Trustmarque Solutions Limited

Trustmarque Logpoint Converged SIEM and SOAR

Logpoint's platform brings together Security Incident and Event Management (SIEM), Security Orchestration Automation Response (SOAR) and User Entity Behaviour Analytics (UEBA) to monitor, detect and alert on security events/incidents within an IT environment. It provides a comprehensive/centralised view of infrastructure security posture, activities and automated playbooks in response to events.

Features

• Real-time search, analytics and visualisation of information across the network
• Over 800 integrations with pre-built dashboards, searches, alerts and reports
• Includes Security, Orchastration, Automation and Response (SOAR) as standard
• Enrich logs with 3rd party sources such as threat intelligence
• Single LogPoint taxonomy used across search, alerts, reports and dashboards
• Scalable deployment options across virtual, cloud and hybrid environments
• Monitor and report aginst compliance standards
• Built-in threat and incident management
• Normalisation on ingestion to flat file log storage, non-SQL backend
• Certified to EAL3+ Common Criteria and SOC2

Benefits

• Predictable cost of ownership
• Thousands of pre-built dashboard, alerts and reports all easily modifable
• Collect, correlate and analysis SAP logs
• Proactively detect and respond to security, operational and network issues
• Consolidate effort and reduce time managing multiple silo vendor solutions
• Quick deployment. Typically five days to become operational
• Built-in data privacy for sensitive logs and self-auditing
• User Entity & Behaviour Analytics (UEBA) highlights anomalous behaviour
• Alignment of reporting and altering to MITRE ATT&CK framework
• Use the dashboards to continually monitor events, conditions and KPIs

£27,792 a licence a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@trustmarque.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

215765432916764

Contact

Lorraine Spence
01904 924089
tenders@trustmarque.com

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: Logpoint SaaS is hosted in secure AWS environments, by defualt in EU and US data centres but can be provided in other data centres by request. Alternatively, customers can self host Logpoint software in public cloud AWS and Azure instances, in private cloud, and in their own virtual environments on-premise.
• System requirements:
  • Minimum CPU: Quad-Core
  • Minimum Memory: 8 GB
  • Minimum Disk Space: 100 GB

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: P1 issues have an SLA with a 4 hour response time.; P2 issues have an SLA with an 8 hour response time.; P3 issues have an SLA with a 16 hour response time.; P4 issues have an SLA with a 24 hour response time.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Support is offered as standard to licenced LogPoint customers on an 8/5 basis. This can be upgraded to 24/7 at extra cost. LogPoint Support will assist customers with issues via a ticketing portal and assist with the onboarding of new log sources required by the customer free of charge, providing the log source is commercially available to other customers and the vendor package can be added to the LogPoint portfolio. ; ; Further support is available through LogPoint's Operations Monitoring (Price dependant on number of nodes in LogPoint SIEM deployment). Operations Monitoring will: ; • Monitor the LogPoint SIEM and OS; • Monitor Hardware; • Provide recommendations for improved performance; • Create and manage support tickets; • Provide version upgrade assistance; • Monthly system reports; • Automatic system checks; • Manual system checks; ; Additional onsite support is available at extra cost. Engagement costs are dependent on the agreed scope of works.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: QuickStart Guide, online and onsite training, videos, product documentation, pre-built example dashboards and alerts, autocomplete, in-line help and wizards.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Data is owned by and located with the customer. Data can be extracted using CSV exports.
• End-of-contract process: Upon expiry of the license data will become inaccessible for searches and other functionality but continues to be logged and stored. Data can be accessed again once license is applied.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems: Linux or Unix
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: HTML5-based Web GUI
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Standard secured browser interface, supporting a permissions model scheme allowing different admin users to have different admin capabilities.
• Accessibility standards: None or don’t know
• Description of accessibility: Standard secured browser interface, supporting a permissions model scheme allowing different admin users to have different admin capabilities.
• Accessibility testing: None
• API: Yes
• What users can and can't do using the API: LogPoint provides a variety of REST-based APIs, including for the management of incidents and issuing searches from third-party platforms.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Customers have control over data retention, device selection, dashboards, queries, templates reports and alerts.

Scaling

• Independence of resources: Logpoint can be deployed as SaaS or alternatively in a private cloud or hybrid model, therefore the infrastructure is entirely under the customer control.

