Managed Detection and Response (MDR)

MDR provides a 24/7 service for MSPs who have no in-house security expertise or need additional assistance to investigate and respond to security incidents detected by Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR).

The MDR functionality is enabled in Management Portal under the Detection and Response service (for service-based licensing mode) and Security and RMM or Ultimate Protection (for solution-based licensing mode), and the MDR service is provided by an external MDR vendor. When MDR is enabled for a specific customer, the MDR vendor receives incident data from the Cyber Protect Cloud platform for workloads where EDR or XDR is enabled in protection plans belonging to that customer. The MDR vendor then performs different levels of service to triage the incidents using the available response actions. For more information, see What is Managed Detection and Response (MDR)?

For more information about working with XDR, see Extended Detection and Response (XDR).

For more information about working with EDR, see Endpoint Detection and Response (EDR).