WatchGuard Technologies has announced an enhancement to its Managed Detection and Response (MDR) offerings with the introduction of WatchGuard Open MDR. This service now extends its 24/7 detection and response capabilities to incorporate third-party tools, alongside existing WatchGuard technologies.
This move allows Managed Service Providers (MSPs) to deliver comprehensive managed security services without requiring disruptive platform changes, catering to varied customer environments.
WatchGuard Open MDR distinguishes itself by providing enterprise-level protection optimized for mixed customer settings. Unlike many security vendors that increase tool numbers and noise, leading to inefficiencies, Open MDR enhances its service using a Security Operations Center (SOC) that emphasizes critical alerts and swift actions.
Integrating Third-Party Tools into Security Operations
Open MDR integrates WatchGuard technologies with third-party environments into a unified operational viewOpen MDR integrates WatchGuard technologies with third-party environments into a unified operational view. For MSPs, this means streamlined onboarding, reduced friction during renewals, and consistent service delivery across various customer situations without the need for forced migrations.
The service offers three primary benefits to MSPs and their clients: it reduces unnecessary alerts and enhances control, employs proprietary AI/ML to minimize noise and validate threats for response actions within six minutes, and empowers smaller partners to compete on an enterprise scale without the overhead of SOC development or mandatory platform modifications.
Unified Security and Expert Monitoring
With WatchGuard Open MDR, MSPs and their clients benefit from unified visibility spanning endpoints, identity, network, cloud, and productivity tools. This standardizes security delivery and includes 24/7 expert monitoring through WatchGuard’s SOC, without the need for an internally built or staffed SOC.
The rapid, coordinated response capabilities of the service help in isolating threats before they can disrupt operations, all while minimizing onboarding challenges and safeguarding long-term client relationships. The outcome is enterprise-grade MDR effectiveness without the associated complexities.
Expert Testimonials
WatchGuard Open MDR is available globally through WatchGuard’s network of MSP partners"Open MDR represents the culmination of our MDR vision—to provide a complete, single MDR solution," stated Andrew Young, chief product officer at WatchGuard. "It allows partners to deliver consistent, high-quality managed security without forcing rip-and-replace decisions or operational complexity."
Additionally, Don Lawson, Technical Solutions Advisor at Sonit Systems, shared, "WatchGuard Open MDR enables us to deliver enterprise-grade protection with clarity and confidence, especially for our smaller and mid-size customers. It reduces alert fatigue, simplifies operations, and gives our customers peace of mind—backed by a WatchGuard team that supports us well beyond deployment."
Global Availability and Support
WatchGuard Open MDR is available globally through WatchGuard’s network of MSP partners. The service is backed by dedicated Technical Account Managers (TAMs) who provide escalation, root-cause analysis, and continued security guidance. Key features include cross-environment coverage with supported tools like Microsoft Defender, CrowdStrike Falcon, Okta Workforce Identity, Microsoft 365, AWS, Google, and third-party firewalls without mandating tool migration.
This expansion follows the introduction of Total MDR and the 2025 acquisition of ActZero, showcasing WatchGuard’s commitment to developing open, platform-based security services as part of its long-term vision.
WatchGuard Technologies, a global entity in unified cybersecurity for Managed Service Providers (MSPs), announced an expansion of its Managed Detection and Response (MDR) services with WatchGuard Open MDR.
This addition builds on WatchGuard’s MDR service by extending 24/7 detection and response to third-party tools alongside WatchGuard technologies, enabling MSPs to deliver full-stack managed security services across diverse customer environments without forcing disruptive platform changes.
Most security vendors promise better outcomes. In practice, they deliver more tools, more noise, and more time wasted chasing the wrong signals. Open MDR takes a different approach: enterprise-grade protection built for real-world, mixed customer environments, powered by a SOC designed to cut through distractions, surface what matters, and move fast when it counts.
Enterprise-grade MDR without forced migrations
Open MDR brings together native WatchGuard integrations and third-party environments into a single operational view. For MSPs, that means faster onboarding, less friction during renewals, and the ability to standardize service delivery across diverse customer environments without forced migrations.
Open MDR delivers three key advantages to MSPs and customers:
- Less noise. More control. Open MDR surfaces what matters and moves fast when it counts.
- AI built for real response: Proprietary AI/ML reduces noise, validates threats, and initiates response actions in under six minutes, delivering fewer than one false positive per month.
- Enterprise power for every MSP. Open MDR helps smaller partners compete at enterprise scale – without the overhead of building a SOC or forcing platform changes.
With Open MDR, WatchGuard MSPs and their clients gain:
- Unified visibility across endpoints, identity, network, cloud, and productivity tools to standardize security delivery
- 24/7 expert monitoring and validation through WatchGuard’s SOC— without building or staffing a SOC internally
- Rapid, coordinated response that isolates threats before they spread and disrupt operations
- Freedom from forced migrations, reducing onboarding friction and protecting long-term customer relationships
The result: enterprise-grade MDR outcomes without enterprise-grade complexity.
Auhtority comment
“Open MDR represents the culmination of our MDR vision- to provide a complete, single MDR solution,” said Andrew Young, chief product officer at WatchGuard. “It allows partners to deliver consistent, high-quality managed security without forcing rip-and-replace decisions or operational complexity.”
Turning threat signals into decisive action
Many organizations have security tools but not the resources to run them like a real security operation. Open MDR changes that equation. WatchGuard’s SOC monitors environments 24/7, validates threats, and responds in minutes – containing incidents, isolating devices, and stopping attacks before they escalate.
Proactive AI-powered threat hunting helps uncover hidden risks earlier, while clear reporting replaces guesswork with confidence.
Built for MSPs, designed for scaled delivery
WatchGuard Open MDR is purpose-built for MSPs delivering security at scale. Partners retain ownership of the customer relationship while WatchGuard operates behind the scenes as the SOC, supported by dedicated Technical Account Managers (TAMs) for escalation, root-cause analysis, and ongoing security guidance.
Key capabilities include cross-environment coverage across WatchGuard Firebox, AuthPoint, and EPDR, plus supported tools including Microsoft Defender, CrowdStrike Falcon, Okta Workforce Identity, Microsoft 365, AWS, Google, and third-party firewalls—without forcing tool migration.
Customer feedback
“WatchGuard Open MDR enables us to deliver enterprise-grade protection with clarity and confidence, especially for our smaller and mid-size customers,” said Don Lawson, Technical Solutions Advisor at Sonit Systems.
“It reduces alert fatigue, simplifies operations, and gives our customers peace of mind—backed by a WatchGuard team that supports us well beyond deployment.”
Long-term vision
Open MDR builds on WatchGuard’s expanding MDR portfolio, following the availability of Total MDR and the acquisition of ActZero in 2025, reinforcing the company’s long-term vision for open, platform-based security services.
WatchGuard Open MDR is available globally through WatchGuard’s network of MSP partners.
