What Senthorus does

Senthorus operates a Swiss-based Next-Generation Security Operations Center (SOC) from Geneva, providing 24/7 managed detection and response (MDR) services to enterprise and government organizations, with all data residency guaranteed within Switzerland. The company is a 100% owned subsidiary of ELCASecurity, itself part of ELCA Group (55+ years, 2,300+ professionals), and its platform is powered by Bluevoyant's global cybersecurity technology stack. Its core product portfolio includes modular MDR services covering Microsoft Sentinel, Microsoft XDR, Splunk Cloud, Splunk Enterprise, and Endpoint EDR (supporting Microsoft Defender, SentinelOne, Crowdstrike, and Carbon Black), supplemented by a proprietary Next-Generation Content layer of 900+ custom alerts, 300+ custom data connectors, and 600+ proprietary Splunk rules with AI-assisted Risk Based Alerting. Beyond MDR, the company sells incident response retainers, advisory services (GRC, IAM, Cloud & Infrastructure, Crisis Anticipation, Post-Quantum Cryptography Assessment), penetration testing, and the Praethorus sub-brand for Swiss SMEs.

The business model is predominantly enterprise managed services sold through direct field sales with consultative cycles (security maturity workshops, onboarding, custom detection rule development), paired with co-selling through Microsoft and Splunk partner ecosystems and event-driven demand generation (ELCASecurity Insights in Lausanne and Zurich). Pricing is quote-based for enterprise MDR with annual recurring contracts, while the Praethorus SME product is sold via self-serve web channels at CHF 9.99/month or CHF 99/year per license. Customer segments include Swiss enterprises and government agencies, global multinationals, and critical infrastructure operators with complex IT/OT environments, illustrated by marquee engagements such as Transports Publics Genevois (tpg) and the Eurovision Song Contest 2025 in Basel, where the firm mitigated over 5,000 threats alongside Microsoft.

The competitive position rests on Swiss data sovereignty and regulatory compliance (FADP, nFADP, GDPR), multi-vendor EDR strategy to avoid single-vendor failure points, IT/OT integrated monitoring with MITRE ATT&CK ICS framework mapping, and ELCA Group's established enterprise consulting relationships. Operational scale signals include SOC coverage expansion from 24% to 100% for tpg, MTTA of 3.4 minutes and MTTR of 37 minutes, and the ability to serve a 170-million-viewer event — evidence of credible 24/7 service delivery, though revenue figures remain undisclosed.

Name

Senthorus

Legal name

ELCA Security SA

Website

https://senthorus.ch

Company type

Private

Operating status

Operating

Headcount range

11–50 employees

Short description

Senthorus is a Swiss-based Next-Generation Security Operations Center providing 24/7 managed detection and response services to enterprise, government, and critical infrastructure clients. Operating from Geneva with local data sovereignty, it is a 100% subsidiary of ELCASecurity within ELCA Group and is powered by Bluevoyant's platform.

Ownership category

akta.pro rank

Product category

Managed Security Services

NAICS

Security Systems Services (56162), Computer Facilities Management Services (541513), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Processing & Data Preparation (7374)

akta.pro primary industry

Managed Detection & Response (MDR) & SOC Services (HDADAGAG)

akta.pro secondary industries

Security Operations Center (SOC) as a Service (BPAEADAB), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG)

Keywords

• Managed detection response
• Security operations center
• Cybersecurity consulting services
• Incident response services
• Endpoint threat protection

Headquarters

HQ city

Pully (Lausanne area)

HQ country

Switzerland

HQ region

Europe

Offices4 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Infrastructure, Marketing or Sales

Revenue model

1. Managed Detection and Response (MDR) Services: Senthorus's primary revenue stream. Provides 24/7 monitoring, detection, investigation, and response services across endpoints, cloud, and IT/OT environments. Delivered as managed services with customizable packages for Microsoft Sentinel, Microsoft XDR, Splunk Cloud, Splunk Enterprise, and standalone Endpoint EDR. Revenue is recurring (subscription/annual contracts), with professional services for onboarding, training, and workshops bundled into service agreements.
2. Consulting and Advisory Services: Advisory team provides security services including ISMS implementation, ISO27k standards compliance, FADP/nFADP/GDPR conformity, security awareness training, and crisis exercises. Revenue is project-based or embedded within broader managed service agreements.
3. Professional Services (Selection, Integration, Configuration): Services covering IT solution selection, integration into existing IT environments, configuration based on business-specific requirements, and ongoing support. Revenue is project-based or one-time engagement.
4. Incident Response Retainer: Yearly incident response retainer providing 24/7 availability including holidays, with digital forensics activation and security maturity assessment. Revenue is annual recurring retainer.
5. Rapid Diagnostic and Cybersecurity Assessments: Rapid diagnostic service covering five priority domains with traffic-light readiness snapshot and board-ready summary. Free 5-minute readiness check also offered as a lead-generation tool.

