Comparison of commercial license tiers: MDR Optimum, MDR Expert, MDR Basic, MDR Advanced, and MDR Prime
April 11, 2024
ID 206800
The set of features available in Kaspersky Managed Detection and Response depends on the tier of your commercial license (see the table below).
Comparison of Kaspersky Managed Detection and Response commercial license tiers
Feature | MDR Optimum | MDR Expert | MDR Basic | MDR Advanced | MDR Prime |
|---|---|---|---|---|---|
24x7 monitoring, incident detection and management |
|
|
|
|
|
Automatic threat hunting |
|
|
|
|
|
Response playbooks and automatic incident response |
|
|
|
|
|
Security health check and asset visibility |
|
|
|
|
|
MDR Web console with dashboards and reports |
|
|
|
|
|
Ability to receive advanced incident information |
|
|
|
|
|
Incident history retention period | 1 year | 1 year | 1 year | 1 year | 1 year |
Raw data retention period | 1 month | 3 months | 1 month | 3 months | 3 months |
Managed threat hunting and incident investigation |
|
|
|
|
|
Extended expert support for incident management |
|
|
|
|
|
Access to the Threat Intelligence Portal |
|
|
|
|
|
API for MDR data export |
|
|
|
|
|
Customer can create a custom incident for processing by the MDR Solution* |
|
|
|
|
|
Localized data storage and workgroups |
|
|
|
|
|
Multitenancy |
|
|
|
|
|
Adding and editing comments to incidents |
|
|
|
|
|
Adding and editing attachments to incidents |
|
|
|
|
|
Advanced incident investigation: analysis to establish the background, circumstances and detailed attack mechanism |
|
|
|
Customer can not choose the incidents for advanced investigation; no guaranteed incident response time |
Customer can choose the incidents for advanced investigation (within the purchased time limit); guaranteed incident response time |
*The Solution ensures the processing of three requests per week in accordance with performance targets of the Solution delivery. The number of requests processed in accordance with performance targets of the Solution delivery is increased proportionally: for every 10,000 connected endpoints, the number of requests is increased by 1.
There are additional services and options to enable. Contact your MDR supplier for details.
