{
  "title": "Sophos Security Services Retainer - Catalog of Services",
  "subtitle": "Catalog of Services available to redeem with Service Units (SUs).",
  "servicePages": [
    {
      "id": "dfir",
      "html": "pages/dfir.html",
      "pageTitle": "DFIR & Readiness Services",
      "tables": [
       {
          "sectionHeading": "Digital Forensics & Incident Response",
          "rows": [
            {
              "description": "Digital Forensics and Incident Response",
              "URL": "https://www.sophos.com/products/incident-response-services/emergency-response",
              "su": "1 = 3 hours, or priced hourly"
            }
          ]
       },
       {
          "sectionHeading": "Incident Response Planning & Playbooks",
          "rows": [
            {
              "description": "Incident Response Plan Development",
              "URL": "pages/dfir/incident-response-plan-development.html",
              "su": "S:15, M:20, L:30"
            },
            {
              "description": "Incident Response Plan Review",
              "URL": "pages/dfir/incident-response-plan-review.html",
              "su": "S:10, M:20, L:25"
            },
            {
              "description": "Incident Response Playbook Development",
              "URL": "pages/dfir/incident_response_playbook_development.html",
              "su": "Between 5 and 10 depending on subject of playbook and amount of pre-existing planning"
            }
          ]
       },
        {
          "sectionHeading": "Incident Response Fundamentals Training",
          "rows": [
  
            
            {
              "description": "Principles of Incident Response Training",
              "URL": "pages/dfir/principles-of-incident-response-training.html",
              "su": 10
            },
            {
              "description": "Incident Commander Training",
              "URL": "pages/dfir/incident-commander-training.html",
              "su": 10
            },
            {
              "description": "Attacking and Defending Active Directory",
              "URL": "pages/dfir/attacking_and_defending_active_directory.html",
              "su": 10
            }
          ]
        },

       {
          "sectionHeading": "Incident Response Exercises",
          "rows": [
            {
              "description": "Functional Exercise - (Small, Medium)",
              "URL": "pages/dfir/functional-exercise.html",
              "su": "S:20; M:30"
            },
            {
              "description": "Incident Response Tabletop Exercise",
              "URL": "pages/dfir/tabletop-exercise.html",
              "su": 12
            }
          ]
       },
       {
          "sectionHeading": "Threat Intelligence",
          "rows": [
            {
              "description": "Enterprise Brand Surveillance Info Brief",
              "URL": "pages/dfir/ebs_info_brief.html",
              "su": 10
            },
            {
              "description": "Threat Intelligence Support Services",
              "URL": "pages/dfir/threat_intelligence_support_services.html",
              "su": 3
            }
          ]
       },
       {
          "sectionHeading": "Custom Scoped Engagement",
          "rows": [
            {
              "description": "Custom-scoped Engagement (e.g., Threat Brief, Other)",
              "URL": null,
              "su": "Unique per engagement"
            }
          ]
       },
       {
          "sectionHeading": "Project Management",
          "rows": [
            {
              "description": "Project Management Services",
              "URL": "pages/dfir/project-management-services.html",
              "su": "Unique per engagement; typically 1 SU for every 5 SU allocated to projects"
            }
          ]
       }
      ]
    },
    {
      "id": "security-testing_assessment-services",
      "html": "pages/security-testing_assessment-services.html",
      "pageTitle": "Security Testing & Assessment Services",
      "tables": [
       {
          "sectionHeading": "Application Security",
          "rows": [
            {
              "description": "Custom Application Security Assessment (Small, Large)",
              "URL": "pages/security-testing_assessment-services/custom-application-security-assessment.html",
              "su": "S:20, L:30"
            },
            {
              "description": "Mobile Application Security Assessment (single OS)",
              "URL": "pages/security-testing_assessment-services/mobile-application-security-assessment.html",
              "su": "10 per OS"
            },
            {
              "description": "Secure Code Analysis - (Small, Medium, Large)",
              "URL": "pages/security-testing_assessment-services/secure-code-analysis.html",
              "su": "S:13, M:20, L:30"
            },
            {
              "description": "Web API Test - (Small, Medium, Large)",
              "URL": "pages/security-testing_assessment-services/web-service-test.html",
              "su": "S:10, M:15, L:20"
            },{
              "description": "Web Application Security Assessment - (Small, Medium, Large)",
              "URL": "pages/security-testing_assessment-services/web-application-security-assessment.html",
              "su": "S:10, M:15, L:20"
            }
          ]
        },
       {
          "sectionHeading": "Assessment Services",
          "rows": [
            {
