Who does what
Provider
- Monitor and investigate contracted telemetry 24/7
- Execute containment allowed by agreed playbooks
- Coordinate CyberSOC escalation and incident reporting
Your team
- Maintain sources and required tool licenses
- Define response authority and approval rules
- Remediate and recover beyond agreed playbooks
Coverage
- Endpoints
- Network
- Cloud Workloads
- Identity & Access
Details
Service scope
Best for Teams buying managed detection and permitted response across a defined mix of security tools
Package boundaries
Endpoint, network and log services have different scope. Network response and hunting can be additional services. An integration does not include every action.
Response authority
Managed XDR supports actions such as malicious-file removal. Confirm the tools, playbooks and permissions that allow Orange to act.
Regional delivery
UK and German service pages describe managed threat detection. France markets related services as Xtended-SOC. Confirm the local package, support language and data locations.
Full service analysis
Orange Cyberdefense Managed Threat Detection and Response combines 24/7 analyst investigation with contracted containment through Core Fusion and supported security tools. You retain source coverage, action permissions and remediation or recovery beyond the agreed response scope.
- Your team owns
- Maintain contracted telemetry sources and required licenses
- Authorize actions and define approval and escalation rules
- Handle remediation, recovery and IT changes beyond contracted response
Response scope
Managed XDR describes active response, including malicious-file removal. The network detection page separately offers response and hunting. The containment lane therefore describes agreed response scope, not every monitoring package or connected tool.
European delivery
UK and German offer pages support local managed threat detection enquiries. France markets Xtended-SOC with XDR workflows, so confirm equivalence to the proposed MTDR package. Orange describes European hosting and multilingual delivery, but those claims do not specify each tool, data store or support shift.
Pricing & contract
€3,300/mo
300 users Microsoft Defender XDR package example, recurring 12-month term. Requires separately licensed Defender Endpoint P2 and Entra P2. Additional modules, Sentinel log service and other MTDR configurations have separate prices.
Microsoft XDR package · 300 users · 12-month recurring term · licences extra
- Billing
- Custom, Tiered
Tradeoffs & buying questions
Strengths
-
Analyst investigation and active-response options
-
Supports a scoped mix of endpoint, network and log sources
-
Local managed-detection offers in the UK and Germany
Considerations
-
Response and hunting entitlements differ between packages
-
French Xtended-SOC scope needs mapping to the proposed MTDR contract
-
European hosting claims need per-tool data and access confirmation
Ask before buying
- Which endpoint, network and log packages include response and hunting, and which cost extra?
- Which actions can Orange execute in each connected tool without approval?
- For our country, what are the service language, analyst locations, telemetry and case-data locations, retention and total licensed cost?
Integrations
Platform / SIEM
- Microsoft Sentinel (scoped log service)
Endpoint
- Microsoft Defender for Endpoint (scoped XDR service)
Other integrations
- Core Fusion customer and workflow platform
- Microsoft Defender XDR (scoped XDR service)
Common questions
Can Orange contain threats?
Yes, within contracted response scope and supported tools. Managed XDR includes malicious-file removal. Network response may be an additional service.
Does MTDR run the entire SOC?
The profile covers managed detection and response. Broader SIEM administration, incident recovery and other SOC operations need an explicit statement of work.
How is it bought?
The Microsoft Marketplace listing gives €3,300 per month for Managed Threat Detection XDR covering 300 Defender Endpoint P2 users on a recurring 12-month term. Required Defender Endpoint P2 and Entra P2 licences are separate. Other modules and the AWS cloud MDR route need a scoped private offer.
Company details
- Headquarters
- Paris, France
- Founded
- 2016
- SOC regions
- Europe / UK