Compare managed security

EDR, MDR, XDR and ΔDR in eleven editions. Start where you are and grow; each card shows exactly what's included.

EDREdition 1 of 3

EDR-ST

Endpoint Detection & Response, Standard

Essential endpoint protection

Next-generation protection that stops known and unknown malware on every device.

Monitored and managed by our 24x7 SOC

  • EPP
Powered by WhiteDog Cyber
EDREdition 2 of 3

EDR-ES

Endpoint Detection & Response, Enterprise

See and stop what gets through

Full endpoint detection and response: records activity so attacks can be detected, contained and rolled back.

Monitored and managed by our 24x7 SOC

  • EDR

Highlighted: new compared with EDR-ST.

Powered by WhiteDog Cyber
EDREdition 3 of 3

EDR-PM

Endpoint Detection & Response, Premier

Endpoint defense with expert hunting

Endpoint detection and response plus proactive threat hunting by experienced analysts.

Monitored and managed by our 24x7 SOC

  • EDR
  • ATH
  • AVM

Highlighted: new compared with EDR-ES.

Powered by WhiteDog Cyber
MDR

MDR

Managed Detection & Response

Expert eyes on your environment

Analysts watch your environment around the clock, investigate alerts and respond for you.

Monitored and managed by our 24x7 SOC

  • EDR
  • ATH
  • SIEM
  • ESPM
  • NSPM
  • CIR
  • AVM
  • CTEM
  • CPT
Powered by WhiteDog Cyber
XDREdition 1 of 3

XDR-ST

Extended Detection & Response, Standard

Visibility beyond the endpoint

Managed detection and response with email, collaboration and internet threat protection, so attacks are stopped before they reach a device.

Monitored and managed by our 24x7 SOC

  • EPP
  • SIEM
  • ESPM
  • NSPM
  • CIR
  • CTEM
  • CPT
  • APP
  • ITP
Powered by WhiteDog Cyber
XDREdition 2 of 3

XDR-ES

Extended Detection & Response, Enterprise

Full endpoint detection and response

Upgrades endpoint protection to full detection and response, alongside email, collaboration and internet threat protection.

Monitored and managed by our 24x7 SOC

  • EDR
  • SIEM
  • ESPM
  • NSPM
  • CIR
  • AVM
  • CTEM
  • CPT
  • APP
  • ITP

Highlighted: new compared with XDR-ST.

Powered by WhiteDog Cyber
XDREdition 3 of 3

XDR-PM

Extended Detection & Response, Premier

Add threat hunting

Adds basic threat hunting: regular hunts across your environment for common attacker techniques.

Monitored and managed by our 24x7 SOC

  • EDR
  • BTH
  • SIEM
  • ESPM
  • NSPM
  • CIR
  • AVM
  • CTEM
  • CPT
  • APP
  • ITP

Highlighted: new compared with XDR-ES.

Powered by WhiteDog Cyber
ΔDREdition 1 of 4

ΔDR-ST

ΔDR, Standard

Active defense with data and compliance in view

Moves from detection to active defense, and adds data security posture management and compliance reporting.

Monitored and managed by our 24x7 SOC

  • EDR
  • ATH
  • SIEM
  • ESPM
  • NSPM
  • CIR
  • VM
  • CTEM
  • CPT
  • APP
  • ITP
  • DSPM
  • CRPT
Powered by WhiteDog Cyber
ΔDREdition 2 of 4

ΔDR-ES

ΔDR, Enterprise

Identity and DNS covered

Adds identity security posture management and DNS security posture, protecting accounts, domains and DNS.

Monitored and managed by our 24x7 SOC

  • EDR
  • ATH
  • SIEM
  • ESPM
  • NSPM
  • CIR
  • VM
  • CTEM
  • CPT
  • APP
  • ITP
  • DSPM
  • ISPM
  • DNSSPM
  • CRPT

Highlighted: new compared with ΔDR-ST.

