MxDR and Third-party integrations: Protect not only your Microsoft environments

When you think of Wortell's Managed eXtended Detection and Response (MxDR), you probably think of Microsoft. Understandable, because our roots lie deep in the Microsoft ecosystem. Yet our services go much further than that. In this blog, we talk to Dennis de Hoog, Business Manager Secure at Wortell, about a common misconception: that MxDR is just a Microsoft solution. Dennis explains how Wortell protects the entire IT environment with its MxDR approach, even outside of Microsoft. Think of integrations with third-party systems, smart detection on non-Microsoft platforms and the power of one integrated security model.

The common misconception: Microsoft-only

In conversations with IT managers and CISOs, I regularly hear 'Wortell's Managed eXtended Detection and Response (MxDR) is primarily a Microsoft solution, isn't it?"
Certainly, it is true that our strategy, expertise and systems rely heavily on the Microsoft ecosystem. Protecting Microsoft 365 workplaces, Azure infrastructure, and sensitive data in these environments is and will remain a top priority. But of course, our 24/7 Cyber Defense Center doesn't stop there.

After all, digital threats are not limited to one platform. Increasingly, incidents occur outside the well-known domain of the Microsoft cloud. That is why our starting point is clear: Cover the entire enterprise , or 24/7 protection in all parts of your IT infrastructure.

Microsoft-first, but not Microsoft-only

Our MxDR service is based on Microsoft Sentinel, Defender XDR and Purview. This provides us with a powerful foundation of monitoring, detection, correlation and automated response. But we also use that power to integrate other sources and systems.

Think of network security from Fortinet, Cisco or Palo Alto, for example: we combine the intelligent detection logic of these technologies with our own correlation mechanisms and response capabilities. This creates one integrated picture of all security events in your organization, regardless of the source.

Why third-party integration is essential

The reality is that modern businesses use a wide range of technologies. Your employees work in Microsoft 365, but also in well-known systems such as Salesforce, SAP, Workday, ServiceNow or Topdesk. It is precisely in these business applications that we see a growing number of attacks and data breaches.

After all, attackers know that these applications are often deeply integrated into business processes, contain a lot of sensitive data and failure of critical processes has disastrous consequences for daily operations. These applications are often less strictly monitored and cyber criminals are increasingly gaining access to customer or HR data and/or manipulating financial processes. 

By linking these systems to our MxDR service, we identify deviant behaviour at an early stage and can intervene quickly, even before damage occurs.

Our approach to third-party connections 

To integrate third-party systems, we use the extensive library of data connectors and detection logic within Microsoft Sentinel. When necessary, we develop our own links to collect and analyze specific log data from applications. 

Benefits for IT managers and CISOs

Integrating third-party systems into our MxDR service first of all provides ample visibility over your entire infrastructure. In addition, correlation between Microsoft and non-Microsoft data shortens the time between attack and detection and thirdly, we leverage the detection intelligence of your current vendors and combine it with our expertise.

Microsoft-first and Third-Party-ready

Our strategy remains Microsoft-first because we believe in the power of the Microsoft ecosystem. But we do not close our eyes to the fact that valuable data and critical processes also exist outside that ecosystem. That is why we do not see the linking of third-party systems as an exception, but as a valuable addition. It strengthens the effectiveness of our MxDR service and gives you as an IT manager or CISO the assurance that you are truly protecting the entire company, 24 hours a day, 7 days a week.

Conclusion

Digital security does not stop at the border of your Microsoft environment. Attackers do not distinguish between cloud platforms, suppliers or applications. Through our MxDR - third-party connections, you are assured of a broad and integrated security model that protects your organization against threats, wherever they are.