CATEYE MDR
Managed detection and response: we collect your security logs, detect threats, triage every alert and act with your approval, so attacks are caught and contained without you building a SOC.
Request a demo See what’s included
One of our cybersecurity services, hosted by CATEYE. Pricing on request.
Threats found and handled
From the logs your systems already produce to a contained incident and a clear report.
Log collection
Security events from your cloud, email, identity and endpoint tools brought into one pipeline.
Detections
Detection rules written in the open Sigma format and mapped to MITRE ATT&CK, tuned to your environment.
Alert triage
Every alert reviewed by an analyst, with AI-assisted summaries to speed up triage. The AI advises, a person decides.
Response with approval
Containment steps such as disabling an account are proposed to you and run once you approve, including from an email link.
Coverage
A view of which systems send logs and which threats your rules cover, so gaps are visible.
Escalation to DFIR
A serious incident becomes a CATEYE DFIR case with the evidence already attached.
Run by us, or by your team
Managed by CATEYE
Our security team runs the service for you and reports to you, so you get the outcome without hiring for it.
Or used by your team
Your own IT or security staff sign in to the same workspace, with roles that decide who sees and changes what.
Hosted and kept apart
We host and update the platform. Each client has its own workspace, kept apart from every other client’s data.
How it works
From a first conversation to a service running for your company.
Request a demo
Tell us about your company and what you need. We show you the service with sample data.
Agree the scope
We agree what is covered, the systems involved and who does what, in writing.
Set up your workspace
We create your workspace, invite your people and connect the systems in scope.
Work and report
The service runs, findings and progress are tracked in the platform, and you get regular reports.
Questions about CATEYE MDR
Which tools can you take logs from?
Common cloud, email, identity and endpoint security tools, such as Microsoft 365, Google Workspace and Microsoft Defender. We confirm your sources when we agree the scope.
Will you change things without asking?
No. Response actions are proposed and run only after you approve them, unless you agree in advance that certain steps can run automatically.
How do you use AI?
AI drafts a summary of each alert to help our analysts. It does not close alerts or take actions on its own.
What do we receive?
Alerts that need you, approvals when an action is proposed, and regular reports on what was detected and how it was handled.
What if there is a real breach?
The alert is escalated to our incident responders in CATEYE DFIR, who take over with the evidence already collected.
Stop threats sooner with CATEYE MDR
We will show you the alert queue, a triaged alert and an approval flow with sample data.