Unit 42 MDR
Unit 42 MDR is a managed detection and response service that provides 24/7 expert monitoring, threat hunting, investigation, and response support.
What Unit 42 MDR is
Unit 42 MDR is a managed detection and response service that provides 24/7 expert monitoring, threat hunting, investigation, and response support. Continuous monitoring and triage identify high-risk threats and prioritize activity that needs action. Unit 42 hunters use frontline threat intelligence to look for hidden and emerging threats, while AI and behavioral analytics help surface high-confidence threats. Analysts examine endpoint, network, cloud, and identity telemetry to assess attack scope and root cause. Responders can contain active threats and remove malicious activity; through Cortex XDR they can also isolate endpoints, remove malicious files or processes, and restore damaged files. The service includes a co-managed Cortex XDR interface with two-way communication, incident and KPI dashboards, and tailored reporting. It also checks endpoint security profiles, device control, host firewall, and disk encryption, and assesses endpoint application vulnerabilities. Customers can speak directly with Unit 42 analysts and access its Incident Response team during a major incident. Pricing is available on request.
Good
- Provides 24/7 monitoring and threat hunting
- Analysts investigate endpoint, network, cloud, and identity telemetry
- Cortex XDR supports endpoint isolation and file restoration
- Customers can communicate directly with Unit 42 analysts
- Includes incident and KPI dashboards
Watch out
- Pricing is available only on request
- Service is available on the web
- Response actions use the Cortex XDR environment
Who it suits
Unit 42 MDR suits organizations seeking an external extension of their security operations team for monitoring, investigations, and response. It is intended for teams that need coverage across endpoint, network, cloud, and identity telemetry.
Verdict
Unit 42 MDR combines continuous monitoring with investigation and coordinated response through Cortex XDR. Organizations need to request pricing and consider its fit with their security operations.
Plans and prices
From Unit 42 MDR's own pricing page, checked 5 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Unit 42 Managed Detection and Response (MDR) | Priced on request | 24/7 monitoring · Cortex XDR environment · endpoint, network, cloud and identity telemetry |
The facts
Each one read from Unit 42 MDR's own pages, with the date it was checked.
What it does
- Analytics
- The service uses AI and behavioral analytics to surface high-confidence threats and accelerate detection.checked 5 Oct 2026
- Intended users
- Unit 42 describes its managed services as an extension of an organization’s security operations team, handling monitoring, investigations and response activities.checked 5 Oct 2026
- Investigation
- Analysts examine endpoint, network, cloud and identity telemetry to determine attack scope and root cause.checked 5 Oct 2026
- Monitoring
- Continuous monitoring and triage identify high-risk threats and prioritize activity requiring action.checked 5 Oct 2026
- Posture optimization
- The service includes checks for endpoint security profiles, device control, host firewall and disk encryption, plus endpoint application vulnerability assessments.checked 5 Oct 2026
- Reporting
- Tailored reports include findings, recommended actions, impact reports, cyber hygiene reports and monthly summaries.checked 5 Oct 2026
- Response
- Responders contain active threats, remove malicious activity and drive incidents toward resolution.checked 5 Oct 2026
- Response actions
- Analysts can isolate endpoints, remove malicious files or processes, and restore damaged files using Cortex XDR.checked 5 Oct 2026
- Service
- Unit 42 MDR provides managed detection and response with 24/7 expert monitoring, threat hunting, investigation and response support.checked 5 Oct 2026
- Support
- Customers can communicate directly with Unit 42 analysts and can access the Unit 42 Incident Response team during a major incident.checked 5 Oct 2026
- Threat hunting
- Unit 42 hunters use frontline threat intelligence to search for hidden and emerging threats before impact.checked 5 Oct 2026
The company
- Founded
- 2005checked 28 Sep 2026
- Headquarters
- Santa Clara, California, USAchecked 28 Sep 2026
Where it runs
- Platform
- The service is built on Cortex XDR and provides a co-managed Cortex XDR interface with two-way communication and incident and KPI dashboards.checked 5 Oct 2026
Alternatives to Unit 42 MDR
- 1

Blumira
Free planAndroidiOSWebAPI8.2Free plan - 2
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 3

Acronis Cyber Disaster Recovery Cloud
AndroidiOSWebLinux6.8 - 4

eSentire MDR
AndroidiOSWebAPI6.6From $17 a month - 5
Google Cloud Secret Manager
Free planWeb6.5From $0.02 a month - 6
Huntress Managed Detection and Response
WebAPILinuxmacOS6.5From $7.99 a month
