Who does what
Provider
- Monitor the contracted endpoint scope around the clock
- Apply automated response within agreed permissions
- Monitor external exposures through Polus ASM
Your team
- Agree response permissions and escalation contacts
- Maintain asset coverage and fix vulnerabilities
- Own recovery and separately scoped incident work
Coverage
- Endpoints
Details
Service scope
Best for Teams seeking managed endpoint response and visibility of external exposures
Endpoint service
Agree supported EDR tools, deployment responsibilities and the precise actions available on covered devices.
External exposure
Polus ASM is included. Confirm which internet-facing assets it covers and who implements recommended fixes.
Incident handoff
Confirm where routine MDR ends and separately scoped incident response begins, including access and charges.
Full service analysis
S-RM Polus MDR monitors managed endpoint alerts and applies automated threat containment, with external exposure monitoring included. You retain response rules, deployment coverage, vulnerability fixes and recovery beyond contracted response.
- Your team owns
- Defining response authority and escalation contacts
- Maintaining coverage across the agreed asset inventory
- Fixing vulnerabilities and configuration issues
- Owning recovery and incident work beyond contracted MDR
Response permissions
Agree which actions proceed automatically and which wait for your approval. Test the escalation path for unavailable contacts and critical devices.
Exposure handoff
Use ASM findings to assign an owner and deadline for external vulnerabilities. Confirm whether S-RM advises on fixes or implements any changes under the proposed contract.
Pricing & contract
The quote should specify the endpoint and EDR scope, deployment and onboarding charges, included Polus ASM asset coverage and any wider incident-response fees. A published customer case with a 12-month engagement does not establish a universal minimum term.
Tradeoffs & buying questions
Strengths
-
Around-the-clock endpoint monitoring and response
-
External attack-surface monitoring included
-
Escalation policies tailored to the engagement
Considerations
-
Tool compatibility needs confirmation
-
Remediation and recovery need assigned owners
-
Wider incident response needs explicit scope
Ask before buying
- Which EDR tools, devices and response actions will our contract cover?
- Who owns deployment gaps, vulnerability fixes and after-hours approvals?
- What does the quote include for EDR licensing, ASM asset scope, onboarding and wider incident-response access?
Integrations
Other integrations
- Polus Attack Surface Management
Common questions
Does Polus MDR replace the entire SOC?
It provides managed endpoint monitoring and response. Your team retains wider security operations and recovery responsibilities.
Is attack-surface monitoring included?
The MDR offer includes Polus ASM. Agree the asset scope and ownership of fixes during onboarding.
Is wider incident response included?
Confirm incident-response entitlements and fees in the quote before treating wider response work as included.