Blumira has introduced a new structure for its security platform, shifting from traditional edition names to tiers defined by their core functions -
Detect, Respond, and Automate. The goal is to make it easier for teams and partners to understand what each edition delivers and how it aligns with their business or security maturity.
Matt Warner, CEO and co-founder at Blumira, told MSSP Alert that the new model “simplifies decision-making by making it clear how each will be used in the business, while our previous edition tiers only captured a portion of the value each tier provided.”
He explained that past editions, such as the SIEM+ tier (now Respond), didn’t fully reflect their capabilities. “SIEM+ wasn’t just an expanded feature set of the SIEM component of our platform - it also added use of Blumira Agent, an endpoint detection and response solution used for visibility and threat response on user devices,” Warner said.
By moving to function-first names, he added, partners can now intuitively understand what each edition delivers and more easily choose what fits their business.
Addressing Partner and Customer Confusion
The decision to move toward function-based tiers came directly from customer and partner feedback. According to Warner, partners often found the previous model confusing, given the overlap between detection, response, and automation technologies.
“If we offer an endpoint agent, why isn’t there an EDR edition? If we’re offering automated, supported, and guided response options, does that make us an XDR or an MDR? It’s easy to go down rabbit holes when what partners really want to understand is what will meet their needs and their clients’ needs,” he said.
He noted that this clarity also gives partners a clear growth path.
“They may start with Detect Lite to meet customer compliance needs for continuous logging or threat scanning, and grow their program by upgrading to Respond and improving their ability to help customers address any threats identified. If they’re already helping customers with incident response and want to increase their speed to response and investigation, Automate edition is ready for them to leverage those tools and AI-enabled analysis.”
Balancing Automation and Human Insight
The Automate edition introduces SOC Auto-Focus, a tool designed to enrich alerts with AI-driven context and help analysts act faster during incidents.
“Moments matter during an incident, and any time saved during the initial assessment and analysis helps reach a resolution faster,” Warner said. Early partner feedback has been strong; some reported cutting investigation times in half. “There’s also another layer of relevant analysis provided by Auto-Focus, by adding more detail around the ‘why’ and ‘how’ of a finding that can help responders understand what it means in the context of a larger pattern or potential attack,” he added. For teams still building deep security expertise, this level of context helps them become effective immediately while continuing to grow their skills.
A Simpler Model for MSPs and MSSPs
For managed service providers, the updated structure makes multi-tenant management and scalability more straightforward. “Our MSP platform is built for multi-tenancy, allowing the MSP or MSSP to manage multiple clients in a single portal,” Warner said. “As those clients grow or new ones are added, the partner has the ability to move into a higher program level. With each level comes new and better benefits, including discounts, rebates, lead access, and co-marketing opportunities.”
Blumira’s function-first approach ultimately gives both customers and partners a more intuitive way to select, deploy, and scale the right level of security for their environment, without the confusion of overlapping categories or acronyms.
