SOC Providers.com Security Operations Center providers
Last reviewed: 3 Oct 2026

ESET MDR

ESET MDR investigates threats 24/7 and executes permitted containment through ESET's endpoint stack. You deploy the required software, choose restrictions for critical devices and handle excluded actions and recovery.

Platform
Their platform

Who does what

Provider

  • Investigate endpoint incidents
  • Execute allowed containment
  • Report incidents and actions

Your team

  • Deploy the ESET stack
  • Set critical-device restrictions
  • Handle excluded actions and recovery

Coverage

  • Endpoints

Details

Service scope

Best for Small and mid-market teams using ESET that need after-hours investigation and containment

  • ESET stack required

    Cloud ESET PROTECT, ESET Inspect and compatible endpoint connectors are prerequisites.

  • Critical assets need decisions

    Permit all or selected actions, or retain response with notification-only settings.

  • Standard and Ultimate differ

    Deployment assistance, deeper forensic work and incident leads require separate scope checks.

Full service analysis

ESET MDR investigates threats 24/7 and executes permitted containment through ESET's endpoint stack. You deploy the required software, choose restrictions for critical devices and handle excluded actions and recovery.

Your team owns
  • Deploy compatible ESET applications and connectors
  • Configure critical-device permissions and escalation contacts
  • Execute suppressed actions and own system recovery

ESET stack required

Standard MDR operates through cloud ESET PROTECT and ESET Inspect on compatible endpoints. Buying the service does not enroll devices without the connector. Existing Elite or Enterprise customers can purchase MDR separately where available.

Critical assets need decisions

For designated critical devices, choose notification only, all responses or selected responses. Selected actions include network isolation and process termination. The agent version must support those actions. Suppressed actions remain your responsibility.

Standard and Ultimate differ

This profile covers standard MDR. Ultimate adds deployment and optimization assistance and further forensic and incident-lead services. Standard guided onboarding helps your team perform setup rather than transferring deployment ownership.

Pricing & contract
Billing
Per-endpoint, Custom

MSP activation bills all purchased ESET Inspect seats. Confirm the bundle and seat minimum in the local quote.

Tradeoffs & buying questions

Strengths

  • Critical-device controls make action permissions explicit

  • Existing eligible ESET customers can add the service

  • Reports show incidents and countermeasures

Considerations

  • Requires compatible ESET products and connectors

  • Notification-only critical devices need buyer response

  • Ultimate capabilities are outside this standard profile

Ask before buying

  • Which critical devices should permit isolation or process termination, and who handles suppressed actions?
  • Which bundle, seat minimum and existing ESET licenses determine our charge?
  • Which onboarding, forensic and incident-lead services require MDR Ultimate or another purchase?

Integrations

Endpoint

  • ESET Inspect

Other integrations

  • ESET PROTECT

Common questions
Can ESET isolate a critical device?Yes, if its response settings allow isolation and the installed agent supports it. Notification-only settings suppress automatic response.

Yes, if its response settings allow isolation and the installed agent supports it. Notification-only settings suppress automatic response.

Does standard MDR deploy the tools for us?Your team must deploy the compatible products and connectors. Guided onboarding is advisory assistance. Confirm any deployment work separately, including Ultimate scope.

Your team must deploy the compatible products and connectors. Guided onboarding is advisory assistance. Confirm any deployment work separately, including Ultimate scope.