Who does what
Provider
- Investigate and hunt around the clock
- Perform permitted containment and remediation
- Tune contracted integrations and report findings
Your team
- Maintain tool licenses and telemetry access
- Set response permissions and business exceptions
- Own recovery outside contracted remediation
Coverage
- Endpoints
- Network
- Identity & Access
- Cloud Workloads
- SaaS Applications
Details
Service scope
Best for Teams using Vectra who need analyst response across connected tools
Service scope
24/7 MXDR across contracted network, identity, cloud, SaaS and endpoint telemetry.
Response authority
Analysts perform remote containment and endpoint remediation through native and integrated controls, within permitted scope.
Tool dependency
EDR licensing, API access, console access and action permissions must be in place.
Full service analysis
Vectra AI MXDR analysts investigate threats and perform authorized containment and endpoint remediation around the Vectra platform. Your team retains tool licenses, response permissions and recovery outside the agreed scope.
- Your team owns
- Maintain tool licenses and telemetry access
- Set response permissions and business exceptions
- Own recovery outside contracted remediation
MDR and MXDR differ
Vectra offers both MDR and MXDR. This profile covers MXDR with remote containment and endpoint remediation. A platform package that mentions MDR should not be assumed to include every MXDR deliverable.
Connected response tools
The MXDR datasheet requires an EDR subscription, access to its API and management console, and suitable permissions. Confirm the exact supported actions and exceptions for your selected endpoint product.
Scoped operations
Vectra lists onboarding, health checks, tuning, policy configuration and reports within MXDR. Agree the covered tools and workflows rather than assuming the service replaces every daily SOC responsibility.
Pricing & contract
- Billing
- Custom
Request separate platform, MXDR, endpoint-license, monitored-quantity and infrastructure line items. A platform MDR dimension is not an established MXDR total.
Tradeoffs & buying questions
Strengths
-
Combines network-led detection with endpoint response
-
Includes tuning, health checks and analyst collaboration
Considerations
-
Requires Vectra platform and connected-tool access
-
Marketplace MDR bundles do not establish a full MXDR quote
Ask before buying
- Which native and EDR actions can analysts execute, and which require our approval?
- Does the quote include MXDR, the Vectra platform, EDR licenses, sensors and all monitored quantities?
- Who owns escalation, case-data export and support if we buy through a partner?
Integrations
Platform / SIEM
- Vectra AI Platform
Endpoint
- CrowdStrike Falcon
- Microsoft Defender
- SentinelOne
Common questions
Does an MDR platform bundle include MXDR?
Not automatically. Confirm the managed-service SKU, covered quantities and MXDR deliverables in the order.
Who handles recovery?
Vectra documents endpoint remediation. Agree its limits and retain an owner for business recovery and systems outside the contract.