ExtraHop has announced a new NDR offering and analyst service targeted towards midsize enterprises and designed to enable greater security maturity.

The products and services are created to help midsize enterprises address security maturity, reduce tool complexity, and increase efficiency to better protect their organisations, ExtraHop states.

The new ExtraHop Spotlight service leverages the domain expertise of the ExtraHop security analysts and combines it with insights derived across customer environments to provide targeted threat investigation guidance for lean security and IT operations teams, the company states.

The new ExtraHop Reveal(x) 5Gbps subscription package provides cost-effective network detection and response (NDR) that delivers complete visibility, detection, and response capabilities for midsize enterprises.

According to the company, midsize organisations face the same sophisticated security threats from ransomware to insider threats as large enterprises, but often lack the resources and security domain expertise to combat these threats at scale.

With the latest offerings, the company is focused on helping these organisations mature their security operations, keeping them focused on critical threats while aligning IT operations and security operations teams around common datasets and workflows.

According to the 2019 SANS Incident Response Survey, the top two impediments to successful incident response were "shortage of staffing and skills" and "lack of budget for tools and technology."

With Spotlight, ExtraHop customers can now augment their teams with the security domain expertise of ExtraHop analysts, providing targeted education and investigation guidance for specific Reveal(x) detections, helping them maximise the value of their investment.

The Spotlight service also adds another layer of intelligence by leveraging visibility into the most common threats across customer environments to speed detection and scale response for multiple organisations, ExtraHop states.

When combined with the cloud-scale machine learning of Reveal(x), this collective insight across customer environments helps customers save time and resources by surfacing only the most pressing threats, according to the company.

ExtraHop VP of product and solutions marketing Sri Sundaralingam says, “Midsize enterprises are subject to the same malicious activity as larger organisations, but often lack the resources that help large enterprises maintain an upper hand.

“Competition for scarce security talent is fierce, and budget constraints often slow tool modernisation, leaving existing IT and security teams under-resourced. This new offering enables medium-sized enterprises who want to scale their business with a cloud-native network detection and response solution to efficiently cover a wide breadth of use cases.

The ExtraHop Reveal(x) 4200 (5Gbps solution) will be available globally in March 2020. ExtraHop Spotlight service is now available in North America and will be available for specific global regions in the second half of 2020.