Powered by WhiteDog Cyber
ΔDREdition 3 of 4

ΔDR-PM

ΔDR, Premier

Cloud files covered too

Adds security for files stored and shared in cloud platforms.

Monitored and managed by our 24x7 SOC

  • EDR
  • ATH
  • SIEM
  • ESPM
  • NSPM
  • CIR
  • VM
  • CTEM
  • CPT
  • APP
  • ITP
  • DSPM
  • ISPM
  • DNSSPM
  • CFS
  • CRPT

Highlighted: new compared with ΔDR-ES.

Powered by WhiteDog Cyber
ΔDREdition 4 of 4

ΔDR-CP

ΔDR, Compliance Plus

Maximum protection, identity attacks stopped

Adds identity threat detection and response to stop account takeover as it happens.

Monitored and managed by our 24x7 SOC

  • EDR
  • ATH
  • SIEM
  • ESPM
  • NSPM
  • CIR
  • VM
  • CTEM
  • CPT
  • APP
  • ITP
  • DSPM
  • ISPM
  • DNSSPM
  • CFS
  • ITDR
  • CRPT

Highlighted: new compared with ΔDR-PM.

Powered by WhiteDog Cyber

Every edition is monitored and managed by our 24x7 SOC. From MDR up, editions also include the AI-driven SIEM, continuous incident response, exposure management and continuous pen testing. Scope and pricing are set per engagement.

Powered by WhiteDog Cyber

Capability glossary

What each abbreviation on the package cards means.

EPP

Endpoint Protection

Prevents known and unknown malware on laptops, desktops and servers.

EDR

Endpoint Detection & Response

Records endpoint activity to detect, contain and roll back attacks, and allows or blocks applications on each system (allowlisting and blocklisting).

BTH

Basic Threat Hunting

Regular hunts across your environment for common attacker techniques.

ATH

Advanced Threat Hunting

Hypothesis-driven hunts for threats that evade automated detection.

SIEM

AI-driven SIEM

Central collection and correlation of security signals across your environment.

ESPM

External Security Posture

Continuously discovers and tests internet-facing assets: open ports, vulnerabilities, technology stack and dark web exposure.

NSPM

Network Security Posture

Continuously discovers and tests assets on your internal network: open ports, vulnerabilities and remediation priorities.

CIR

Continuous Incident Response

Incident response is part of the service, not a separate retainer.

AVM

Application Vulnerability Management

Finds vulnerable third-party applications on every endpoint through the EDR agent.

VM

Vulnerability Management

Finds vulnerable operating systems and third-party applications on every endpoint through the EDR agent.

CTEM

Exposure Management

Continuous internal, external and dark web exposure management.

CPT

Continuous Pen Testing

Ongoing attack simulation instead of a once-a-year test.

APP

Advanced Phishing Protection

Stops phishing, impersonation and malicious links across email and collaboration tools.

ITP

Internet Threat Protection

DNS-layer protection that blocks malicious destinations for users anywhere.

DSPM

Data Security Posture

Discovers sensitive data and where it is exposed.

ISPM

Identity Security Posture

Finds risky accounts, permissions and identity misconfigurations.

DNSSPM

DNS Security Posture

Monitors domains and DNS configuration for hijack and spoofing risk.

CFS

Cloud File Security

Scans files in cloud storage and collaboration platforms for threats.

ITDR

Identity Threat Detection & Response

Detects and responds to account takeover and identity attacks.

MDE

Managed Data Encryption

Policy-driven AES-256 file-level encryption of sensitive data, deployed and managed for you. Add-on.

PSA

Phishing Simulations & Awareness Training

Monthly end-user training with advanced phishing and threat simulations. Add-on.

DSB

Distributed SaaS Backup

Automated daily backup of Microsoft 365 or Google Workspace to an independent location, with granular restore. Add-on.

CRPT

Compliance Reporting

Evidence and reporting mapped to the frameworks your auditors use, such as NIST CSF, ISO 27001, SOC 2 and CMMC.

Not sure which edition fits?

A short assessment shows where you are today and which package closes the gaps that matter.