Cyber risk and advisory programs that identify security gaps and build strategies to address them.
MDR that provides improved detection, 24/7 threat hunting, end-to-end coverage and most of all, complete Response.
Our team delivers the fastest response time in the industry. Threat suppression within just 4 hours of being engaged.
Visibility and response across your entire Microsoft security ecosystem.
XDR with Machine Learning that eliminates noise, enables real-time detection and response, and automatically blocks threats.
Be protected by the best from Day 1.
24/7 Threat Investigation and Response.
Expert threat hunting, original research, and proactive threat intelligence.
TRU is foundational to our MDR service. No add-ons or additional costs required.
Stop ransomware attacks before they disrupt your business.
Detect and respond to zero-day exploits.
Protect against third-party and supply chain risk.
Adopt a risk-based approach to cybersecurity.
Protect your most sensitive data.
Meet cybersecurity regulatory compliance mandates.
Eliminate misconfigurations and policy violations.
Prevent business disruption by outsourcing MDR.
Meet insurability requirements with MDR.
Defend brute force attacks, active intrusions and unauthorized scans.
Safeguard endpoints 24/7 by isolating and mediating threats to prevent lateral spread.
Enhance investigation and threat detection across multi-cloud or hybrid environments.
Remediate critical misconfigurations, security vulnerabilities and policy violations across cloud and containerized environments.
Detect malicious insider and identity-based behavior leveraging machine learning models.
Our Threat Response Unit (TRU) publishes security advisories, blogs, reports, industry publications and webinars based on its original research and the insights driven through proactive threat hunts.
eSentire is The Authority in Managed Detection and Response Services, protecting the critical data and applications of 2000+ organizations in 80+ countries from known and unknown cyber threats. Founded in 2001, the company's mission is to hunt, investigate and stop cyber threats before they become business disrupting events.
We provide sophisticated cybersecurity solutions for Managed Security Service Providers (MSSPs), Managed Service Providers (MSPs), and Value-Added Resellers (VARs). Find out why you should partner with eSentire, the Authority in Managed Detection and Response, today.
We believe a multi-signal approach is paramount to protecting your complete attack surface. See why eSentire MDR means multi-signal telemetry and complete response.
See how our 24/7 SOC Cyber Analysts and Elite Threat Hunters stop even the most advanced cyberattacks before they disrupt your business.
Choose the right mix of Managed Detection and Response, Exposure Management, and Incident Response services to strengthen your cyber resilience.
Try our interactive tools including the MITRE ATT&CK Tool, the SOC Pricing Calculator, the Cybersecurity Maturity Assessment, and our MDR ROI Calculator.
Read the latest security advisories, blogs, reports, industry publications and webinars published by eSentire's Threat Response Unit (TRU).
See why 2000+ organizations count on eSentire to build resilience and prevent business disruption.
Disrupting the traditional MSP model: Embracing security as a fundamental component of modern-day managed IT services.
Align Communications (Align) is a premier global provider of technology infrastructure solutions. For over 32 years, leading firms worldwide have relied on Align to guide them through IT challenges, delivering complete, secure solutions for business change and growth. Align is headquartered in New York City and has a number of customers in both the investment management industry and in the broader financial services sector.
Financial service organizations face an unprecedented level of cybersecurity risk. The volume of online attacks is growing, in part because the barrier to entry for cybercriminals is falling. There are more tools available on the dark web, easily available for anyone who wants to launch a cyberattack campaign. With many of these tools now offering sophisticated user interfaces and configuration options, attackers don’t even need extensive cybersecurity knowledge.
These attacks disrupt financial services organizations’ business, creating network incidents that can render services unavailable. A successful breach can damage a financial services company’s reputation and cause financial losses.
The ever-changing cybersecurity landscape and the continued growth of the connected business world means that the demand for highly skilled cybersecurity professionals will not wane in the foreseeable future. Further investment in the process and technology necessary to leverage a Security Operations Center (SOC) can be very costly–and many small and medium-sized businesses (SMBs) are not prepared to make the investment.
Managed service providers (MSPs) can offer the tools organizations need while also supplying the skilled individuals. Many MSPs provide affordable security services for their customers through partnerships like that with Align and eSentire.
Align, an MSP partner of eSentire’s, deals in technology infrastructure solutions, managed IT services and data center deployments. It faced overwhelming demand for specialized cybersecurity services from concerned financial services customers that went beyond its ability to serve them with its own network operations center.
Unlike many other MSP’s, Align viewed the paradigm shift brought about by the cybersecurity phenomenon as an opportunity to evolve and invested heavily in creating a cybersecurity advisory services business unit. Align’s cybersecurity team is comprised of subject matter experts in three distinct disciplines: regulatory compliance, security and technology, allowing them to address the multi-factorial nature of cybersecurity with a multidisciplinary approach.
