MDR · ESSENTIAL
zcrMDR Essential
Detection and reporting
- Alert triage and automated monthly report
- FWTicket customer portal
- No SOCRadar or CVE-check portal scope
PRODUCT · RESPONSE
zcrMDR
Managed Detection & Response
A managed detection and response service that turns zcr platform signals into actionable alerts and clear reporting.
Detection, alerting, and reporting by zcr.
THE BARRIER
Security signals need a team to act on them
Teams often have the data but lack time to continuously review alerts, prioritise activity, and explain security events to stakeholders.
MDR Outcomes
MDR Outcomes
01
Earlier Alerts
Surface suspicious activity for timely review.
02
Clear Reporting
Deliver automated monthly security reporting.
03
Shared Visibility
Track service activity through the FWTicket customer portal.
Choose the zcrMDR edition
Two service levels separate alert-and-report operations from active response and incident-response support.
MDR · COMPLETE +IR
zcrMDR Complete
Essential plus active response
- ✓All Essential alert and reporting services
- ✓Active response and incident-response support
- Response commitments aligned to selected SLA
Set the response window
The same zcrMDR service can be contracted for 8×5, 16×5, or 24×7 coverage.
SERVICE COVERAGE
8×5 SLA
16×5 SLA
24×7 SLA
zcrMDR: detection to documented action
The operating loop that turns endpoint signals into triage, response, and a customer-ready record.
zcrMDR OPERATING LOOP
1
Detect
Endpoint signals become actionable alerts.
→2
Triage
MDR validates severity, scope, and next action.
→3
Respond
Complete coordinates active response and IR support.
→4
Report
FWTicket and monthly reports close the operating loop.
CORE CAPABILITIES
zcrMDR Essential
- zcr-powered detection and alerting
- Automated monthly reporting
- FWTicket customer portal
- 90-day event retention in zcrSIEM
- 8×5, 16×5, or 24×7 SLA coverage
Best For
Organisations starting managed detectionIT and security teamsMSPs and MSSPsCustomers needing clear monthly reporting
zcr Service Foundation
zcrSIEMzcrLogzcrSOARFWTicket customer portal
zcrMDR Coverage
Recommended
8×5 SLA
Business-hours managed detection, alerting, and monthly reporting.
16×5 SLA
Extended weekday coverage for organisations with longer operating hours.
24×7 SLA
Round-the-clock coverage aligned to the agreed service scope.
Detection with a clear operating record — zcrMDR helps teams retain event context, review alerts, and communicate service activity through consistent reporting.
zcrMDR FAQ
- What is included in zcrMDR Essential?It includes zcr-powered detection and alerting, automated monthly reporting, the FWTicket customer portal, and 90-day zcrSIEM event retention.
- Which service hours are available?Choose 8×5, 16×5, or 24×7 coverage in the applicable SLA and statement of work.
TAKE THE NEXT STEP
Start with managed detection
Talk to the zcr team about the coverage and SLA that fit your operating hours.
zcrSOAR
Security Orchestration, Automation & Response
Live demo
Response
Continue with zcrSOC
SOC-as-a-Service
zcrMDR · Cyber Defense Made Visible
zcrzcrMDR · Response