Frequently Asked

A managed SOC (Security Operations Center) is an outsourced security operations center that monitors and protects your IT infrastructure 24/7. Our expert team detects, analyzes and responds to security threats in real-time, using proven rules and signatures.

We offer three preemptive MDR plans: Starter (1–25 seats, $60/seat/month, min $400/month — 24/7 human SOC + Pythie detection), Growth (26–150 seats, $50/seat/month, min $1,600/month — Pythie + Swarm + Prometheus dashboard, response < 2h), and Corporate (151–500 seats, $38/seat/month, min $7,700/month — dedicated analyst, response < 1h). An Enterprise plan is available on quote for 500+ seats. See detailed pricing →

Initial deployment typically takes 2 to 4 weeks depending on your infrastructure's complexity. We start with a needs analysis, followed by monitoring tool configuration and process implementation.

We use proven detection rules and known threat signatures to identify suspicious activities. Our system analyzes your infrastructure's logs and events in real-time, powered by Pythie AI for advanced proactive detection.

Pricing is based on your infrastructure size, number of assets to monitor, required service level and specific features. Contact us for a custom quote tailored to your needs.

We accept credit/debit cards via Stripe (Visa, Mastercard, American Express), bank transfers and monthly or annual invoice payments for businesses.

For SOC services, we recommend a minimum 12-month commitment to ensure optimal protection and allow for complete integration of our solutions.

Our support is available 24/7 via email at [email protected] or by phone at +1(819)943-8591. For SOC customers, a dedicated portal allows you to create incident tickets.

For critical incidents, our response time is maximum 15 minutes. For medium priority incidents: 1 hour. For general requests: 4 business hours.

Yes, we offer cybersecurity awareness training for your teams, technical training sessions on our tools and custom workshops based on your needs.

Yes. Our services are designed to support your compliance with Quebec Law 25 (Act to modernize legislative provisions respecting the protection of personal information) and PIPEDA (Personal Information Protection and Electronic Documents Act, federal). Our protocols cover privacy incident management, access traceability, and data minimization — three pillars of both laws. Client data is hosted in Quebec, under Canadian jurisdiction.

Our team is eCIR certified (European Certified Incident Responder), the reference certification in incident response. We don't claim SOC2 or ISO 27001 certification for Appollon itself — but we actively support our clients in obtaining these certifications through our acceleration program included in Scale-up and Corporate plans.

Your data is hosted in secure data centers complying with Canadian and international standards. We guarantee the confidentiality and integrity of your data with end-to-end encryption.

The onboarding process unfolds in 4 steps: (1) Surface audit — our hunters map your external perimeter (free, 48h). (2) Technical kickoff — meeting with your IT team to validate architecture and access (week 1). (3) Agent deployment — Talos installed on your endpoints, Prometheus and NOX monitoring configured (weeks 1–2). (4) SOC activation — your dashboard goes live, our analysts take over 24/7 monitoring (weeks 2–3). Total timeline: 2 to 4 weeks depending on your infrastructure.

For a company with 30 seats, the Growth Plan (26–150 seats) applies: $50 CAD / seat / month, or $1,500 / month (minimum billing: $1,600/month). This includes 24/7 human SOC, Pythie + Swarm, real-time Prometheus dashboard and guaranteed < 2h incident response. For comparison, the average cost of a cyberattack in Canada in 2024 is $6.94M (IBM Cost of Data Breach Report 2024). See all plans →

Our DRG contracts start on a 12-month basis — the time needed to reach a mature, measurable security posture. Beyond that period, the contract renews monthly. Early termination is possible with 60 days' notice. For the Enterprise Plan (500+ seats), terms are negotiated on a custom basis. Contact us to discuss your specific situation.

From the moment the contract is signed, our team maintains partial watch over your perimeter, even before full SOC activation. If an incident is detected during the deployment phase, our analysts respond immediately according to the eCIR protocol. Deployment is accelerated if an active threat is identified.