Critical Start

Critical Start is a cybersecurity company whose core service is managed detection and response (MDR). Its analysts monitor client security tools, with investigations checked by people and response times set in contracts, and it adds incident response and forensic services.

What Critical Start offers

• Managed detection and response — monitoring through its CORR platform, including an MDR service for Microsoft environments.
• Managed SIEM — support for Microsoft Sentinel, Splunk and Devo.
• EDR and XDR coverage — work across Microsoft Defender, CrowdStrike, SentinelOne, Trend Micro, VMware Carbon Black, BlackBerry Cylance and Palo Alto Networks Cortex.
• Incident readiness — incident response retainers, tabletop exercises, readiness assessments, plan reviews and threat hunting training.
• Incident response — crisis management, threat hunting and malware reverse engineering.
• Digital forensics — investigations, forensic imaging, chain-of-custody evidence handling and courtroom testimony.

Who it works with

It works with organisations using Microsoft security products and other major endpoint and SIEM platforms, and runs a partner programme for cybersecurity firms.

Key facts

• Platform: CORR
• Integrations: more than 30 two-way integrations
• Response: service levels set in contracts