Anomali Introduces MSSP Program

Anomali has rolled out a new MSSP Program aimed at helping managed security providers tighten operations across multi-tenant environments without adding complexity. The program brings together multi-tenancy, federated search, and an open security data lake so MSSPs can work from a single source of truth while keeping each customer’s data fully isolated. It’s built for providers trying to manage growth while still maintaining control, retention requirements, and visibility across diverse client environments.

The core challenge for many MSSPs is simple: too many instances, too many exports, and too much manual effort. Anomali is trying to solve that by centralizing threat intelligence and analytics into a shared data lake where providers can store, search, and analyze security telemetry at scale. The architecture supports long-term data retention and keeps storage under customer or MSSP ownership, which helps providers maintain independence and avoid drifting into lock-in as they expand services.

With ThreatStream, Security Analytics, and Anomali Copilot layered on top, the program gives MSSPs a more streamlined way to correlate alerts, prioritize threats, and understand which clients are affected during an incident. Copilot’s reasoning across multi-tenant data adds context in places where analysts usually spend the most time, helping providers reduce manual investigation and move faster in triage and response. For MSSPs dealing with rising workloads and talent gaps, this kind of automation can shift the balance inside the SOC.

For providers looking to scale, the open design is notable. They can integrate with existing tools, choose open or closed data lake deployments, and pull insights from seven years of retained data without re-architecting their environments. The value proposition is clear: consolidate operations, reduce investigation cycles, and strengthen the way cross-tenant security services are delivered.