Deepwatch Delivers Automated Response Service to Accelerate Threat Containment

New MXDR service expands industry’s leading managed detection and response (MDR) solution with rapid response across endpoint, network, and cloud.

SAN FRANCISCO--(BUSINESS WIRE)--(RSA Conference) — Deepwatch, the leader in advanced managed detection and response (MDR), announced expanded capabilities today at the RSA Conference, including Deepwatch MXDR (managed extended detection and response), a new service that delivers automated response to threats. Deepwatch’s MXDR service expands unmatched detection capabilities with high-fidelity, contextualized alerts to enable rapid response and containment of cyber threats.

“Deepwatch MXDR automates response capabilities that help security operations teams contain threats and mitigate risk faster and more confidently than ever before,” said Wes Mullins, chief technology officer at Deepwatch. “Automation delivers accelerated response times when powered by robust and accurate information on detected threats. High-fidelity alerts, enriched with information across endpoint, network, cloud, email and identities correlated over a period of time, enables security teams to swiftly identify and contain threats before they disrupt business.”

According to Deepwatch’s State of the Modern SOC 2022 research, 85% of security professionals say that they have experienced preventable business impacts as a result of insufficient response procedures, citing staffing issues and security alert quality as top barriers to response. Nearly all (97%) security professionals state that more accurate alerting would increase confidence in implementing automated response actions.

Deepwatch MXDR significantly reduces the risk of business impacting security incidents by responding at machine speed, allowing analysts to do the rest in human time. Leveraging the Deepwatch SecOps platform to collect, process, and analyze security telemetry from data sources, Deepwatch produces the most comprehensive high-fidelity alerts. Deepwatch improves threat detection and reduces alert overload by correlating related threat activity for a single entity and escalating only the alerts that exceed the customer-defined risk threshold. Informed by Deepwatch’s advanced detection capabilities, Deepwatch MXDR drives automated response actions that eliminate the lag time and dependence on security staff and cross-departmental resources.

“Security leaders considering XDR should focus on security outcomes, including fast and efficient alert triage and prioritization, advanced threat detection, and rapid detection and response times, all aimed at supporting a growing attack surface,” said Dave Gruber, Principal ESG Analyst. “ESG research shows that half of security teams prefer a fully managed XDR solution, with 52% of organizations believing that an MDR service provider can do a better job at threat detection and response than they can. Other MDR use cases reported in support of XDR deployments include the need for more expert security skills, staffing augmentation, and off-hours coverage.”

The Deepwatch MXDR service can be combined with Deepwatch MDR service for complete threat lifecycle defense or purchased as a standalone service.

Deepwatch MXDR benefits:

• Designed to automate rapid response across endpoint, network, cloud, identity, and email at machine speed
• Programmatic response, using tailored playbooks
• Deliver XDR outcomes at a lower total cost of ownership compared to product-based approaches

Availability:

• Deepwatch MXDR for endpoint (CrowdStrike, SentinelOne and Cybereason) is available today
• Deepwatch MXDR for network (Palo Alto, Fortinet and Check Point) is available today
• Deepwatch MXDR for email, cloud, identity, and additional endpoints will be available in Q4 2022

For more information, please visit https://www.deepwatch.com/managed-extended-detection-response.

About Deepwatch

Deepwatch is the leader in managed security services, protecting organizations from ever-increasing cyber threats 24/7/365. Powered by Deepwatch’s cloud-based security operations platform, Deepwatch provides the industry’s most comprehensive detection and automated response to cyber threats together with tailored guidance from dedicated experts to mitigate risk and measurably improve security posture. Hundreds of organizations, from Fortune 100 to mid-sized enterprises, trust Deepwatch to protect their business. Visit www.deepwatch.com to learn more.