Managed detection and response
Someone watching your company at 3 a.m.
Analysts monitor your computers, servers and staff accounts around the clock. When something gets in, they investigate it, contain it and tell you what happened in plain words. You do not need a security team of your own.
- Watched
- Computers, servers and Microsoft 365 accounts [CONFIRM: M365]
- Hours
- 24/7, reviewed by people
- Your side
- One or two contacts. Nothing to install.
- Contract
- Flexible, agreed before you start
What is included
24/7 monitoring by people
Analysts review alerts at any hour, not only an automated system.
Endpoint detection and response
Protection on your computers and servers that spots attacker behaviour, not only known malware.
Account protection
Watch on your Microsoft 365 accounts for stolen logins, suspicious sign-ins and malicious inbox rules. [CONFIRM: identity/M365 coverage is in the package Enclave sells]
Containment
When a threat is confirmed, the analyst isolates the device or locks the account to stop it spreading. [CONFIRM: which containment actions are pre-authorised by default]
Clear incident reports
What happened, what we did and what you need to do, written for the person who has to decide.
Regular summaries for leadership
What we saw, what we stopped and what to improve.
How it works
- 01
Onboarding
We agree what to cover, who to call and what we may do without asking. Then we deploy a light agent to your devices. You install nothing yourself. [CONFIRM: Enclave deploys the agents]
- 02
Watch
The agents and account monitoring feed one console. Analysts review what it raises, day and night.
- 03
Act
On a real threat, the analyst contains it and calls or writes to your contact with what to do next.
- 04
Improve
Each month we review what happened and what to change, from settings to staff training. [CONFIRM: monthly review cadence]
Delivered with
We deliver this service with Huntress, a managed detection and response platform built for companies without their own security team. Enclave Guard is your contact, sets it up and handles what it finds.
Works well with
How our services fit together
Exposure and detection
- Cyber Exposure MonitoringStart here
Leaked logins, exposed data and dark-web chatter about you, checked by an analyst.
- Threat intelligence
The technical detail: criminal sources, infostealer logs and your exposed internet assets.
- 24/7 detection and responseYou are here
Analysts watch your devices and accounts around the clock and act when something gets in.
See what attackers already see, and catch them if they get in.
Questions about MDR
We already have antivirus. Is that not enough?
Antivirus blocks known malware. Most attackers today log in with stolen passwords or use normal admin tools, which antivirus does not flag. MDR adds people who look for that behaviour and act on it.
Do we need staff of our own to use this?
No. We run it. You name one or two contacts we can reach when something happens.
What happens at night or on a weekend?
The same as on a weekday: an analyst reviews the alert and contains the threat. We reach your contact by the route you choose. [CONFIRM: wording of the out-of-hours escalation]
How long is the contract?
Contracts are flexible. We agree the term and notice period with you before you start. [CONFIRM: minimum term, given the partner's own terms]
How is it priced?
Per device or user, depending on what you need covered. We quote after a short call. [CONFIRM: per-device/per-user pricing basis; no figures on the site]
First, see what is already leaked.
The free Exposure Review shows which logins and data about your company are already out there. It is the best place to start before we watch your systems.