Open XDR detection and response combining telemetry across endpoints, networks, cloud and OT, with correlation, investigation and response actions. Vendor detection and cost-reduction percentages are not independently validated service guarantees.
Technical detail
Core features
Cross-source security telemetry correlation
Investigation and response workflows
Integration with managed monitoring and incident response
Open XDR
Network behaviour analytics
Machine learning
IT and OT cybersecurity
Use & integration
Recorded applications
Enterprise network threat detection and response
Operational-technology security monitoring
Managed alert triage and incident investigation
These describe the reviewed application scope, not confirmed deployments, released requirements or procurement eligibility.
Evidence of maturity
Commercial cybersecurity platform and managed-service offering.
Commercial availability
Available through a project-specific supplier discussion; scope, terms and acceptance require confirmation.
Integration and verification
Readiness
A technology readiness level is not established by the reviewed public sources.
Reviewed connections
No reviewed Mission area or released Defence need connection is currently published.
Original sources 5 linked records
These records support this capability and its published Mission area and Defence need connections. A source count is not a count of independent confirmations.
CDS centralizes security data from endpoints, networks, cloud, operational technology and firewalls.
Supports: Capability · name
CDS is an open XDR platform aggregating endpoint, network, cloud, OT and firewall security data, correlating alerts and enabling response actions such as isolating compromised devices/accounts. It supports on-premises and cloud integration and third-party filtering tools. Vendor percentages for visibility, detection and cost reduction are not independently established guarantees.
Supports: Capability · technical tags
True North Map applies the technical tag open XDR to the documented platform.
Supports: Capability · technical tags
CDS is an open XDR platform aggregating endpoint, network, cloud, OT and firewall security data, correlating alerts and enabling response actions such as isolating compromised devices/accounts. It supports on-premises and cloud integration and third-party filtering tools. Vendor percentages for visibility, detection and cost reduction are not independently established guarantees.
Supports: Capability · core features
CDS is an open XDR platform aggregating endpoint, network, cloud, OT and firewall security data, correlating alerts and enabling response actions such as isolating compromised devices/accounts. It supports on-premises and cloud integration and third-party filtering tools. Vendor percentages for visibility, detection and cost reduction are not independently established guarantees.
Supports: Capability · defence applications
CDS is an open XDR platform aggregating endpoint, network, cloud, OT and firewall security data, correlating alerts and enabling response actions such as isolating compromised devices/accounts. It supports on-premises and cloud integration and third-party filtering tools. Vendor percentages for visibility, detection and cost reduction are not independently established guarantees.
Supports: Capability · technical tags
CDS is an open XDR platform aggregating endpoint, network, cloud, OT and firewall security data, correlating alerts and enabling response actions such as isolating compromised devices/accounts. It supports on-premises and cloud integration and third-party filtering tools. Vendor percentages for visibility, detection and cost reduction are not independently established guarantees.
Supports: Capability · capability type
CDS is an open XDR platform aggregating endpoint, network, cloud, OT and firewall security data, correlating alerts and enabling response actions such as isolating compromised devices/accounts. It supports on-premises and cloud integration and third-party filtering tools. Vendor percentages for visibility, detection and cost reduction are not independently established guarantees.
Supports: Capability · summary
CDS collects and centralizes security data from endpoints, networks, cloud, operational technology and firewalls so alerts can be correlated, investigated and acted on from one platform.
Supports: Capability · technical tags
CDS is an open XDR platform aggregating endpoint, network, cloud, OT and firewall security data, correlating alerts and enabling response actions such as isolating compromised devices/accounts. It supports on-premises and cloud integration and third-party filtering tools. Vendor percentages for visibility, detection and cost reduction are not independently established guarantees.
Supports: Capability · technicaldomainslugs
True North Map maps CDS to communications-and-cyber because the capability protects networks, endpoints and connected operational environments.
Supports: Capability · technical tags
True North Map applies the technical tag IT and OT cybersecurity to the documented coverage boundary.
Supports: Capability · defence applications
CDS is an open XDR platform aggregating endpoint, network, cloud, OT and firewall security data, correlating alerts and enabling response actions such as isolating compromised devices/accounts. It supports on-premises and cloud integration and third-party filtering tools. Vendor percentages for visibility, detection and cost reduction are not independently established guarantees.
