Being a Managed Security Service Provider (MSSP) or delivering a Managed Detection and Response (MDR) service is hard. You’re doing the jobs that are so hard that large swaths of organizations turn to you to handle those complex jobs for them. MSSP/MDR tech stacks are dynamic and highly customized, allowing for competitive offerings at competitive prices. Not only do you as an MSSP need to produce the outcomes promised to your customers, but you also need to deliver your services as flawlessly as possible and at a scale that is well beyond what most standalone organizations would ever experience.

The ecosystem of tooling MSSPs/MDRs are required to build around the products that comprise their service is not easy to build and maintain. Vendors come and go, and your customers always bring new ones to the table.

There’s a complicated workflow happening, nearly all behind the scenes, at MSSP/MDRs that spans the full gamut from development to delivery.

Automation and orchestration are large components that allow MSSPs to achieve the speed and scale required to stand by their service commitments. This is not only for use cases like threat enrichment but also for ticketing and communicating with customers to onboard customers to your service in the first place. Not only do MSSP/MDRs have to be expert users of all of this software, they have to carry the IT burden of maintaining all of this software for performance and uptime.

If you are unfamiliar with MSSPs/MDRs, you may have just learned a thing or two. If you’re already an MSSP/MDR, you may have cold sweats from reading all of this. Sorry about that! I paint this picture of complexity because Cribl is doing something about it!

Meet, Workspaces, a feature of Cribl.Cloud that enables you to create multiple isolated instances in your Organization. In short, Cribl.Cloud is multi-tenant!

Until the introduction of Workspaces, MSSP/MDRs required either fully independent Cribl instances per client or a shared environment with tooling built around Cribl to drive and automate customer independence. If Cribl.Cloud is integrated into your MSSP service, or if you’re interested in making that happen, Workspaces in Cribl.Cloud is for you! Not only does Workspaces allow you to have separate Cribl environments for production, testing, development, etc, but independent environments for each client, all configurable from a single UI/API. Using Workspaces in Cribl.Cloud allows MSSP/MDR’s to reduce their IT and administrative loads by providing the deployment methodology they need.

There’s plenty more to come from Cribl for MSSP/MDRs, so be sure to look out for future enhancements aimed squarely at you!

Cribl, the Data Engine for IT and Security, empowers organizations to transform their data strategy. Customers use Cribl’s suite of products to collect, process, route, and analyze all IT and security data, delivering the flexibility, choice, and control required to adapt to their ever-changing needs.

We offer free training, certifications, and a free tier across our products. Our community Slack features Cribl engineers, partners, and customers who can answer your questions as you get started and continue to build and evolve. We also offer a variety of hands-on Sandboxes for those interested in how companies globally leverage our products for their data challenges.