Under Protection NG SOC investigates over 185,000 cyber attacks in the first half of 2025

The company Under Protection, a cybersecurity firm, has just released the consolidated numbers for the performance of its next-generation SOC (New Generation Security Operations Center) for the first half of 2025. Over 185,000 incidents investigated in a total of 1.67 trillion events processed in real-time, solidifying automation as the strategic core of the operation. The data reinforces the company’s leadership in digital protection and response to cyber threats in the country.

Just in June, 283 billion events processed, with around 25,000 automated actions. In the first six months, the system totals approximately 185,000 investigated alerts, 19,000 response activations, and 167,000 automatic executions, reinforcing the effectiveness of Under Protection’s proprietary technology in swiftly neutralizing risks at speed and scale.

“The continuous growth of our NG SOC operation demonstrates Under Protection’s commitment to innovation and technical excellence. We are prepared to face the increasing volume and complexity of threats with data intelligence, automation, and strategic vision,” highlights Wagner Loch, Director of Operations at Under Protection.

The significant results of the NG SOC demonstrate that Under Protection’s operations center is in full expansion, maintaining high efficiency in crucial indicators such as MTTA (mean time to respond), which in some months reached only 20 minutes. These advancements are sustained by a team of 33 security specialists who work together with 1,041 incident response playbooks, covering different threat scenarios including monitoring on the dark web, logs, honeypots, and hybrid environments.

A pioneering SOC model in Brazil

Unlike conventional models, Under Protection’s NG SOC is based on a hybrid ecosystem that integrates proactive detection, automation, and intelligent response, with 24/7 monitoring. The current operations include:

· More than 50,000 monitored assets including servers and workstations;

· 671,000 accounts monitored;

· 1,618 data sources monitored;

· 2,000 dark web profiles analyzed regularly.

The data reflects the growing market confidence in Under Protection’s solutions, which also acts as a strategic partner for IT resellers and integrators who do not yet have their own SOC, offering not only security but business intelligence through cybersecurity.

The company focuses on customization and building specific scenarios for different sectors – from e-commerce and healthcare to critical infrastructure. Thus, it is consolidating its position as a Brazilian pioneering player in building a SOC highly adaptable to the new reality of digital threats and the requirements of compliance, such as LGPD and international frameworks.