Managed Detection and Response (MDR)

MDR provides a 24/7 service for MSPs who have no in-house security expertise or need additional assistance to investigate and respond to security incidents detected by Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR).

The MDR functionality is enabled in Management Portal as a separate offering item under the Detection and Response service (for service-based licensing mode) or as an add-on in the Security and RMM or the Ultimate Protection solution (for solution-based licensing mode). The MDR service is provided by an external MDR vendor. When MDR is enabled for a specific customer, the MDR vendor receives incident data from the Cyber Protect Cloud platform for workloads where EDR or XDR is enabled in protection plans belonging to that customer. The MDR vendor then performs different levels of service to triage the incidents using the available response actions. For more information, see What is Managed Detection and Response (MDR)?

For more information about working with XDR, see Extended Detection and Response (XDR).

For more information about working with EDR, see Endpoint Detection and Response (EDR).