Skip to content
DIAMATIX

MDR360 packages

Coverage that matches your risk

Every MDR360 package includes 24/7 SOC monitoring, multi-vendor EDR/XDR coverage, alert validation, analyst investigation and the customer portal. Standard detects and notifies, Advanced adds authorized active response, and Ultimate extends operations into identity and broader multi-source correlation.

Get a quote

The three tiers

Standard, Advanced and Ultimate

All packages are billed monthly and delivered by the DIAMATIX SOC.

MDR360 Standard

Detect & Notify

SKU DMX-MDR-STD-M

24/7 expert threat monitoring, investigation and escalation across your existing security technologies. DIAMATIX detects and validates security incidents so your team can respond with confidence.

Best fit

  • Organizations with an internal team or MSP that performs containment
  • Endpoint-centric environments requiring 24/7 visibility
  • Teams that need validated, prioritized incidents instead of raw alerts

Standard does not include DIAMATIX-executed endpoint isolation, active containment or threat remediation. Containment and remediation remain with you or your designated MSP.

Recommended for active response

MDR360 Advanced

Detect & Respond

SKU DMX-MDR-ADV-M

Move beyond monitoring. DIAMATIX security analysts actively contain threats and coordinate remediation through supported security technologies and pre-authorized response procedures.

Best fit

  • Organizations that need active threat response, not only escalation
  • Regulated or audit-sensitive environments that need documented response actions
  • Teams without 24/7 in-house responders

Active response depends on supported vendor integrations, relevant licenses, technical permissions and pre-authorized response procedures. Identity protection is available through defined Advanced bundles.

MDR360 Ultimate

Extended Security Operations

SKU DMX-MDR-ULT-M

Extend your 24/7 security operations beyond endpoints. DIAMATIX combines endpoint and identity visibility with broader security integrations for coordinated threat investigation and response.

Best fit

  • Organizations needing identity monitoring alongside endpoint response
  • Broader security stacks that need multi-source correlation
  • Enterprise, multi-site or higher-risk environments

Ultimate does not automatically include unrestricted network monitoring or firewall administration. NGFW Monitoring and Managed NGFW are separate optional services with defined scope.

Pricing model

How MDR360 is priced

Simple, predictable pricing built around what you protect — not how much data you generate.

Per endpoint / per identity

You pay a fixed monthly rate per protected endpoint or identity. Budget scales in line with your environment, so costs are easy to forecast and approve.

Zero ingest surprises

No per-GB or per-event log charges. Telemetry volume can grow during an incident or a busy month without changing your bill.

Contract flexibility

Monthly billing, start with a focused scope and move between Standard, Advanced and Ultimate as your needs evolve.

Your quote depends on tier, number of endpoints and identities, and in-scope integrations. The signed agreement governs final terms.

Get a tailored quote

Compare

Package comparison

Capabilities included in each MDR360 tier.

CapabilityMDR360 StandardDetect & Notify24/7 Managed Threat Monitoring, Investigation & EscalationRecommended for active responseMDR360 AdvancedDetect & Respond24/7 Managed Detection, Active Threat Response & RemediationMDR360 UltimateExtended Security OperationsExtended Detection & Response Across Endpoint, Identity & Network Security
24/7 SOC Monitoring
Multi-vendor EDR/XDR Monitoring
Threat Detection & Investigation
Incident Notification & Escalation
Customer Portal & Reporting
Active Endpoint ContainmentNot includedIncluded, subject to support and authorizationIncluded, subject to support and authorization
Threat RemediationNot includedSupported actionsSupported actions
Response PlaybooksEscalation proceduresActive response playbooksExtended response playbooks
Microsoft Entra ID IntegrationNot includedBundle-dependentIncluded within agreed scope
Cross-domain Security CorrelationOnboarded monitoring sourcesContracted integrationsExtended contracted integrations
NGFW MonitoringNot included by defaultNot includedContract-dependentOptional add-on
Managed NGFWNot included by defaultNot includedContract-dependentOptional add-on
Get a quoteGet a quoteGet a quote
IncludedNot includedSubject to technical support and authorizationBundle- or contract-dependentOptional add-on

Active response depends on supported vendor integrations, licenses, technical permissions and pre-authorized procedures; not every EDR/XDR vendor supports identical actions. Integrations, add-ons and cross-domain coverage depend on the contracted bundle, supported tools and agreed service scope. Exact response commitments, containment authority, and onboarding scope are defined in the final service description and statement of work.

Optional add-ons

Firewall services

Neither add-on is included in the MDR360 base service.

NGFW Monitoring

  • 24/7 monitoring of supported next-generation firewall security telemetry
  • Security event collection, analysis and correlation
  • Threat detection across supported network security sources
  • Fair-use allowance of 25 GB per network source per month
  • One high-availability firewall pair or cluster counts as one network source
  • Additional telemetry requirements agreed within the service scope

Monitoring only — does not include firewall administration.

Managed NGFW

  • Firewall administration and operational management
  • Configuration and policy administration within the agreed scope
  • Change management and operational support
  • Firewall health and operational management as contractually defined

A separate operational service from MDR security monitoring.

Engagement model

How DIAMATIX operates at each tier

MDR360 Standard

Detect & Notify

DIAMATIX monitors, validates, investigates and prioritizes threats, then notifies and escalates with clear guidance, ticketing and portal reporting. Your team or MSP carries out containment and remediation.

MDR360 Advanced

Detect & Respond

Everything in Standard, plus analyst-led active response: authorized endpoint isolation, supported containment, malicious process termination where technically supported, authorized remediation, agreed playbooks and documented response actions.

MDR360 Ultimate

Extended Security Operations

Everything in Advanced, plus Microsoft Entra ID integration within the agreed scope, identity investigation, correlation across supported endpoint, identity and other contracted sources, coordinated cross-technology response and extended resilience reporting.

Questions

Choosing a package

Not sure which package fits?

An MDR specialist will review your environment and recommend the right scope.

Talk to an MDR Expert