Managed Extended Detection and Response (MXDR)

Improve your security landscape with our MXDR service

With our MXDR service, our security experts monitor, investigate and respond to security incidents 24 hours a day, every day of the year. Our SOC team provides ongoing support to help your organisation protect its assets, data and business systems. The team works closely with the customer’s cyber security employees to defend against cyber attacks.

We monitor your cloud services and on-premises networks

baseVISION monitors your Microsoft-based cloud security services. Our experts carefully monitor cloud services such as:

  • Microsoft Defender for Endpoint
  • Microsoft Defender for Identity
  • Microsoft Defender for Office 365
  • Microsoft Defender for Cloud
  • Microsoft Defender for IOT
  • Microsoft Sentinel
  • Microsoft Cloud Application Security
  • Microsoft Entra ID
  • Microsoft Entra ID Protection
  • Microsoft DNS

Microsoft Sentinel, together with our baseVISION detection repository, inherently accommodates numerous third-party log sources as well.

Benefits of the MXDR service

Our service frees up your security specialists’ time while our security analysts monitor, analyse and respond to security incidents. You will also benefit from the following: 

Qualified and experienced security analysts

Extending your Team, not just a managed Service

Security incidents are monitored, analyzed and responded 24/7/365

Threat Intel Based Incident Enrichment

The customer’s security specialist is supported through information and recommendations

Predictable costs based on transparent service model without limiting detection coverage

Incident Automation Engine

Monthly security reports that prioritize and focus on critical security incidents

Process centric, fully modernized, reduced frictional losses (SOC as a single pane of glass)

Incident Automation Engine

baseVISION Standard Use Case Repository extending Microsoft Detections

baseVISION Standard Use Case Repository extending Microsoft Detections

Compliance and Trust

baseVISION supports you with the design and enablement of Windows 365 based on Microsoft best practices.

  • Full audit trail in your tenant about all activities of our Analysts
  • Microsoft verified Managed XDR Service
  • ISO27001 certified
  • Access control defined in your infrastructure based on Zero Trust principles
  • Data remains in your tenant and under your control
  • Commitment to Switzerland

Save costs by fully and correctly using Microsoft 365 E5

Within the realm of cyber security, companies are often deciding between ‘best of breed’ and ‘best of suite’ approaches. In the past years, Microsoft Security tools have evolved to offer ‘best of breed’ capabilities while still being recognized as a ‘best of suite’. As a dedicated Microsoft Partner, we assist in maximizing the use of Microsoft 365 and reducing costs by transitioning from alternative solutions to Microsoft or by integrating third-party services to enhance defense throughout the entire attack kill chain.

Security is our passion

Focus on your strength, we take care of your security.

Collect

security data across your enterprise

Detect

threats with vast threat intelligence

Investigate

critical incidents guided by AI

Respond

rapidly and automate protection

This approach ensures that Windows 365 fits seamlessly into your existing endpoint management, identity, and security strategy.

baseVISION’s cloud-native Security Operations Center (SOC) as a service uses the latest Microsoft technologies for data collection up to incident response or threat hunting. As one of our Gold Partners, baseVISION is a long-standing and reliable partner with proven expertise in the areas of Secure & Modern Workplace.
Primo Amrein
Primo AmreinCloud Lead at Microsoft

Comprehensive components of our MXDR Service

Discover the key elements of our MXDR service, designed to provide around-the-clock protection, proactive threat detection and advanced incident response to safeguard your organisation’s critical assets.

Infrastructure and Detection Scope

  • Cloud-native SIEM + SOAR (Microsoft Sentinel & Swiss Datacenter)
  • baseVISION developed Microsoft Sentinel Configuration Backup
  • baseVISION Health Checks to detect infrastructure problems
  • Microsoft Security tool detections
  • baseVISION Detection Repository with over 150 additional detections
  • Integration 3rd party solutions (e.g. firewalls or proxies)

Incident Monitoring, Analysis and Response

  • 24/7 availability
  • Analyse and Investigate Security Incidents
  • Threat Intel based Incident Enrichment
  • Alert/inform customer
  • Automated response by services or customer pre-approval

Compliance, Data Protection & Security

  • Swiss based SOC office
  • All log data remains in the customer tenant
  • ISO 27001 certified
  • Swiss FADP and European GDPR compliant

Management and others

  • Monthly Technical and Management Reporting (Activities, Detections and Emerging threats)
  • Support customer with professional expertise (T&M)

Each engagement follows a structured approach combining workshops, design, automation, deployment, validation, and documentation to ensure the landing zone is not only deployed, but usable and extensible from day one.

With malicious attacks on the rise, we understand security is front and center for our customers. That is why I am excited to congratulate baseVISION on achieving Microsoft Verified: Managed Extended Detection and Response solution status. Their solution closely integrates with Microsoft 365 Defender and Microsoft Sentinel and has been verified by Microsoft Security engineering to ensure that it provides comprehensive service coverage across the Microsoft Security portfolio.
Rob LeffertsCVP, Modern Protection and SOC, Microsoft

Zögern Sie nicht, uns zu kontaktieren. Wir freuen uns, von dir zu hören.

Sie haben Fragen zu Security, Cloud oder Modern Workplaces? Unser Expertenteam unterstützt Sie gerne persönlich und unverbindlich bei den nächsten Schritten.

Wir freuen uns auf Ihre Kontaktaufnahme und den Austausch. Jederzeit.

Thomas Reichmuth
Head of SOC

Jetzt kontaktieren

Other Services

Endpoint Security Hardening

Button