Frequently asked questions
Questions, answered plainly.
What enterprises, institutions and partners ask us most about how we run cyber, risk and digital services.
About Human Managed
What does Human Managed do?
We run cyber, risk and digital services for enterprises and institutions, continuously. Agents do the operating work around the clock. People engineer the service, govern it and make the decisions that matter.
What is an AI-native service operator?
In most operations today, people do the work and AI helps. We built ours the other way round: agents do the work, and people manage them. What you buy is the running service and the outcome it delivers, not a tool to operate yourself.
Are you an MSSP or a SIEM?
Neither. We don’t replace your SIEM, and we don’t sell analyst hours. We connect to the tools you already run and operate the outcome on top of them. Many MSSPs and MDR providers work with us as partners.
Will this replace our team?
No. Agents take the repetitive work off your people. Your team keeps the decisions, and you choose how much each service is allowed to do on its own.
How it works
Do we need to replace the tools we already have?
No. Your SIEM, EDR, identity, cloud and network tools stay in place. We run live data streams from more than 20 brands of tools today and treat them as sources of information.
How do you detect problems without writing detection rules?
Every 15 minutes, we compare the state of each asset with its own history, with similar assets and with your policies. Related signals across time and tools are combined into one finding. 138 state-based detection signals come pre-built, and you can see any window where we had no data.
How much do agents do on their own?
Only what you allow, set per outcome:
- Foundational: we explain what is happening and recommend what to do.
- Adaptive: we also prepare the plan and the changes for your approval.
- Autonomous: we carry out approved actions within limits you set.
Can we see why an agent did something?
Yes. Every response moves through four stages, Intelligence, Decision, Execution and Action, with a check between each one and a record of what was considered and why.
Security and data
Where does the service run?
In Human Managed’s cloud, in your own cloud tenant, in a private cloud or on your premises. Fully air-gapped environments are not supported today.
What do you install in our environment?
A lightweight collector, packaged, signed and tested by us, which your team can verify before it goes live. It is managed and updated centrally.
Who owns our data, and where is it kept?
You do. Data is stored once, in storage we manage or storage you control. We collect what your outcomes need and can show how each source is used.
Pricing and buying
How do you price?
Per outcome. We agree each outcome with you up front: what should change and how progress will be measured. We never charge by gigabyte, log or event.
What counts as an outcome?
A defined, measurable result that we operate toward and track, for example the time it takes to fix critical vulnerabilities, against an agreed baseline. You pay per outcome and for measurable progress toward it.
Can we buy through a cloud marketplace?
Yes. We’re on Microsoft Azure Marketplace today, with more marketplaces coming. How it works
Getting started
How do we start?
With Ground Truth: in about two weeks, on sample data from tools you already run, we show you what we see across your most important systems. It is free at sample scale. About Ground Truth
Where do you operate?
Singapore, the Philippines, Cambodia, India, Hong Kong, the United Arab Emirates, Saudi Arabia and the United States. We have run live services since 2018.
Working with us
Do you work with partners?
Yes. Consulting and advisory firms, MSSPs and MDR providers, and telecom operators. Partner with us
What does a partnership look like commercially?
It depends on the model: running your services on Human Managed, delivering together, or introducing us. We agree the structure after a first conversation about your customers and markets.
Can we run a proof with our clients?
Yes. Ground Truth runs on a client’s existing tool data in about two weeks.
Consulting and advisory firms
Are you competing with consulting firms?
No. Consulting teams design programs and stand up capability. We keep it running every day after the engagement ends.
How do our clients keep control?
Their tools stay in place, their data stays in storage they choose, and every agent action is recorded and traceable.
MSSPs and MDR providers
Will you compete with our managed services?
That isn’t our model. A provider can run its own services on Human Managed, or bring us in for specific outcomes while it keeps the customer relationship.
Do we keep our SIEM and existing detections?
Yes. Your SIEM stays as a source, and existing detection logic can be carried across into the comparison model.
Can we run many customers on it?
Yes. Each customer has its own separate environment, and collectors across all of them are managed centrally.
Telecom operators
Can this run in our own data centers?
Yes, on-premises or in a private cloud on standard object storage. Fully air-gapped environments are not supported today.
Our data volumes are very large. Is that a problem?
No. We process 50 to 60 TB a day today, and we never price by data volume.
Can we offer this to our enterprise customers?
We welcome that conversation. Tell us about your enterprise base and the services you offer today.