              "description": "Active Directory Security Assessment - (Small, Medium, Large)",
              "URL": "pages/security-testing_assessment-services/active_directory_security_assessment.html",
              "su": "S:13; M:25; L:50"
            },
            {
              "description": "AI LLM Security Assessment",
              "URL": "pages/security-testing_assessment-services/ai-llm-security-assessment.html",
              "su": "Standard: 10; Add-on Objective(s): 10 Per Objective"
            },
            {
              "description": "Entra ID Security Assessment",
              "URL": "pages/dfir/microsoft_entra_id_security_assessment.html",
              "su": 15
            },
            {
              "description": "Threat Hunting/Compromise Assessment - (Small, Medium, Large)",
              "URL": "pages/security-testing_assessment-services/threat-hunting-assessment.html",
              "su": "S:13; M:23; L:30"
            }
          ]
        },
       {
          "sectionHeading": "Network Penetration Testing",
          "rows": [
           {
              "description": "Cloud Penetration Test - (Standard, Custom)",
              "URL": "pages/security-testing_assessment-services/cloud-penetration-test.html",
              "su": "Standard: 13; Custom: 26"
            },
            {
              "description": "External Penetration Test - (Small, Medium, Large)",
              "URL": "pages/security-testing_assessment-services/external-penetration-test.html",
              "su": "S:10, M:20, L:40"
            },
            {
              "description": "Internal Penetration Test - (Small, Medium, Large)",
              "URL": "pages/security-testing_assessment-services/internal-penetration-test.html",
              "su": "S:10, M:20, L:40"
            },
            {
              "description": "Wireless Network Penetration Test - 1 Physical Location (or floor of a building)",
              "URL": "pages/security-testing_assessment-services/wireless-network-penetration-test.html",
              "su": 10
            }
          ]
        },
       {
          "sectionHeading": "Red & Purple Team Exercises",
          "rows": [
          {
              "description": "Red Team Exercise - Full Spectrum - (Lite, Standard)",
              "URL": "pages/security-testing_assessment-services/adversary_simulation_exercise.html",
              "su": "Lite: 40; Standard: 80; Extra Time (1 week): 10; Physical security attacks (1 location): 20; Wireless (1 location): 10"
            },
            {
              "description": "Red Team Exercise - Intel Led - (Lite, Standard)",
              "URL": "pages/security-testing_assessment-services/adversary_emulation_exercise.html",
              "su": "Lite: 40; Standard: 80; Extra Time: 10 per week"
            },
            {
              "description": "Purple Team Exercise (Standard, Replay)",
              "URL": "pages/security-testing_assessment-services/collaborative_adversary_exercise.html",
              "su": "Standard: 10; Replay: 5"
            }
          ]
        },
       {
          "sectionHeading": "Social Engineering & Physical Security",
          "rows": [
           {
              "description": "Phishing Drill - Credential Capture - (Small, Medium)",
              "URL": "pages/security-testing_assessment-services/phishing_drill.html",
              "su": "S:20; M:30"
            },
             {
              "description": "Physical Security Testing",
              "URL": "pages/security-testing_assessment-services/physical_security_testing.html",
              "su": 20
            }
          ]
        },
       {
          "sectionHeading": "Custom Scoped Engagement",
            "rows": [
              {
                  "description": "Custom-scoped Engagement (e.g., Medical Device, Laptop Testing,  OT Testing,  SAP Penetration Test, Vishing, Other)",
                  "URL": null,
                  "su": "Unique per engagement"
                }
          ]
        },
      {
          "sectionHeading": "Project Management",
          "rows": [
            {
              "description": "Project Management Services",
              "URL": "pages/dfir/project-management-services.html",
              "su": "Unique per engagement; typically 1 SU for every 5 SU allocated to projects"
            }
          ]
       }
      ]
    },
    {
      "id": "deployment",
      "html": "pages/deployment.html",
      "pageTitle": "Sophos Deployment Services",
      "tables": [
        {
          "sectionHeading": "Guided Onboarding Services",
          "rows": [
            {
              "description": "Fusion XDR/MDR Guided Onboarding",
              "URL": "pages/deployment/fusion-go.html",
              "su": 8
            },
            {
              "description": "Fusion XDR/MDR Guided Onboarding - Plus",
              "URL": "pages/deployment/fusion-go-plus.html",
              "su": 20
            },
            {
              "description": "Fusion XDR/MDR Guided Onboarding - Upgrade",
              "URL": "pages/deployment/fusion-go-upgrade.html",
              "su": 6
            },
            {
              "description": "Taegis Guided Onboarding (Enablement: Core)",
              "URL": "pages/deployment/taegis-guided-onboarding.html",
              "su": 7
            },
            {
              "description": "Taegis Guided Onboarding - Enterprise (Enablement: Plus)",
              "URL": "pages/deployment/taegis-guided-onboarding-enterprise.html",
