IDC Global Security Products Analysis: From Power Point to Power Product, Where Is XDR Right Now?

IDC Global Security Products Analysis: From Power Point to Power Product, Where Is XDR Right Now?

This IDC Market Perspective discusses the current state of the extended detection and response (XDR) market. Entering 2021, with a few notable exceptions, XDR was more of an aspiration than a practical product. However, the largest SIEM vendors and endpoint detection and response (EDR) vendors have announced products and platforms for XDR. XDR is expected to be a disruptive force affecting the sales of SIEM, EDR, SOAR, network intelligence and threat analytics platforms, and external threat intelligence providers. The verdict is out on whether this creates better revenue opportunities for cybersecurity vendors (on balance) or if putting so many capabilities onto a singular platform reduces revenue because of bundled pricing.IDC is covering XDR in earnest. The first part of our cadence is to take stock of where XDR is right now: What is the technology stack going to look like? Is XDR better realized as a proprietary stack or as an open platform? What outcomes should XDR provide? How should XDR be marketed? Is XDR a driver or inhibitor of cybersecurity revenues?"A famous ad said that 'you have your chocolate in my peanut butter,' and this was a clever way to say how two great ideas can be used to form one monster idea," notes Chris Kissel, research director, Tier 2 SOC Analytics at IDC. "Endpoint detection and response are great at finding threats to a local machine, and network intelligence and SIEM are good at finding user behavioral anomalies and rule-based violations. Throw in external threat intelligence and unified case management, and all of a sudden you have the budding technology extended detection and response."

Please Note: Extended description available upon request.