ThreatSync+ Software as a Service (SaaS) is a 100% Cloud-native, AI-powered, Cloud and SaaS application threat detection and response solution. It delivers cross-Cloud platform monitoring, detection, and response focused on finding threats hidden in M365, Azure, Google Workspaces, and AWS environments, with simplicity, efficiency, and value for midsize and small enterprises.

Once Cloud risks and threat events are identified, ThreatSync+ SaaS sends them to ThreatSync Core for remediation, providing a unified orchestration response. Together, they streamline Cloud cybersecurity, enhance visibility, automate response actions across the organization more quickly, reduce risk and cost, and offer greater accuracy.

Cutting-Edge Cloud AI

Using unsupervised and semi-supervised machine learning operating in a multi-tier neural network, ThreatSync+ SaaS ingests and correlates Cloud and SaaS application logs to surface risks and threats across Cloud environments. The AI engine identifies misuse and risky file access or sharing, risky user/account activity, and risky admin activity associated with password attacks, privileged escalations, and data exfiltration stages of cyberattacks.

Surface Hidden Cloud Risks

ThreatSync+ SaaS watches all your Cloud environments 24/7, offering a unified view of Azure, M365, Google, and AWS risks and threats. Gain visibility into application, account, and file risks, including privileged account creation and management, application usage, and file movement from controlled to public locations with a simplified view.

Deploy Rapid Threat Detection and Response

ThreatSync+ SaaS efficiently detects, identifies, and enables remediation actions for threats detected across SaaS applications and Cloud accounts. Attacks are identified quickly so that remediation efforts prevent further damage. Threat coverage includes brute-force password attacks, account compromise, lateral movement, privilege escalation, and data theft. Remediation is executed via ThreatSync or through open SOAR systems.

Reduce TCO with Cloud-Native Architecture

With its 100% open Cloud-native architecture, there is no need for additional hardware. ThreatSync+ SaaS operates in the WatchGuard Cloud and is compatible with your ThreatSync and ThreatSync+ NDR deployments. Secure log collection is managed from the Cloud and ingests data from AWS, Google, and Microsoft Cloud platforms. This minimizes costs while maximizing risk and threat visibility.

Expand Coverage: Upgrade to the ThreatSync Suite

Expand threat detection and response coverage across your hybrid environment with ThreatSync Suite. Correlate risks and threats across network, Cloud, and SaaS applications and directories with our open XDR platform. The ThreatSync Suite includes ThreatSync Core and ThreatSync+ with NDR, Cloud/SaaS coverage, and WatchGuard Compliance Reporting, delivering expansive risk and threat detection and remediation with a cost-saving compliance reporting capability.

Upgrade to the ThreatSync+ Suite

ThreatSync+ SaaS is fully integrated into the ThreatSync+ Suite. Upgrading to the Suite expands threat detection coverage to include complete hybrid network and Cloud infrastructures and adds automated compliance reporting – all for one low cost. The ThreatSync+ Suite includes ThreatSync Core, ThreatSync+ NDR and SaaS, and WatchGuard Compliance Reporting.

Benefits and Features:

Benefits

Eliminate reliance on the complex and costly “built-in” Cloud threat detection systems that come with Azure, Google, and AWS.
Gain unified risk and threat visibility across multiple Cloud platforms and SaaS applications, including M365 and Google Workspaces.
Reduce the costs of security and compliance of Cloud platforms by automating monitoring, alerting and remediation, and compliance control reporting.
Deliver out-of-the-box M365 risk and threat reports to prove security hygiene status and improvements.

Features

Enterprise AI-driven accuracy in detecting attacks operating inside your Cloud workspaces, including:

Brute Password Attack
Privileged Account Attack
Privileged Account Escalations
Account Compromise
Lateral Movement
Sensitive File Theft
File Exfiltration Staging
Data Exfiltration
Insider Threats
Rogue/Impossible User Behaviors

Out-of-the-box NIST and ISO policy-based, AI-powered control frameworks support and continuous compliance monitoring.

ThreatSync+ SaaS supports Azure, M365, Active Directory Cloud, Google, Google Workspaces, and AWS platforms. This cross-platform support enables the coordination and automation of multiple processes and tools with security orchestration, providing a cohesive security posture.

Deployment:

ThreatSync and ThreatSync+ SaaS
Deliver Affordable, Expansive, and Unified Threat Detection and Response

Anatomy of a Threat Report:

M365 Threat Visibility

Continuously monitor usage, risks, and threats across M365 SaaS applications including Office, Teams, OneDrive, and SharePoint. Using AI-driven threat modeling, easily identify and mitigate behaviors and activities that lead to compromised accounts, application-based attacks, and sensitive data loss.

