Managed detection and response

We saw 95% of end client respondents being willing to actually pay more for security services when there was a cyber advisory component.

We saw that no MDR respondents were satisfied with the level of strategic advisory service they were being offered from their service provider.

And we also saw that in the age of AI, incredibly, end clients are willing to pay for services.

They're not expecting a service price reduction, but what they are seeking out is more value and more proactive recommendation.

support from an agentic perspective to provide recommendation, insight, but really to help you standardize the way that you're delivering that offering.

That's a great point you make there.

Now, one other finding stood out, which was that of the clients using MDR, none said it fully met their strategic advisory needs.

Nearly half of providers also called MDR commoditized.

The challenges for security operations centers the complexity of the incident highlights the challenges that managed security operations centers face in the crypto sector.

The adoption of MDR services managed detection and response is increasing, with a 40% rise in implementations among blockchain analysis companies.

These services offer a more agile response to incidents, crucial in a context where threats evolve rapidly.

the regulatory response, and NIS2 compliance, the event underscores the importance of NIS2 compliance for blockchain analysis platforms.

I'm Julian Timiski.

I work in MDR, in Cyber Intelligence Fusion Cell.

Basically, what we do, we make sure that our the customers are served well from the CTI

perspective.

Thank you very much.

So, I'm Cristina Anghel.

I'm a Senior Security Analyst and a Team Lead here at VDFender MDR.

My main responsibilities are to lead, of course, the high-impact incidents and to also oversee all the activities within our SOC, investigation, escalation, triage, and everything that we do.

Even on the cybersecurity side, there's so many different ways to buy it.

You know, when you're looking at MDR, EDR, you know, which is kind of managed detection response or endpoint detection, You can get it directly, you know, software from certain companies like CrowdStrike, right? Or you can get that blended in with a managed service like through Comcast.

And it just really, excuse me, depends, like I said, how much the organization wants to have their hand in controlling.

I think a lot of times that's where really the dissected of what they currently have set up, what's working, what's not working.

It's supervised.

which means we leverage AI to supercharge our humans to deliver monitoring of the infrastructure of our clients, technically deliver MDR at scale.

But it's not just about the MDR.

The second thing is, it's what Bojadar said, it's the unsanctioned AI usage, uncontrolled AI usage.

We see it even internally within the company that Everybody's helping himself with some sort of AI.

So we always said that we believe in prevention.

So what we are trying to do, we are trying to decrease the risk by, first of all, implementing our multi-layered approach.

So you deploy our agent, we collect telemetry from also external sources, we analyze it 24-7. detection and response and prevention to me especially now in the ai era the the border between them is disappearing you know like you can prevent through mdr so we simply believe that you need to have 24 7 constant monitoring what's happening because most of the attacks especially now are just somebody logging in because they've stolen credentials the phishing attacks are very sophisticated people are People, we do mistakes and compromised identities or stolen credentials are the most frequent breach reason we do see even in our MDR.

So there's the SIEM, which is like your Splunks, your Elastics, these big players, these huge data stores.

Then you have MDR, managed detection and response.

These are your MSSPs that you outsource security to.

You've got the AI SOC, which is these new AI native companies that are basically doing what MDR do with agents.

And then you have insider threatened UEBA, basically these analytical platforms.

And it's wild because like all four of these platforms stack on top of one another and they're all solving the same problem.