Partner MDR for Your Security Program, Delivered by At-Bay

If you run our Security Program, you can now add managed detection and response (MDR) to it. It is our partner MDR, delivered by At-Bay. Grey Wing Security is now an authorized reseller of At-Bay Stance MDR.

This post covers what that means for your team. It says what gets watched, what your day looks like, and how it fits the program and evidence you already have with us.

The gap it fills

Our Security Program sets up alerts on your key systems and guides your team when something needs attention. We work within hours we agree on in writing. We are not a 24/7 security operations center.

That leaves a gap for many growing teams. Attacks do not wait for business hours. Customers and insurers ask who watches your systems after hours. Building that kind of team in-house is a large step for most of them.

Our partner MDR is how you close that gap without building it yourself. At-Bay says its security team works 24/7.

What gets watched

At-Bay says its MDR covers "endpoints, email, cloud, and identities." In plain terms, that means laptops and servers, email, employee logins, and cloud accounts. What a given client gets depends on which parts they add.

Email coverage matters for business email compromise (BEC), the kind of fraud that runs through a real mailbox. We want coverage that reaches email and logins as well as laptops.

At-Bay describes its analysts as detecting threats and acting to neutralize them.

What your day looks like

Here is the general shape. Your plan sets the details.

Before coverage starts. We agree with you on:

• The systems covered, such as laptops and servers, email, employee logins, and cloud accounts.
• Who gets contacted, and how, when a threat is confirmed.

Our partner MDR is not available to clients whose systems handle patient health information (PHI).

Day to day. Your team keeps working. At-Bay's analysts review signals from the systems you chose to cover. At-Bay describes that monitoring as 24/7. Questions about the service come to us first.

When At-Bay confirms a threat. The contact plan you agreed on sets who hears about it and how.

If you need hands-on incident response, it comes through our partner MDR, delivered by At-Bay. Our own team does not run incident response, and we keep that line clear on purpose.

Afterward. We take it from there inside your program. We help close the gap that let it in and write down what happened.

How it fits your Security Program

Grey Wing sells the service, helps you set it up, and is your first point of contact for support and questions. Our own work stays what it has always been: set up controls, set up alerts, guide your team's response, help fix the cause, and keep the evidence.

Your team picks which systems are covered and who gets contacted before monitoring starts.

MDR is an add-on to the Security Program, and it is priced on its own. You can start with the program and add MDR later.

What lands in your records

Proof over promises applies here too. With the add-on, we keep a record of each confirmed threat from the service and what we fixed afterward. That sits next to the rest of your program records: the work plan, the changes we made, and your tested incident plans.

Those records help when a customer security review asks who handles alerts after hours. They also help your team see what the service actually did over time.

We are a readiness helper. We do not audit or certify, and an MDR service does not make you compliant with anything on its own.

What this does not change

• Insurance. Grey Wing does not sell insurance. Adding MDR through us does not get you an At-Bay policy. At-Bay's page says its MDR "is not required for insurance coverage through At-Bay, and it is not limited to At-Bay policyholders." If you hold an At-Bay policy, ask your insurance representative about any policy terms.
• Your tools. MDR runs on tools from At-Bay and its technology vendors, which Grey Wing does not own or operate. We review any tool change, and its cost, with you first.
• Your accounts. Plans, records, and evidence stay in your accounts and your docs. Monitoring data from covered systems is processed by At-Bay and its technology vendors.

About At-Bay

At-Bay offers cyber insurance and security services. It sells its MDR under the At-Bay Stance name, through At-Bay Security, LLC. You can read At-Bay's own description on its MXDR page.

If you want to talk through whether partner MDR fits your team, Let’s talk.

---

Sources

• At-Bay, Managed Extended Detection and Response (MXDR)
• Grey Wing Security, Security Program