ContraForce offers an AI-powered Security Service Delivery Platform designed for Managed Service Providers (MSPs) to automate security incident remediation and streamline multi-tenant investigation workflows. This platform enhances operational efficiency by reducing management time for Microsoft Sentinel by 90% and increasing profit margins for security operations by 40%.
Funding
$8.7M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
DGTFounders
Product
Problem
Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs) face challenges in efficiently managing security incidents across multiple customer tenants, often struggling with tool fragmentation, manual processes, and alert fatigue. This complexity hinders their ability to deliver consistent, high-quality security services while maintaining profitability and scalability.
Solution
ContraForce offers a Security Service Delivery Platform (SSDP) that streamlines multi-tenant security operations, automates incident remediation, and enhances operational efficiency for MSPs and MSSPs. The platform provides a unified dashboard for managing Microsoft Security incidents, automating detection engineering tasks, and enabling one-click response actions. By normalizing and correlating data from various security tools, ContraForce reduces analyst burnout, accelerates investigation speed, and improves the accuracy of threat detection and response. The platform's architecture allows for secure multi-tenancy, ensuring customer data remains isolated and compliant.
Target Audience
The primary target audience includes Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs) seeking to improve their security operations efficiency, reduce costs, and deliver enhanced security services to their clients.
Features
- Unified dashboard for managing Microsoft Sentinel and Defender incidents across multiple tenants
- Automated content management system for continuous tuning of Microsoft Sentinel detection rules
- Pre-built, customizable AI-remediation Gamebooks for automated incident response across users, endpoints, network, and cloud
- API-based integrations with Microsoft Security products and ticketing tools like ServiceNow, Jira, and Autotask
- Multi-tenant data connectors and security infrastructure connectors for API-based connections to managed products
- Automated detection engineering to reduce manual tuning and maintain current detection coverage
- Role-based access control to ensure multi-tenant least privilege access to security logs