Explore Cisco
How to Buy
Cisco XDR UI displayed on monitor

Cisco XDR

Licenses

Overview Resources Licenses Webinars

Get the full-featured package that best fits your environment

Built by practitioners for practitioners, the Cisco XDR Essentials, Advantage, and Premier tiers allow you to select the solution that best aligns with the needs of your business.
  1. Software features
  2. Security analytics and correlation
    1. This built-in analytics and correlation engine can ingest a vast variety of events and telemetry.
  3. Threat intelligence​
    1. Combine multiple sources of threat intelligence, in addition to the built-in Cisco Talos intelligence to improve context.
  4. ​​Threat hunting
    1. Use advanced threat hunting with a comprehensive, yet simple user experience.
  5. ​​​​Incident response actions
    1. The built-in Response Playbook allows security analysts and incident responders to quickly respond to a breach.
  6. Incident prioritisation
    1. Incidents are assigned a priority score and automatically enriched. New, relevant detections discovered during enrichment are added.
  7. Asset context
    1. This Insights feature extends the integration framework to collect data about device inventory and posture.
  8. ​​User context
    1. This is added to investigation results and enriched incidents to provide better context and speed resolution.
  9. Custom automation workflows
    1. This no-to-low-code approach for building automated workflows enables interaction with many types of Cisco and third-party resources and systems.
  10. Automation Workflow Exchange
    1. Quickly discover, install, and operationalise new curated automation workflows within a few clicks.
  11. Cisco Software Support Services (SWSS) Enhanced
    1. This provides 24/7 tech support, a 30-minute response time, onboarding help, ongoing digital adoption, and an annual security health check.
  12. Third-party integrations
    1. Benefit from commercially supported and curated integrations with select third-party tools across a range of vectors.
  13. Cisco Managed Detection and Response (MDR)
    1. Cisco security experts provide this managed Cisco XDR service. It includes security validation through pen testing and select Talos IR services.
  14. Cisco Talos Incident Response (Talos IR)
    1. Talos IR provides a full suite of proactive and emergency services to help you prepare, respond, and recover from a cybersecurity incident.
  15. Cisco Technical Security Assessment (CTSA)
    1. Assess security posture with advice on threats, the capacity for realisation, and potential impact on operational resilience.

 

5 ways to experience XDR

Explore the top five XDR use cases mapped to the NIST Incident Management Framework.

Connect with a Cisco XDR expert

It's time to go from endless investigation to remediating the highest-priority incidents with greater speed, efficiency, and confidence.

Get started