IT Brief UK - Technology news for CIOs & IT decision-makers
Story image
Vectra pioneers global open MXDR service for hybrid attack defence
Mon, 19th Feb 2024

Vectra has introduced MXDR (Managed Extended Detection and Response) services, an industry-first global open MXDR service to defend against hybrid attacks that work around the clock. The move towards hybrid and multi-cloud environments has rendered traditional defenses less effective, and the resulting hybrid attacks necessitate wide-ranging threat detection across fast expanding attack surfaces.

Unfortunately, a profusion of isolated tools has flooded Security Operations Center (SOC) leaders with alerts, leading to high workloads and burnout, thereby causing higher turnover among SOC analysts. Vectra MXDR assists enterprises to bring together threat detection and response into one integrated service, thereby alleviating the burden on SOC teams. It works in tandem with EDR platforms like Crowdstrike, SentinelOne and Microsoft Defender.

Vectra MXDR leverages Vectra AI's patented Attack Signal Intelligence allowing analysts to utilise AI and machine learning to adapt to the unique environments of customers and to focus on attacker behaviour. Analysing the difference between malicious and benign events enables analysts to highlight the most urgent attacks for customers in real time. MXDR specialists are experts in hybrid attack, applying their experience and knowledge to protect against hybrid attacks, offering round-the-clock global defense.

Vectra AI, a leader in hybrid attack detection, investigation and response, announced the offering, which simplifies the hybrid attack surface view through the elimination of silos. This is achieved by considering identity, public cloud, SaaS, data centre, and cloud networks and endpoints through integrations with major EDR vendors. Integration with top EDR platforms allows Vectra's MXDR analysts to supervise the entire security system's health and take direct action, regardless of where the signal originates.

Following the Vectra AI Platform's launch last year, "we recognized that our customers who are outsourcing these services need a comprehensive platform and access to MXDR specialists who are dedicated to investigating malicious activity," stated Hitesh Sheth, President and CEO of Vectra AI. MXDR enables SOC leaders, security analysts, and architects to have complete coverage, clarity, and control across the entire hybrid attack surface.

Vectra's full-service offering enables enterprise isolation, containment and mitigation of hybrid attacks with manual or automated response actions. Its flexibility allows Vectra MXDR to be customised to meet organisations' specific business needs, ensuring a personalised security strategy through a range of defensive models. It also includes managed security policy configuration.

"Enterprises need both endpoint protection solution and network security tools to safeguard against hybrid attacks," said Gary Ruiz, VP, WW Professional Services at Vectra AI. "By adding the services component with Vectra MXDR, we're introducing that human element to the process, helping customers implement and manage this integrated approach. Our experts are monitoring around the clock and helping customers deal with incidents by responding and remediating them on their behalf, significantly reducing SOC teams' workloads."

Currently, Vectra MXDR is available to existing customers.