Skip Navigation
  1. BlackBerry Docs
  2. CylanceMDR
  3. CylanceMDR User Guide
  4. Overview

Overview

CylanceMDR
 is a subscription-based, 24x7-managed extended detection and response (XDR) service that provides actionable intelligence for customers to prevent threats quickly, while minimizing alert fatigue without requiring additional resources. This service is fully integrated with
CylancePROTECT
,
CylanceOPTICS
,
CylanceGATEWAY
, and third-party vendors to provide holistic and unified telemetry across all endpoints and enable highly skilled
BlackBerry
 analysts to threat-hunt through customer environments to find and contain threats, prevent major breaches, and allow organizations to mature their security posture.
BlackBerry
 has the strategy, expertise, and technology to protect an organization by analyzing, preventing, and containing threats as well as large-scale breaches.
CylanceMDR
 requires
CylancePROTECT
 and
CylanceOPTICS
.
CylanceGATEWAY
 optional for
CylanceMDR
 Advanced subscriptions. For more information, see the CylanceMDR requirements.

What's included in the subscription

The following table highlights the features that are included in
CylanceMDR
 Advanced,
CylanceMDR
 Standard, and
CylanceMDR
 On-Demand subscriptions.
The
CylanceMDR
 Standard and Advanced subscriptions include closed-loop communications and access to a
CylanceMDR
 analyst to help navigate incidents and provide regular updates and ongoing review of the overall threat prevention status. Optionally, customers are also eligible to secure services for third-party applications, such as for integrating and managing telemetry data from SIEM.
Feature
CylanceMDR
 On-Demand
CylanceMDR
 Standard
CylanceMDR
 Advanced
Onboarding (configuration and finetuning)
√
√
24x7 threat monitoring
√
√
24x7 threat detection
√
√
√
24x7 triage and response
√
√
√
24x7 threat hunting
√
√
Custom threat hunting
√
√
Monthly reports
√
√
Advisory services
√
√
Critical Event Management mobile app
√
√
Threat intelligence indicators of compromise (IOC) integration
√
√
24x7 phone support
√
√
Advanced threat intelligence (simulation, validation, monthly reports)
√
Incident response and forensic investigation
Optional add-on
Optional add-on
√
Service level objectives
√
√
√
$1,000,000 guarantee
(Optional)
1
 You must obtain a third-party solution (for example, for SIEM integration). For more information, see Supported third-party integrations.