Kaspersky announces new comprehensive XDR solution

Kaspersky is announcing a new comprehensive security Extended Detection and Response (XDR) solution combining multiple security options in a unified platform. Including log collection and correlation, case and asset management, response playbooks and investigation capabilities, XDR helps companies protect business assets and processes against advanced or complex threats, APTs and targeted attacks. Early adopters can now evaluate Kaspersky XDR in a test environment and share feedback before implementing it in real infrastructure.  

The first Kaspersky XDR offering evolved from Kaspersky Anti-Targeted Attack platform as Native XDR in 2016. In 2023, the company is now making the next step on the way to better detection and response capabilities with the introduction of Open XDR. The new product is available to early adopters who can assess its functionality and compatibility with the existing infrastructure in a test environment.  

Easily managed from the Open Single Management Platform, Kaspersky XDR offers comprehensive on-premise security, ensuring customers’ sensitive data remains within their own infrastructure while meeting data sovereignty requirements. This is a robust cybersecurity solution that provides an all-encompassing view of company’s security and helps businesses stay ahead of evolving cyberthreats by correlating and analyzing data from various sources across an organization’s IT infrastructure, providing a holistic and contextual view of potential threats.  

Kaspersky XDR can integrate with other cybersecurity solutions from Kaspersky ecosystem as well as with third party products, including Endpoint Protection Platforms and Threat Intelligence services. This integration can help organizations seamlessly streamline their security operations and reduce the complexity of managing multiple security solutions. 

Kaspersky XDR provides comprehensive threat detection and response capabilities by leveraging a wide range of data sources, including endpoint, network, and various application and operation systems logs. The solution uses advanced analytics and can automatically cross-correlate and analyze data from multiple sources. It can also initiate automated responses to contain and remediate potential cyber risks. For the most experienced and demanding users, threat hunting capabilities are available to proactively detect advanced threats. 

The investigation graph is a tool that helps InfoSec professionals gather attack artefacts in a clear and coherent picture that is easy to analyze and respond. Its purpose is to simplify the process of starting to investigate alerts and incidents, bringing together events from different systems on the same canvas, displaying their connections, and giving tools for searching, enriching and responding. 

Kaspersky XDR also allows the creation of efficient playbooks to customize workflows with flexible triggers and tailored response scenarios. This feature helps companies to speed up typical operations, build a process for teamwork and minimize errors in frequently thus providing InfoSec professionals with more time for the investigation of repeated complex incidents. 

Kaspersky XDR is designed to be easily deployed and managed, even in complex enterprise environments with focus on data sovereignty. On universal platforms, Kaspersky can land XDR to any environment or region, guaranteeing compliance with frameworks such as General Data Protection Regulation (GDPR), Payment Card Industry Data Security Standard (PCI DSS) and Health Insurance Portability and Accountability Act (HIPAA). 

Anton Ivanov, Chief Technology Officer at Kaspersky, said, “Our Extended Detection and Response is a breakthrough major milestone in our strategy. It brings a new quality of protection and ease-of-use for our corporate customers by consolidation of complex cross-product scenarios in a single unified console. XDR is based on our new Open Single Management Platform enabling our customers to enjoy tailored security that can integrate into Kaspersky’s products, and a wide array of third-party solutions. Another benefit of our Open Single Management Platform is that it enables both cloud and on-premises installations, which makes Kaspersky XDR one of the few deployment-agnostic solutions of its kind in the market. Our XDR will help companies to increase the overall efficiency of their cybersecurity while addressing such global trends, as increasing attack complexity, skills shortages, and alert fatigue.” 

The commercial release of Kaspersky XDR takes place in H1 2024 worldwide. It will also be available as a part of a new Kaspersky product line.