Managed Detection and Response (MDR)

Strengthen security with a 24/7 fully managed service

Our security analysts will monitor your environment for threats using the Defense.com platform, manage investigations, provide remediation advice and assist with incident response.

Free consultation

Book your free consultation and receive customised recommendations and next steps with no obligation to buy from us!

Trusted Cyber Security Services

Stay secure, stay focused

Stay secure, stay focused

Cyber threats don’t wait, and neither should your defenses. Defense.com’s MDR service gives your business 24/7 expert-driven protection, so you can stay ahead of evolving threats without draining your resources.

Our security analysts continuously monitor, detect, and respond to attacks in real time - stopping breaches before they cause damage. With advanced technology blocking ransomware, fileless attacks, and more, we take care of your security while you focus on growing your business.

Trusted by over 3,000 businesses

NHS

Tusker

OKA

United Bank for Africa

Agilico

Beaverbrook

Blck Rhino

Clear Talernts

Cloudian

Get Support

Locta

Mede Care

Medichecks

NEACH

Structure Flow

The Edge Picture Company

Transoft Solutions

Woodside Logistics Group

K2 Mobility

NHS

Tusker

OKA

United Bank for Africa

Agilico

Beaverbrook

Blck Rhino

Clear Talernts

Cloudian

Get Support

Locta

Mede Care

Medichecks

NEACH

Structure Flow

The Edge Picture Company

Transoft Solutions

Woodside Logistics Group

K2 Mobility

Benefits & Capabilities

Our SOC team will monitor your network 24/7 for suspicious activity. We’ll quickly learn what normal looks like for your environment, tune out any noise and alert you to genuine security threats.

Stop endpoint threats and prevent breaches with anti-malware, ransomware mitigation, device and content control, IP blocklisting and much more.

Instantly isolate compromised endpoints and access a range of incident response services to mitigate, investigate and recover from cyber attacks.

When you choose Defense.com MDR you can be sure that your security is in the best hands. Our SOC team is made up of experienced analysts, so you can free up your staff for other tasks.

Our MDR service is delivered using our EDR solution and proprietary SIEM technology. Our cloud-native platform is quick to deploy and can collect data from all your existing security investments.

Make responding to security threats easier and faster with step-by-step remediation guidance from our SOC analysts.

Onboarding your MDR service

See immediate security value with the help of our SOC team.

Kick off

We’ll work with you to build a profile of your business to help tailor our managed SIEM service to your requirements. This will include defining a list of assets, network diagrams, maintenance schedules and escalation points. We’ll also provide an interactive onboarding tracker that outlines the process from start to finish, so you can keep track of progress throughout.
Implementation

When you’re ready to start, we’ll assist you with all aspects of the SIEM deployment process. This will include setting up log collectors for on-prem sources and making sure that any API calls are in place for cloud-based systems. Once that’s done, we’ll verify that everything is logging into the Defense.com SIEM platform correctly before moving into the baseline phase.
Baseline

At this point, you’ll get introduced to our SOC analysts who will serve as an extension of your internal team. First, we’ll monitor the activity in your environment to define what ‘normal’ looks like. We’ll then use machine learning to tune your SIEM alerts and eliminate any false positives, ensuring that you’re only getting notified about genuine security threats.
Live service

Once your environment has been baselined, our SOC team will deliver tailored alerts and flag any suspicious activity, giving you actionable remediation advice for any threats. We’ll continuously tune your runbooks in line with your business priorities and schedule regular service reviews to ensure that you’re always getting the maximum amount of value out of your SIEM.

AWS

Beaverbrook

Cisco

Crowdstrike

Fortinet

Google Cloud

AWS

Beaverbrook

Cisco

Crowdstrike

Fortinet

Google Cloud

Microsoft

Mimecast

Okta

Salesforce

Sentinel One

Sophos

Microsoft

Mimecast

Okta

Salesforce

Sentinel One

Sophos

Compatible with all of your existing systems

Seamlessly connect and monitor security logs from all your tools, including cloud platforms and identity systems.

Why choose Defense.com?

We believe that good cyber security doesn’t have to be complicated. That’s why Defense.com provides managed security services to make it easier for you to detect and respond to threats and your cyber risk.

By combining security tools that identify threats across your environment, Defense.com enables you to prioritise and manage cyber threats with ease. Remediation advice provided by experienced SOC analysts ensures threats are dealt with quickly and efficiently.

Defense.com Customer Success team

Customer success stories

Why choose a managed SIEM solution?

A large housing provider chose Defense.com to deliver a 24/7 managed SIEM and SOC service and take the pressure off their internal team.

We helped them to:
- Overcome challenges with their existing MSSP
- Monitor their environment 24/7
- Eliminate alert fatigue
Read full case study

Get a Free Managed Security Consultation

Request your free consultation to receive customised recommendations based on your security needs.

Managed Detection and Response (MDR) FAQs

The Defense.com MDR service requires our endpoint protection agent and proprietary SIEM technology to be deployed. Our MDR service currently does not support or manage SIEM deployments from other vendors. However, we can integrate with most other areas of your existing tech stack to help you keep costs and complexity to a minimum.

Our standard SLAs for our MDR service are as follows, based on the severity of the alert:

Critical: Phone, portal and email communication within 30 minutes
High: Phone, portal and email communication within 30 minutes
Medium: Portal and email
Low: Portal and email
Informational: Portal only

Yes, we operate 24/7/365. We will work with you to identify what type of security alerts you’d like us to raise in and out of hours, and what your dedicated point of contacts are.

We will also work with you to define the preferred method of contacting your team for different types of alerts, and align within your current incident response process.

Most larger vendors price their MDR service by log volumes, EPS or data storage capacity. However, this approach isn’t cost-effective and means you have to constantly calculate your usage.

We believe that good security doesn’t need to be complicated (or expensive!), so our core service is priced based on how many log sources you have. 24/7 coverage from our SOC team is included within this price, which means you’ll get a consistent and predictable price per month.

You can also choose to add incident response capabilities to your MDR service, which can be tailored to your existing processes, technologies and SLA requirements.

Get actionable cyber security advice and insights straight to your inbox.