Solutions & service models
Your intelligence operation. Your way.
Run Highground with your own team, have Highground's analysts operate it for you, or share the work. The platform, the approvals and the audit trail are the same in every model.
Your team. Our platform.
Self-Managed Software
You license Highground and operate your own intelligence workflows. Highground provides the technology, subject to the contracted scope.
- Customer-operated GSOC
- Analyst workspaces
- Incident monitoring
- Approval controls
- Client-configured assets
- Internal intelligence workflows
- Communications management
Highground V10 screen · demonstration data
Our analysts. Your operational awareness.
Fully Managed Intelligence
Highground's authorized intelligence personnel operate the platform and provide the agreed monitoring and intelligence services for you.
- Managed intelligence monitoring
- Incident verification
- Exposure assessment
- Intelligence reporting
- Escalation
- Communications support under agreed authorization
Highground V10 screen · demonstration data
Custom operations. Shared responsibility.
Hybrid Intelligence Operations
A custom operation agreed between Highground and your organization: who monitors, investigates, approves and communicates is configured per contract — on one platform with one audit trail.
- Highground handles initial monitoring
- Your analysts handle selected investigations
- Highground supports surge monitoring
- You retain communication authority
- Responsibilities and approvals contractually configured
Highground V10 screen · demonstration data
Comparison
Who does what in each model
Every engagement is scoped in a contract. Capabilities, coverage hours and support levels depend on the agreed scope — not every capability is included in every arrangement.
| Responsibility | Self-Managed | Fully Managed | Hybrid (custom) |
|---|---|---|---|
| Who monitors | Your analysts | Highground analysts | Agreed per contract — e.g. Highground first-line monitoring, your team for selected regions or surge |
| Who investigates | Your team | Highground, within the agreed scope | Agreed per contract — e.g. split by case type |
| Who approves incidents | Your senior analysts | Highground senior analysts | As configured in the contract — always a second person, never self-approval |
| Who manages client assets | Your administrators | Highground, from the data you provide, or your administrators | As agreed |
| Who initiates communications | Your authorized operators | Highground under your written authorization | Agreed per contract — typically retained by you, with Highground support |
| Contact-data access | No Highground access to your people's data beyond platform support | Set from the contract: assigned Highground staff see contact details and reach your people directly (enabled with two-person approval, every view logged) — or Highground sends alert results to your HR / designated unit, with individual contact details hidden from Highground | Configured per contract, using the same options |
| Who administers the environment | Your Client Administrator | Highground, together with your administrator | Shared, as configured |
| Support arrangements | Platform support as defined in the contract | Service scope and coverage defined in the contract | Defined per responsibility in the contract |
Swipe the table sideways to see all three models.
Find the right Highground solution
Tell us how you want to operate
Pick a model to start a demo request with it pre-selected — or choose “Not sure yet” and we'll help you decide.

Ready to see Highground in action?
Find the right Highground solution
Discover how Highground can support your organization's intelligence, security, and operational risk management needs.
