Content, Channel partners, Security Program Controls/Technologies, Endpoint/Device Security, MSSP

Endgame, Expel Partner on MDR and MSSP Services

Endgame, an endpoint protection platform provider, and MSSP Expel have launched MDR (managed detection and response) services that offer round-the-clock monitoring, threat detection, incident response and threat hunting capabilities.

The two services -- Expel 24x7 for Endgame and Expel hunting for Endgame -- are built on the Endgame endpoint protection platform, which protects organizations against exploits, malware, fileless attacks and ransomware. The platform also delivers online and offline protection, along with analytics and visualization capabilities.

In addition, Expel 24x7 for Endgame and Expel hunting for Endgame allow organizations to proactively hunt for cyber threats in IT environments and address the root cause of recurring incidents, the companies assert. They are backed by Expel security analysts who monitor organizations' IT environments and detect cyber threats and filter out false-positive alerts.

What Are Endgame and Expel?

Endgame unifies threat prevention, detection and hunting. It enables MSSPs and other partners to offer a variety of cybersecurity services, including:

  • Compromise Assessment: Offers an analysis of an active or recent security breach in an IT environment.
  • Incident Response: Enables organizations to quickly respond to cyberattacks; Endgame offers continuous and emergency incident response services.
  • Managed Endpoint Detection and Response (EDR): Provides continuous endpoint threat monitoring and prevention.
  • Managed Threat Hunting: Delivers a threat hunting-as-a-service to stop cyberattacks that bypass an organization's security technologies.

Expel provides a "transparent" managed security service, according to the company. It combines the Expel Workbench interface and security monitoring, enabling organizations to work with security analysts to identify and address cyberattacks.

Key features of Expel's transparent managed security service include:

  • Alerting: Provides a timeline that shows what happened before, during and after a security incident.
  • Dashboards: Track the performance of a company's security analysts and identify improvement areas.
  • Investigation and Response: Offers insights into security incident investigations.
  • Monitoring: Ensures 24×7 threat monitoring of IT environments.
  • Threat Hunting: Delivers proactive hunting for malicious activity in IT environments.

Expel also uses a SOC-as-a-service (SOCaaS) model that enables organizations to offload routine security monitoring so their own security teams can focus on key risks, the company noted. That way, Expel customers can leverage SOC capabilities without significant cost and time investments.

Dan Kobialka

Dan Kobialka is senior contributing editor, MSSP Alert and ChannelE2E. He covers IT security, IT service provider business strategies and partner programs. Dan holds a M.A. in Print and Multimedia Journalism from Emerson College and a B.A. in English from Bridgewater State University. In his free time, Dan enjoys jogging, traveling, playing sports, touring breweries and watching football.