Managed Detection and Response for MSPs

Frequently asked questions

• What is Managed Detection and Response (MDR)?

  MDR is a 24/7/365 security service where a SOC team monitors, investigates, and responds to threats on your behalf. With Acronis MDR, these actions are integrated with the Acronis cyber protection platform — so you can also recover fast using backup-based restoration when needed.

• Do I still need EDR/XDR or a SIEM if I use MDR?

  MDR uses telemetry and capabilities from other tools to deliver managed detection and response. With Acronis MDR, telemetry and response are delivered within the Acronis platform, reducing the need for separate tools, however partners still require to active Acronis EDR or Acronis XDR to get the service on top of them.

  Some organizations still keep SIEM for compliance/log storage, but due to the cost and complexity of self-managing a SIEM, many MSPs rely on MDR and the tools their MDR provider relies on, including SIEMs, as their primary SOC function.

• How does Acronis MDR differ from EDR/XDR or a traditional MSSP?

  Acronis EDR and Acronis XDR are the solution on top of which the MDR service is provided; MDR is a 24/7/365 managed service run by security experts who investigate, contain, and remediate. Traditional MSSPs are often monitoring-oriented and just forward alerts, while MDR analysts take action. Acronis MDR adds integrated recovery on the same platform for business continuity.

• How much does Acronis MDR cost?

  Acronis MDR pricing depends on the number of endpoints, service tier (Standard vs Advanced), region, and partner through which you get the service. However, it’s worth noting that outsourcing EDR and XDR management via Acronis MDR is more than 10 times less expensive than building your own SOC.

  Morever, the fact that you get a multitude of service beyond EDR, XDR, and MDR in one console, integrating cybersecurity with data protection and management, unlocks up to 60% improvement in total cost of ownership (TCO) compared to point solution.

  For more information on the pricing and exact way you can leverage our services – please feel free to reach out to our experts.

• What are the benefits of MDR for MSPs and their clients?

  • 24/7/365 monitoring and incident response offloads operational burden from MSPs.
  • Fast detection and remediation with up to 60 minutes MTTR (mean-time-to-respond) around the clock.
  • Integrated recovery capabilities (unique to Acronis) ensure unmatched business continuity by rolling back attacks via backups.
  • Consolidated platform (cybersecurity, backup and endpoint management) can deliver up to 60 % TCO improvement.

• Does MDR replace a SOC, and what happens when incidents fall outside the MDR service?

  MDR is essentially an outsourced SOC; clients can fully or partially outsource monitoring, triage and response. Acronis MDR provides 24/7 escalation by phone/email/in-platform and includes guidance on remediation.

  You may still need inhouse SOC for regulatory requirements or broader visibility, but many MSPs use MDR as their primary SOC due to resource requirements to operate your own SOC.

• What’s included in Standard vs Advanced?

  Standard: Protection, containment, and prioritization with expert guidance.

  Advanced: All Standard features plus 24/7 remediation by the MDR team and attack rollback & recovery from backups (requires agreement).

• How is MDR delivered — Acronis SOC or partners?

  Acronis MDR is delivered via trusted MSSP/SOC partners worldwide – including the Acronis’ own SOC team. Choose what fits your clients and compliance needs.

• What happens if an action falls outside MDR scope (e.g., patching)?

  The MDR team will escalate and provide recommendations and guidance on next steps. This may include advising additional services such as patch management.

• How does Acronis MDR improve ROI/TCO?

  By consolidating cybersecurity, data protection, and endpoint management on one platform — and outsourcing 24/7 SOC operations — MSPs can simplify tooling, reduce overhead, and unlock up to 60% improvement in TCO.

  Furthermore, compared to building your own SOC, Acronis MDR requires more than 10 times less resources.