Service Comparison

Managed eXtended Detection & Response (MXDR): an outsourced Software-as-a-Service (SaaS) platform that provides comprehensive 24/7/365 protection from cyber threats, identifying and neutralizing never-before-seen attacks across a company’s entire technology infrastructure.

Managed Detection & Response (MDR): Managed detection and response (MDR) is an outsourced service that provides organizations with security monitoring and threat hunting services and responds to threats once they are discovered.

Extended Detection & Response (XDR): a consolidation of tools and data that provides extended visibility, analysis, and response across networks and clouds in addition to apps and endpoints.

Managed Endpoint Detection & Response (MEDR): EDR offered as a managed service. Involves a team of analysts reviewing EDR data detect and report threats.

Security Information and Event Management (SIEM): an approach to security management that combines SIM (security information management) and SEM (security event management) functions into one security management system.

Endpoint Detection & Response (EDR): the protection of internet-connected devices such as PCs, workstations, servers and smartphones against cyber threats.

SERVICE	MXDR+SOCaaS	MXDR	MDR	XDR	MEDR	SIEM	EDR
Monitor Your Entire Digital Infrastructure Detect threats across your network, cloud platforms, endpoints and applications.	✔	🞅	🞅	🞅	🞬	🞬	🞬
SIEM Access and Visibility Collect and compare security log data from all your devices and your network & security solutions in the SIEM, on demand access to retained logs.	✔	🞬	🞬	🞬	🞅	✔	🞅
Machine Learning & User Behavior Analytics Real-Time Alerts driven by anomalous patterns in your data.	✔	🞅	🞅	🞅	🞬	🞬	🞬
24/7/365 SOC Support Our Security Experts are working for you around the clock.	✔	🞅	🞅	🞬	🞬	🞬	🞬
Issue Triage and Guided Remediation Critical events are investigated, and actionable insights are delivered in under 30 minutes.	✔	✔	✔	✔	✔	🞬	🞬
24/7/365 Remediation Our NOC Team will remediate alerts, taking corrective action within your environment to resolve or halt threat progression.	✔	🞅	🞅	🞬	🞅	🞬	🞬
SOC vets alerts before escalating Suppressing benign alerts and false positives, reducing alert-fatigue.	✔	🞅	🞅	🞬	🞅	🞬	🞬
Threat Hunting Continuous, proactive hunting for suspicious activity across your entire infrastructure.	✔	✔	✔	✔	✔	✔	🞬
Cyber-Risk Scoring Measure your cybersecurity posture based on 13 critical security metrics and Indicators of Attack (IoA) from MITRE and NIST frameworks.	✔	🞬	🞬	🞬	🞬	🞬	🞬
On-Boarding Concierge White-glove setup and integration to monitor and enhance existing security layers.	✔	✔	✔	✔	✔	🞬	✔
100% Focus on the Education Space We understand the unique needs and requirements of K-12 School Districts better than anyone.	✔	🞬	🞬	🞬	🞬	🞬	🞬

MEANING	SYMBOL
YES	✔
SOMETIMES, Depending on the Vendor	🞅
NO!	🞬

Managed eXtended Detection and Response (MXDR) + SOCaaS: a service that provides organizations with extended visibility, monitoring, active threat-hunting, analysis, and response across networks, workloads, clouds and users in addition to apps and endpoints. MXDR + SOCaaS includes 24/7 monitoring, threat detection, prevention and analysis of your attack surface, including internet traffic, corporate networks, desktops, servers, endpoint devices, cloud infrastructure, firewalls, threat intelligence, intrusion prevention, and Security Information and Event Management (SIEM) systems.

Managed eXtended Detection & Response (MXDR): a service that combines security technologies, analytics, and human expertise to help organizations detect and respond to cyber threats.

Managed Detection & Response (MDR): a service that provides organizations with security monitoring and threat hunting and responds to active threats once they are discovered.

Extended Detection & Response (XDR): a consolidation of tools and data that provides extended visibility, analysis, and response across networks and cloud infrastructures, in addition to apps and endpoints.

Managed Endpoint Detection & Response (MEDR): EDR offered as a managed service. Involves a team of analysts, reviewing EDR data, and detecting/reporting threats.

Security Information and Event Management (SIEM): an approach to security management that combines SIM (Security Information Management) and SEM (Security Event Management) functions into one unified security management system.

Endpoint Detection & Response (EDR): the protection of internet connected devices such as servers, workstations, tablets, and smartphones against cyber threats.