Pricing tiers

Go-to-market motion2 records

Distribution channels5 records

Marketing channels7 records

Core offering

Senthorus operates a Swiss-based Next-Generation Security Operations Center (SOC) from Geneva providing 24/7 Managed Detection and Response (MDR) services for enterprise endpoints, cloud, and IT/OT environments. Services include customized deployment, monitoring, investigation, and response across Microsoft Sentinel, Microsoft XDR, Splunk Cloud, Splunk Enterprise, and multi-vendor EDR platforms (Microsoft Defender, SentinelOne, Crowdstrike, Carbon Black). The offering is complemented by advisory services covering GRC, Crisis Anticipation, Cloud & Infrastructure Security, IAM, and Post-Quantum Cryptography, plus the SME-focused Praethorus product and TrustID digital identity solution.

Product overview

Senthorus operates a portfolio-based cybersecurity offering centered around its Swiss Next-Generation Security Operations Center. The core offering is Senthorus MDR (Managed Detection and Response), which provides 24/7 monitoring and response services. This core platform supports multiple modular integrations including MDR for Microsoft Sentinel, MDR for Microsoft XDR, MDR for Splunk Enterprise, MDR for Splunk Cloud, and MDR Solutions for Endpoint (leveraging Microsoft Defender, SentinelOne, Crowdstrike, and Carbon Black). Related offerings include Praethorus (a separate sub-brand for Swiss SME cybersecurity), TrustID (Swiss digital identity/eID solution), Cyber Incident Response Service, Penetration Testing, and advisory services (GRC, Crisis Anticipation, Cloud/Infrastructure Security, IAM, Professional Services, and Post-Quantum Cryptography Assessment).

Differentiator

Problem solved

Functional benefit

Brands

• Senthorus MSSP: Managed Security Services Provider offering Next-Generation SOC services including MDR (Managed Detection and Response) solutions for endpoints, Microsoft Sentinel, Microsoft XDR, Splunk Cloud, and Splunk Enterprise.
• Praethorus
• TrustID

