Blackpoint Cyber
Nation-state-grade MDR purpose-built for the MSP channel
- Service
- MDR
- Response
- Contain threats
Best for
MSPs managing security for small business clientsUsually replaces
Basic endpoint antivirusCheck first
Portal and reporting interface could be more intuitive and detailed for client-facing reviewsCoverage
Covers
- SNAP-Defense engine with patented lateral movement and network-level detection
- 24/7 SOC with active response — process termination, endpoint isolation, and remediation
- Cloud MDR for Microsoft 365, Azure AD, and Google Workspace
Pros and limits
Works well
- Founded by former NSA operators — detection logic informed by real nation-state offensive tradecraft
- SNAP-Defense provides network-level lateral movement detection that most endpoint-only MDRs miss
- Deep MSP-channel alignment with multi-tenant management, RMM/PSA integrations, and per-endpoint pricing
Watch out for
- Channel-only go-to-market means businesses cannot purchase directly without an MSP partner
- Limited native support for AWS and GCP cloud workloads compared to Microsoft-centric environments
- Less suited for large enterprises with mature in-house SOC teams seeking deep rule customization
Pricing
- Starting price
- ~$8-15/endpoint/month
- Billing model
- Per-endpoint, Tiered
- Minimum contract
- 12 months
- Trial
- Available
- Onboarding
- 7-14 days
Channel-only pricing through MSP partners; volume discounts available. Bundled CompassOne pricing may vary by module.
Connects with
- SIEM
- Blackpoint LogIC (proprietary)
- EDR / Endpoint
- Blackpoint Managed EDR (native), Microsoft Defender for Endpoint, SentinelOne, CrowdStrike Falcon, Bitdefender, Sophos, Webroot, Malwarebytes / ThreatDown, Cylance
- Cloud
- Microsoft 365, Azure AD / Entra ID, Google Workspace
- Other
- ConnectWise, Datto / Autotask, NinjaOne, Cisco Meraki, Cisco Duo, Pax8
Questions
How much does Blackpoint Cyber MDR cost?
Blackpoint MDR is priced per endpoint, generally ranging from $8 to $15 per endpoint per month depending on volume commitments. Pricing is available exclusively through MSP channel partners, and bundled CompassOne modules (LogIC, Vulnerability Management, Application Control) are priced separately.
What is SNAP-Defense and how does it differ from traditional EDR?
SNAP-Defense is Blackpoint's patented detection engine that monitors network-level behavior — specifically lateral movement, credential abuse, and system administration tradecraft — rather than relying solely on endpoint telemetry. It builds a live network map to identify the exact attack techniques used in major breaches and insider threats, enabling the SOC to detect and respond to attacks that endpoint-only tools often miss.
Can businesses purchase Blackpoint directly without an MSP?
No. Blackpoint Cyber operates a channel-only model, meaning its MDR and CompassOne platform are sold exclusively through managed service provider partners. Businesses that do not currently work with an MSP can contact Blackpoint to be connected with a partner in their region.