The Dottor Box platform
The proprietary Attack Surface Management software a company uses to see its cyber risk, reduce it and show how it is managed when a standard or a customer asks.
Italian software, with a SOC behind it
Dottor Box® is the platform developed by Dottor Marc, a company founded in 2018 by professionals with more than twenty years' experience in cyber security and regulatory compliance. In the documents you sign it appears as "Dottor Box® — Security Monitor, MDR e SOC 24/7".
It is not a tool to install and use on your own. Within Dottor Marc there is a Security Operation Center that organises the proactive services, reviews the results and, at the MDR levels, responds to alerts alongside you.
The interface and reports are available in Italian and English. Everything is built around the rules that apply to companies in Italy: from the GDPR to the Italian transposition of NIS2, through to the order issued by the Garante (the Italian Data Protection Authority) on system administrators.
See, govern, prove
What sets it apart from a simple scanner is the link between the three levels: a finding does not stay a finding, it becomes evidence.
What your exposed surface really looks like
Internal and external networks, web applications, network shares, endpoints, Microsoft and Google identities, credentials that have ended up on the dark web.
Assessment and monitoring 02 · GovernFrom finding to management system
Self-assessment against 13 standards, risk analysis, procedures, audits, nonconformities, management review, suppliers and training.
Compliance and management 03 · ProveThe proof to hand over
Cyber Risk Report, presentation, Statement of Applicability, registers and exports for auditors.
Documents and history- Vulnerability
- Risk
- Control
- Evidence
- Report
One Dottor Box for each client
Every company has its own Dottor Box: a dedicated environment with its own data, its own users and its own active services. It is not a row with a filter in a shared database, but a dedicated database schema, separate from every other client's.
Services are enabled one by one, so the offer is built around your company. The platform runs on Google cloud infrastructure and Dottor Marc's own data centres. Platform security and compliance.
Your security on one screen
- Risk index and vulnerability trend for internal network, external network, website and endpoints
- Vulnerabilities resolved over time: proof that the work done has produced a result
- The scan trend, so you notice straight away if a check has stopped running
- The status of the on-site probe and training progress
- Upcoming appointments and booking a consultation
- The guided path that tells you what the next step is
Security Monitor, MDR + SOC, MDR + SOC 24/7
Three cumulative levels: each includes everything in the one before. What changes is how much you delegate to our SOC.
Security Monitor
The platform and continuous monitoring.
- Who acts on findings
- Your company, with our reports and alerts
- Asset and service discovery: devices, ports and services on the LAN, exposed ports on the WAN
- Vulnerability assessment of the internal network, the external network and one web application, with notification of what is new
- Detection of network shares and their permissions
- Dark web monitoring of passwords on the company domain
- SIEM agent: event correlation, file integrity, centralised logs for up to 6 months
- Software and update inventory, HIDS with alerts
- Antivirus monitoring on endpoints
- Access logs as required by the Garante's order
- The SOC's work: false positives, predictive analysis, threat hunting
- CSIRT with a data breach register
MDR + SOC
Detection and response managed by our team.
- Support
- 8/5 tickets during working hours
- Everything in Security Monitor
- Alerts reach Dottor Marc's SOC, which steps in to contain the threat
- Proactive handling of reported vulnerabilities and available patches
- Tickets classified by urgency and severity, with status updates
- Collaboration with suppliers and partners across the supply chain
- During an incident, Dottor Marc takes on the role of Incident Response Team Lead
MDR + SOC 24/7
The same cover, round the clock.
- Support
- Dedicated phone line, 24 hours a day, 7 days a week
- Everything in MDR + SOC
- Continuous monitoring and incident response
- Dedicated emergency number
- A team always on duty, working to procedures agreed and tested with your company
- For those who cannot afford prolonged downtime
Frequency. In the platform the scheduling of checks is configurable, and the contractual service level is the minimum commitment. Remote consulting hour packages are bought separately.
You pay for the assets you monitor, not for the people you employ
The price does not depend on the number of employees or on a company size band. It depends on how many technology assets are actually monitored. The price list is in the special terms of your contract.
A one-off initial fee
It covers defining and validating the attack surface: the exact make-up of your infrastructure.
A monthly fee per asset
Cumulative and tiered: the more assets you monitor, the lower the unit cost, up to 500 technology assets.
Calculated on the average
The fee follows the average number of assets over the previous 30 days: if the company grows or shrinks, there is no need to renegotiate.
Two-step verification across the whole platform
Access to security data cannot be protected by a password alone.
Mandatory 2FA
TOTP codes from an authenticator app, required across the whole client area. The code never travels from the server.
Microsoft and Google SSO
Sign in with the Microsoft Entra ID or Google Workspace account you already use, with the policies already set on your provider. It counts as the second factor.
Invitations by department
An encrypted invitation link, valid for 7 days, to bring a whole department in. Guest accounts are refused.
Every login tracked
Every attempt is recorded, successful or failed, including those blocked at the second factor.
Not just a scanner's output
Vulnerability assessment is the first level of the Proactive Security services. Scans are automated and semi-automated, non-invasive, and carried out with selected open source and proprietary tools.
Then a person steps in. This is the most important thing to know: you are not buying a report generated by a tool, you are buying a report that someone has reviewed.
Scans are complemented by manual checks carried out by qualified staff, to remove the false positives and false negatives introduced by automated tools.
Frequently asked questions about the Dottor Box platform
What is Dottor Box, in short?
An Italian Attack Surface Management and compliance management platform. It finds and measures vulnerabilities in networks, applications, endpoints and cloud identities, links them to the risk analysis and to the requirements of the standards, and produces the documents to show an auditor or a customer. The interface and reports are available in Italian and English. It is developed and run by Dottor Marc.
What is the difference between Security Monitor and MDR?
With Security Monitor the platform finds, measures and alerts, and your team acts on the findings. With MDR + SOC the alerts also reach Dottor Marc's SOC, which steps in to contain the threat, with ticket support during working hours. MDR + SOC 24/7 adds round-the-clock cover and a dedicated phone number. SOC and MDR: the three levels.
How much does Dottor Box cost?
There is no single price list: the cost depends on the number of technology assets monitored, with an initial fee to define the attack surface and a monthly fee per asset that falls as volumes grow. The exact amounts are in the proposal. The model is explained in how it works.
Is Dottor Box suitable for a small business?
Yes. Services are enabled one by one and the fee follows the assets monitored, not the size of the company. An SME can start with the Cyber Screening and the basic checks, and add modules when they are needed, for example for NIS2 compliance. Cyber security for SMEs.
Does Dottor Box replace the IT manager or an in-house SOC?
It does not replace the person who knows your infrastructure: it takes the repetitive work of scans, inventories and documents off their hands and gives them clear priorities. At the MDR levels, Dottor Marc's SOC handles the monitoring and response to alerts that many companies cannot organise in-house.
Is Dottor Box GDPR compliant?
Processing is set up for GDPR compliance and Dottor Marc has appointed a Data Protection Officer. The artificial intelligence features run on a private model and do not send documents to public services. Dottor Marc is also ISO/IEC 27001 and ISO 9001 certified. Platform security and compliance.
Do you know what someone looking for a target can see of your company?
In a demo on your real systems we show you what is exposed, how much it matters and where to start. Then, if you need it, a tailored proposal.