Under Protection, a cybersecurity company, has just released the consolidated performance figures of its NG SOC (Next-Generation Security Operations Center) for the first half of 2025. A total of over 185,000 incidents were investigated from an aggregate of 1.67 trillion events processed in real time, solidifying automation as the strategic core of the operation. These figures reinforce the company's leadership in digital protection and cyber threat response in the country.
In June alone, 283 billion events were processed, with approximately 25 thousand automated actions. In the cumulative total for the first six months, the system recorded approximately 185 thousand alerts investigated, 19 thousand response activations and 167 thousand automated executions, underscoring the effectiveness of Under Protection's proprietary technology in neutralizing risks with speed and scale.
“The continuous growth of our NG SOC operation demonstrates Under Protection's commitment to innovation and technical excellence. We are prepared to handle the increasing volume and complexity of threats with data intelligence, automation, and strategic vision,” emphasizes Wagner Loch, Operations Director of Under Protection.
The significant results of the NG SOC demonstrate that Under Protection's operations center is in full expansion, maintaining high efficiency in crucial indicators such as MTTA (Mean Time to Acknowledge), which in some months reached as low as 20 minutes. These advancements are supported by a team of 33 security specialists, who work in conjunction with 1,041 incident response playbooks, covering various threat scenarios, including dark web monitoring, logs, honeypots, and hybrid environments.
A pioneering SOC model in Brazil
Unlike conventional models, Under Protection's NG SOC is based on a hybrid ecosystem that combines proactive detection, automation, and intelligent response, with 24/7 monitoring. The current operation includes:
· Over 50 thousand monitored assets, including servers and workstations;
· 671 thousand accounts monitored,
· 1,618 data sources monitored;
· 2 thousand dark web profiles regularly analyzed.
The data reflects the market's growing confidence in Under Protection's solutions, which also serves as a strategic partner for resellers and IT integrators that do not yet have their own SOC, offering not only security but also business intelligence through cybersecurity.
The company focuses on customization and building specific scenarios for different segments—from e-commerce and healthcare to critical infrastructure. Thereby, it has been consolidating its position as a pioneering Brazilian player in building a SOC highly adaptable to the new reality of digital threats and compliance requirements, such as LGPD and international frameworks.

