Your MDR sees the attack. But does it stop it?
Most MDRs watch. Few act. Find out in three minutes which one yours does.
Start the scorecardYour score per dimension
Your MDR todayZero Trust target
See where your MDR falls short
Your score on all five dimensions, the two gaps that put you most at risk, and what to fix first. Shown right here, no waiting for an email.
Talk it through with an ON2IT expert
30 minutes, your scorecard on the table. We'll walk through your biggest gap and what closing it takes. No sales deck.
Thanks. We'll contact you as soon as possible to plan your scorecard review. Taking you to Zero Trust is a verb...
Five things that decide whether an incident becomes a breach
Most MDR evaluations count alerts and response times. They measure activity. These five measure whether the Zero Trust work gets done.
Know
Does your MDR know what matters to your business?
Without your Protect Surfaces, their owners and their business impact, every alert looks the same.
Act
Can it act at any hour, without waiting for permission?
An MDR that has to wait for approval gives you a ticket, not an outcome.
Prevent
Does it stop attacks from spreading, or report them after?
Policy that limits flows to what the business needs stops lateral movement before it needs a response.
Suppliers
Are third parties limited to what they actually need?
Third-party access is the path attackers count on most.
Keep doing
Is Zero Trust a program that keeps moving?
The first Protect Surface is the slowest, and many programs stop right there.
Answer for the MDR service you have today, whether in-house or outsourced. If you don't know, say so. That is an answer too.
From the people who do the work
ON2IT has delivered Zero Trust as a managed service since long before it was a buzzword, and worked directly with John Kindervag, the creator of Zero Trust. The questions reflect what co-founder and CTO Lieuwe Jan Koning sees in MDR and Zero Trust programs: the technology is rarely the bottleneck. The work is.
Read his article: Zero Trust is a verb →- 2005founded, Zero Trust since 2010
- 300+clients worldwide
- 24/7Global SOC, five shifts
Before you start
Is this a sales pitch?
No. Your overall score and tier appear straight away, without an email address. Only the breakdown per dimension and the two fixes that matter most sit behind a short form. A review call with an ON2IT expert is optional.
How is the score calculated?
Ten questions, two per dimension. Yes scores 2, Partly 1, No 0. That gives a maximum of 4 per dimension and 20 in total, shown as a score out of 100. Below 40 your MDR is watching, from 40 to 74 it is responding, and from 75 it is doing Zero Trust.
Why does "Don't know" count as zero?
Because not knowing is itself the finding. If nobody on your side can say whether your MDR can contain a threat at 3 AM, you will find out during the incident.
We don't have an outsourced MDR. Does this still apply?
Yes. Answer for whoever detects and responds today: an in-house SOC, a provider, or a mix. The questions are about what gets done, not who does it.
What happens with my details?
We use them to show your full scorecard and, if you ask for one, to plan a review. You only receive other content from ON2IT if you tick that box. See our privacy statement.