ContraForce
Security Service Delivery Platform built for MSPs
Deploy or improve a managed detection and response (MDR) service
ContraForce transforms how managed security services are delivered by allowing MSPs to jumpstart a new line of business, improve their margins and deliver better client outcomes.
The ContraForce Security Service Delivery Platform (SSDP) is specially built for MSPs. It decouples security services from the underlying software used to provide them and employs automation to improve service delivery. The platform simplifies complex security operations, enabling MSPs to accelerate security practice builds.
Microsoft Security Activated
Drive increased productivity through your Microsoft practice, using the velocity and scale of the ContraForce SSDP to manage, operate and automate your existing Microsoft security stack with optimal workflows, built-in security engineering content, and enhanced multi-tenancy.
ContraForce has been a proud member of the Microsoft Intelligent Security Association (MISA) since 2021 and was awarded Microsoft’s Security Software Innovator finalist in 2023 and Security ISV of the year in 2024.
Request a Call
Thank you for submitting your details! A member of our team will be in touch soon.
Solution Offerings
ContraForce Storm
Have qualified independent security service providers deliver a managed detection and response (MDR) service on your behalf.
How it works
- Zero Upfront Investment
Storm is a commercial program that allows you to have qualified independent security service providers (Storm Providers) deliver an MDR service on your behalf. It is an effective and proven strategy that enables MSPs to avoid the upfront costs of building a SOC and hiring technical specialists. - Standardised Service Delivery
Storm Providers must meet delivery requirements that include specified SLOs and SLAs including 24×7 continuous monitoring and an SLA of less than 1 hour to notify and respond to confirmed high severity security incidents. - Comprehensive Security
Storm includes support for industry-leading SIEM and EDR solutions like Microsoft Defender, Microsoft Sentinel, SentinelOne Singularity EDR, Crowdstrike Falcon EDR, IBM QRadar SIEM and Splunk Enterprise Security. - No Channel Conflict
Storm allows you to protect your client relationship. Both you and the Storm Provider contract directly with ContraForce and co-manage client environments through the ContraForce security service delivery platform. The Storm Provider will not solicit your clients or share their name with your clients without consent.
ContraForce Spark
Deploy or improve an in-house managed detection and response (MDR) offering.
How it works
- MRR Growth
Spark is a cloud-based managed service workbench for service providers that are looking to deploy or improve an in-house MDR offering. Grow your footprint within your install base while integrating an MDR service effortlessly with your current operations and ticketing system. - Automated Service Delivery
Spark harnesses AI and hyper-automation to standardize and simplify incident investigation and response workflows, streamlining the time and expertise required to deliver managed security services. With features like automated security content updates, specialized security staff are not required (for most use cases). - Real-Time Visibility
Spark allows you to onboard clients within a few minutes and easily manage multiple clients and multiple security tools simultaneously in a single dashboard, including 24/7 visibility for your staff and your clients. - Comprehensive Security
Spark includes support for industry-leading SIEM and EDR solutions like Microsoft Defender, Microsoft Sentinel, SentinelOne Singularity EDR, Crowdstrike Falcon EDR, IBM QRadar SIEM and Splunk Enterprise Security.
Crayon and ContraForce are better together.
In an era where cyber threats are increasingly sophisticated and pervasive, establishing a world-class managed detection and response (MDR) service is crucial for MSPs like you to keep your clients safe. With ContraForce, MSPs have new options for delivering an MDR service without the heavy upfront investment in skills and a security operations center (SOC) typically required to support an MDR service.
Together, Crayon and ContraForce allow you to rapidly launch and scale an MDR service that will:
Grow your MRR
Grow your monthly recurring revenue (MRR) by jumpstarting a new line of business that provides your clients with continuous threat detection and response. This new source of income allows you to strengthen your existing client relationships by growing your footprint within your install base and pre-empting competitors from getting a foothold. You can also grow your business by onboarding new Microsoft clients and easily managing other security and incident management (SIEM) and endpoint detection and response (EDR) tools.
Improve your Margins
AI-powered workflow automation allows your staff to work efficiently. They can spend less time on repetitive tasks and focus on resolving critical incidents faster. Automation also reduces your need for security expertise for most use cases, empowering your staff to deliver expert detection and response without having years of battle scars.
Create Competitive Advantage
Deliver better client outcomes by onboarding clients within minutes, quickly connecting their SIEM and EDR tools and getting same-day visibility into their threat landscape. Easily improve their security posture with 24/7 threat detection and by using automated response playbooks, to remediate threats within minutes.
ContraForce Partner Program.
The ContraForce Partner Program is designed to empower security service providers and resellers to deliver exceptional SecOps services to their customers. The ContraForce Partner Program offers security service providers and resellers the opportunity toexpand d market opportunities with new MDR and SOC service offerings that provide optimised systems and processes for faster deployment and increased ROI.
Flexible Pricing and Licensing
ContraForce Storm and ContraForce Spark provide real choice on the engagement model and service approach that works best for your business. Build knowledge and revenue with confidence by leveraging a third party to deliver the service with ContraForce Storm, switch to Spark if and when you’re ready or set up to self-manage an in-house MDR service from the start.
ContraForce provides scalable and cost-effective offerings to support your business as your security practice expands. Per-user pricing allows you to control costs as you grow, without heavy upfront outlay or long-term commitments. Moreover, there is no need to take on the investment, overheads or risk of building a SOC and hiring security staff (for most use cases).
Ongoing Support
ContraForce customer success managers provide technical support and online documentation to get you quickly onboarded and to resolve issues that occur while delivering your MDR service. Regular release notes and a monthly newsletter keep you up to date on new innovations.
Frequently Asked Questions
ContraForce allows any MSP to deploy a new managed detection and response (MDR) service or improve an existing one.
Onboarding to the ContraForce platform takes 15 minutes. The same is true for you to onboard one of your clients.
The ContraForce customer success team can provide support during onboarding or you can make use of our online documentation to manage onboarding yourself.
ContraForce solutions are designed to augment the capabilities of your existing staff. There is no need to build a SOC or hire additional security staff (for most use cases) to deploy an MDR service.
ContraForce allows you to easily manage industry-leading SIEM and EDR solutions including Microsoft Defender, Microsoft Sentinel, SentinelOne Singularity EDR, Crowdstrike Falcon EDR, IBM QRadar SIEM and Splunk Enterprise Security.
