Trustwave has been positioned in the Leaders Category in the IDC MarketScape for Worldwide Emerging Managed Detection and Response (MDR) Services 2024 Vendor Assessment (doc #US50101523 April 2024).
IDC MarketScape vendor analysis model is designed to provide an overview of the competitive fitness of ICT suppliers in a given market. The research methodology utilizes a rigorous scoring methodology based on both qualitative and quantitative criteria that results in a single graphical illustration of each vendor’s position within a given market. The Capabilities score measures vendor product, go-to-market and business execution in the short-term. The Strategy score measures alignment of vendor strategies with customer requirements in a 3-5-year timeframe. Vendor market share is represented by the size of the icons.
The report noted, “Organizations of all sizes and industries that prioritize proactive threat detection and response should consider Trustwave's MDR services.”
In this inaugural report, IDC MarketScape noted, “SpiderLabs, a division of Trustwave, serves as a core strength for Trustwave's Managed Detection and Response service. SpiderLabs provides Trustwave with access to cutting-edge threat intelligence and research capabilities. This allows Trustwave to stay ahead of emerging threats and provide proactive threat detection and response for its MDR clients. In addition, SpiderLabs' expertise in threat hunting and malware analysis enhances Trustwave's ability to identify and mitigate complex threats.”
"We believe being named a Leader in the report is a direct result of our world-class SpiderLabs expertise and our industry-leading security operations platform," said Trustwave CEO Eric Harmon. "This recognition serves as a testament to our ongoing commitment to innovation. We're dedicated to delivering unparalleled cyber value to our clients, ultimately empowering them to reduce cyber risk and fortify their defenses against disruptive and damaging cyber threats.”
“As a pure-play managed security SP, Trustwave offers an extensive suite of managed security services alongside security advisory and assessment services. Within its service portfolio, the MDR services, integrated with the managed SOC/SIEM offerings, deliver comprehensive 24 x 7 x 365 security monitoring, threat detection, response, and security tuning,” the report said, adding, “Central to Trustwave's MDR offering is the Fusion platform, a real-time analytics and ML engine equipped with security orchestration and automation capabilities.”
Trustwave’s Fusion Platform is a core component of the company’s ability to deliver MDR services and keep clients informed on the status of the security posture. Fusion is a cloud-based cybersecurity platform that serves as the foundation for the Trustwave managed security services, products, and other cybersecurity offerings. Additionally, Fusion connects the digital footprints of clients to a robust security cloud comprised of the Trustwave data lake, advanced analytics, actionable threat intelligence, a wide range of security services, and products and Trustwave SpiderLabs, the company’s elite team of security specialists.
“Trustwave's MDR services come in two tiers: a base offering focused on deeper detection and response using endpoint telemetry and an elite tier expanding the scope with additional SpiderLabs services, custom MTTR service-level agreements, and high-touch engagements,” the report said.
Additionally, the IDC MarketScape said, “As an early member of the Microsoft Intelligent Security Association (MISA), Trustwave brings deep Microsoft expertise to help clients make the most of their Microsoft security investments.”
IDC previously discussed Trustwave Security Colony in its June 2022 IDC Link commentary, (Doc #lcUS49298622) Trustwave Introduces Elevated Crowdsourcing to the Mix by Adding Security Colony into their New MDR Offerings.
The IDC MarketScape said, “A unique offering from Trustwave is the Security Colony, accessible to all MDR clients. This platform, designed for CISOs, provides a wealth of toolkits, guidelines, playbooks, and assessment capabilities derived from global cybersecurity consulting engagements.”
Defining the MarketScape
To be included in this 2024 IDC MarketScape for Worldwide Emerging MDR Services, providers had to offer any or all of the following MDR services
- Pure-play MDR/managed extended detection and response (MXDR)
- Managed endpoint detection and response (EDR)
- Managed threat hunting
- Managed security information and event management (SIEM)
- Multiregion footprint: The MDR service provider should have customers in more than one region outside of North America, LATAM, EMEA, and APAC.
Overall, the IDC MarketScape report was bullish on the MDR market, noting it has experienced significant growth due in part to the increasing sophistication and number of cyber threats. This threat level has spurred organizations that cannot afford or don’t have the time to develop in-house MDR capabilities to turn to MDR service providers to fill this role.
“Furthermore, MDR services help organizations address the challenges posed by the cybersecurity skills gap,” the MarketScape noted. “By outsourcing threat detection and response to MDR providers, organizations can access a team of cybersecurity experts with specialized skills and knowledge. This allows organizations to enhance their security operations (SecOps) without the need to recruit and retain expensive cybersecurity talent in-house.”
The Trustwave MDR Difference
Trustwave’s MDR solution is a robust aggregation of all the services an organization requires to stay secure and resilient in a world of increasing threat actor sophistication and more frequent attacks.
The services include:
- Global Threat Monitoring – 24x7x365 eyes on glass from eight global security operations centers monitoring your environment.
- Incident Triage & Containment – Security analysts monitor detections, contain immediate threats, and eliminate false-positives.
- Investigation & Response – Investigators analyze complex threats and intrusions to coordinate swift response actions.
- Tuning & Optimization – Security engineers sharpen the analytics, rules, and policies for optimal performance and detection.
- Advanced Continual Threat Hunting – Discover how threat hunters find and eliminate active threats and vulnerabilities using hypothesis-based hunts.
- SpiderLabs Security Research – Researchers track threat groups and dissect the tactics, techniques, and procedures of real-world attacks.
- Digital Forensics Incident Response – Forensic investigators respond to a breach to identify the source, its impact, and to secure evidence.
- Vulnerability and Penetration Testing – Skilled cyber experts dig deep into your IT infrastructure to manage your risk and exposure.
