Wingman Managed Detection and Response (MDR)
Wingman MDR is designed from the ground up as a
Managed Detection and Response service that will fit your
environment and deliver optimal levels of support. Delivered as a
service by our UK-based 24/7/365 staffed SOC,
Wingman MDR brings detection and response capabilities
to organisations of all sizes and types.
Features
- 24/7/365 UK-based "eyes-on-screen" security monitoring and alert triage.
- Cloud-native Google SecOps SIEM and SOAR platform architecture design.
- Unlimited incident response, forensic analysis, and post-event clean-up support.
- Custom log source onboarding and parser development for non-standard apps.
- Bespoke detection engineering aligned to MITRE ATT&CK and business context.
- Fully transparent "glass box" access to rules, playbooks, and logic.
- Proactive threat hunting utilising retro-hunts against 12 months of data.
- Automated SOAR playbook design, implementation, and continuous tuning.
- Strategic security advisory and regular service performance reviews.
- Vendor-agnostic integration with existing EDR, network, and cloud tools.
Benefits
- Reduces mean time to detect and respond to threats.
- Automates repetitive tasks to increase security operations efficiency.
- Detects past compromises using current intelligence on historical data.
- Provides complete visibility into detection logic and investigation workflows.
- Scales security operations effortlessly without infrastructure management overhead.
- Ensures predictable costs with unlimited content development and tuning.
- Enhances threat detection tailored to specific business risks.
- Integrates diverse log sources for comprehensive security visibility.
- Leverages AI to accelerate analysis and decision-making processes.
- Minimises false positives through continuous rule tuning and refinement.
Pricing
Service documents
Request an accessible format
Framework
G-Cloud 15
Service ID
6 9 9 4 1 9 9 4 6 6 0 7 1 4 7
Contact
SEP2 LIMITED
sep2 sales team
Telephone: 03300437372
Email: sales@sep2.co.uk
About your service
- Service categories
-
Cloud Support Services
Security Services
- Security strategy
- Security risk management
- Security design
- Security incident management
- Security audit services
Service scope
- Service constraints
-
Services are primarily delivered remotely from our 24/7/365 UK-based SOC; we do not outsource or offshore operations. While virtual support and visits to our SOC are included, on-site attendance at customer locations may incur additional travel costs.
The solution relies on the Google SecOps SaaS platform. Google manages underlying infrastructure availability and maintenance. Data residency defaults to the EU Multi-Region, though UK-specific hosting is available at an additional cost. Log collection infrastructure (Bindplane Agents) generally requires customer hosting unless a SEP2-hosted model is selected. Licensing is based on data ingestion volume, not Events Per Second.
User support
- Email or online ticketing support
- Yes
- Support response times
-
P1 (Critical) questions, response is provided within 15 minutes. P2 (High) questions, response is provided within 1 hour. P3 (Medium) questions, responses are within 4 hours.
P4 (General Enquiries) questions, responses are within 8 hours - User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- WCAG 2.2 AA
- Phone support
- Yes
- Phone support availability
- 24 hours, 7 days a week
- Web chat support
- Yes
- Web chat support availability
- 24 hours, 7 days a week
- Web chat support accessibility standard
- None or don’t know
- How the web chat support is accessible
-
Web chat is accessible through a secure site requiring a user account.
Users will be able to query, modify and create support tickets.
Users are not able to modify account details through a web chat, and they cannot change or update users.
The chat function complements a more rigorous and dedicated ticket management system. Web chat is not designed to deliver the core functions and ongoing communication methods for service delivery. - Web chat accessibility testing
-
None.
SEP2 have a roadmap for the development of the web chat functionality and features, including assistive technology, for users. - Support levels
-
SEP2 provides a single, comprehensive support level for the Wingman MDR service. We do not operate a traditional tiered support methodology; instead, we deliver unlimited and unrestricted 24/7/365 support to all customers. This includes direct access to our UK-based Security Operations Centre (SOC) analysts and engineers without navigating through non-technical helpdesk layers.
All support costs are fully inclusive within the service being provided. There are no additional charges for 24/7/365 coverage, SIEM/SOAR engineering, Threat Hunting, Incident Response, or platform management. - AI chatbot
- No
Resellers
- Supplier type
- Reseller providing extra features and support
- Organisation whose services are being resold
- Google Cloud EMEA
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Security Clearance (SC)
Pricing
- Discount for educational organisations
- No
Architecture roles
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Network architect | £1,500.00 | |
| Lead network architect | £1,500.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Security architect | £1,500.00 | |
| Lead security architect | £1,500.00 | |
| Principal security architect | £1,500.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Technical architect | £1,500.00 | |
| Senior technical architect | £1,500.00 | |
| Lead technical architect | £1,500.00 | |
| Principal technical architect | £1,500.00 |
Chief digital and data roles
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Chief information security officer | £1,500.00 |
Cyber security roles
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Lead cyber security audit and assurance | £1,500.00 | |
| Principal cyber security audit and assurance | £1,500.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber security governance and risk manager | £1,500.00 | |
| Lead cyber security governance and risk manager | £1,500.00 | |
| Principal cyber security governance and risk manager | £1,500.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Lead cyber security monitoring | £1,500.00 | |
| Principal cyber security monitoring | £1,500.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Lead cyber security incident response | £1,500.00 | |
| Principal cyber security incident response | £1,500.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Lead cyber security vulnerability management | £1,500.00 | |
| Principal cyber security vulnerability management | £1,500.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Lead cyber security digital forensics | £1,500.00 | |
| Principal cyber security digital forensics | £1,500.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Lead cyber security penetration testing | £1,500.00 | |
| Principal cyber security testing | £1,500.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Lead cyber security secure systems architecture and design | £1,500.00 | |
| Principal cyber security secure systems architecture and design | £1,500.00 |
Non-mandatory Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- Alcumus ISOQAR
- ISO/IEC 27001 accreditation date
- Friday 21 December 2018
- What the ISO/IEC 27001 doesn’t cover
- Nothing. The certification covers the whole organisation.
- ISO 28000:2022 certification
- No
- ISO 9001 certification
- No
- Quality management systems (QMS)
- Yes
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Please provide your Cyber Essentials Certificate Number
- Bee1f05f-b715-4f2b-bc36-27fd6ddc66ab
- Cyber essentials plus
- Yes
- Please provide your Cyber Essentials Plus Certificate Number
- D926878b-32ee-4e25-afa0-46693c10b31a
- Other security certifications
- Yes
- Any other security certifications
- CREST:SOC
Social value
- Section B - Commitment for Future: Delivery
-
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority
- New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
- Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
- Plans to engage the contract workforce in deciding the most important workplace issues to address
- Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
- Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
- Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Volunteering opportunities for staff
- Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
- How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
- Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.
- Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises
- Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
- Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
- Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
- Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
- Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
- Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds
-
Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero
Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.
- Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
-
Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 6: Employment and training: For those who face barriers to employment
- Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
- Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
- Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
- Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
- Offering a range of quality opportunities with routes of progression if appropriate, e.g. T Level industry placements, students supported into higher level apprenticeships.
- Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
-
Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.
- Understanding of the issues affecting the development of new skills by target cohort
- Understanding of issues relating to entering the contract workforce
- Creation of outreach activities to create a pipeline of employees for the future contract delivery
-
Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.
Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.
- Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
- Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
- Actions to invest in the physical and mental health and wellbeing of the contract workforce
-