Supports: Capability · core features
CDS is an open XDR platform aggregating endpoint, network, cloud, OT and firewall security data, correlating alerts and enabling response actions such as isolating compromised devices/accounts. It supports on-premises and cloud integration and third-party filtering tools. Vendor percentages for visibility, detection and cost reduction are not independently established guarantees.
Supports: Capability · commercial availability
StreamScan currently markets CDS Open XDR and integrates it into its managed detection and response service.
Supports: Capability · technology readiness level
CDS is an open XDR platform aggregating endpoint, network, cloud, OT and firewall security data, correlating alerts and enabling response actions such as isolating compromised devices/accounts. It supports on-premises and cloud integration and third-party filtering tools. Vendor percentages for visibility, detection and cost reduction are not independently established guarantees.
Supports: Capability · technicaldomainslugs
CDS is an open XDR platform aggregating endpoint, network, cloud, OT and firewall security data, correlating alerts and enabling response actions such as isolating compromised devices/accounts. It supports on-premises and cloud integration and third-party filtering tools. Vendor percentages for visibility, detection and cost reduction are not independently established guarantees.
Supports: Capability · technical tags
CDS is an open XDR platform aggregating endpoint, network, cloud, OT and firewall security data, correlating alerts and enabling response actions such as isolating compromised devices/accounts. It supports on-premises and cloud integration and third-party filtering tools. Vendor percentages for visibility, detection and cost reduction are not independently established guarantees.
Supports: Capability · core features
CDS is an open XDR platform aggregating endpoint, network, cloud, OT and firewall security data, correlating alerts and enabling response actions such as isolating compromised devices/accounts. It supports on-premises and cloud integration and third-party filtering tools. Vendor percentages for visibility, detection and cost reduction are not independently established guarantees.
Supports: Capability · capability type
CDS is presented as an open extended detection and response platform.
Supports: Capability · defence applications
True North Map maps CDS to enterprise network threat detection and response from the documented XDR functions.
Supports: Capability · core features
CDS can isolate compromised devices or accounts and integrate blocking actions with existing security tools.
Supports: Capability · defence applications
CDS is an open XDR platform aggregating endpoint, network, cloud, OT and firewall security data, correlating alerts and enabling response actions such as isolating compromised devices/accounts. It supports on-premises and cloud integration and third-party filtering tools. Vendor percentages for visibility, detection and cost reduction are not independently established guarantees.
Supports: Capability · maturity
CDS is an open XDR platform aggregating endpoint, network, cloud, OT and firewall security data, correlating alerts and enabling response actions such as isolating compromised devices/accounts. It supports on-premises and cloud integration and third-party filtering tools. Vendor percentages for visibility, detection and cost reduction are not independently established guarantees.
Supports: Capability · core features
CDS correlates alerts across levels and supports investigation from a unified control point.
Supports: Capability · name
StreamScan names its current platform CDS Open XDR.
Supports: Capability · summary
CDS is an open XDR platform aggregating endpoint, network, cloud, OT and firewall security data, correlating alerts and enabling response actions such as isolating compromised devices/accounts. It supports on-premises and cloud integration and third-party filtering tools. Vendor percentages for visibility, detection and cost reduction are not independently established guarantees.
Supports: Capability · commercial availability
CDS is an open XDR platform aggregating endpoint, network, cloud, OT and firewall security data, correlating alerts and enabling response actions such as isolating compromised devices/accounts. It supports on-premises and cloud integration and third-party filtering tools. Vendor percentages for visibility, detection and cost reduction are not independently established guarantees.
True North Map maps CDS to operational-technology monitoring because StreamScan states IT and OT coverage and the Cyber Centre documents the national-security relevance of OT cyber defence.
CENGN independently reports successful CDS integration with pfSense on its testbed and blocking of command-and-control traffic from infected Windows systems.
The patented CDS architecture combines signature analysis with machine-learning models of normal network behaviour to detect deviations associated with known and zero-day threats.
Supports: Capability · technical tags
True North Map applies the technical tag machine learning to the patented anomaly-detection method.
Public sources cited · Facts and assessments kept separate · Human review