EDR, MDR, SOC, pentesting, backup, identity and cyber insurance.
Break-even between managed detection and an in-house SOC is about coverage hours, staffing, escalation and SLA scope, not licence price. A framing.