Ontinue launches MXDR Essentials service, extending Microsoft's ISOC to provide 24/7 managed security operations.

The new service is built on top of Microsoft's Integrated Security Operations Platform and combines the Agentic AI of Ontinue, automated capabilities, with 24/7 professional human support.

Zurich, November 3, 2026 / PRNewswire / -- Leading MXDR partner Ontinue, which provides uninterrupted managed security operations services, announced today the launch of Ontinue MXDR Essentials. This is a new managed security service designed to expand Microsoft Integrated Security Operations Center (ISOC) to provide 24/7 managed security operations.

As artificial intelligence changes the speed and scale of cyber threats, security operations must also evolve accordingly. Tools, data, and workflows that are disconnected from each other can create friction at precisely the moments when defenders need stronger context and faster action. Modern SOC requires an integrated foundation that enables personnel and AI agents to work together based on shared signals and context, connecting protection, investigation, and response in a more unified manner.

Microsoft ISOC is building a more integrated foundation for secure operations, integrating SIEM capabilities, XDR, threat intelligence, automation, and AI into a unified experience. On this foundation, MXDR Essentials adds the Agentic AI of Ontinue, automation capabilities, as well as a 24/7 network defense center, to help organizations move from integrated security technologies to always-on secure operations.

As an easy-to-adopt starting point, MXDR Essentials can provide continuous investigation and response within the scope of the Microsoft Defender suite, targeting organizations that require round-the-clock protection but do not yet need the broader visibility and advanced capabilities offered by the comprehensive MXDR services.

This release is highly consistent with Microsoft's vision of advancing integrated security operations through Microsoft Integrated Security Operations Center ( ISOC ). Ontinue indicates that prior to the release of ISOC, their product and engineering teams have been working directly with Microsoft's product teams and will continue to participate in the platform's evolution process. Ontinue has also introduced Microsoft ISOC Deployment Package to help organizations configure telemetry, integration, and automation capabilities, thereby establishing a secure environment that is ready for operation and empowered by AI.

However, the company stated that deployment is just the first step, as organizations still need to operate this environment around the clock, investigate threats, make informed decisions, and take accountable actions when incidents occur. MXDR Essentials adds a managed operations layer to this environment, providing continuous coverage within Microsoft’s Defender core signal range, and as security needs evolve, it offers customers a clear path to more comprehensive MXDR capabilities.

Ontinue CEO Moritz Mann stated: "Microsoft ISOC represents an important shift in the foundation of modern security operations. Our opportunity lies in building upon this foundation, combining Microsoft's integrated security platform with the Agentic AI, automation, and human expertise required for 24/7 security operations. Through MXDR Essentials, we enable more organizations to adopt this operational model, while providing them with a foundation that can evolve as security needs become increasingly complex."

Main capabilities include:

• 24/7 hosting for Microsoft Defender operations:Leveraging the Microsoft Defender security controls already deployed in the customer environment, continuous investigation and response are provided at the terminal, server, email, and identity levels.
• Investigation and Response to Machine Speed:The ION SecOps platform can automatically perform triage, information supplementation, investigation, and containment operations to help shorten the time from detection to response.
• 24/7 professional human support:For incidents that require more in-depth investigation, expert judgment, or customer participation, the Ontinue network defense personnel will take the lead in handling them, ensuring that critical security decisions are still made by human experts.
• Customer-controllable response mechanism:Through the combat rules ( Rules of Engagement ), customers can control how events are handled, clearly defining what actions Ontinue can take immediately, when approval is required, who needs to be involved, and how events can escalate.
• Integrate with Microsoft Teams collaboration:Customers can directly collaborate with Ontinue through Microsoft Teams, allowing them to maintain event coordination within a familiar workflow, without the need to introduce additional tools that create disconnects between them.
• Continuously improve security posture:Operations have identified security posture improvement recommendations that are prioritized, helping customers to focus their defense improvements on the issues actually observed in their own environments.

Focusing on a starting point, and it can be upgraded to a comprehensive MXDR.

MXDR Essentials is aimed at organizations that need to achieve continuous operation in their core Microsoft Defender environments, but are not yet ready to adopt, or do not require, the broader telemetry coverage and advanced capabilities provided by comprehensive MXDR services.

This segmentation allows organizations to choose a level of security operations that meets their current needs. MXDR Essentials focuses on enabling Microsoft Defender to carry out continuous investigation and response. For organizations that require broader telemetry coverage, Microsoft Sentinel management, customized detection, proactive threat hunting, or designated consultant support, Ontinue MXDR Core offers a more comprehensive security operations model.

Both of these services are supported by the ION SecOps platform and the 24/7 network defense center of Ontinue. The company states that this shared foundation enables organizations to expand their coverage and capabilities as needs evolve, without the need to change security operation partners or adopt a completely new operational model.

Moritz Mann indicates that "secure operations should not be a binary decision. What's important is that organizations have the right operational model at the current stage, while also retaining room for evolution." MXDR Essentials provides a practical way for organizations to establish 24/7 secure operations around their Microsoft Defender investments, and it offers a path to more extensive capabilities when needed.

For more information about Ontinue, please visit Ontinue.

Those planning to attend the Microsoft Ignite conference can visit Booth 5165L for more information about MXDR Essentials. The company also announced that on November 19th (Thursday) at 9:00 a.m., they will hold an event titled “Accelerate Your Security Services at Machine Speed” ( BRK495 ) in Room 211, on the second floor of Moscone South.

Supplementary information:

About Ontinue

Ontinue indicates that, as a leading provider of managed security operations services driven by AI, the company is committed to enabling every organization to focus on what they do best; by making uninterrupted excellence in security capabilities accessible, rather than just desirable. By combining advanced AI with profound human expertise, Ontinue provides managed security operations services tailored to each organization's unique environment, operational needs, and risk characteristics.

The ION SecOps platform of Ontinue integrates AI-driven insights, automation, and real-time collaboration to continuously prevent, detect, and respond to threats. Leveraging its deep expertise in Microsoft security technologies, Ontinue helps customers maximize the value of their existing investments while achieving more powerful and scalable security outcomes.

Continuous protection. The uninterrupted SecOps driven by AI. This is Ontinue.

Contact person: Alison Raymond