Perch

What is Perch?

Co-managed threat detection and response

Now available through ConnectWise

It takes a herd

Built with multi-tenancy at its core, Perch is a co-managed threat detection and response platform (log-based networking and intrusion detection supported by an internal SOC). The growing set of capabilities includes threat intelligence management (TIP) and event logging (SIEM capabilities). Perch detects threats that go beyond traditional defenses and gives you deeper insight into the alerts generated by your other tools. Working with all existing endpoint protection and other security products and never requiring you to purchase any additional solutions or change what you are already using.

Perch & ConnectWise Manage

Perch syncs seamlessly with your businesses in ConnectWise Manage, provides real-time threat activity notifications, and creates tickets directly in ConnectWise Manage to document all threats for your customers.

Why Perch?

After easy installation and configuration, your network will be monitored by certified analysts. The scariest part of adding a managed security services practice is the massive cost of personnel. Leveraging SOC Perch means you can add employees (and experience) without adding staff. How? Partnering with you, handling threat detection and monitoring so you can stay focused on generating revenue for your business. Perch presents an optional Kibana-style view of raw network metadata so your team can participate; or use it as a window to watch the SOC do the dirty work.

Key Facts

Installed in less than an hour, sensors (physical or VM) are placed inside your firewall and monitor network traffic.

Connects to all intel feeds of major threats, including Cisco Talos, Homeland Security, and more. Customize how you connect to some or all of them.

Flexible SOC response times to meet your needs and budget.

Analysts work on each alert to validate real threats and identify false positives for you, so you can focus on the business without hiring threat analysts.

The web application allows you (and, optionally, your customers) real-time access to see what's happening on the monitored networks.

SIEM event logging meets the compliance needs of your customers.

System Requirements:

CPU: 1.8 GHz dual core processor

RAM: 2 GB

HDD/SSD: 50 GB of free space on main drive

Operating system: Microsoft Windows 8 32-bit, Microsoft Windows 7 32-bit, and Microsoft Windows Vista 32-bit

Resolution: 1024×768