Who does what
Provider
- Alert investigation
- Threat hunting
- Approved containment
Your team
- Underlying technology ownership
- Permissions and agent deployment
- Response outside agreed use cases
Coverage
- Endpoints
- Cloud Workloads
- Network
Details
Service scope
Best for Teams retaining an existing security stack
Service
Aegis MDR across selected security tools.
Platform
Integrity360 service platform with customer-owned technology.
Response
Actions limited to approved integrations and engagement rules.
Full service analysis
Integrity360 Aegis MDR investigates alerts and carries out containment through security tools covered by agreed response rules. The buyer retains technology ownership, actions beyond those integrations and wider incident recovery.
- Your team owns
- Ownership and commercial decisions for the underlying technology stack.
- Deploying customer-device agents and agreeing response permissions.
- Incident response, remediation and recovery beyond the agreed use cases.
Aegis and CyberFire are separate
This profile covers Aegis MDR with customer-selected security technologies. Integrity360 also sells CyberFire MDR, which uses its own platform and endpoint-based pricing. Those terms should not be transferred to an Aegis quote.
Pricing & contract
- Billing
- Custom
Price the selected Aegis tools, asset counts, licensing, hosting and onboarding separately in the current quote.
Tradeoffs & buying questions
Strengths
-
Aegis can bring several security tools into one investigation workflow.
-
Response boundaries can be documented against the actual connected tools.
Considerations
-
Containment is limited by integration capability and preapproval.
-
Platform costs, onboarding and work beyond agreed use cases need separate scoping.
Ask before buying
- Which of our existing tools support action by the SOC, and which isolation, file-blocking or identity actions will be preapproved?
- What does the quote include for platform management, licenses, hosting, onboarding and custom detections?
- When does a case move beyond MDR into separately charged incident response, and which SOC will handle our service?
Integrations
Other integrations
- Customer-selected SIEM, EDR and NDR integrations
- Microsoft Defender XDR
Common questions
Does Aegis replace our SIEM or endpoint tools?
Aegis is designed to work with customer-selected technology and supplies its own service platform. The proposal determines which SIEM, endpoint or network tools are managed and which licenses the buyer must retain.
Does 24/7 coverage mean every task has the same deadline?
No. The UK service schedule separates alert acknowledgment, triage and investigation targets, with severity-specific windows. Ask for the current schedule and the point when full service begins after onboarding.