ThreatSync Beta Testing

Welcome WatchGuard Beta community! We are excited to announce the open Beta for ThreatSync, WatchGuard's eXtended Detection and Response (XDR) solution of the future!  

ThreatSync is a new WatchGuard Cloud service that provides XDR technology for WatchGuard Network and Endpoint Security products that: 

  • Provides a UX primarily for incident responders 
  • Displays malicious detections  
  • Correlates events to create new malicious detections 
  • Delivers the ability to respond on-demand or automate the response to malicious detections and abnormal behaviors 
  • Service Provider capabilities including aggregated dashboards, automation templates, and email notifications  

ThreatSync provides extended detection capabilities by correlating data from different WatchGuard security products that indicate the presence of threat actors in the organization. By using cross-domain and correlating activities monitored from different security products, ThreatSync scores and detects malicious scenarios that could be indicators of compromise (IoCs), enabling MTTD reduction and swift containment of the impact, severity, and scope.  

ThreatSync is a WatchGuard unified security feature included by default with any Firebox TSS subscription and WatchGuard EDPR and EDR products (as well as Endpoint EPDR and EDR products). The more WatchGuard products you have, the more visibility and expanded XDR features you gain access to.  

Before you submit your feedback, make sure to review the list of Known Issues

Again, we appreciate your help in beta testing this new product. Thanks for your help in making our products better! 

The WatchGuard Beta Team