Analytics

• Service usage metrics: Yes
• Metrics types: Prebuilt dashboards, reports and alerts for the built-in auditing and benchmarking. All data is accessible through standard LogPoint searches for custom queries.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: LogPoint

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: In-house
• Protecting data at rest: Other
• Other data at rest protection approach: LogPoint is deployed in a public cloud, private cloud or hybrid model and all data is owned and controlled by the customer.
• Data sanitisation process: No
• Equipment disposal approach: In-house destruction process

Data importing and exporting

• Data export approach: Export function from within a search or from a report.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • HTML
  • XLS
  • DOCX
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • ODBC import
  • LDAP import

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: LogPoint sits within the Buyers network or the infrastructure of their chosen cloud provider. Availability is controlled by the buyer or their cloud provider.
• Approach to resilience: LogPoint sits within the Buyers network or the infrastructure of their chosen cloud provider. Availability is controlled by the buyer or their cloud provider.
• Outage reporting: Email alerts, SNMP monitoring, Syslog alerting, scheduled reporting.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Username or password
• Access restrictions in management interfaces and support channels: Product source code and test suites are managed via a secure change control system. Fully documented procedures ensure development and testing processes are consistent and secure.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Username or password

Audit information for users

• Access to user activity audit information: You control when users can access audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications: Logpoint is certified to Common Criteria, EAL3+ and SOC2

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Logpoint is certified to Common Criteria, EAL3+ and SOC2.
• Information security policies and processes: EAL3+ allows a developer to gain maximum assurance from positive security engineering at the design stage and provides a level of independently assured security.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Product source code and test suites are managed via a secure change control system. Fully documented procedures ensure development and testing processes are consistent and secure.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Please contact for more information
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Please contact for more information
• Incident management type: Supplier-defined controls
• Incident management approach: Please contact for more information

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Trustmarque's Environmental Policy and Carbon Reduction Plan include delivering and supporting actions on reducing our carbon footprint and our impact on climate change. We have set a target to achieve net zero by 2035. Our policies include 'Virtual First 'meetings, energy reduction plans, flexible working, green software solutions and associated services from innovative suppliers to promote digital environmental innovation, promoting sustainable procurement. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and scope.

  Covid-19 recovery

  Trustmarque can provide re-training for those left disadvantaged by Covid-19 through skills training, CV and interview workshops. We promote employment and skills by working with Buyers to identify individuals who can benefit from our incentives, which can include workshops to develop and help those who face barriers to employment and increase digital accessibility for communities and hard to reach groups. We can also provide access to apply for apprenticeship and work experience opportunities. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and scope.

  Tackling economic inequality

  Trustmarque tackles economic inequality through operating a diverse supply chain including many SMEs and micro businesses. Our access to a broad range of suppliers ensures both resilience and capacity. Trustmarque is continuously refining our supply chain to meet the ever-changing needs of our customers and to ensure we can always offer the best solution through capability, capacity and resilience at the best price. Our vendor agnostic approach among suppliers allows us to support innovation and disruptive technologies to deliver lower cost and/or higher quality goods and services to customers. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and scope.

  Equal opportunity

  Trustmarque operates an Equal Opportunities policy that outlines our commitments including creating a workforce that reflects the diversity of our communities. Other initiatives include supporting disabled people to develop skills and supporting in-work progression. Trustmarque is a Level 1 Disability Confident employer, demonstrating our commitment to employing a diverse workforce so all can flourish. We are committed to a policy of treating all its employees and applicants equally. We are committed to creating an environment where diversity is valued and respected and where our people can bring their different perspectives, and whole selves to work. Inclusivity and equal opportunities for all colleagues are paramount. Trustmarque is a Living wage employer, and we offer 14–18-month apprenticeships. In February 2024 we launched Encircle our DEI network – made by colleagues, for colleagues to support Diversity, Equity, and Inclusion in the workplace. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and scope.

  Wellbeing

  We align our approach to mental wellbeing to the six standards in the Mental Health at Work commitment, including staff work and wellbeing sessions, flexible working, speak-up policy, etc. We have a dedicated team of qualified Mental Health First Aiders who offer support to all Trustmarque Group Colleagues to offer advice regarding how to support and signpost – this is linked to the ALGEE mental health action plan. The Work+Wellbeing team also facilitate workshops or share resources to support wellbeing within the workplace, this can be found on our Work+Wellbeing team via the Trustmarque Hub. We have an Employee Assistance Programme which is available 24/7 to all Trustmarque Group Colleagues. Please contact Trustmarque to discuss the provision of Social Value. Any Social Value deliverable must be agreed with Trustmarque and be proportionate to the contract value and scope.

Pricing

• Price: £27,792 a licence a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Customer can opt to trial a pre-populated LogPoint environment containing example data. Dashboards, alerts, searches, reports and playbooks can all be modified to test and evaluate within this environment.
• Link to free trial: Trials are setup using a CloudShare environment with support from Sales Engineering and Customer Success.

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@trustmarque.com. Tell them what format you need. It will help if you say what assistive technology you use.