A technical evaluation of the EDR vendor landscape by MITRE Engenuity ATT&CK® Evaluations affirms that Secureworks industry-leading Taegis XDR platform offers superior value for cybersecurity leaders. In particular, Taegis XDR helps security leaders mitigate their risk within the constraints of limited budgets and staffing.
In the first MITRE evaluation to include Taegis, the Secureworks EDR agent achieved 100% visibility and 95% detection across the 19 steps of the evaluation. That firmly puts Secureworks Taegis ahead of many well-known, established vendors. In addition, the Taegis Linux agent had analytic detections across 100% of the steps in which it was used, providing robust detection for cloud workloads.
Secureworks is the only evaluated vendor that fully ingests, at a deep level, telemetry from five of the leading EDR agents, including CrowdStrike, Microsoft, SentinelOne, Carbon Black, and the versatile Taegis agent. With Secureworks open-without-compromise approach, customers have the choice to leverage endpoint telemetry from a diverse grouping of agents as part of their broader approach to threat detection and response. Additionally, Secureworks doesn’t just integrate with these agents and other telemetry sources. We add our own layer of detection and threat intelligence to prioritize the threats presenting the highest risk to our customers, filling the gap where others have missed detections.
Taegis XDR’s out-of-the-box integrations with these diverse endpoint agents is especially important given that 1) more than 30% of organizations have deployed EDR from more than one vendor, according to Secureworks analysis and 2) security teams must be prepared to diligently protect their organizations even if M&A activity introduces new endpoint agents into their enterprise environments.
Secureworks customers can also use the included native endpoint agent provided with the Taegis XDR platform to cover their enterprise environment without additional cost. The Taegis agent, tested as part of the MITRE evaluation for the first time, provides 100% visibility and 95% of analytic detections across all 19 steps according to MITRE, offering near real-time insights into threats on servers, laptops and desktop systems to enable detection of credible threats in the customer environment.
This cost-efficiency is critical when threats and attack surfaces are growing at a faster pace than security budgets. Also, as threat actors continue to pivot to identity and cloud access vectors, less than 40% of threats investigated by Secureworks today are detectable by endpoint telemetry alone. Security organizations may therefore want to invest more of their resources in other key aspects of threat detection and response — especially XDR, which uses telemetry from the entire enterprise environment to detect and respond to advanced persistent threats (APTs) and other high-stealth exploits.
“Given tight budgets and the tremendous undersupply of global cybersecurity talent, Secureworks is committed to making Taegis XDR the industry’s most effective and efficient platform for detecting, investigating and responding to threats across an entire IT and OT landscape,” says Kyle Falkenhagen, Chief Product Officer. “Thanks to our uniquely extensive knowledge of the real-world threat landscape and real-world SecOps practices — as well as our distinctive approach to correlating and prioritizing telemetry from endpoints, networks, clouds, email, identity, OT and business applications — Taegis XDR with our bundled agent is the ideal investment for security teams looking for more signal and less noise.”
To learn more about Secureworks Taegis XDR, request a live demo and we can walk through our support of the five evaluated endpoints rated highly in this year’s MITRE Engenuity ATT&CK Evaluation.