XDR: Extended Detection & Response

Managed detection and response with email, collaboration and internet threat protection and threat hunting, in three editions.

Powered by WhiteDog Cyber

Beyond the endpoint

Best for: Organizations where phishing, web threats and sensitive data are the main risks.

XDREdition 1 of 3

XDR-ST

Extended Detection & Response, Standard

Visibility beyond the endpoint

Managed detection and response with email, collaboration and internet threat protection, so attacks are stopped before they reach a device.

Monitored and managed by our 24x7 SOC

  • EPP
  • SIEM
  • ESPM
  • NSPM
  • CIR
  • CTEM
  • CPT
  • APP
  • ITP
Powered by WhiteDog Cyber
XDREdition 2 of 3

XDR-ES

Extended Detection & Response, Enterprise

Full endpoint detection and response

Upgrades endpoint protection to full detection and response, alongside email, collaboration and internet threat protection.

Monitored and managed by our 24x7 SOC

  • EDR
  • SIEM
  • ESPM
  • NSPM
  • CIR
  • AVM
  • CTEM
  • CPT
  • APP
  • ITP

Highlighted: new compared with XDR-ST.

Powered by WhiteDog Cyber
XDREdition 3 of 3

XDR-PM

Extended Detection & Response, Premier

Add threat hunting

Adds basic threat hunting: regular hunts across your environment for common attacker techniques.

Monitored and managed by our 24x7 SOC

  • EDR
  • BTH
  • SIEM
  • ESPM
  • NSPM
  • CIR
  • AVM
  • CTEM
  • CPT
  • APP
  • ITP

Highlighted: new compared with XDR-ES.

Powered by WhiteDog Cyber

What's included

Every capability across the XDR editions. Each card above shows which edition includes what.

EPP

Endpoint Protection

Prevents known and unknown malware on laptops, desktops and servers.

EDR

Endpoint Detection & Response

Records endpoint activity to detect, contain and roll back attacks, and allows or blocks applications on each system (allowlisting and blocklisting).

BTH

Basic Threat Hunting

Regular hunts across your environment for common attacker techniques.

SIEM

AI-driven SIEM

Central collection and correlation of security signals across your environment.

ESPM

External Security Posture

Continuously discovers and tests internet-facing assets: open ports, vulnerabilities, technology stack and dark web exposure.

NSPM

Network Security Posture

Continuously discovers and tests assets on your internal network: open ports, vulnerabilities and remediation priorities.

CIR

Continuous Incident Response

Incident response is part of the service, not a separate retainer.

AVM

Application Vulnerability Management

Finds vulnerable third-party applications on every endpoint through the EDR agent.

CTEM

Exposure Management

Continuous internal, external and dark web exposure management.

CPT

Continuous Pen Testing

Ongoing attack simulation instead of a once-a-year test.

APP

Advanced Phishing Protection

Stops phishing, impersonation and malicious links across email and collaboration tools.

ITP

Internet Threat Protection

DNS-layer protection that blocks malicious destinations for users anywhere.

Is XDR the right fit?

A short assessment shows where you are today and which edition closes the gaps that matter.