Skip to Content
Engagement type · MDR Add-on

Enterprise-grade detection.
Linux experts at the controls.

Included with the High Security Add-on. Managed Detection and Response (MDR) on your covered Linux servers: a 24/7 Security Operations Center (SOC) hunting, intercepting, and containing threats, with our Linux engineers on the console.

▲ crafty-penguins / what-we-do / engagement-types / mdr
What it is

Managed Detection & Response made simple

The MDR add-on is included with the High Security Add-on. It puts Managed Detection and Response (MDR) on your covered Linux servers. We deploy it, configure it, and do first-line review of its alerts.

A Security Operations Center (SOC) watches those servers around the clock, with 24/7 threat hunting, real-time threat interception, and incident containment.

Managed Detection and Response
Not a standalone service. Proactive runs underneath, High Security sits on top, and MDR comes with it.
Proactive scope Proactive Managed Services

The MDR add-on attaches to the covered Linux servers in this scope.

Read about Proactive
Detection and response MDR Add-on This add-on

Managed Detection and Response on the covered Linux servers: deployment, first-line alert review, and an MDR coverage summary in the High Security Add-on's monthly security report.

What's in it for you

Why teams add MDR

01

Included with High Security

  • Part of the High Security Add-on, not a separate line item
  • Deployed on your covered Linux servers during onboarding
Included with High Security
02

A 24/7 SOC on your Linux servers

  • MDR coverage on your covered Linux servers
  • 24/7 threat hunting, real-time threat interception, and incident containment
24/7 SOC
03

Linux experts on the console

  • We hold the MDR console access
  • We do first-line review of MDR alerts
  • If you want to look yourself, we arrange read-only console access
Console liaison
04

Coverage you can see in your report

  • An MDR coverage summary in the monthly security report issued by the High Security Add-on
Security reporting
Who it is for

When this add-on makes sense

01
You want 24/7 threat hunting and containment on your Linux servers.
02
You want an MDR coverage summary in your monthly security report.
03
You want first-line review of MDR alerts handled for you.
04
You already have, or are adding, the High Security Add-on.
Where it fits

What this add-on works with

Also available 24/7 NOC Add-on

The NOC add-on gives your covered servers round-the-clock emergency coverage, with a 1-hour response commitment on critical issues.

Read about the 24/7 NOC Add-on
Included with High Security Add-on

MDR is included with High Security. High Security adds host-based security monitoring, vulnerability scanning, penetration testing, firewall audits, access auditing, and a monthly security report that carries the MDR coverage summary.

Read about High Security
What's included

What the MDR add-on covers.

Our Linux engineers
Deployment, alert review, and reporting
+Deployment and configuration on the covered Linux servers
+Console access and first-line review of MDR alerts
+Read-only console access for you, on request
+MDR coverage summary in the High Security Add-on's monthly security report
Around the clock
The 24/7 SOC
+24/7 threat hunting
+Real-time threat interception
+Incident containment
Proactive, then each layer on top

What each layer adds, side by side.

Service
Base Proactive Managed Services
Add-on + High Security Add-on MDR Add-on included
Add-ons + Both add-ons
Proactive Managed Services
Server, application and network monitoring
Included
Included
Included
Included
Every alert reviewed by an engineer
Included
Included
Included
Included
Patching inside your maintenance windows
Included
Included
Included
Included
Daily file-level and database backups
Included
Included
Included
Included
Quarterly engineer health checks
Included
Included
Included
Included
Managed server configurations
Included
Included
Included
Included
Business technology reviews and regular IT meetings
Included
Included
Included
Included
Monthly report
Included
Included
Included
Included
High Security Add-on
Host-based Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) coverage
Not included
Included
Not included
Included
Common Vulnerabilities and Exposures (CVE) scanning every six hours
Not included
Included
Not included
Included
Security penetration testing
Not included
Included
Not included
Included
Firewall audits
Not included
Included
Not included
Included
Access and authorization auditing
Not included
Included
Not included
Included
Security section in your monthly report
Not included
Included
Not included
Included
Managed Detection and Response (MDR) Add-on: a Security Operations Center (SOC) hunting threats around the clock
Not included
Included
Not included
Included
Optional host-based antivirus scanning
Not included
Included
Not included
Included
24/7 NOC Add-on
An engineer on call around the clock for critical issues
Not included
Not included
Included
Included
One-hour initial response commitment
Not included
Not included
Included
Included
Automatic dispatch when a critical alert fires on servers you list
Not included
Not included
Included
Included
24/7 NOC phone line and portal request form
Not included
Not included
Included
Included
Emergency work at night, on weekends and on holidays, from your Reactive Flextime hours
Not included
Not included
Included
Included
Other engagements

Explore our other engagements.

There are a few different ways to work with us. Here are the other engagements you can explore.

The Crafty Penguins Way

How We Become Part of
Your Team

We don't just hand over a monitoring dashboard and disappear. Here's how we build a lasting partnership.

Step 01

Discovery Call

We learn your environment, pain points, and goals. No scripts, no sales pressure, just an honest conversation about what you need.

Step 02

Onboarding

A structured, practical onboarding process. We set up the services you chose, deploy monitoring where they include it, and tune alert thresholds with you through the first month.

Step 03

Your Services Begin

Whichever services you chose go live, delivered by engineers who already know your systems. From day one, the work keeps your infrastructure healthy and improving.

Step 04

Long-Term Partnership

We become an extension of your team. Strategic input, roadmap planning, and continuous improvement, not just keeping the lights on.

Start the conversation

Talk to us about the MDR add-on.

Let's discuss how we can help support, grow, and optimize your Linux infrastructure, done right the first time.