Managed EDR: 24/7 monitoring and response on all your endpoints
An in-house Security Operations Center is unaffordable for most organisations. With Managed EDR, Xcitium analysts monitor your endpoints day and night and act as soon as something is wrong.
How it works
- 01
Connect
The agent is rolled out and your environment is connected to the SOC.
- 02
Validate
Analysts assess alerts and filter out false alarms.
- 03
Respond
If there is a real threat, the device is isolated and you are informed.
- 04
Report
You receive a report of the incident and the measures taken.
What you get
24/7 SOC
All year round, including nights and weekends.
Instant containment
Suspicious files and devices are isolated before damage is done.
No alert fatigue
You are only notified when something is really wrong.
Proactive threat hunting
The SOC actively looks for traces of attackers.
Incident response
According to Xcitium without retainer or hourly fees for MDR and XDR customers.
Other EDRs too
According to Xcitium also available as a service on CrowdStrike, SentinelOne and Carbon Black.
Service levels (according to Xcitium)
Targets published by Xcitium for the MDR service (xcitium.com/managed-packages).
| Item | Target |
|---|---|
| Triage of high-priority alerts | Within 15 minutes |
| Time to remediate critical incidents (MTTR) | 30 minutes |
| Post-incident report | Within 24 hours |
| Notification of a suspected breach | Within 4 hours of discovery |
| Portal availability | 99.9% |
Managed EDR: local point of contact
The service itself is delivered by Xcitium's 24/7 Security Operations Center. Spiredesk is your point of contact in the Netherlands: we agree the scope, set up the integrations, translate reports into actions and liaise with the SOC during incidents.
- ✓ Intake and scoping
- ✓ Onboarding and integrations
- ✓ Periodic review of reports
- ✓ Escalation point during incidents
Complete your coverage
Managed EDR for Microsoft Defender
Prevention and a 24/7 SOC on top of your existing Microsoft Defender.
ViewManaged SOC packages
SOC packages for devices, network, cloud and identities.
ViewEDR
Full insight and fast response per device, with containment as a safety net.
ViewMobile SOC
MDR alerts and dashboards in an app for iOS and Android.
ViewFrequently asked questions
What is the difference between EDR and Managed EDR?
With EDR you handle the alerts yourself. With Managed EDR, Xcitium's 24/7 SOC does it, and action is taken immediately outside office hours too.
Do we need security expertise ourselves?
No. The SOC investigates the alerts and Spiredesk is your local point of contact.
How long is data retained?
According to Xcitium 7 to 30 days by default, with options to adjust this.
Managed EDR in your environment?
In a short demo we show you how it works, discuss your situation and make a proposal. No obligation, in English or Dutch.
Product information: xcitium.com. Xcitium, ZeroDwell, OpenEDR and related logos are trademarks of Xcitium Inc.