Channel partner programs, Channel partners, Content, Security Program Controls/Technologies, MSSP, SOC

DFLabs Launches MSSP Partner Program for Security Automation, SOCs

DFLabs, which specializes in automation and orchestration for computer security incident response teams (CSIRTs) and security operations centers (SOCs), has launched the Global Partner Network for MSSPs.

By joining the program, DFLabs partners can deliver customized threat detection, response, automation and orchestration solutions for CSIRTs and SOCs and as a managed service, according to a prepared statement.

The Global Partner Network offers the following features:

  • Complementary product license for demos.
  • Deal registration and protection.
  • End-to-end resources at every stage of an opportunity.
  • Lead generation and collaborative co-marketing resources.
  • Product training and deployment services.
  • Password-protected portal for access to technical resources, knowledgebase, etc.

The Global Partner Network is now available and includes Platinum, Gold and Affiliate levels of participation.

What Is IncMan?

IncMan is a purpose-built SAO platform that blends machine learning and runbook capabilities and enables MSSPs to deliver security monitoring and incident response services to customers. To date, IncMan has helped security teams reduce their average incident resolution times by up to 90 percent and increase their incident handling by 300 percent, DFLabs stated.

MSSPs can monetize IncMan in the following ways:

  • MSSP Platform: Enables MSSPs to use IncMan as a primary SOC platform to deliver a shared service. With this platform, MSSPs can provide multiple granular and customizable playbooks for each customer and automate common incident response workflows.
  • Premium MSSP Services: Allows MSSPs to use IncMan as a primary SOC platform to deliver a shared service, as well as provide remote threat containment and other premium security services.
  • Virtual SOC: Involves the deployment of IncMan as a primary platform to deliver a multi-tenant service. The virtual SOC enables MSSPs to provide customers with a managed, hosted and dedicated IncMan instance, along with central management of all customer instances.
  • Managed Detection and Response (MDR): Requires the deployment of IncMan as a primary platform to deliver a multi-tenant service. The MDR service allows MSSPs to deliver advanced threat defense capabilities based on a tailored threat detection stack.

Thanks to the Global Partner Network, MSSPs now can leverage IncMan to deliver "competitive premium and advanced security services ... to increase their economies of scale to manage more incidents for more customers at a lower overall cost," according to DFLabs.

IncMan provides MSSPs with the opportunity to generate new revenue opportunities, DFLabs CEO Dario Forte said in a prepared statement. It supplements the limitations and shortage of human security analysts in organizations, Forte noted, and ensures MSSPs can become valuable cybersecurity partners for their customers.

Dan Kobialka

Dan Kobialka is senior contributing editor, MSSP Alert and ChannelE2E. He covers IT security, IT service provider business strategies and partner programs. Dan holds a M.A. in Print and Multimedia Journalism from Emerson College and a B.A. in English from Bridgewater State University. In his free time, Dan enjoys jogging, traveling, playing sports, touring breweries and watching football.