ec31.com

What It Is

Error Code 31 is a cybersecurity service provider focused on an “open-source security platform + expert-managed” model. Its solution is built on tools such as Wazuh SIEM/XDR, Shuffle SOAR, and DFIR IRIS, covering continuous monitoring, real-time threat detection, automated response, incident response, and digital forensics. In positioning, it is closer to a low-cost MSSP/MDR alternative, emphasizing reduced reseller markups and a single-vendor point of contact.

Core Capabilities and Management Model

In terms of protection scope, it covers SIEM, XDR, SOAR, IR, and DFIR, offering a fairly complete security operations workflow. The site specifically highlights the use of dedicated consoles rather than the shared consoles commonly seen in many managed detection and response services, with the goal of isolating data and resources. On the management side, the service includes real-time monitoring, SOAR automation workflows, and incident response. It also allows a customer’s existing MDR provider to manage its tools, which is helpful for organizations that already have outsourced security services or an internal security team.

Pricing and Suitable Scale

Pricing is disclosed fairly clearly: the Small plan for 100 endpoints is $750/month, the Medium plan for 250 endpoints is $1,400/month, and the Large plan for 500 endpoints is $2,200/month. All plans include unlimited SOAR Runs, incident response, and 90 days of endpoint data retention. Compared with the pricing of other vendors listed on the page, its cost advantage is clear. However, fees for more than 500 endpoints, long-term retention, customized services, support SLAs, and similar items are not disclosed.

Pros and Cons

Its strengths are transparent pricing, a mature open-source stack, broad functional coverage, and an emphasis on dedicated isolated environments. It is attractive for companies with limited budgets that still need security operations capabilities. The shortcomings are also clear: the website does not disclose compliance certifications, company location, payment methods, deployment architecture details, service support levels, or third-party audit information. For heavily regulated industries, the lack of this information may affect procurement evaluation.

Who It’s For and Access from China

It is better suited to SMBs, growing companies, or organizations that already have an MDR provider/security team but want to reduce SIEM/XDR/SOAR costs. The site does not specify access from mainland China, payment availability, or local support, so these remain unknown. Before purchasing, users should test network connectivity and confirm contract and payment methods. If China-localized delivery is required, it may be worth comparing Qi An Xin, Sangfor, DBAPPSecurity, and similar vendors. If an international ecosystem is preferred, consider comparing it with Wazuh official services, Elastic Security, Microsoft Sentinel, Splunk ES, Rapid7, or CrowdStrike.