WatchGuard expands managed detection and response services

WatchGuard Technologies, a company specialising in unified cybersecurity for managed service providers (MSPs), has expanded its managed detection and response (MDR) services with the introduction of WatchGuard Open MDR.

This addition builds on WatchGuard’s MDR service by extending 24/7 detection and response to third-party tools alongside WatchGuard technologies, enabling MSPs to deliver full-stack managed security services across customer environments without forcing platform changes. 

Open MDR brings together native WatchGuard integrations and third-party environments into a single operational view. For MSPs, that means faster onboarding, less friction during renewals, and the ability to standardise service delivery, according to the company.

WatchGuard also claims that proprietary AI/ML in Open MDR helps reduces noise, validates threats, and initiates response actions in under six minutes, delivering fewer than one false positive per month. 

WatchGuard’s SOC monitors environments 24/7 and validates threats, containing incidents, isolating devices, and stopping attacks before they escalate. Proactive AI-powered threat hunting also aims to help uncover hidden risks earlier.

Partners retain ownership of the customer relationship while WatchGuard operates behind the scenes as the SOC, supported by Technical Account Managers (TAMs) for escalation, root-cause analysis, and ongoing security guidance. 

Key capabilities include cross-environment coverage across WatchGuard Firebox, AuthPoint, and EPDR, plus supported tools including Microsoft Defender, CrowdStrike Falcon, Okta Workforce Identity, Microsoft 365, AWS, Google, and third-party firewalls.

“Open MDR represents the culmination of our MDR vision - to provide a complete, single MDR solution,” said Andrew Young, chief product officer at WatchGuard.

“It allows partners to deliver consistent, high-quality managed security without forcing rip-and-replace decisions or operational complexity.”