Who does what
Provider
- Investigate connected-source alerts
- Maintain detection workflows
- Share findings and response guidance
Your team
- Maintain tools and permissions
- Set business priorities and approvals
- Complete internal remediation
Coverage
- Endpoints
- Network
Details
Service scope
Best for Teams retaining their tools and daily security decisions while sharing SOC work
Shared detection work
Analysts and your team share investigation context and ongoing rule workflows.
Automation needs scope
Verify xEcute inclusion and preapproved actions. AI investigation does not define response authority.
Seller and support
Prosegur's Cipher business delivers the service. Agree the local support and data arrangements.
Full service analysis
Cipher xMDR co-manages alert investigation and detection-rule work around the clock using your existing tools. Your team retains tool administration, response approvals and remediation that needs internal IT.
- Your team owns
- Maintain connected tools and access permissions
- Supply business context and authorize response
- Complete internal IT remediation and recovery
Shared detection work
The xMDR platform supports alert feedback, rule and use-case lifecycle work, while analysts investigate around the clock. The customer portal exposes investigations and detection context, supporting collaboration with your team.
Automation needs scope
Cipher's 2026 Brazil announcement describes xEcute executing preapproved actions. Confirm regional availability, tier inclusion and the action list. AI Hunter assists analysis and recommendations rather than establishing unrestricted response authority.
Seller and support
Cipher is Prosegur's cybersecurity business. Its marketplace offer describes remote analysts and a named customer-success contact. Agree the contracting entity, support language, data location and retained-tool responsibilities.
Pricing & contract
- Billing
- Custom
Subscription scope depends on connected technologies, service tier, integrations and automation modules. Confirm xEcute inclusion and the contract term.
Tradeoffs & buying questions
Strengths
-
Works over existing security investments
-
Shares investigations and detection context
-
Supports ongoing rule work beyond alert forwarding
Considerations
-
Connector coverage needs product-by-product confirmation
-
Automated actions depend on scope and preapproval
-
Buyer retains tool administration and internal remediation
Ask before buying
- Which log sources, detection rules and response actions are included in our service tier?
- Does our order include xEcute? Which actions are preapproved and who authorizes exceptions?
- Which team and language support our account, and what are the subscription, integration and data-export terms?
Integrations
Endpoint
- Existing EDR, subject to scope
Other integrations
- Cipher xMDR platform
- Existing IPS/IDS, subject to scope
Common questions
Does Cipher require replacement of our security stack?
The service is designed to work over existing tools. Validate each connector and supported action before signing.
Can Cipher respond automatically?
Cipher describes supervised automation and xEcute preapproved actions. The specific module, permissions and delivery scope belong in the order.