Products and services

• Senthorus Managed Detection and Response (MDR) A Swiss-based Next-Generation Security Operations Center providing 24/7 managed detection and response services. Senthorus customizes, deploys, manages, monitors, and responds to cyber threats across endpoints, cloud, and IT/OT environments for enterprise and government organizations.
• MDR for Microsoft Sentinel Managed Detection and Response service leveraging Microsoft Sentinel SIEM, providing Swiss-based 24/7 SOC monitoring, over 900 custom alerts and 300+ custom data connectors for finely tuned high-fidelity alerting and complete visibility across customer environments.
• MDR for Microsoft XDR Extended Detection and Response service leveraging the full Microsoft XDR product family including Defender for Endpoint, Defender for Identity, Microsoft 365 Defender, Defender for Cloud Apps, and Defender for OT, with end-to-end kill chain management.
• MDR for Splunk Cloud Managed Detection and Response service for Splunk Cloud environments, correlating and analyzing network, user, endpoint, and security logs in real time, aggregating disparate data sources, and applying threat intelligence to filter background noise and prioritize alerts.
• MDR for Splunk Enterprise Managed Detection and Response service for Splunk Enterprise with 600+ proprietary detection rules, AI-driven behavioral anomaly detection, and Risk Based Alerting for enhanced security visibility and prioritized incident handling.
• MDR Solutions for Endpoint Endpoint Detection and Response service using NGAV and EDR technology from Microsoft Defender, SentinelOne, Crowdstrike, and Carbon Black to detect, block, and contain threats including malware, ransomware, zero-days, and fileless attacks, with triage, threat hunting, and automated remediation.
• Praethorus A Swiss cybersecurity solution designed for SMEs, associations, and municipalities. Praethorus provides simple installation, clear dashboard monitoring, continuous infrastructure monitoring, real-time alerts, and 24/7 emergency response. Priced at CHF 9.99/license/month or CHF 99/license/year with optional onboarding support at CHF 499.
• TrustID A trusted Swiss digital identity (eID) solution providing secure identity creation and management, multi-factor authentication (MFA), identity federation, single sign-on (SSO), and e-signature capabilities through a mobile app, complementing Senthorus's managed security services.
• Cyber Incident Response Service 24/7 cyber incident response service including digital forensics, security maturity assessment, process preparation, and recovery support. Available on an annual retainer basis providing 24/7 availability including holidays.
• Penetration Testing Services Proactive offensive security services that allow organizations to methodically identify threats and real-world risks through penetration testing against their systems, networks, and applications.
• Governance, Risk and Compliance (GRC) Advisory Expert cyberstrategy advisory services for managing governance, risk management, and compliance with industry and government regulations, including ISMS, ISO27k standards, and regulations (FADP, nFADP, GDPR).
• Crisis Anticipation Services Advisory services including Business Continuity Plan / Disaster Recovery Plan development, incident response planning, playbook development, and tabletop exercises to prepare organizations for crisis scenarios.
• Cloud and Infrastructure Security Cloud security advisory services covering risk analysis, compliance processes, and data classification and protection across multi-cloud environments.
• Identity and Access Management (IAM) Advisory Identity governance evaluation, IAM technology recommendations, and IAM As A Service solutions for managing digital identities across customer environments.
• Post-Quantum Cryptography Assessment Vendor-neutral assessment service helping organizations evaluate and prepare for post-quantum cryptography migration to protect against future quantum computing threats.
• Data Privacy and Protection Enterprise-grade data protection solutions including advanced levels of data security, compromise protection, and secure storage for sensitive data.
• Professional Services Advisory services covering ISMS, ISO27k standards, and regulations (FADP, nFADP, GDPR) implementation, plus crisis exercises, security awareness training, and management solutions.
• Advisory, Consulting and Integration State-of-the-art consulting services covering security norms and standards, regulations, hacking techniques, IT solution selection, integration into existing IT environments, configuration based on business-specific requirements, and ongoing support.

Quantifiable outcome

• SOC coverage expanded from 24% to 100% for a major public transportation operator
• +4 more outcomes

Named customers3 records

Segments3 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration11 records

AI capability2 records

Feature5 records

Partnerships

Eleven partnerships are on record, tiered minor, flagship and core.

