Contact us

Cynet CyOps MDR licensing

How Cynet's 24x7 managed detection and response service works, what each service level adds and how it is licensed.

Contact us

In short: Cynet CyOps MDR is the 24x7 managed detection and response service run by Cynet's own analysts. It is included with the Elite and All-in-One packages and covers alert monitoring, investigation, threat hunting and response. ProActive mode adds pre-approved containment, and the Platinum Care add-on adds a dedicated senior analyst and monthly reviews.

What CyOps MDR is

CyOps is Cynet's in-house security operations team. It watches the alerts produced by the Cynet platform around the clock, investigates validated threats, hunts for threats that have not yet triggered an alert and tells you, or acts on your behalf, when something needs to be contained.

Because CyOps is Cynet's own team working inside the Cynet platform, analysts work from the same telemetry and response actions you see in the console. You can engage an analyst from the console when you suspect a breach, send them a suspicious file for a verdict, and receive remediation guidance on which endpoints, files, users and network traffic to deal with. Routine threats are handled by the platform's automation; CyOps handles what needs human judgement.

CyOps service levels

Cynet describes three levels of MDR engagement. Collaborative CyOps is included with Elite and All-in-One; ProActive is an opt-in mode for pre-approved actions on the same packages; Platinum Care is a paid add-on.

CollaborativeProActivePlatinum Care
24x7 monitoringHigh and critical alertsHigh and critical alertsAll severities
Investigation and threat huntingYesYesYes
On-demand file analysis by an analystYesYesYes
Containment such as host isolation or user disablementWith your approvalUnder pre-approved rulesUnder an agreed action plan
RemediationGuidancePlan plus pre-approved actionsPlan plus pre-approved actions
Dedicated senior analystNoNoYes
Review sessionsOn request or per incidentOn request or per incidentMonthly
Security posture validation and configuration reviewsNoNoYes
Exposed credential monitoringNoNoYes
Live training for your teamNoNoYes

ProActive is worth switching on for most organisations: agreeing in advance that CyOps can isolate an infected laptop or disable a compromised user account in the middle of the night is usually better than waiting for someone to read an email. We help you decide which actions to pre-approve.

How Cynet MDR is licensed

CyOps MDR is not a separate subscription for most customers. It is included in the Elite and All-in-One packages, so the endpoints you license on those packages are monitored by CyOps. It is not available on Protect.

OptionHow it is licensedAvailable on
Collaborative CyOps 24x7 MDRIncluded in the packageElite, All-in-One
ProActive CyOpsIncluded, opt-inElite, All-in-One
CyOps Platinum CareAdd-on, per endpointElite, All-in-One
Platinum monthly threat intelligence reportAdd-on on Elite, included in All-in-OneElite, All-in-One

Because MDR is bundled, the main decision is which package to buy, and whether Platinum Care is worth adding. Ask us for a quote and we will price both options side by side.

Who needs Platinum Care

Platinum Care is aimed at organisations that want a named relationship rather than a queue. A dedicated senior analyst who knows your environment, monthly review sessions, posture validation and configuration reviews make sense when:

  • you have no internal security specialist and want someone to interpret the reports for you
  • you work in a regulated sector or supply larger organisations that ask detailed questions about monitoring and incident handling
  • your cyber insurer or auditors expect regular, documented security reviews
  • you want all alert severities monitored, not just high and critical

If you have a capable IT team that is happy to review medium and low alerts itself, the included Collaborative and ProActive service is usually enough.

How Forever Systems helps

We supply Cynet Elite or All-in-One with CyOps included, and act as your UK point of contact around it. We set up escalation contacts, agree ProActive permissions with you, check that the CyOps team has what it needs about your environment, and help you follow up on incidents and remediation advice.

Licence changes, Platinum Care upgrades and renewals are handled on your Forever Systems account. To compare MDR services across vendors, see EDR, XDR and MDR or browse our vendors A to Z.

How Forever Systems supplies your software licences

Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.

  • The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
  • Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
  • Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
  • Deployment and support from engineers who run these products every day, not just a reseller account
  • Consolidated billing and renewal reminders so nothing lapses unexpectedly

We work with businesses, schools, charities and public sector organisations of all sizes.

Need a licence quote or a second opinion on your renewal?

Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.

Contact us

Frequently asked questions

Is Cynet MDR included or extra?

Collaborative CyOps 24x7 MDR is included with the Elite and All-in-One packages at no separate line item. It is not available on Protect. CyOps Platinum Care is an optional paid add-on.

What is CyOps Platinum Care?

Cynet's top MDR service level. It adds a dedicated senior analyst, monitoring of all alert severities, monthly reviews and reports, posture validation, credential theft monitoring, configuration reviews and live training.

Will Cynet's analysts take action without asking?

Only if you opt in. In Collaborative mode CyOps asks for your approval before containment. With ProActive enabled, analysts carry out pre-approved actions such as isolating a host or disabling a user account.

Can CyOps disable a compromised user account?

Yes. Containment actions include isolating a host and disabling a user. In Collaborative mode CyOps asks for your approval first; with ProActive enabled, or under a Platinum Care action plan, it can act straight away within the rules you have agreed.

Related from Forever Group