VIRTUO SOC MDR pricing – packages for small companies

Transparent, fixed monthly rates – no hidden onboarding costs and no multi-year contracts. Choose the package that matches the number of computers in your company. Every package covers the same scope of service: endpoint and server protection (EDR), remote device management (RMM) and 24/7 security monitoring (MDR).

This is built for small companies – with no in-house IT department and no budget for a full-time security administrator, yet with the same level of protection large organisations have.

Choose the package that fits the size of your company

  • Endpoint and server protection (EDR)
  • Remote device management (RMM)
  • 24/7 security monitoring (MDR)
  • Technical support on business days
  • Monthly security report
  • Everything in STANDARD
  • Server monitoring
  • Extended infrastructure monitoring
  • Monthly security report
  • Optional: Microsoft 365 / Google Workspace monitoring
  • Everything in ADVANCED
  • Priority incident response – SLA within 30 minutes
  • Post-incident remediation
  • Support in containing an incident and restoring systems
  • Periodic security review

What does every package include?

Endpoint and server protection (EDR)

We monitor computers and servers for threats and automatically block suspicious activity, reducing the risk of an incident.

Remote device management (RMM)

We supervise devices remotely, along with their health and updates, so we can respond quickly to technical problems without an on-site visit.

24/7 security monitoring (MDR)

Our security team monitors the client environment around the clock, seven days a week, analysing threats and responding to detected incidents.

No long-term commitment – monthly contracts with 30 days’ notice. You pay only for what you actually use. Euro amounts are indicative only, converted at the ECB reference rate of 4.38 PLN/EUR (September 2026); invoicing is in PLN.

Is your organisation in scope of NIS2?

If your organisation falls within the scope of the NIS2 Directive, we will prepare a solution matched to your regulatory obligations – with an extended monitoring scope, support with incident reporting and a service scale agreed individually.

  • Comprehensive 24/7 SOC security monitoring
  • SIEM – centralised collection and correlation of infrastructure logs
  • EDR and monitoring of workstations and servers
  • Monitoring of key systems and security data sources
  • Incident response SLA within 15 minutes
  • Support with handling and reporting incidents to the relevant CSIRT
  • Reporting and documentation for compliance and audit purposes
  • Expert support on the NIS2 requirements covered by the service

Do you need ransomware-resistant backups?

Immutable backup means backup copies that cannot be modified, encrypted or deleted – even if an attacker takes control of your network. It is the last line of defence when every other control has failed.

  • Ransomware-resistant backups – they cannot be deleted or encrypted
  • Storage in line with the 3-2-1 rule
  • Fast data recovery after an outage or an attack
  • Automatic, scheduled backups – no manual work on the client side
  • Retention matched to regulatory requirements (NIS2, GDPR) – configurable from 30 days to a full year
  • Granular recovery – a single file, a folder or a whole machine, without restoring the entire system
  • Regular restore testing – we confirm the backup actually works before it is needed in a real outage
  • Protection for physical, virtual and cloud environments in one solution
  • Full visibility of backup job status – notifications and reports

Do you need a ready-made plan for an outage?

Disaster recovery (DR) prepares a company for the worst case – a server failure, a ransomware attack or human error. Together we establish which systems have to come back first, prepare a recovery plan and bring up a standby environment in minutes rather than hours of downtime. The whole plan can be tested without affecting day-to-day work.

  • A standby environment brought up in minutes rather than hours of downtime
  • Agreed recovery objectives: acceptable downtime (RTO) and acceptable data loss (RPO)
  • A recovery plan with an agreed order of systems and a clear split of roles
  • DR plan testing without affecting the production environment or the team’s work
  • Support from our team during recovery and when moving back to the primary environment
  • Business continuity protection against hardware failure, ransomware and human error