              "su": 15
            }
          ]
        },
        {
          "sectionHeading": "Fusion Product Implementation Services",
          "rows": [
            {
              "description": "Device Encryption Implementation",
              "URL": "pages/deployment/PRPD3A-device-encryption-implement.html",
              "su": 1
            },
            {
              "description": "Email Implementation",
              "URL": "pages/deployment/PRPGBA-central-email-implement.html",
              "su": 2
            },
            {
              "description": "Endpoint/Server Implementation (1-250 devices)",
              "URL": "pages/deployment/PRPCBA-endpoint-server-implement-1-250.html",
              "su": 1
            },
            {
              "description": "Endpoint/Server Implementation (251-1000 devices)",
              "URL": "pages/deployment/PRPCDZ-endpoint-server-implement-251-1k.html",
              "su": 2
            },
            {
              "description": "Endpoint/Server Implementation (1001+ devices)",
              "URL": "pages/deployment/PRPDXA-endpoint-server-implement-1k-5k.html",
              "su": 4
            },
            {
              "description": "Mobile Implementation",
              "URL": "pages/deployment/PRPD2A-mobile-implementation.html",
              "su": 2
            }
          ]
        },
        {
          "sectionHeading": "Fusion Integration Services",
          "rows": [
            {
              "description": "ITDR Implementation",
              "URL": "pages/deployment/PRPDRA-mdr-integrations.html",
              "su": 1
            },
            {
              "description": "Managed Risk Implementation (per device)",
              "URL": "pages/deployment/managed-risk-implementation.html",
              "su": 1
            },
            {
              "description": "NG-SIEM and Standard Integration (per integration)",
              "URL": "pages/deployment/PRPDRA-mdr-integrations.html",
              "su": 1
            },
            {
              "description": "Custom Parser/Integration (per parser/integration)",
              "URL": "pages/deployment/taegis-custom-parser-integrations.html",
              "su": 12
            }
          ]
        },
        {
          "sectionHeading": "Fusion Add-on Services",
          "rows": [
            {
              "description": "Add-on Services",
              "URL": "pages/deployment/PRAOAA-add-on-svcs.html",
              "su": 1
            },
            {
              "description": "AI Defense Implementation",
              "URL": "pages/deployment/PRAOAA-add-on-svcs.html",
              "su": 1
            },
            {
              "description": "DMARC Manager Implementation",
              "URL": "pages/deployment/PRAOAA-add-on-svcs.html",
              "su": 1
            },
            {
              "description": "Email Monitoring System Implementation",
              "URL": "pages/deployment/PRAOAA-add-on-svcs.html",
              "su": 1
            },
            {
              "description": "Endpoint/Server Upgrade",
              "URL": "pages/deployment/PRAOAA-add-on-svcs.html",
              "su": 1
            },
            {
              "description": "Email Configuration Review (per tenant)",
              "URL": "pages/deployment/PRAOAA-add-on-svcs.html",
              "su": 1
            },
            {
              "description": "Phish Threat Implementation",
              "URL": "pages/deployment/PRAOAA-add-on-svcs.html",
              "su": 1
            },
            {
              "description": "Tenant Migration (per tenant)",
              "URL": "pages/deployment/PRPD4A-central-cdb-edb-estate-migration.html",
              "su": 1
            },
            {
              "description": "XDR Native Response Playbook configuration",
              "URL": "pages/deployment/PRAOAA-add-on-svcs.html",
              "su": 1
            },
            {
              "description": "Custom Project - Contact your Sophos representative to learn more.",
              "URL": null,
              "su": "Varies (SOW)"
            }
          ]
        },
        {
          "sectionHeading": "Firewall Implementation Services",
          "rows": [
            {
              "description": "XGS 87/100 series Firewall Implementation (per device/HA pair)",
              "URL": "pages/deployment/fw-87-100-series.html",
              "su": 2
            },
            {
              "description": "XGS 2000/3000 series Firewall Implementation (per device/HA pair)",
              "URL": "pages/deployment/fw-2000-3000-series.html",
              "su": 4
            },
            {
              "description": "XGS 4000/5000 series Firewall Implementation (per device/HA pair)",
              "URL": "pages/deployment/fw-4000-5000-series.html",
              "su": 5
            },
            {
              "description": "XGS 6000/7000/8000 series Firewall Implementation (per device/HA pair)",
              "URL": "pages/deployment/fw-6000-plus-series.html",
              "su": 6
            },
            {
              "description": "XG to XGS Firewall Migration (per device/HA pair)",
              "URL": "pages/deployment/PRMIGA-fw-xg-xgs-migration.html",
              "su": 2
            },
            {
              "description": "Cloud Firewall Implementation (per device)",
              "URL": "pages/deployment/fw-cloud.html",
