Deepwatch MDR

What Deepwatch MDR is

Deepwatch MDR is a paid managed detection and response service for organizations running security tools across their existing environment. It provides investigation, containment, and response under the oversight of security analysts, with monitoring described as continuous, 24/7/365. Threat intelligence and adversary research inform detections, threat hunting, investigations, and response. Its NEXA AI ecosystem supports investigation, correlation, prioritization, containment, and response. Deepwatch works across existing SIEM, endpoint, cloud, identity, and network investments, and lists Splunk, Microsoft Sentinel, Google SecOps, and Securonix as SIEM options. Active Response can be opt-in or monitor-only, and can use approval-based or automated execution, time-based policies, and scoped permissions. Listed actions include identity session revocation, password reset, and account control, plus endpoint process termination and host isolation. Deepwatch states it has SOC 2 Type II and PCI DSS certifications and an ISO/IEC 27001:2022-conforming information security management system. It also states AES-256 encryption at rest, TLS 1.2 in transit, and a credit-backed 99.9% uptime SLA. Pricing is available by contacting Deepwatch; there is no free plan or trial.