Managed Detection and Response Built on Detection Engineering and a Next-Gen SIEM

3CORESec is a boutique information security company building tooling and managed services for adversary detection across cloud, endpoint, and network environments. Founded in 2019 by CEO Tiago Faria, a practitioner with close to two decades in military, insurance, and banking security roles, it operates from offices in Lisbon, Portugal and Rijswijk, Netherlands. The stated customer range runs from startups to multinationals, and the same platform is packaged for managed security service providers that deliver detection and response to their own client base.

The product line is vertically integrated rather than assembled from third-party parts. Atalaia acts as the next-generation SIEM and data lake, offered on a pay-as-you-go model and rated at 400,000 events per second; Lawmaker manages fleets of Suricata network IDS sensors at scale; and the Preemptive Threat Landscape applies machine learning to anomaly detection and threat forecasting. Managed Detection and Response wraps those layers with security orchestration, alerting, and automated remediation, with deployment advertised in under ten minutes.

Detection content is where the company concentrates its engineering. Detection as a Service ships over 1,500 signatures covering roughly 85 percent of MITRE ATT&CK Enterprise, delivered through CI/CD pipelines into six supported SIEM engines as a detection-as-code workflow. That discipline is visible publicly through open-source projects including SIEGMA, S2AN, Automata, Trapdoor, and testmynids.org. A separate RADR offering packages the stack into a self-contained, tamper-evident field unit for incident response in environments such as maritime and industrial operations.