Who does what
Provider
- Tune supported SIEM and XDR tools
- Monitor and investigate alerts 24/7
- Guide containment or support contracted response
Your team
- License tools and maintain telemetry quality
- Define response authority and approvals
- Complete IT and business remediation
Details
Service scope
Best for Teams keeping their SIEM or XDR and needing engineering and analyst capacity
Operation
Engineers maintain the agreed SIEM or XDR and refine detections.
Incident work
Analysts investigate alerts and provide containment guidance.
Boundary
Agree executed response, source-system duties and any additional services.
Full service analysis
Binary Defense Co-Management maintains SIEM and XDR configurations, refines detections and investigates alerts with containment guidance. The buyer retains tool licensing, source-system changes, response permissions and remediation outside the agreement.
- Your team owns
- Tool licenses, source-system access and configuration duties.
- Response authority, business decisions and remediation beyond scope.
Pricing & contract
- Billing
- Custom
Request a quote for Co-Management, including SIEM licenses, ingestion, onboarding, engineering and response work. The separate BDVision endpoint package on AWS Marketplace does not establish the price of this co-managed service.
Tradeoffs & buying questions
Strengths
-
Platform engineering and incident investigation are part of the same operating offer.
-
Supports several established SIEM and XDR platforms.
Considerations
-
Executed containment must be distinguished from the guidance described for co-management.
-
Licenses, source duties and additional services need a scoped agreement.
Ask before buying
- Which SIEM or XDR implementation, tuning and daily operations are included?
- Which response actions can analysts initiate without approval?
- How do partner, marketplace and direct purchases affect support and renewals?
Integrations
Platform / SIEM
- Splunk
- Devo
- Sumo Logic
3 more integrations
- Microsoft Sentinel
- Google SecOps
- Palo Alto Cortex XSIAM
Other integrations
- NightBeacon
- ExtraHop
Common questions
Is Binary Defense Co-Management the same as MDR?
No. This profile scopes the co-managed SIEM and XDR offer, where Binary Defense helps operate the customer's existing tools. Binary Defense also sells MDR, and many buyers may combine the services, but co-management should be evaluated by what Binary Defense will tune, monitor, investigate and respond to inside the contracted stack.
Does Binary Defense contain threats for the buyer?
The co-management page describes containment guidance. Binary Defense also offers MDR and Microsoft response services; the agreement must name any actions included in your co-management scope.
Is Binary Defense pricing public?
Request a Co-Management quote. AWS Marketplace lists a separate BDVision endpoint contract and private offers; that listing does not define the cost of your SIEM or XDR operations.
Company details
- Headquarters
- Stow, Ohio