Who does what
Provider
- 24/7 investigation and hunting
- Validated endpoint isolation
- Incident reports and quarterly reviews
Your team
- Telemetry, agents and tool access
- Permissions and incident follow-up
- Remediation and risk closure
Coverage
- Endpoints
- Cloud Workloads
- Identity & Access
- Network
Details
Service scope
Best for Teams retaining tool ownership and remediation
Service
SamurAI MDR with a 24/7 Gothenburg SOC.
Platform
NTT's platform connects supported existing tools.
Response
Endpoint isolation follows analyst validation. Buyers close the risk.
Full service analysis
NTT Security SamurAI MDR investigates alerts and contains validated threats by isolating endpoints through supported EDR tools. Your team connects telemetry, maintains the tools and completes remediation and risk closure.
- Your team owns
- Source connectivity, supported endpoint agents and assigned configuration work.
- Action permissions, incident contacts and timely follow-up.
- Remediation, recovery and closure of reported risk.
Pricing & contract
- Billing
- Per-endpoint, Custom
NTT describes endpoint-based pricing with optional services. Confirm endpoint counts, included licenses, onboarding, retention and any Incident Response Retainer in the order.
Tradeoffs & buying questions
Strengths
-
Documented endpoint containment
Documented endpoint isolation gives the service a clear containment boundary.
-
European SOC and on-premise option
A Gothenburg SOC and a separately described on-premise option support regional scoping.
Considerations
-
Buyer keeps source and closure work
The buyer must close reported risks and maintain connected sources.
-
Extended IR is separately scoped
Additional investigation and forensic work may require the separate Incident Response Retainer.
Ask before buying
- Which EDR actions are enabled, and what authorization governs isolation?
- What endpoint count, licenses, retention and supplemental services does our quote include?
- Which legal entity, support route, hosting region and data-export terms apply to our order?
Integrations
Other integrations
- SamurAI platform
- Supported client EDR for isolation
- SamurAI collectors
2 more integrations
- SamurAI Network Traffic Analyzer
- SamurAI Endpoint Agent
Common questions
Does SamurAI include unlimited incident response?
No. Routine MDR and endpoint isolation are distinct from the optional Incident Response Retainer. The retainer describes an annual block of 40 hours, with additional blocks available.
Is SamurAI the same as every NTT security service?
No. This profile covers NTT Security's SamurAI MDR under its own service description. NTT DATA offerings and other NTT packages should be scoped separately.
Company details
- SOC regions
- Europe / UK