ConnectWise MDR
MSP-native managed detection and response powered by 24/7 SOC and deep ecosystem integrations
- Service
- MDR
- Response
- Contain threats
Best for
MSPs already using ConnectWise RMM/PSAUsually replaces
Separate security monitoring outside your MSP toolsCheck first
Heavily tied to the ConnectWise ecosystem — MSPs not using ConnectWise PSA/RMM lose significant integration valueCoverage
Covers
- 24/7/365 SOC staffed by certified cybersecurity analysts with MSP-specific threat intelligence
- AI-powered behavioral monitoring for malware detection and root cause analysis
- Automatic threat isolation, remediation, and system rollback
Pros and limits
Works well
- Unmatched ecosystem integration — MDR plugs directly into ConnectWise PSA, RMM, ScreenConnect, and BCDR for a unified MSP workflow
- Purpose-built for the MSP channel with multi-tenant management and per-endpoint pricing accessible to SMBs
- Broad EDR vendor support across six major platforms gives MSPs flexibility to keep their existing endpoint stack
Watch out for
- Reporting and analytics capabilities are less mature than dedicated MDR-first providers like Huntress or Arctic Wolf
- Not suited for large enterprises or organizations with mature in-house SOC teams seeking deep customization
- Limited publicly available pricing information makes cost comparisons difficult for prospective buyers
Pricing
- Billing model
- Per-endpoint, Tiered, Custom
- Minimum contract
- 12 months
- Trial
- Available
- Onboarding
- 7-14 days
Pricing is not publicly listed. Available exclusively through the ConnectWise partner channel. Per-endpoint pricing with volume discounts; bundled options available alongside ConnectWise RMM, PSA, and SIEM.
Connects with
- SIEM
- ConnectWise SIEM (powered by Asio, formerly Perch SIEM)
- EDR / Endpoint
- Bitdefender GravityZone, Microsoft Defender for Business, SentinelOne, Sophos, ESET, Webroot
- Cloud
- AWS, Microsoft Azure, Microsoft 365
- Other
- ConnectWise PSA (Manage), ConnectWise RMM (Automate), ConnectWise ScreenConnect, ConnectWise BCDR, Cisco Meraki, Cisco Umbrella, Duo Security, Acronis, Proofpoint SAT, Syslog Router
Questions
How does ConnectWise MDR relate to Perch Security?
ConnectWise acquired Perch Security in November 2020 to bring an MSP-designed SIEM and SOC capability into its platform. Perch's multi-tenant SIEM technology and 24/7 SOC operations were integrated into the ConnectWise Asio platform, becoming ConnectWise SIEM and ConnectWise MDR. The Perch brand has been fully retired.
Can businesses purchase ConnectWise MDR directly without an MSP?
No. ConnectWise MDR is sold exclusively through the MSP channel. Businesses that want ConnectWise MDR protection need to work with a managed service provider that resells ConnectWise cybersecurity services. ConnectWise can help connect businesses with a partner in their region.
What EDR platforms does ConnectWise MDR support?
ConnectWise MDR supports six major EDR platforms — Bitdefender GravityZone, Microsoft Defender for Business, SentinelOne, Sophos, ESET, and Webroot. This allows MSPs to layer 24/7 SOC monitoring and active response on top of their existing endpoint protection stack without ripping and replacing.