Phakamo Managed SOC – Microsoft-Native MDR

Phakamo Managed SOC is a 24x7 Managed Detection and Response service delivered entirely on Microsoft Sentinel, Microsoft Defender XDR, and Microsoft Entra ID, operated from South African soil by South African citizen analysts, and aligned to POPIA, the Cybercrimes Act, and the National Cybersecurity Policy Framework.

Pure Microsoft delivery. Phakamo operates exclusively through Azure Lighthouse delegation to your tenant. All security telemetry, all workbooks, all analytics rules, and all evidence remain inside your Microsoft Sentinel workspace at all times. Phakamo does not extract, copy, or store your security data anywhere outside your tenant. This is the strongest possible POPIA Section 19 position — your personal information never leaves your environment.

What every subscription deploys into your workspace:

• Approximately 30 production-grade Sentinel analytics rules, MITRE ATT&CK-mapped and version-controlled in Phakamo Azure DevOps
• The Phakamo Sentinel Workbook Library — 12 workbooks covering executive posture, MITRE coverage, SLA performance, POPIA evidence, identity risk, endpoint posture, and cloud configuration drift
• A curated set of Logic Apps SOAR playbooks for automated containment
• Threat intelligence connector with Phakamo-curated indicators tuned for the South African threat landscape

Four plans scale by daily Sentinel ingestion and endpoint estate:

• Essentials — up to 25 GB/day, up to 500 endpoints, 15-minute Critical SLA
• Professional — 25 to 100 GB/day, up to 2,500 endpoints, 10-minute Critical SLA, 16 hrs/month threat hunting, quarterly purple team
• Enterprise — 100 to 300 GB/day, up to 7,500 endpoints, 5-minute Critical SLA, 40 hrs/month threat hunting, monthly purple team, dedicated Customer Security Engineer
• Sovereign — Private Offer for public sector with custom scope, SITA-aligned procurement, and POPIA-specific contractual addenda

Phakamo Tech is an Advanced Security & Risk Specialist, and Level 1 B-BBEE contributor. Reference engagements include Custodians of Critical Infrastructure - Critical Services & Hyper-Sensitive IP, and large enterprise customers across financial services and healthcare.