Who does what
Provider
- Investigate monitored alerts around the clock
- Connect identity and asset context
- Execute agreed containment workflows
Your team
- Choose monitored tools and maintain access
- Set response permissions and approvals
- Own recovery and out-of-scope remediation
Coverage
- Endpoints
- Cloud Workloads
- Identity & Access
- Network
Details
Service scope
Best for Teams sharing SOC work across an existing security stack
Operating model
Choose investigation support, co-management or a managed engagement. Tool management is optional.
Response authority
Predefined actions depend on connected tools and agreed permissions. Confirm the action list before signing.
Monitoring boundary
Meridian adds context from connected systems. A context integration does not mean that MDR monitors or responds on that system.
Full service analysis
Cyderes MDR investigates alerts across contracted security tools and can execute predefined containment actions. In the co-managed model, your team retains response rules, platform access and remediation outside the agreed scope.
- Your team owns
- Selecting monitored sources and maintaining tool access and licenses
- Approving response rules and any actions outside delegated permissions
- Recovery and remediation outside the contracted response scope
Shared SOC work
The co-managed option supports shared detections and investigation workflows. An investigation-only engagement delegates less work. Ask for a responsibility matrix for the operating model in your quote.
Integration scope
Meridian context reaches beyond the tools MDR actively monitors. Confirm monitoring, investigation and action permissions separately for each source.
Data and commercial scope
CYCLOPS forwarding can require a customer-hosted appliance. Agree hosting responsibilities, retention, export rights and any platform charges alongside the MDR quote.
Pricing & contract
- Billing
- Custom
Request an itemized quote for the chosen operating model, connected tools and response scope.
Tradeoffs & buying questions
Strengths
-
MDR can use an existing stack without a wholesale platform replacement.
-
The co-managed model supports shared investigation, detections and response workflows.
-
Meridian links identities, assets and access relationships for investigation context.
Considerations
-
Investigation support, co-management and managed engagements delegate different duties. SIEM and EDR operation are optional.
-
A connected Meridian source is not automatically an actively monitored or response-enabled MDR source.
-
Confirm each containment action and its approval requirement. Recovery and other remediation must have an explicit owner.
Ask before buying
- Which tools will you monitor, administer and execute response actions through, and which only supply context?
- Which containment actions are preauthorized, which need approval and who owns remediation and recovery?
- How does the quote account for telemetry, licenses, retention, data export and incident-response work, and who owns support and renewal if we buy through a partner?
Integrations
Platform / SIEM
- Google Security Operations / Chronicle
- Cyderes CNAP
- Microsoft Sentinel
1 more integrations
- Splunk
Endpoint
- CrowdStrike
- SentinelOne
- Microsoft Defender
Cloud
- AWS
- Google Cloud
Other integrations
- Meridian
- CYCLOPS
- Okta
3 more integrations
- CyberArk
- SailPoint
- Saviynt
Common questions
Is Cyderes MDR a full managed SOC?
The co-managed model shares SOC work with your team. Cyderes also offers investigation support and managed engagements. Confirm the duties included in the specific contract.
Can Cyderes contain threats?
Cyderes describes execution of predefined containment actions with human accountability. Confirm supported actions in your connected tools and which permissions or approvals each requires.
How should I compare a Cyderes MDR quote?
Ask for the quoted operating model, monitored tools, licenses, telemetry assumptions, retention, export and response scope. Price comparisons need the same service boundaries.
Company details
- Headquarters
- Kansas City, Missouri
- Founded
- 2003