Aegis Defender CSOC with 10 Guardian Licenses
Aegis Defender CSOC creates a coordinated cyber defense network for up to ten Linux servers. Each protected server runs Aegis Guardian for autonomous local protection, while Defender CSOC connects the Guardians into a shared defense system—correlating threats across the network, synchronizing intelligence, monitoring system health, and coordinating protection from one central security console.
- 10 Aegis Guardian Protected Servers
Deploy the full Aegis protection engine on up to ten Linux servers. Every Guardian independently detects and blocks threats even if the CSOC or Internet connection is temporarily unavailable.
- Central Defender CSOC
Monitor Guardian health, attacks, security events, applications, firewall activity, and protection status from one centralized command console.
- Collaborative Threat Intelligence
Threats detected by one Guardian can contribute intelligence to the entire protected network, helping other Guardians recognize malicious sources and coordinated attacks earlier.
- Cross-Server Attack Correlation
Defender CSOC connects related activity across multiple servers to identify distributed scanning, rotating attack sources, coordinated exploit campaigns, authentication attacks, and other network-wide threats.
- Website & Application Protection
Detect malicious web traffic, SQL injection, suspicious parameters, exploit attempts, CMS attacks, application reconnaissance, malicious requests, and contact-form abuse.
- SSH, cPanel & Login Protection
Detect SSH brute-force attacks, failed cPanel and WHM logins, FTP attacks, privileged sessions, account abuse, and suspicious authentication activity across protected systems.
- Email & Mail Server Protection
Detect SMTP, IMAP, and POP3 authentication attacks, outbound script abuse, frozen mail queues, hosted-account abuse, and coordinated attacks against mail services.
- Firewall & Network Protection
Automatically block verified malicious IPs, monitor firewall integrity, identify hostile networks, and use provider, ASN, country, reputation, and behavioral intelligence when evaluating threats.
What's Included
- ✓ Aegis Defender CSOC
- ✓ 10 Aegis Guardian licenses
- ✓ Autonomous protection on every Guardian
- ✓ Central Guardian monitoring
- ✓ Cross-server attack correlation
- ✓ Shared network threat intelligence
- ✓ Automatic malicious IP blocking
- ✓ Network and CIDR attack detection
- ✓ Application-aware web defense
- ✓ Firewall integrity monitoring
- ✓ Security alerts and reporting
- ✓ Software and intelligence updates
Ten Servers. One Coordinated Defense.
Aegis Guardian systems do not operate as isolated security products. Each Guardian protects its own server while securely contributing security telemetry and threat intelligence to Defender CSOC.
Defender CSOC analyzes activity across the protected network, identifies attacks affecting multiple systems, and coordinates intelligence between Guardians. A threat discovered against one server can therefore help strengthen protection across the rest of the network.
Defender CSOC can also securely communicate significant threat intelligence and aggregated telemetry with Aegis Command, extending the customer's local defense with intelligence gathered across the wider Aegis defense network.
Defender CSOC 10
$2,295 per mo
Includes one Aegis Defender CSOC installation and licenses for up to five Aegis Guardian protected servers. Additional capacity is available through Defender CSOC volume licensing.
Minimum Requirements
- 64-bit Linux Servers
Supports modern Linux distributions on physical servers, virtual machines, and cloud instances. - 1 vCPU Minimum Per Guardian
Suitable for most small servers. Additional CPU is recommended for higher traffic environments. - 1 GB RAM Minimum
Lightweight enough for VPS deployments. Additional memory is recommended for busy servers and the Defender CSOC host. - 1 GB Free Disk Space
Required for the application, local intelligence, security databases, logs, and future updates. - Root or sudo Access
Administrative privileges are required for installation, monitoring, and firewall management.
- Network Connectivity Between Guardians and CSOC
Guardian systems must be able to securely communicate with their licensed Defender CSOC for telemetry, health monitoring, intelligence synchronization, and coordinated defense. - Perl Installed
Used by the Aegis monitoring and automation engine and available on most Linux distributions. - systemd Support
Runs Aegis Defender services in the background with automatic startup and service recovery. - Linux Firewall Integration
Aegis integrates directly with the Linux firewall to automatically enforce verified security decisions. Standard deployment supports CSF, with additional firewall integrations available for qualifying environments. - Internet Connectivity
Required for Aegis Command intelligence, licensing, software updates, and external threat intelligence services.
