What We Do
How we do it
Our Threat Response Unit (TRU) publishes security advisories, blogs, reports, industry publications and webinars based on its original research and the insights driven through proactive threat hunts.
View Threat Intelligence Resources →
Jan 19, 2023
Increased Activity in Google Ads Distributing Information Stealers
THE THREAT On January 18th, 2023, eSentire Threat Intelligence identified multiple reports, both externally and internally, containing information on an ongoing increase in Google advertisements…
Read More
View all Advisories →
About Us
eSentire is The Authority in Managed Detection and Response Services, protecting the critical data and applications of 1500+ organizations in 80+ countries from known and unknown cyber threats. Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business disrupting events.
Read about how we got here
Leadership Work at eSentire
Dec 13, 2022
eSentire Named First Managed Detection and Response Partner by Global Insurance Provider Coalition
Waterloo, ON – December 13, 2022 – eSentire, Inc., the Authority in Managed Detection and Response (MDR), today announced it has been named the first global MDR partner by Coalition, the world’s first Active Insurance provider designed to prevent digital risk before it strikes. Like Coalition, eSentire is committed to putting their customers’ businesses ahead of disruption by improving their…
Read More
e3 Ecosystem
We provide sophisticated cybersecurity solutions for Managed Security Service Providers (MSSPs), Managed Service Providers (MSPs), and Value-Added Resellers (VARs). Find out why you should partner with eSentire, the Authority in Managed Detection and Response, today.
Learn more
Apply to become an e3 ecosystem partner with eSentire, the Authority in Managed Detection and Response.
Login to the Partner Portal for resources and content for current partners.

Gartner® Market Guide for Digital Forensics and Incident Response (DFIR) Services

32021gartner web 448x348 v2

Gartner Market Guide for Digital Forensics and Incident Response (DFIR) Services

The increasing number and severity of cybersecurity incidents has prompted growing adoption of Digital Forensics and Incident Response (DFIR) services. The Gartner Market Guide for DFIR services can aid in identifying the most suitable cyber incident response provider for your organization.

Gartner describes DFIR services as “advisory services that help clients identify the extent of, and deal with, events and requirements such as security and IT incident investigations, forensic response and triage, and security breaches. They are typically offered by firms on a retainer-based service model, but on-demand or emergency services are also available. A retainer-based service contract encompasses a wide variety of terms and conditions, and is meant to dovetail with the client organization’s documented incident response processes and procedures.”

Some key findings and recommendations of the Gartner Market Guide for Digital Forensics and Incident Response services include:

  • Most organizations are not prepared to respond to and manage cybersecurity incidents.
  • Commoditization makes it difficult for incident response buyers to understand how to select the best incident response provider for their needs and requirements.
  • An incident response retainer is not a replacement for establishing policies and procedures for handling cybersecurity incidents.
  • It is important to encourage staff across your organization to operate under the assumption that a data breach will occur.
  • You should draw on the expertise of your incident response provider to help develop and improve your cyber incident response preparedness.
  • If you have the budget, prepaying for an incident response retainer will ensure preferential response times, reduced rates, and access to services to support your requirements in case of an incident.
  • IR services are increasingly obtained via the buyer’s managed detection and response (MDR) provider or a managed security service provider (MSSP). These attached IR services are typically invoked by completing a separate statement of work.

Read the DFIR market guide to learn more about DFIR services and processes, the direction of the market and get a list of current incident response providers.

1. Market Guide for Digital Forensics and Incident Response Services By Prateek Bhajanka, Wam Voster, 21 September 2021
2. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.
3. GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally, and is used herein with permission. All rights reserved.

Get The Report

Other Recommended Resources
Threat Briefing: Potential Cyber Threats Stemming from Russia's Invasion of Ukraine
eSentire Incident Response
Become HIPAA Compliant Without Losing Focus from Cybersecurity