Darktrace has recently rolled out a new service known as Darktrace Managed Detection & Response (MDR), aimed at enhancing organizations’ cybersecurity defenses. The service incorporates detection and response capabilities across the enterprise by leveraging the expertise of Darktrace’s global analyst team. This strategic combination assists internal security teams by providing AI-powered threat containment and expert alert management within Darktrace environments. As a result, organizations can now allocate their resources more effectively towards improving overall cyber resilience.
The Darktrace State of AI Cybersecurity 2024 report revealed that over 40% of security leaders prioritize enhancing and optimizing technology and processes within the security operations center (SOC) to bolster defenses against AI-powered threats. With Darktrace’s extensive experience in deploying AI for cybersecurity challenges, the introduction of the MDR service in March 2024 marks a significant milestone in empowering customers to leverage the benefits of collaboration between humans and AI.
Through the MDR service, customers gain access to expanded hands-on analyst support, offering 24/7 managed detection and response across various key areas such as network, cloud, operational technology (OT), endpoints, and software-as-a-service (SaaS) applications. The Darktrace SOC team actively monitors customer environments for high priority alerts signaling a potential attack, conducts thorough investigations, and provides immediate triage with human intervention based on the AI’s actions. This proactive approach not only helps contain threats swiftly but also allows internal teams the necessary time to prepare for effective remediation efforts.
Darktrace’s global SOC team, consisting of over 100 cybersecurity analysts, supports the MDR service with their real-time knowledge, threat analysis proficiency, and field experience. Operating on a 24/7 basis utilizing a follow-the-sun model across key locations like the United Kingdom, United States, and Singapore, these analysts are well-equipped to provide continuous support and ensure rapid response to emerging threats.
The Darktrace ActiveAI Security Platform employs a unique self-learning AI engine to identify known, unknown, and novel threats in real-time, enabling autonomous responses to contain active threats without disrupting business operations. While the AI plays a crucial role in threat containment, complex and high-priority threats often necessitate human intervention to make informed decisions post-containment. The MDR service now allows the Darktrace SOC to intervene promptly, conduct initial triage, and gather essential context for internal teams to streamline their response efforts effectively.
Key features and benefits of Darktrace Managed Detection & Response include expansive coverage across network, cloud, OT, endpoints, and SaaS applications, providing one of the broadest MDR services available in the industry. Customers also gain unlimited access to Darktrace’s analyst team for expert assistance during threat investigations, operational efficiency reports, tailored consultancy advice, and regular service reports for full transparency on threat alerts and resolutions.
Denise Walter, Chief Revenue Officer at Darktrace, emphasized the significance of AI-powered MDR service in enhancing security outcomes and reducing the workload on organizations’ existing teams. The service not only leverages Darktrace’s advanced technology but also integrates the expertise of their human analysts directly into customers’ environments, ensuring continuous protection and peace of mind.
Darktrace Managed Detection & Response is now accessible to customers utilizing Darktrace DETECT and RESPOND across various platforms. Additionally, Darktrace partners can leverage the service to offer added value to their clients, enriching their cybersecurity portfolio with a comprehensive offering.
Collaborating with partners like Grove Group, a global partner, reseller, and distributor focused on providing advanced cybersecurity solutions, Darktrace aims to deliver unparalleled security through its MDR service. By integrating Darktrace’s AI-driven threat containment capabilities with Grove’s proactive daily analysis and customer interaction, organizations can benefit from immediate threat identification and mitigation, ultimately enhancing their overall security posture against evolving cyber threats.