Cybersecurity companies Trustwave and Trellix say they want to help end users simplify their systems in the face of a complicated threat environment. Credit: iStock Managed detection and response (MDR) company Trustwave said Wednesday that it will be teaming up with extended detection and response (XDR) company Trellix. The partnership calls for Trustwave to support Trellix endpoint security and to sell MDR with Trellix.MDR, as offered by Trustwave, essentially works as a remote, third-party security operations center. The idea is, given the growing complexity of modern security threat landscapes, to let end user companies simply offload key parts of their security setups. That’s particularly important in the case of mid-size companies where the in-house security team might not be particularly large.Gartner’s 2021 Market Guide for XDR describes the technology as a way to integrate a wide array of different security tools — covering endpoints, network, email and so on — into a holistic picture. Rather than using a traditional SIEM system, which is essentially just a log of all security related events, companies can use XDR to not only track events, but to quickly correlate them and separate false alarms from actual threats.The idea behind the partnership is to build on the benefits of both solutions, according to IDC research vice president Craig Robinson. “The sort of things an XDR platform gives you in terms of being able to detect and respond to attacks is generally not going to be in an organization’s top five competencies,” he said. “MDR alleviates that, at a relatively good price point.”The reasons for those benefits stem from the aforementioned complexity of the modern threat landscape. Between large numbers of false positives generated by individual security systems that only cover one part of an organization and the difficulty of correlating them to one another, the ability to recognize threats and categorize them — whether zero-days or bad configurations, and so on — become critical to reducing diagnosis and response tiem. There are organizational synergies to be had here as well, Robinson added. As the product of a merger between McAfee Enterprise and FireEye that happened in January 2022, Trellix brings a new customer base to Trustwave, whose MDR product had previously been mostly used by companies with different underlying security vendors in place.“It makes sense for [Trustwave] to be able to say that someone doesn’t have to rip-and-replace in order to use Trustwave,” he said. “By adding Trellix as an offering, that picks up the FireEye and McAfee install base.”(This story has been updated with additional information about the Trustwave-Trellix paertnership.) Related content news Top cybersecurity product news of the week New product and service announcements from Coro, Descope, Genetec, Varonis, Cloudbrink, Databarracks, and Security Journey By CSO staff Dec 07, 2023 22 mins Generative AI Generative AI Machine Learning news analysis Attackers breach US government agencies through ColdFusion flaw Both incidents targeted outdated and unpatched ColdFusion servers and exploited a known vulnerability. By Lucian Constantin Dec 06, 2023 5 mins Advanced Persistent Threats Cyberattacks Vulnerabilities news BSIMM 14 finds rapid growth in automated security technology Embrace of a "shift everywhere" philosophy is driving a demand for automated, event-driven software security testing. By John P. Mello Jr. Dec 06, 2023 4 mins Application Security Network Security news Almost 50% of organizations plan to reduce cybersecurity headcounts: Survey While organizations are realizing the need for knowledgeable teams to address unknown threats, they are also looking to reduce their security headcount and infrastructure spending. By Gagandeep Kaur Dec 06, 2023 4 mins IT Jobs Security Practices Podcasts Videos Resources Events SUBSCRIBE TO OUR NEWSLETTER From our editors straight to your inbox Get started by entering your email address below. Please enter a valid email address Subscribe