At Trend Micro we’ve been protecting our customers from cyber-threats for over three decades, and we’ve become pretty good at it. But we also realize that no IT environment is completely homogeneous. Whether by accident, acquisition or design, technology leaders will usually have to manage a mixed environment of multiple legacy and next-gen products, from various different vendors. In the security space, this can create siloes and coverage gaps if these individual solutions don’t properly interoperate.
That’s why at Trend Micro we always partner where possible—to maximize the value that customers can extract from our solutions and ensure their security posture is as good as it can be. We’re particularly excited about our open integrations with Trend Micro XDR, via partnerships with the likes of Fortinet.
What is XDR?
Extended detection and response (XDR) is the number one security and risk trend for 2020, according to Gartner. Why? Because detecting and responding to threats is becoming increasingly challenging for organizations, as attack volumes and sophistication continue to grow, while the corporate attack surface expands. Stretched security teams are overwhelmed by alerts from point products and find it difficult to prioritize a response. According to an ESG report, 36% of organizations claim security teams spend most of their time on emergency issues rather than strategy or process improvements.
Trend Micro XDR is therefore all about taking threat detection and response beyond the endpoint— by correlating data across email, endpoints, servers, clouds, networks and our own threat intelligence to produce fewer, high-fidelity alerts.
Adding value through partnerships
Alongside XDR, we know that customers also want to run SIEM and SOAR platforms, for example. These can provide a valuable job to Security Operations Center (SOC) staff in pulling threat data from multiple sources, and, in the latter’s case, correlating and automating a response.
That’s why our XDR strategy is to integrate with these solutions from chosen partners via a simple API. Trend Micro XDR creates prioritized alerts based on its native telemetry and sends these to customers’ SIEM/SOAR platforms, where they can integrate data from other sources if necessary to optimize a threat response.
One such partner is Fortinet, whose FortiSOAR offering is designed to maximize the productivity of SOC teams, reduce human error through automation and enhance customers’ ability to detect and respond to threats. The open approach of both companies made it easy for our engineers to create a connector between the products, which will shortly be made accessible globally.
Let’s never forget that our true competitor out there is not other security vendors, but the cyber-criminals and state actors who wish harm on our customers. By building out a kind of digital connective tissue through out open partnerships and integrations, Trend Micro and partners like Fortinet are sharing a commitment to putting customers first. By enabling them to eliminate siloes and minimize cyber risk, we all win.