Centeye Security
“24/7 detection and response for MSPs and MSSPs — managed EDR & XDR, identity (ITDR), email security, and shadow-AI governance, correlated into one incident per attack and run at machine speed inside the policy your team sets.”
Centeye Security
“24/7 detection and response for MSPs and MSSPs — managed EDR & XDR, identity (ITDR), email security, and shadow-AI governance, correlated into one incident per attack and run at machine speed inside the policy your team sets.”
Products & services
Questions & answers
What is Centeye Security?
“Centeye Security is a cybersecurity platform for MSPs, MSSPs, and the businesses they protect. It watches endpoints, identities, email, and AI usage as one system, and runs a 24/7 security operation — automated triage, correlation, and response, with a human in the loop.”
Which attack surfaces does Centeye cover?
“Four solution areas on one platform: Ironwatch™ (EDR & XDR) for laptops and servers, Gatewatch™ (ITDR) for logins and accounts — including leaked and infostealer-harvested credentials, Lighthouse™ (email security) for phishing and BEC, and Lumen™ (shadow AI) for the AI tools your people connect to company data — with DNS-level visibility feeding all of them.”
Who is Centeye for?
“Managed service providers running security across a client fleet, and small and mid-sized businesses that don't have in-house security staff or a 24/7 SOC.”
How is Centeye priced?
“Pricing is “talk to us” — there are no public price tiers; it's scoped to your environment and client fleet.”
Is Microsoft Defender enough for our clients?
“Defender is a capable prevention layer, and Centeye monitors its health rather than fighting it. What Defender does not do is correlate an endpoint event with the email and sign-in that preceded it, run 24/7 triage, or execute governed cross-surface response. Most clients keep Defender on and add Centeye above it.”
EDR vs MDR vs XDR — which is this?
“All three layers, honestly labeled: an EDR agent for telemetry and containment, XDR correlation across endpoint, identity, and email, and 24/7 managed detection and response — the triage automated, your team in command of policy and approvals.”
Does this replace our current EDR?
“It can, or it can run alongside during evaluation. Watch-only mode produces a findings report you can score against your incumbent before any client-facing change.”
What happens when a machine is isolated by mistake?
“Release is one click, the action is fully logged, and the triggering tool can be designated learned-benign — approved by a human — so the false positive does not repeat.”
Is Microsoft Defender for Office 365 enough?
“Defender filters payloads at planetary scale, and it should stay on. The costliest attacks — BEC, executive impersonation, supplier fraud — carry no payload and are rehearsed against those exact filters before sending. Centeye adds the intent-and-relationship read behind the filter. Run both side by side and score what got through.”
What is business email compromise, in practice?
“A payload-free fraud: an attacker impersonates an executive or supplier — or writes from a genuinely compromised account — to redirect payments or extract data. Because there is nothing to detonate, it is caught by context: sender history, financial intent, pressure cues, and lookalike analysis.”
API-based vs secure email gateway — why does it matter?
“A gateway sits in the mail path and requires MX changes; an API deployment reads the tenant directly — minutes to deploy, no delivery risk, and visibility into internal and outbound mail a gateway never sees.”
Data formats & record details
Download this profile and inspect its supporting evidence.
- Entity ID
- urn:readyscan:entity:centeye-security-q140214007
- Material fingerprint
- fnv1a64:9efcb05a8eea94de
- Entity revision
- fnv1a64:b04f9e726fea72a4
- Published
- 2026-10-17
- Modified
- 2026-10-17
- Source summary
- Centeye Security: “24/7 detection and response for MSPs and MSSPs — managed EDR & XDR, identity (ITDR), email security, and shadow-AI governance, correlated into one incident per attack and run at machine speed inside the policy your team sets.”