Content, Channel partners, Security Program Controls/Technologies, Endpoint/Device Security

Ziften Endpoint Security Unveils Managed Detection and Response Services

Ziften, a Texas company that provides cloud, endpoint and security services, has introduced turnkey managed detection and response (MDR) services to help MSSPs and other organizations improve their threat identification and mitigation capabilities, according to a prepared statement.

The Ziften MDR services portfolio includes the following:

  • Managed Assess: Provides assessment processes and reports to help organizations evaluate asset management, asset performance, licensing, vulnerability state, policy compliance, anomalous behaviors and other security concerns.
  • Managed Hunt: Delivers managed endpoint and detection (EDR) for client devices, servers and cloud virtual machines (VMs).
  • Managed Response: Allows organizations to request remote and/or on-site incident response escalation and recommended policy actions based on investigations and response activities.

The MDR services address the EDR challenges of organizations dealing with capability or resource constraints, Ziften CEO Charles Leaver (pictured above) stated. They enable organizations to overcome these limitations, Leaver said, and improve their overall security posture and capabilities.

What Is Ziften?

Ziften offers a unified systems and security operations (SysSecOps) platform designed to help MSSPs, enterprises and government agencies minimize endpoint security issues and accelerate their cyber threat response

Over the past year, Ziften has experienced 80 percent year-over-year customer growth and 100 percent year-over-year revenue growth, according to the business. The company also has made several recent moves to further enhance its cloud, endpoint and security services portfolio.

Ziften this week released the ZFlow App and ZFlow Technology Add-on (TA) for Splunk at the .conf2017 Splunk worldwide user conference, according to a prepared statement.

The ZFlow App and TA enable Splunk Enterprise and Splunk Enterprise Security (ES) users to leverage a Ziften-generated extended NetFlow network protocol from endpoints, servers and cloud VMs. That way, Splunk Enterprise and ES users can "see what they are missing at the edge of their network, in their data centers and in their cloud deployments," Ziften stated.

In addition, Ziften earlier this month updated its Zenith endpoint security platform to provide vulnerability assessment, threat detection and incident response in cloud VMs running Linux operating systems, the company said in a prepared statement.

Dan Kobialka

Dan Kobialka is senior contributing editor, MSSP Alert and ChannelE2E. He covers IT security, IT service provider business strategies and partner programs. Dan holds a M.A. in Print and Multimedia Journalism from Emerson College and a B.A. in English from Bridgewater State University. In his free time, Dan enjoys jogging, traveling, playing sports, touring breweries and watching football.