Who does what
Provider
- Monitor and investigate agreed sources
- Execute configured containment
- Escalate and coordinate scoped response
Your team
- Provide tool access and contacts
- Agree permissions and exceptions
- Complete recovery and excluded work
Coverage
- Endpoints
- Network
Details
Service scope
Best for Organizations with several security products that want managed investigation and response on a scoped set of integrations
Agree the connected scope
Verify monitoring, investigation and response duties for each Check Point or third-party connector.
Check the current package
Identity detection, co-managed SIEM and other capabilities appear as add-ons in the current brief.
Separate MDR from crisis work
Confirm incident-response allowances and charges separately from routine detection and containment.
Full service analysis
Check Point MDR 360° provides 24/7 investigation and automated containment across the security tools included in your agreement. You retain tool access, response approvals and recovery or incident work beyond the contracted service.
- Your team owns
- Provide access to contracted security tools
- Agree response actions, exceptions and approval contacts
- Own business recovery and work beyond the service allowance
Agree the connected scope
The service supports Check Point and third-party tools across endpoint, cloud, email and network sources. Match each proposed connector to monitoring, investigation and response duties. An integration count does not establish the actions available on your systems.
Check the current package
The current service brief lists identity detection, co-managed SIEM and enterprise data lake, advanced integrations and proactive IR as MDR 360° add-ons. Older launch material describes different inclusions. Use the current order to establish what is covered.
Separate MDR from crisis work
The current brief lists reactive IR services for crisis management. Confirm the allowance, activation process and additional charges. Routine automated containment does not establish unlimited forensic investigation or business recovery.
Pricing & contract
- Billing
- Custom, Tiered
Request a current MDR 360° quote identifying connected tools, identity and SIEM add-ons, retention and incident-response allowances. Older Infinity MDR prices describe different named SKUs.
Tradeoffs & buying questions
Strengths
-
Supports environments with multiple security vendors
-
Identity and SIEM work can be scoped alongside MDR
-
Includes an incident-response service component
Considerations
-
Response permissions differ by integration and agreement
-
Current add-on scope differs from older launch descriptions
-
Crisis-response limits need separate confirmation
Ask before buying
- Which of our tools will MDR 360° monitor, and which containment actions can it execute without our approval?
- Does our quote include identity detection, co-managed SIEM, retention and the integrations shown as add-ons in the current brief?
- How do routine MDR response and crisis-response hours differ, and what happens when the included allowance is exhausted?
Common questions
Does MDR 360° include a fully managed SIEM?
The current service brief lists co-managed enterprise SIEM and data lake among MDR 360° add-ons. Confirm the platform, operating responsibilities and retention in your quote.
Can we keep our existing security tools?
Check Point supports third-party integrations. Confirm the exact products, versions and response permissions in your environment before assuming the service can operate them.