Welcome to Kaseya MDR

The Welcome to Kaseya MDR section provides orientation and expectation‑setting before onboarding, configuration, or day‑to‑day operations. It explains what Kaseya MDR is, how the experience differs from RocketCyber—the platform it evolves from—and what it means for both platforms to operate in parallel during the transition period. This section helps you understand what is new at the interface and workflow level, what remains unchanged in the underlying MDR service and SOC model, and how to interpret this period without assuming immediate action or a forced cutover.

This section is designed for both readers who are new to Kaseya MDR and those familiar with RocketCyber, providing shared context without assuming prior experience with either platform.

Kaseya MDR represents an evolution of the RocketCyber managed detection and response platform, introducing a new interface and workflow organization while preserving existing detection coverage, cloud telemetry ingestion, and SOC monitoring capabilities relied on today.

Kaseya MDR is introduced as a platform update during the transition period and runs alongside RocketCyber, allowing you to explore the new experience at your own pace while RocketCyber continues to operate.

This section describes Kaseya MDR at a conceptual level. It explains how the platform behaves at a high level, what problems it is designed to solve, and how it fits within Kaseya’s broader security product ecosystem. It intentionally does not include setup steps, configuration instructions, or procedural guidance. If you are looking for access, authentication, or early readiness tasks, see Getting started with Kaseya MDR. It also does not define operational responsibilities, automation scope, or remediation behavior, which are covered later where appropriate.

Kaseya MDR access and behavior should not be interpreted as implying visibility into data or monitoring scope beyond MDR‑entitled capabilities.

Within the broader Kaseya security ecosystem, Kaseya MDR integrates with SaaS Alerts and Kaseya SIEM to support SaaS visibility and cross-domain investigation when those products are used together.

Use this section to understand:

  • What Kaseya MDR is and how it operates as a managed detection and response platform, including the continued role of the managed SOC

  • How alerts, investigations, and response workflows are structured in the alert‑centric experience

  • What has changed compared to RocketCyber and why those changes were made

  • What “parallel operation” means and how Kaseya MDR runs alongside RocketCyber during the transition period

  • How Kaseya MDR relates to SaaS Alerts and Kaseya SIEM and where product boundaries are intentionally drawn

  • What the platform is designed to enable, and where customer responsibility still applies

Helpful starting points

Use the articles below in the recommended order, or go directly to the one that best matches your immediate question.

  • Introducing Kaseya MDR: Provides a high‑level introduction to Kaseya MDR, including why the platform was built, what is changing at the experience level, and what remains consistent. This article establishes the alert‑centric model, centralized investigations, and expanded response visibility while reinforcing that the managed SOC remains a core component.

  • How RocketCyber features map to Kaseya MDR: Helps readers recognize where familiar RocketCyber capabilities now appear in Kaseya MDR. This article provides orientation and context without acting as a migration guide or setup checklist.

  • What’s new in Kaseya MDR: Highlights key workflow and experience changes, including how alerts replace raw events as the primary unit of attention, how investigations are centralized into a single Analysis experience, and how response actions and configuration are surfaced more clearly. This article focuses on what is different and why it matters.

  • Synchronization and parallel operation FAQ: Answers common questions about coexistence, synchronization, access behavior, and what does (and does not) change while Kaseya MDR runs alongside RocketCyber. This includes expectations around access, agents, configurations, and SOC operations during the transition period.

  • Kaseya MDR, SaaS Alerts, and Kaseya SIEM: How the products relate: Explains how Kaseya MDR, SaaS Alerts, and Kaseya SIEM are related but distinct products, the role each one plays, and when they are used independently or together.

These articles are designed to be consulted as needed, not read sequentially. Use them to establish shared understanding and reduce uncertainty before moving into onboarding or operational workflows.

After you are oriented and ready to proceed

  • Go to Getting started with Kaseya MDR to confirm access, authentication, and early steps.

  • Go to How Kaseya MDR works to learn the conceptual mental models that explain alert‑centric behavior, investigations, and response decisions (without click‑by‑click instructions).