Managed Extended Detection and Response (MXDR)

Traditional antivirus solutions attempt to directly fend off attacks using preventive protection technologies. XDR, on the other hand, aims to detect attacks that antivirus software was unable to identify and block. This is often the case, for example, with “Living off the Land” attacks. In plain English: Attackers use a legitimate tool within the victim’s system. For instance, they might use TeamViewer to gain remote access. An AV solution would not detect this. XDR solutions, however, do. This is because they utilize significantly expanded sensor capabilities and allow experts interactive access to them (Detect). These experts can investigate the suspicious processes and intervene manually (Respond).

To achieve a real gain in security, an XDR solution should be managed by analysts with in-depth expertise. However, these are rare and expensive. An in-house Security Operations Center (SOC) is therefore not economically viable for many medium-sized companies. Furthermore, in-house, overburdened security operations teams often experience “alert fatigue.” This is an often-underestimated security risk: due to numerous false alarms, they quickly overlook indications of genuine alerts. That is why it makes sense to entrust the management of the security solution to an IT security specialist. In this case, the terms Managed XDR, Managed SOC, or SOC Service are used.

To operate an in-house Security Operations Center (SOC) on a shift basis, at least eight analysts are needed to cover weekends, holidays, vacations, and sick leave. On top of that, you’ll need 1–2 managers, as well as XDR software and databases containing up-to-date threat intelligence. In total, this can cost 1,000,000 euros per year. A SOC service, on the other hand, is a more cost-effective and time-saving option. You enhance your company’s IT security without having to search for and hire additional specialized staff.

In the event of critical incidents, our experts will call you directly. You can customize which situations you’d like to be notified about via email. For every incident? Or only when there are recommendations for action? We adapt to your preferences.

In the web console, you can see in real time:

• what has happened on your network
• which threats our experts have mitigated for you
• whether there are recommendations for action.

Additionally, you receive an annual overview of everything our SOC service has done for you. Simply present this to your company’s management and your insurance provider.

As a German company headquartered in Bochum, we are bound by strict German data protection laws. Data is stored exclusively on servers in Germany. Furthermore, we develop the XDR software we use entirely in-house—also in Germany and guaranteed without backdoors. To this end, we have committed ourselves as holders of the “IT Security Made in Germany” seal.

Data is stored exclusively on servers in Germany: at our headquarters in Bochum and in Frankfurt and Berlin at the German service provider IONOS.

Our analysts only access data in suspected cases. And only to the extent that you authorize us to do so during the onboarding process. Beyond that, we are also committed to data minimization in accordance with the GDPR.

During onboarding, we discuss: Which of your devices would you like to include in the service? How should we respond to cyberattacks? Where is a manual analysis preferable to an automated response? Together, we weigh the pros and cons in your specific case.

With the EU’s NIS 2 Directive, mandatory IT security measures apply to many companies and organizations. For example, to detect, analyze, and contain security incidents. NIS-2 also requires incidents to be reported to the authorities within short timeframes. Managed XDR helps you meet these NIS-2 requirements. Another requirement: ensuring the security of your own IT service providers. As a German medium-sized company, G DATA itself falls under NIS-2. And stands by your side as a trusted partner with IT security “Made in Germany.”

MXDR runs on clients and servers with both Windows and Linux. It is also available for Windows on ARM and macOS.

You can use either our Endpoint Security or Managed Extended Detection and Response. With MXDR, only our lightweight agents are installed on your systems. This saves you time: We take full care of managing the agents and keeping them up to date for you. The biggest advantage: In addition to preventive protection, you receive 24/7 monitoring and response through our SOC service. When switching to MXDR, we provide comprehensive support to your IT team.

To make getting started easy for you, we’ll walk you through the onboarding process together. During this process, we’ll determine which of your devices we’ll monitor and how we should respond to attacks. We’ll deploy the agents on your devices together. Test now to see if Managed XDR is right for you.

Yes, our Information Security Management System (ISMS) is certified to ISO 27001:2022. TÜV Austria has thoroughly audited all processes involved in delivering our MXDR solution.