WatchGuard MDR is a fully managed 24/7 service that does not just alert you to threats...we act on them. Cutting through the noise, our team helps you focus on what
matters, and respond fast to threats across your laptops, servers, user identities,
network, and cloud.
WatchGuard MDR delivers precise, powerful protection without adding to your workload. Get full-stack coverage across WatchGuard endpoint, firewall, identity, and network products...plus key third party cloud services...all managed through one unified platform. Our 24/7 SOC combines AI-driven automation with real human expertise, cutting through the noise to stop threats faster. No endless alerts, no wasted time...just real security outcomes that fit seamlessly into your business.
WatchGuard Core MDR delivers core 24/7 SOC services for WatchGuard Endpoint and Microsoft 365 events, while WatchGuard Core MDR for Microsoft delivers core services with Microsoft Defender is the primary Endpoint integration.
WatchGuard Total MDR delivers centralized detection and response across your entire WatchGuard environment, including EDR/EPDR/AEPDR, Firebox firewalls, AuthPoint identity security, and Network Detection and Response (NDR), all managed in a single platform. WatchGuard Total MDR also extends protection into third party cloud platforms like AWS CloudTrail, Microsoft 365, Microsoft Azure, and Google Workspace. And finally, WatchGuard Open MDR provides all the award winning services as Total MDR plus it integrations with 3rd party endpoints, firewalls and authentication systems.
Highlights
24/7 Monitoring and Response
Our global SOC is always on. Real people and
powerful automation work together to detect and
stop threats. You will have access to live support when
it matters most, with security operations based
across three locations for built in redundancy and
true around the clock coverage.
Smarter Detection with AI/ML
AI and machine learning scan thousands of signals in
real time, spotting patterns humans might miss and
learning how to stop new threats. The system learns
from every incident and gets smarter each day to
detect and respond faster.
Proactive Threat Hunting
Our analysts look for hidden threats that automated
tools can miss, so you are protected even when
attackers try to get clever.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
You buy this managed detection and response service per user, and each of the four options is priced on that same per-user basis. The options differ by coverage scope, not by tier level. Core MDR focuses on endpoint defense, while Core MDR for Microsoft focuses on Microsoft 365. Total MDR extends coverage across endpoint, identity, network, and cloud. Open MDR fits mixed environments that use third-party endpoint, identity, and firewall tools. You pick the option matching your environment, then scale the user count as your organization grows.
Top-of-mind questions for buyers
What counts as one user for billing across these MDR options?
You pay per user account covered by the service, not per device. Each of the four options bills on this same per-user basis. As your user base changes, you adjust the user count on your chosen option. Pick the option that matches your environment's coverage needs.
How do Core MDR and Core MDR for Microsoft differ in what they cover?
Core MDR focuses on endpoint defense using the WatchGuard endpoint agent. Core MDR for Microsoft focuses on Microsoft 365 protection. Both provide 24/7 monitoring and incident response. Threats moving through identity, cloud, or network may fall outside these two options. Choose based on where your risk sits.
When should I pick Total MDR or Open MDR instead of a Core option?
Total MDR covers the full WatchGuard stack across endpoint, identity, network, and cloud. Open MDR extends detection and response to third-party endpoint, identity, and firewall tools, so it fits mixed environments. Both bill per user like the Core options. Match the option to your existing tools.
www.watchguard.com
Helpful?
Vendor refund policy
For sales returns on WatchGuard MDR, please contact your WatchGuard Channel Partner. If you have an issue requiring troubleshooting, please feel free to open a support case via the WatchGuard Support Portal.
Request a private offer to receive a custom quote.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Online support is recommended for non-critical issues and lets you provide detailed updates on the status of your issue, as well as an option to upload troubleshooting documents to help resolve your case more quickly. Phone support is recommended for critical network failure situations, and for anyone who does not have access to the online support submittal page. Please have your WatchGuard serial number readily available when you call for support. +1 (877) 232-3531 OR support@watchguard.com.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
WatchGuard Firebox Cloud brings the protection of WatchGuard's leading Firebox UTM appliances to public cloud environments. Firebox Cloud enables organizations to extend their security perimeter to protect critical assets in AWS and can be deployed to protect a VPC from cyber-attack.
WatchGuard Firebox Cloud brings the protection of WatchGuard's leading Firebox UTM appliances to public cloud environments. Firebox Cloud enables organizations to extend their security perimeter to protect critical assets in AWS and can be deployed to protect a VPC from cyber-attack.
WatchGuard Firebox Cloud brings the protection of WatchGuard's leading Firebox UTM appliances to public cloud environments. Firebox Cloud enables organizations to extend their security perimeter to protect critical assets in AWS and can be deployed to protect a VPC from cyber-attack.
WatchGuard FireCloud Internet Access delivers Cloud-native security for the hybrid workforce. As a core component of our Unified Security Platform architecture, it embodies our security, performance, and simplicity tenets. FireCloud provides robust protection against web-based threats, simplifies management, and optimizes connectivity for users everywhere, ensuring secure and productive access to their needed resources.
WatchGuard Endpoint Security Cloud-native solutions protect businesses of any kind from present and future cyber-attacks. They combine next-generation antivirus protection, endpoint detection and response (EDR), along with enhanced features for incident investigation and response. All this through a single Cloud-based management console and using a single lightweight agent.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.