What is Managed Detection and Response (MDR)?

MDR is a service in which a security operations team monitors your environment 24/7, investigates suspicious activity and helps contain and remediate threats. DIAMATIX MDR360 is delivered by the DIAMATIX SOC.

Do we have to replace our current security tools?

No. MDR360 is vendor-agnostic and is designed to work with supported technologies you already use, such as Microsoft Defender, Microsoft Entra ID, SentinelOne, Acronis and Fortinet. Supported sources are confirmed during scoping.

What is the difference between MDR and SOC as a Service?

SOC as a Service gives you an outsourced security operations capability across your log sources. MDR360 is a packaged outcome-focused service centred on detection, investigation and response across endpoints, identity, network and cloud.

Will DIAMATIX take response actions in our environment?

On MDR360 Advanced and Ultimate, yes — within the response permissions you approve. Typical actions include authorized endpoint isolation and supported containment, depending on vendor capabilities and licenses. MDR360 Standard (Detect & Notify) does not include DIAMATIX-executed containment: incidents are escalated to your team or MSP with clear guidance.

Where is the SOC located?

DIAMATIX is headquartered in Bulgaria and operates its Security Operations Center in Europe.

DIAMATIX MDR360

Managed Detection & Response, Powered by DIAMATIX SOC

24/7 monitoring, expert investigation and coordinated response across the security technologies you already own.

Request MDR consultation Compare packages

What you get

One accountable service for detection and response

24/7 European SOC

Analysts monitor, triage and investigate every hour of every day.

Your existing stack

Microsoft Defender, Entra ID, SentinelOne, Acronis, Fortinet and other supported sources.

Guided response

Escalation on Standard; authorized containment and remediation coordination on Advanced and Ultimate.

SHIELD SIEM/XDR

DIAMATIX's own visibility platform correlates telemetry across sources.

Executive reporting

Monthly reporting on coverage, incidents, actions and recommendations.

European operations

Security operations delivered from the EU, supporting GDPR and NIS2 needs.

How it works

From onboarding to continuous protection

01
Scope & onboard
We review your environment, agree response permissions and connect supported telemetry.
02
Baseline & tune
Detections are tuned to your environment to reduce noise and false positives.
03
Monitor 24/7
The DIAMATIX SOC watches your telemetry continuously through SHIELD.
04
Investigate
Analysts validate alerts, add context and determine real impact.
05
Respond
Standard escalates to your team or MSP; Advanced and Ultimate contain threats under authorization through supported technologies.
06
Report & improve
Regular reporting and recommendations to strengthen resilience.

Detailed service workflow

Service levels

Minutes, not hours, when it matters

10 min

SOC triage start

Severity 1 – Critical

15 min

Customer notification

Severity 1 – Critical

30 min

Containment initiated

Advanced & Ultimate only

99.5%

Portal availability

Monthly target

• Severity 1 incident report within 3 business days of closure
• Service credits of up to 15% for missed Severity 1 targets
• Monitored 24×7×365 by the DIAMATIX SOC

Targets from the DIAMATIX MDR SLA (Advanced tier). Triage and notification targets are monitoring SLAs; containment targets are active-response SLAs and do not apply to Standard. Tier-specific Standard and Ultimate targets are awaiting DIAMATIX approval. Times run from a qualifying alert reaching the SOC. *Containment applies to pre-authorised actions on in-scope assets with working integrations. The signed agreement governs.

See response times by severity

Packages

Choose the level of coverage you need

Standard (Detect & Notify), Advanced (Detect & Respond) and Ultimate (Extended Security Operations) — billed per endpoint, monthly. Exact scope is agreed in the statement of work.

Capability	MDR360 StandardDetect & Notify24/7 Managed Threat Monitoring, Investigation & Escalation	Recommended for active responseMDR360 AdvancedDetect & Respond24/7 Managed Detection, Active Threat Response & Remediation	MDR360 UltimateExtended Security OperationsExtended Detection & Response Across Endpoint, Identity & Network Security
24/7 SOC Monitoring
Multi-vendor EDR/XDR Monitoring
Threat Detection & Investigation
Incident Notification & Escalation
Customer Portal & Reporting
Active Endpoint Containment	Not included	Included, subject to support and authorization	Included, subject to support and authorization
Threat Remediation	Not included	Supported actions	Supported actions
Response Playbooks	Escalation procedures	Active response playbooks	Extended response playbooks
Microsoft Entra ID Integration	Not included	Bundle-dependent	Included within agreed scope
Cross-domain Security Correlation	Onboarded monitoring sources	Contracted integrations	Extended contracted integrations
NGFW Monitoring	Not included by defaultNot included	Contract-dependent	Optional add-on
Managed NGFW	Not included by defaultNot included	Contract-dependent	Optional add-on
	Get a quote	Get a quote	Get a quote

IncludedNot includedSubject to technical support and authorizationBundle- or contract-dependentOptional add-on

Active response depends on supported vendor integrations, licenses, technical permissions and pre-authorized procedures; not every EDR/XDR vendor supports identical actions. Integrations, add-ons and cross-domain coverage depend on the contracted bundle, supported tools and agreed service scope. Exact response commitments, containment authority, and onboarding scope are defined in the final service description and statement of work.

Reporting

See what your SOC is doing for you

Monitored assets and telemetry coverage
Investigated alerts and confirmed incidents
Response actions and time to respond
Prioritized recommendations

Monthly security report

Illustrative sample

4.2M

Events analysed

318

Investigated

Confirmed incidents

Escalated alerts per week

Telemetry coverage

Recommendations closed

FAQ

Common MDR questions

All MDR questions

Ready to see MDR360 in your environment?

Book a consultation with an MDR specialist. We will review your current stack and recommend the right scope.

Request MDR consultation