Align works with many alternative investment customers, including smaller hedge funds and family offices, says the company’s CISO Alex Bazay. “They have highly sensitive data, making them potential targets for hackers.”
Although these companies face the same cybersecurity threats as large investment banks, they don’t have the same capabilities. A large bank can afford an internal SOC, with a minimum of five people offering 24x7 cybersecurity monitoring. There’s no way a smaller investment operation can do that.
“They don’t have adequate staffing capacity to achieve that level of security,” he warns, adding that smaller investment companies focus on hiring revenue-generating roles rather than cybersecurity experts.
Align found itself in the position of de facto security manager for these companies. It needed to integrate a full suite of cybersecurity solutions, whether technological, operational or governance-related, into its service set, providing the same enterprise class network monitoring capabilities that larger financial firms enjoy. It needed to do this efficiently, with a streamlined service that would be easy to manage and wouldn’t take a huge internal investment.
At the forefront of Align’s cybersecurity technological offerings is a Managed Detection and Response (MDR) solution. Knowing this would be the crown jewel of its various cybersecurity solutions, Align carefully and methodically set out to find the best MDR solution for its customers and discerningly identified eSentire’s MDR for Network service as the premier MDR solution that provides customers with unprecendentded visibility into what’s happening within their infrastructure.
Align was particularly impressed with the monitoring agents that are deployed within its customers’ infrastructure to deliver data to eSentire. This data is applied to eSentire’s proprietary machine learning techniques, which analyze the data and spot incidents that need escalating. Align can set the alerting levels for each customer according to each customer’s unique needs. They then receive automatic notifications about network incidents with no human interaction.
As the principal component for eSentire’s MDR for Network is a zero latency IPS/IDS designed to provide full network visibility, eliminating attack blind-spots that traditional technologies miss. Operating on a philosophy that all network signals from security appliances are potentially malicious until analyzed, eSentire SOC analysts leverage always-on full packet capture (PCAP) with a proprietary attack pattern and behavioral analytics engine to ensure every threat is detected.
More than relying on simplistic signatures or IOCs with meaningless alerts, their network information and human-driven forensic analysis enables rapid detection and investigation of attacks. This enables alerting and response to not only known threats, but unknown threats and suspicious behavior. Once a threat is confirmed, SOC analysts can disrupt malicious traffic on a customer’s behalf and conduct post-attack forensics to aid in co-managed remediation to minimize the risk of business disruption.
Bazay already knew eSentire well. He had chosen it as a service provider at his previous employer, a capital management company where he worked as CISO and CTO before joining Align.
When the SEC issued its guidance in 2015, he had taken responsibility for security at the capital management company and looked for a service to help it achieve its goals, which included gaining more visibility into its network.
He chose eSentire from a list of several vendors, due in part to the highly integrated nature of its tools and services. It offered a 24x7 network monitoring service, which gave him visibility into his network, along with an incident detection service and a rapid response capability.
Thanks to eSentire’s SOC, he always felt taken care of. “You can always talk to somebody,” he explains. When dealing with network security incidents for a high-value target on a daily basis, it’s important to be protected.
His experience with eSentire was so good that he was all set to recommend the company when he arrived at Align and found eSentire was already a partner.
Bringing eSentire on board has enabled Align’s cybersecurity team to provide an unparalleled level of distinct cybersecurity services, including MDR, to its clients in a streamlined, automated way that keeps costs low and satisfaction high. The automated alerts, combined with eSentire’s integrated services, mean that Bazay and his team only need to make one call when asking a cybersecurity question or escalating a client issue.
eSentire’s SOC has adapted to fit Align’s unique needs. A customer success manager conducts quarterly meetings with the Align team to highlight any emerging problems and brainstorm enhancements for their working partnership.
“eSentire has learned what’s normal for our environment and developed playbooks for us, describing what to do in every situation,” Bazay says. “That has helped us to shrink the response time after they detect something on the network.”
eSentire’s reporting capabilities have also helped to satisfy the regulatory pressures facing Align’s customers. Align can now help its customers and augment its cybersecurity advisory services by producing periodic reports, with empirical evidence that serves well to satisfy auditors, closing a big gap in the regulatory compliance process. “That has answered a lot of questions, saving time and money,” he says.
Bazay sees more opportunities with eSentire and Align through automation and expansion to endpoint monitoring and management next. He also sees possibilities to integrate eSentire’s vulnerability management, Security Information and Event Management (SIEM) and active response offerings more closely into the Align service set.
The two companies are only just getting started.
We’re here to help! Submit your information and an eSentire representative will be in touch to help you build a more resilient security operation today.