# Monitoring as plug & play. We monitor, you get the report.

Source: https://vetosec.at/en/services/monitoring/

We install an agent on your systems and do the rest. An engineer checks every important alert, you get a monthly report and hear from us right away when something is wrong. If you want, we also take over updates.

- **Set up** in a few days
- **Monthly report** readable
- **Updates** optionally included

## Inside our platform

From live operations, host names and addresses removed.

- Logs · 24 hours: About 420,000 events in one day from an environment of ten servers. That is how much systems log, and nobody can read it by hand.
- Security alerts · filtered: The platform rates every event by severity. What remains is no critical and eight high alerts. An engineer looks at those eight.
- Analysis · suggestion: The system prepares routine checks: it reads configuration and logs and suggests the next steps.
- Approval: Nothing runs until an engineer approves it. Every action is logged.
- Audit log: Every action goes into an immutable log: backups, alerts, approvals. Entries are chained and anchored with timestamps, so nothing can be changed afterwards.
- Compliance scan: We scan servers automatically against recognised security baselines. This server meets 96.8 percent of the applicable rules; the open items are listed in the report and get worked off.

## For IT leads

Technical details: Agent · SIEM · compliance scans · audit log

- **Collection**: Agent on the servers, plus logs from firewalls, network, virtualisation and storage.
- **Coverage**: Availability, resources, backup runs, sign-ins and security events in one view.
- **Triage**: Rules filter false alarms, an engineer checks every relevant alert.
- **Compliance**: Servers are checked automatically against recognised security baselines, open items are in the report.
- **Audit trail**: Actions go into a chained, timestamped log that cannot be altered afterwards.
- **Reporting**: Monthly report with incidents, fixes, open updates and the state of the environment.
- **Service levels**: Response times by agreement, around the clock via fixed cooperation partners.

## Frequently asked questions

### How quickly is monitoring set up?

Usually within a few days. We install an agent on your systems, set up the rules and send the first report after one month.

### What is in the monthly report?

What happened, what we fixed, open updates and where your environment stands. Short and readable.

### Are there guaranteed response times?

Yes, by agreement. For around-the-clock service levels we work with fixed cooperation partners.

### What is the difference between monitoring and logging?

Monitoring watches the state and alerts when a value leaves its range. Logging records events. Operations need monitoring; investigating an incident needs the logs.

### Do I need this for NIS2?

NISG 2026 requires incident handling, among other things. Without logs an incident can neither be reported nor reconstructed. This is our view, not legal advice.

## Related

- [Ongoing support](https://vetosec.at/en/services/it-support/): fixed monthly price
- [Co-managed IT](https://vetosec.at/en/services/co-managed-it/): for in-house IT teams
- [NIS2](https://vetosec.at/en/compliance/nis2/): duties and supply chain

## Monitoring, logging and SIEM for companies in Austria

vetosec runs infrastructure and security monitoring (SIEM) on its own platform, with an engineer checking every relevant alert.

Updated: October 19, 2026

Provider: vetosec, Dipl.-Ing. Samuel Ziegler, BSc, Berndorf, Lower Austria, Austria. Contact: https://vetosec.at/en/contact/