Cybersecurity definition
What is MDR?
MDR stands for Managed Detection and Response.
By Cyber Tool Stack Editorial TeamUpdated
Definition
A subscription service where a vendor's own analysts monitor an organization's security alerts and respond to routine detections, instead of the customer's team doing it alone.
Where MDR fits in the security landscape
These beginner lessons use this term while explaining the surrounding security control.
Related cybersecurity terms
EDREndpoint Detection and ResponseSoftware that continuously records what happens on endpoints (processes, files, network connections) and detects, investigates, and responds to malicious behavior.SOCSecurity Operations CenterThe team (in-house or vendor-run) responsible for monitoring security alerts around the clock and responding when something looks like a real incident.