Freedom251 › Managed Detection and Response Services
Unit 42 MDR
What Unit 42 MDR is
Unit 42 MDR is a managed detection and response service for organizations that want expert support for security operations. It provides 24/7 monitoring, threat hunting, investigation and coordinated response. Continuous monitoring and triage help identify high-risk activity that needs attention, while threat hunters use frontline intelligence to search for hidden or emerging threats. AI and behavioral analytics help surface high-confidence threats and speed detection.
Analysts examine endpoint, network, cloud and identity telemetry to assess an attack’s scope and root cause. Responders can contain threats, remove malicious activity, isolate endpoints, remove malicious files or processes, and restore damaged files through Cortex XDR. The service includes a co-managed Cortex XDR interface with two-way communication and incident and KPI dashboards. Reports can cover findings, recommended actions, impact, cyber hygiene and monthly summaries. Posture checks address endpoint security profiles, device control, host firewall, disk encryption and application vulnerabilities. Customers can communicate directly with Unit 42 analysts and access its Incident Response team during a major incident. The service is built on Cortex XDR and is intended to extend an organization’s security operations team.
Who it suits
Unit 42 MDR suits organizations that want outside analysts to take on monitoring, investigation and response work as part of their security operations. It may also fit teams seeking direct analyst communication and access to Unit 42’s Incident Response team during a major incident.
What it does well
- 24/7 monitoring and threat triage
- Threat hunting for hidden and emerging threats
- Investigation across endpoint, network, cloud and identity telemetry
- Analyst-led containment and endpoint response actions
- Incident dashboards and tailored reporting
- Endpoint security posture checks and vulnerability assessments
What to know first
- Paid service with pricing available on request
- Cortex XDR is the underlying platform
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Unit 42 Managed Detection and Response (MDR) | 24/7 monitoring · Cortex XDR environment · endpoint, network, cloud and identity telemetry | On request |
As paloaltonetworks.com lists them, read 5 Oct 2026. The maker's own page has the final word.
Getting started
- Visit the Unit 42 MDR website
- Use the web service and request pricing
- Discuss the Cortex XDR environment and monitoring coverage
Verdict
Choose Unit 42 MDR if your organization wants continuous expert monitoring, threat hunting and coordinated incident response. Consider whether a service built on Cortex XDR fits your security environment, and request pricing to assess the cost.
Questions
How much does Unit 42 MDR cost?
Pricing is available on request.
What platform does the service use?
Unit 42 MDR is built on Cortex XDR and includes a co-managed Cortex XDR interface.
What telemetry can analysts investigate?
Analysts examine endpoint, network, cloud and identity telemetry.
Does the service include incident response?
Yes. Responders contain active threats and drive incidents toward resolution. Customers can also access the Unit 42 Incident Response team during a major incident.
What response actions are available?
Using Cortex XDR, analysts can isolate endpoints, remove malicious files or processes, and restore damaged files.
Facts from Unit 42 MDR's own pages
- Analytics
- The service uses AI and behavioral analytics to surface high-confidence threats and accelerate detection. · paloaltonetworks.com, 5 Oct 2026
- Founded
- 2005 · paloaltonetworks.com, 28 Sept 2026
- Headquarters
- Santa Clara, California, USA · paloaltonetworks.com, 28 Sept 2026
- Intended users
- Unit 42 describes its managed services as an extension of an organization’s security operations team, handling monitoring, investigations and response activities. · paloaltonetworks.com, 5 Oct 2026
- Investigation
- Analysts examine endpoint, network, cloud and identity telemetry to determine attack scope and root cause. · paloaltonetworks.com, 5 Oct 2026
- Monitoring
- Continuous monitoring and triage identify high-risk threats and prioritize activity requiring action. · paloaltonetworks.com, 5 Oct 2026
- Platform
- The service is built on Cortex XDR and provides a co-managed Cortex XDR interface with two-way communication and incident and KPI dashboards. · paloaltonetworks.com, 5 Oct 2026
- Posture optimization
- The service includes checks for endpoint security profiles, device control, host firewall and disk encryption, plus endpoint application vulnerability assessments. · paloaltonetworks.com, 5 Oct 2026
- Reporting
- Tailored reports include findings, recommended actions, impact reports, cyber hygiene reports and monthly summaries. · paloaltonetworks.com, 5 Oct 2026
- Response
- Responders contain active threats, remove malicious activity and drive incidents toward resolution. · paloaltonetworks.com, 5 Oct 2026
- Response actions
- Analysts can isolate endpoints, remove malicious files or processes, and restore damaged files using Cortex XDR. · paloaltonetworks.com, 5 Oct 2026
- Service
- Unit 42 MDR provides managed detection and response with 24/7 expert monitoring, threat hunting, investigation and response support. · paloaltonetworks.com, 5 Oct 2026
- Support
- Customers can communicate directly with Unit 42 analysts and can access the Unit 42 Incident Response team during a major incident. · paloaltonetworks.com, 5 Oct 2026
- Threat hunting
- Unit 42 hunters use frontline threat intelligence to search for hidden and emerging threats before impact. · paloaltonetworks.com, 5 Oct 2026