Open Systems today announced a new managed detection and response (MDR) service powered by Microsoft Azure Sentinel security information and event management (SIEM) platform.
The secure access service edge (SASE) vendor claims the service will help to minimize the damage of cyberattacks by enabling early detection and response for its customers. Open System's new offering works by ingesting data from the customers’ infrastructure, devices, users, and applications. From there, the information is scanned for threats using Microsoft Azure Sentinel for true positives and suspicious behavior.
However, unlike a traditional SIEM, Open Systems’ is being delivered as a managed service. As threats are identified, the company’s team of security engineers work to verify the threat and provide customers with recommendations for containment and resolution.
In an interview with SDxCentral, Dave Martin, senior director of product management, threat response at Open Systems, said the service comes in response to a changing security landscape.
“There is a recognition now in the security space that the best practice to minimize risk is to combine the prevention layer with continuous monitoring,” he said, adding that the new managed service aims to cut through the "noise" of false security alerts.
“For many years we followed a technology-driven security model where the idea was ‘if we only bought the next piece of security software we would be safe,’” he said. “As a result, most enterprises end up with a patchwork system security stack, where things are siloed and frankly not only not working together but making things worse by generating noise for security teams.”
Additionally, the company’s new MDR service gives customers an alternative to building out their own security operations centers (SOCs), says Martin. “The pure cost involved with purchasing all the software and getting it all up and running can be millions of dollars for a well run SOC.”
According to Open Systems CEO Jeff Brown, the decision to use Azure Sentinel came in response to feedback from customers faced with this dilemma.
“One of the things we heard clearly from our customers was that they really liked the technology in Sentinel, but a number of them felt that it would be better if it was a service that came from somebody else … rather than trying to staff it and run it themselves,” he said.
Open Systems’ MDR will be available as a paid add-on for existing Open Systems SASE customers or as a standalone service beginning in the third quarter.
Comments