ThreatSync Purchase Options:

ThreatSync Core offers a base set of XDR capabilities with qualifying network and endpoint security product purchases at no additional charge. Additional ThreatSync+ product licenses can be purchased separately to add advanced XDR capabilities such as third-party product feeds and deep AI-based detections, monitoring, and analysis.

Included in ThreatSync Suite

ThreatSync Suite

Included in ThreatSync Suite

ThreatSync Core

ThreatSync+ NDR

ThreatSync+ SaaS

Compliance Reporting

WatchGuard’s family of XDR products enables MSPs and companies of every size to deploy a foundational core of XDR functionality and add advanced options to quickly expand protection across threat surfaces and attack vectors. Choose the ThreatSync products that best suit your environment to deploy a custom solution that fits your needs and capabilities.

ThreatSync Core includes foundational XDR capabilities of 1) threat information correlation, 2) incident scoring and management, and 3) intelligent automated remediation. The ThreatSync Core features are platform-ready and are available for each network and endpoint security product activation at no additional charge.
- ThreatSync+ XDR products can be purchased separately to layer on advanced XDR capabilities such as third-party product feeds and deep AI-based detections, monitoring, and analysis. ThreatSync+ products include:
- ThreatSync+ NDR: a 100% Cloud-native, AI-powered threat detection and response solution that requires no hardware and defends on-premises network, VPN, and identity threat surfaces.
ThreatSync+ SaaS: a 100% Cloud-native, AI-powered threat detection and response solution that requires no hardware and defends SaaS applications, Cloud platforms, and Cloud identity threat surfaces.
WatchGuard Compliance Reporting augments the reports available with ThreatSync products and WatchGuard Cloud to provide a rich package of reports for companies that must ensure compliance with regulations for business and financial success.
ThreatSync Suite is a single integrated package that includes ThreatSync Core, the ThreatSync+ family of products (NDR, SaaS, and future identity and EDR integration), and WatchGuard Compliance Reporting. Purchase ThreatSync Suite to quickly deploy WatchGuard’s complete, integrated XDR solution.

	ThreatSync Core	ThreatSync+	ThreatSync+ SaaS	Compliance Reporting	ThreatSync Suite
	Included with WatchGuard products	Requires additional licenses	Requires additional licenses	Optional add-on, requires additional license	Additional licenses includes: ThreatSync Core, ThreatSync+ NDR, ThreatSync+ SaaS, and WatchGuard Compliance Reporting
Threat information correlation
Incident scoring and management
Intelligent automated remediation
100% Cloud native
Includes WatchGuard network & endpoint security products
Standard XDR reports
Includes open XDR architecture (3rd-party products)
Continuous monitoring advances
Integrated AI detection
AI correlation analysis
Advanced dashboard views and reports
Comprehensive N/S/E/W Network Detection and Response (NDR)
Comprehensive SaaS Application and Cloud Platform Detection and Response
Over 100 regulatory controls mapped to compliance reports
Automated continuous compliance for ISO-27001, NIST, CMMC, UK and Cyber Essentials
Reporting that supports insurance audit compliance, Critical Security Controls, CISA Ransomware Defense, and IEEE standards

Pricing Notes:

Pricing and product availability subject to change without notice.

WatchGuard Products

WatchGuard ThreatSync+ SAAS - 1 Year

WatchGuard ThreatSync+ SAAS - 1 Year - 1 to 50 licenses

#WGTSSAAS30101
Our Price: $30.00

WatchGuard ThreatSync+ SAAS - 1 Year - 51 to 100 licenses
Minimum 51 quantity

#WGTSSAAS30201
Our Price: $26.50

WatchGuard ThreatSync+ SAAS - 1 Year - 101 to 250 licenses
Minimum 101 quantity

#WGTSSAAS30301
Our Price: $25.50

WatchGuard ThreatSync+ SAAS - 1 Year - 251+ licenses
Minimum 251 quantity

#WGTSSAAS30401
Our Price: $22.00

WatchGuard ThreatSync+ SAAS - 3 Year

WatchGuard ThreatSync+ SAAS - 3 Year - 1 to 50 licenses

#WGTSSAAS30103
Our Price: $72.00

WatchGuard ThreatSync+ SAAS - 3 Year - 51 to 100 licenses
Minimum 51 quantity

#WGTSSAAS30203
Our Price: $64.00

WatchGuard ThreatSync+ SAAS - 3 Year - 101 to 250 licenses
Minimum 101 quantity

#WGTSSAAS30303
Our Price: $61.50

WatchGuard ThreatSync+ SAAS - 3 Year - 251+ licenses
Minimum 251 quantity

#WGTSSAAS30403
Our Price: $53.00

WatchGuard ThreatSync+ SaaS

Coud-native Cloud and SaaS threat detection and response for M365, Azure, Google and AWS environments

Overview: