Report an Incident Become a Partner Careers Contact
Book a Demo
Contact

Talk to someone
who works in the SOC.

Not a form that disappears into a CRM. Tell us what you run and what worries you about it, and the reply comes from somebody who can answer the technical question rather than book a call to arrange another call.

Send us a message

We reply during working hours in your region. Nothing is deployed and nothing is priced before a scope is agreed in writing.

In an incident

If it is happening now,
phone. Do not use the form.

A form is the wrong tool when the clock is running. Call, and say at the start that it is a live incident.

Already a customer
Use the escalation path agreed at onboarding and the named contacts on it. That is the fastest route into your own SOC queue, and it reaches people who already know your estate.
Not a customer yet
Call and say it is a live incident. Our incident responders are on shift in all three SOCs at every hour, so there is no out-of-hours version of this answer.
What we will ask
What you are seeing, when it started, what is affected, what you have already done, and who can authorise action on your estate.
Partner enquiries

MSPs and resellers.

If you want to sell a SOC without building one, that is a different conversation and a different team. Use the form and say "partner" in the message, and it routes to them rather than to the SOC.

Where we are

Multiple SOCs,
and offices around them.

Each security operations centre is manned around the clock in its own right.

United Kingdom

United States

Jordan

Philippines

Qatar

Kuwait

Microsoft Digital Innovation Centre

Pakistan