• Darktrace (Event Partnership)minorGTM or Marketing Partner · 15 September 2026Darktrace is a featured partner at ELCASecurity Insights 2026 in Lausanne and Zurich, contributing insights on delivering resilient cybersecurity in the face of AI-driven threats.
• Hoxhunt (Event Partnership)minorGTM or Marketing Partner · 15 September 2026Hoxhunt is a featured partner at ELCASecurity Insights 2026 in Lausanne and Zurich, contributing to discussions on AI-driven cybersecurity threats.
• Cloudflare (Event Partnership)minorGTM or Marketing Partner · 25 February 2026Cloudflare is a technology partner featured at ELCASecurity's Artificial Intelligence & Cybersecurity event in Sion (February 2026), presenting on 'Securing the future at the speed of AI.' Also a partner at ELCASecurity Insights 2026.
• Armis (Event Partnership)minorGTM or Marketing Partner · 25 February 2026Armis is a technology partner at ELCASecurity's AI & Cybersecurity event in Sion (February 2026), presenting on 'Operationalization before AI.'
• Association Cybersécurité Valais (Event Co-Organizer)minorStrategic or Co-development Partner · 25 February 2026Association Cybersécurité Valais co-organizes the Artificial Intelligence & Cybersecurity event with ELCASecurity in Sion (February 2026), bringing together the Valais cybersecurity ecosystem.
• Microsoft (Eurovision 2025)flagshipStrategic or Co-development Partner · 1 December 2025ELCASecurity/Senthorus partnered with Microsoft as a key cybersecurity partner to protect the Eurovision Song Contest 2025 in Basel. ELCASecurity acted as chief information security officer, delivering a federated security architecture powered by Microsoft security suite that mitigated over 5,000 threats for an event with 170+ million viewers.
• BluevoyantcoreTechnology or IntegrationBluevoyant is the technology platform powering Senthorus's Next-Generation SOC. Bluevoyant converges internal and external cybersecurity capabilities into a unified platform, providing Senthorus with threat intelligence, detection capabilities, and global security operations infrastructure. Bluevoyant received Microsoft Security U.S. Partner of the Year in 2022 and 2023, and was named Security MSSP of the Year in 2023.
• ELCA Group / ELCA SecuritycoreStrategic or Co-development PartnerSenthorus is a 100% subsidiary of ELCASecurity, which is part of ELCA Group. ELCA brings 55+ years of history, 2,300+ professionals, and end-to-end cybersecurity and digital transformation expertise. ELCA Security provides consulting, integration, and advisory services that complement Senthorus's managed security offerings.
• MicrosoftcoreTechnology or IntegrationSenthorus delivers MDR services built on Microsoft's security stack including Microsoft Sentinel (SIEM), Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft 365 Defender, Defender for Cloud Apps, and Defender for OT. Senthorus developed 900+ custom alerts and 300+ custom data connectors above Microsoft's out-of-box capabilities.
• SplunkcoreTechnology or IntegrationSenthorus offers MDR services for both Splunk Cloud and Splunk Enterprise, leveraging 600+ proprietary detection rules, AI capabilities, and unique Risk Based Alerting. Services include onboarding, CIS-based security maturity workshops, analytics optimization, and 24/7 Swiss SOC monitoring.
• SentinelOne, Crowdstrike, Carbon BlackcoreTechnology or IntegrationSenthorus harnesses NGAV and EDR technology from SentinelOne, Crowdstrike, and Carbon Black alongside its Bluevoyant-powered platform to deliver comprehensive endpoint protection with triage, threat hunting, and automated remediation.

Scale indicators9 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Secureworks: Established global MSSP with broad managed security, MDR, and Taegis XDR platform. Competes with Senthorus at the high end of enterprise SOC outsourcing while also providing adjacent advisory and incident response services.
• Sophos: Endpoint and network security vendor that has expanded into Sophos MDR with a 24/7 SOC. Competes with Senthorus where customers want bundled endpoint + managed response, particularly for mid-market and SMEs similar to Praethorus.
• Trustwave: Global MSSP with managed detection, response, and a global SOC footprint. Overlaps with Senthorus in enterprise MDR and consulting, and offers comparable data-residency options in EMEA.

Regional players

• InfoGuard: Swiss-based cybersecurity specialist with a 24/7 SOC and managed security services portfolio. Direct regional competitor to Senthorus for Swiss enterprise, financial services, and public-sector MDR contracts.
• Kudelski Security: Swiss-headquartered cybersecurity provider offering managed security services, MDR, and advisory. Most direct geographic and cultural peer to Senthorus, competing for the same Swiss enterprise and critical-infrastructure customers.

Direct peers

• Arctic Wolf: Pure-play MDR/SOC-as-a-service provider offering 24/7 monitoring, threat detection, and response across endpoints, cloud, and networks. Competes head-to-head with Senthorus for mid-market and enterprise MDR contracts, including in EMEA.
• Expel: Transparent MDR provider with 24/7 SOC, strong cloud detection (AWS/Azure), and integration breadth across EDR and SIEM platforms. Closely aligned with Senthorus's 'transparency' positioning and multi-vendor detection strategy.
• ReliaQuest: Enterprise-focused MDR provider operating a global 24/7 SOC with multi-tenant SIEM/XDR support. Direct competitor in the enterprise SOC-as-a-service category where Senthorus competes for large regulated customers.
• Bluevoyant: Platform technology partner and direct competitor in managed detection and response. Senthorus's entire Next-Gen SOC stack runs on Bluevoyant, which also offers MDR services globally — creating both partnership and head-to-head overlap in enterprise SOC outsourcing.
• eSentire: Specialized MDR provider with 24/7 SOC operations and multi-vendor EDR/XDR support. Directly comparable to Senthorus in service model, customer profile (mid-market/enterprise), and emphasis on proprietary detection content.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/@elcagroup
• LinkedInlinkedin.com/company/senthorus

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Senthorus