Managed Detection & Response

Our Swiss SOC offers comprehensive threat detection and quick response to protect your company's critical business assets and your reputation.

Arrange a briefing

MDR reduces cyber incidents by continuous monitoring and rapid threat detection.

By responding faster the financial impact of an attack is minimized and your business continuity is ensured.

In case of staff shortage you can rely on our experts with the fully managed solution. Stay flexibel by adapting the level of service to your resources.

Cost-effective as you don't need to finance a SOC by your own to protect your company and yearly costs are easy to calculate.

Threat Detection

Immediate benefit from day one without burden your internal staff resources. We reduce your risk exposure.

Vulnerability Scanning

External scanning included in essential package offering risk based priorization and scalable architecture.

Remediation

Fully automated by SOAR as a service including host isolation and multi-factor-authentication reset.

Threat Intelligence

Automated feeds providing real-time data for information on threats and indicators of compromise.

Use Cases Catalogue

We use various pre-defined use cases based on Splunk, Microsoft Sentinel and our own Use Case Management App.

Digital Risk Monitoring

Monitoring your footprint and dark web presence as a self-service, will identify leaked information about your company.

Alerting & Support

Our alerts include remediation recommendations by our experts. Advice provided based on yearly credits.

Data Sources

For better transparency we use different log collectors like identity providers, EDR, IDS, honeypot and more.

Our Security Sensors

Sensors developed to provide visibility to your network. All-in-one solution for IDS, log collection, honeypots and vulnerability scans.

Sandbox Honeypot Canaries

These will make an attacker's approach visible before real damage occurs. Available via the Customer Portal.

Reporting

Automated monthly reports available via Customer Portal. A yearly Threat Intelligence Report can be shared with your stakeholders.

MDR Essential (XDR)

Best for small organizations with 1 to 2 Security FTE.
Fully managed by Swiss Post Cybersecurity.
Designed for fundamental cybersecurity protection.

Includes the complete MDR tool box.

Cost-effective solution for smaller budgets.

No in-house skills required. You benefit from our security professionals.

MDR Advanced (SIEM)

Best for medium organizations with 3 to 5 Security FTE.
Includes all features of the MDR Essential.
For a wider range of challenges and more complex IT infrastructure.
Additional data sources, use cases & playbooks.
Internal Vulnerability Scanning included.
Steering meetings, workshops & additional support credits.
Better response time with expert's guidance.

MDR Premium (Extended SIEM)

Best for large organizations with 6+ Security FTE.
Co-managed by customer & our team.
Includes all features of MDR Advanced.
Ultimate protection for enterprise-level security.
Enhanced Service Level Agreement for rapid Incident Response.
Dedicated Customer Success Manager.
CSIRT 7x24 and personalized support.

What does MDR mean?

MDR stands for Managed Detection and Response and is used to detect and react on threats to protect your company. MDR as a cybersecurity service is provided by a SOC or Cyber Defense Center 24/7 and combines technologies with human expertise. Managed refers to the level of outsourcing to a security service provider.

Which technologies are used for MDR?

MDR uses a lot of different technologies to protect your IT infrastructure like IDS, SIEM, log correllation, EDR/XDR but also Vulnerability Scanning, Threat Intelligence and SOAR. Contact us to receive a complete list.

Can I use MDR without having my own security team?

Yes you can. MDR is available for different levels of outsourcing. Depending on knowledge and staff you can decide which level you need and adapt it over the time.

Fully managed means that we provide (nearly) everything for your organization.
Co-managed means that tasks are shared between your company and our security professionals.

What is the difference between MDR and traditional monitoring?

Pure security monitoring normally ends as soon as a threat has been detected and the alert has been created.
MDR is much more pro-active and includes investigations and human experts taking immediate action if needed. MDR uses modern technology like AI to also mitigate the cyber attack.

Which platforms are supported?

We can collect logs from almost any platform. Our collectors can read the following formats, among others: syslog, flat files, e-mails, etc. This includes, among others:

Operating systems: Windows, Linux, Sun, ...
Security devices: Firewall, proxies, sandboxing solutions, IPS, ...
Endpoint solutions: Antivirus, HIPS
Network equipment: switches, routers, ...

Where is our data stored?

Our solutions - in particular our Cyber Defense Center - are developed, operated and provided entirely in Switzerland where data are stored.