline, plus a security leader on call when you need one.

retainer
SVC-06

SOC Training

Build an enterprise SOC from zero. 20 hands-on sessions on the real stack.

Rs 44,999
02 · SOC Setup, in detail

Seven deliverables. One fixed scope.

No phase 2 pitched halfway through. No surprise line items at handoff. What is on this page is what is in the contract.

01

Wazuh SIEM, stood up end-to-end

Manager, indexer, dashboard. Sized to your event volume. TLS everywhere, secrets managed, backups configured. HA available for 5K+ EPS.

02

Agents deployed across your fleet

Linux, Windows, macOS and containers. Silent install, config pushed from central policy, health visible in the dashboard, tied to your identity system.

03

Log pipelines across cloud and SaaS

CloudTrail, GuardDuty, VPC flow, Kubernetes audit, Okta, GitHub, Workspace, Microsoft 365, and custom apps via syslog, webhook or file tail. Normalized, not link-dumped.

04

Custom detections tuned to your stack

Default rule packs are 40 percent noise on day one. We rebuild them: 184 custom detections, behavioral baselines, FP rate driven under 2 percent by week 5. Detection-as-code, handed over.

05

Compliance evidence framework

ISO 27001, SOC 2, HIPAA and DPDP controls mapped. Retention policies. A read-only auditor portal. Evidence pull templates, one command per control.

06

DHRUVA Community installed on top

Your Wazuh has an AI layer from day one. AI triage, MITRE heatmap, 7 TI feeds, free forever. A clear upgrade path to Team or Enterprise. No trial expiry, no bait-and-switch.

07

Team training plus full handoff

Two 90-minute training sessions, written runbooks, architecture docs, decisions documented. 30 days of email support after handoff, no hourly ambush.

03 · The 5-week timeline

Five weeks. No surprises.

Same process for every client. We publish the timeline because we follow it. For the full methodology with code samples and decision trees, see the How it works page.

Deployment run · kickoff to handoff on schedule ●
Week 0 Discovery call
30-minute scoping call. You describe your stack. We send a written quote within 48 hours.
Week 1 Environment audit
Read-only access. We map what you have, find what is missing, confirm scope before signing.
Week 2 Coverage plan
A written plan: what we ingest, alert on, suppress, and expect to catch. Your sign-off before deployment.
Weeks 2-3 Deployment
Wazuh stood up, agents rolled out, log pipelines wired. Canary rollout. No maintenance window.
Weeks 3-5 Tuning window
FP rate driven from 40 percent to under 2. Detections rebuilt to your environment. You start trusting the alerts.
Week 5 Training + handoff
Two training sessions. Written runbooks. Architecture docs. Keys transferred. You run it from here.
week 0week 5 · you own it
04 · Pricing, scoped to your stack

$3,299 starting.

The final number scopes with stack complexity, log source count, and integrations required. You get a written quote within 48 hours of the discovery call. No surprises at contract time. At handoff, everything is yours: the Community platform is free forever, and you upgrade to Team or Enterprise when your team is ready.

What drives the numberDetail
Stack complexity
SCOPEAWS-only is simpler than AWS plus on-prem plus four SaaS apps.
Log source count
SCOPE10 sources versus 40. Linear in engineering time.
Custom decoders
SCOPEBespoke apps need bespoke parsing, scoped separately.
Compliance scope
SCOPESOC 2 is lighter than HIPAA is lighter than PCI plus DPDP.
HA requirements
SCOPESingle-node is standard. Clustered adds engineering.
05 · Is this for you

Honest qualification, in four lines.

Not everyone needs SOC Setup. Some teams should skip it and go straight to the platform. Figure out which one you are.

FIT

You have no SIEM at all.

Or you make do with a log aggregator and a Slack webhook. You need the foundation before the AI layer can do anything useful.

FIT

You are on a vendor SIEM and want out.

Splunk, Sentinel, Rapid7, whatever is eating your budget. We stand up Wazuh, migrate detections, cut your security infra cost 80 percent.

FIT

You have Wazuh but it is barely tuned.

Default rule pack, 4,000 alerts a day, nobody reads them. We rebuild tuning, wire proper decoders, and install the platform on top.

NOT A FIT

You already have a working, tuned Wazuh.

Skip SOC Setup. Download Community free, upgrade to Team when ready. Or book a $297 Noise Teardown for a second opinion first.

Ready to scope it?

30-minute call. Written quote in 48 hours.

You describe your stack. We tell you what we would deploy, in what order, and what it would cost. If it is not a fit, you have lost half an hour.