              "su": 4
            },
            {
              "description": "Software Firewall Implementation (per device)",
              "URL": "pages/deployment/PRFWSA-fw-software.html",
              "su": 4
            },
            {
              "description": "Virtual Firewall Implementation (per device)",
              "URL": "pages/deployment/PRFWVA-fw-virtual.html",
              "su": 4
            }
          ]
        },
        {
          "sectionHeading": "Network Product Implementation",
          "rows": [
            {
              "description": "NDR Sensor Implementation (per device)",
              "URL": "pages/deployment/PRPDHA-ndr-sensor-implementation.html",
              "su": 1
            },
            {
              "description": "Switch Implementation - up to 3 devices",
              "URL": "pages/deployment/switch-implement.html",
              "su": 1
            },
            {
              "description": "Wireless Access Point Configuration - up to 3 SSIDs",
              "URL": "pages/deployment/ap-implement.html",
              "su": 1
            },
            {
              "description": "Workspace Implementation",
              "URL": null,
              "su": 4
            },
            {
              "description": "ZTNA Implementation - up to 3 resources",
              "URL": "pages/deployment/ztna-implement.html",
              "su": 2
            }
          ]
        },
        {
          "sectionHeading": "Network Product Add-on Services",
          "rows": [
            {
              "description": "Add-on Services",
              "URL": "pages/deployment/PRAOAA-add-on-svcs.html",
              "su": 1
            },
            {
              "description": "DNS Protection",
              "URL": "pages/deployment/PRAOAA-add-on-svcs.html",
              "su": 1
            },
            {
              "description": "Firewall Configuration Review (per device)",
              "URL": "pages/deployment/PRAOAA-add-on-svcs.html",
              "su": 1
            },
            {
              "description": "Sophos Protected Browser",
              "URL": "pages/deployment/PRAOAA-add-on-svcs.html",
              "su": 1
            },
            {
              "description": "Remote VPN Configuration",
              "URL": "pages/deployment/PRAOAA-add-on-svcs.html",
              "su": 1
            },
            {
              "description": "Site-to-Site VPN configuration",
              "URL": "pages/deployment/PRAOAA-add-on-svcs.html",
              "su": 1
            },
            {
              "description": "Custom Project - Contact your Sophos representative to learn more.",
              "URL": null,
              "su": "Varies (SOW)"
            }
          ]
        },
        {
          "sectionHeading": "Solution Review (Health Check) Services",
          "rows": [
            {
              "description": "Fusion Endpoint Security Posture Assessment (per tenant)",
              "URL": "pages/deployment/PCAZ3C-security-posture-assessment.html",
              "su": 2
            },
            {
              "description": "Fusion Endpoint Solution Review (Health Check - per tenant)",
              "URL": "pages/deployment/central-solution-review.html",
              "su": 1
            },
            {
              "description": "Firewall Solution Review (Health Check - per device)",
              "URL": "pages/deployment/PRPCHA-firewall-solution-review-per-device.html",
              "su": 1
            },
            {
              "description": "Taegis Solution Review (Health Check-per tenant)",
              "URL": "pages/deployment/PRPDIA-taegis-solution-review.html",
              "su": 7
            }
          ]
        },
        {
          "sectionHeading": "Training Services",
          "rows": [
            {
              "description": "XDR Administrator Training",
              "URL": "pages/deployment/taegis-administrator-training.html",
              "su": 1
            },
            {
              "description": "XDR Analyst Training",
              "URL": "pages/deployment/PRPCEA-xdr-training-per-user.html",
              "su": 1
            },
            {
              "description": "XDR Advanced Search Training",
              "URL": "pages/deployment/taegis-adv-search-training.html",
              "su": 1
            },
            {
              "description": "XDR Custom Parser Training",
              "URL": "pages/deployment/taegis-custom-parser-training.html",
              "su": 1
            },
            {
              "description": "XDR Scenario Based Training (1 Scenario)",
              "URL": "pages/deployment/taegis-scenario-training.html",
              "su": 1
            }
          ]
        },
        {
          "sectionHeading": "Emergency Implementation",
          "rows": [
            {
              "description": "Sophos Implementation Service - Essentials",
              "URL": "pages/deployment/PNSZTC-sophos-implement-services.html",
              "su": 1
            }
          ]
        },
        {
          "sectionHeading": "Technical Account Management",
          "rows": [
            {
              "description": "Contact your Sophos representative to learn more.\nhttps://www.sophos.com/en-us/support/technical-account-manager",
              "URL": null,
              "su": "Varies"
            }
          ]
        }
      ]
    }
  ]
}