Ontinue introduced MXDR Essentials, a new managed security service that expands Microsoft’s Integrated Security Operations Center (ISOC) into continuous, 24/7 security operations, combining advanced technology with expert security support.
As AI changes the speed and scale of cyber threats, security operations must change with it. Disconnected tools, data, and workflows create friction at exactly the moment defenders need greater context and faster action. A modern SOC needs an integrated foundation where people and AI agents can work from shared signals and context, connecting protection, investigation, and response in a more unified operating model.
Microsoft ISOC is creating a more integrated foundation for security operations, bringing SIEM capabilities, XDR, threat intelligence, automation and AI into a common experience. MXDR Essentials builds on that foundation with Ontinue’s Agentic AI, automation and 24/7 Cyber Defense Center, helping organizations move from integrated security technology to an always-on security operation.
Designed as an accessible starting point, MXDR Essentials provides continuous investigation and response across the Microsoft Defender suite, for organizations that need around-the-clock protection but do not yet require the broader visibility and advanced capabilities of a comprehensive MXDR service.
The launch closely aligns with Microsoft’s evolving vision for integrated security operations through Microsoft Integrated Security Operations Center (ISOC). Ontinue’s Product and Engineering teams worked directly with the Microsoft Product Group ahead of the ISOC announcement and remain engaged as the platform evolves. Ontinue has also introduced a Microsoft ISOC Deployment Package to help organizations configure the telemetry, integrations, and automation required to establish an operational, AI-enabled security environment.
However, deployment is only the first step, as organizations still need to operate it around the clock, investigate threats, make informed decisions and take accountable action when incidents occur. MXDR Essentials brings the managed operations layer to that environment, giving organizations continuous coverage across core Microsoft Defender signals while providing a clear path to more comprehensive MXDR capabilities as their security requirements mature.
“Microsoft ISOC represents an important shift in the foundation for modern security operations,” said Moritz Mann, CEO of Ontinue. “Our opportunity is to build on that foundation and bring together Microsoft’s integrated security platform with the Agentic AI, automation and human expertise needed to operate security around the clock. With MXDR Essentials, we’re making that operating model accessible to more organizations, while giving them a foundation that can evolve as their security needs become more sophisticated.”
Key capabilities include:
-
24/7 Managed Microsoft Defender Operations: Continuous investigation and response across endpoints, servers, email and identities using Microsoft Defender security controls already deployed in the customer environment.
-
Machine-Speed Investigation and Response: The ION SecOps Platform automates triage, enrichment, investigation and containment actions, helping reduce the time between detection and response.
-
24/7 Human Expertise: Ontinue Cyber Defenders lead incidents requiring deeper investigation, expert judgment or customer involvement, ensuring critical security decisions remain accountable to human experts.
-
Customer-Controlled Response: Rules of Engagement give customers control over how incidents are handled, defining which actions Ontinue can take immediately, when approval is required, who is involved and how incidents are escalated.
-
Integrated Microsoft Teams Collaboration: Customers work directly with Ontinue through Microsoft Teams, keeping incident collaboration within a familiar workflow rather than introducing another disconnected tool.
-
Continuous Security Posture Improvement: Operational findings are converted into prioritized Security Posture Improvement recommendations, helping customers focus defensive improvements on issues observed in their own environment.
A Focused Starting Point with a Path to Comprehensive MXDR
MXDR Essentials was built for organizations that need continuous operations across their core Microsoft Defender environment but are not yet ready for, or do not require, the broader telemetry coverage and advanced capabilities of a comprehensive MXDR service.
This distinction gives organizations the ability to choose the level of security operations that fits their requirements today. MXDR Essentials focuses on operationalizing Microsoft Defender with continuous investigation and response. For organizations requiring broader telemetry coverage, Microsoft Sentinel management, tailored detections, proactive threat hunting or designated advisory support, Ontinue MXDR Core provides the more comprehensive security operations model.
Both services are powered by the ION SecOps Platform and Ontinue’s 24/7 Cyber Defense Center. This shared foundation enables organizations to expand their coverage and capabilities as their needs evolve, without changing security operations partners or adopting an entirely new operating model.
“Security operations shouldn’t be an all-or-nothing decision,” said Moritz Mann. “The important thing is having the right operating model for where an organization is today, while giving it room to evolve. MXDR Essentials gives organizations a practical way to establish 24/7 security operations around their Microsoft Defender investment, with a path to broader capabilities when they need them.”
Related News:
