Why Alert Enrichment Isn't Enough
Traditional SIEMs focus on alerts. But what you really need is full visibility into the attack chain.
CRN article excerpt:
WhiteDog develops a composable cybersecurity stack specifically for indirect channel partners looking to offer white-labeled managed security, said Shahin Pirooz, founder of the company.
WhiteDog currently uses a mix of 45 commercial and open-source technologies to bring about 20 products with about three or four editions each to help MSPs with endpoint security, email security, DNS security and zero trust security, all layered over with 24x7 security operations, Pirooz told CRN.
“We actually do threat hunting where we’re literally looking at every alert and inspecting if it’s real or not,” he said. “We look at things that may not be an alert but should have been an alert, and identify, classify.”
WhiteDog used XChange to show its recently launched multi-PSA integration, Pirooz said.
“So whatever PSA an MSP is using, they can integrate with us,” he said. We work with the top three brands: ConnectWise, Kaseya and Datto’s Autotask. But we’ve also done it through an open framework so if there’s anything that we don’t have, we will be able to integrate with it. It takes us just weeks to set up a new one.”
WhiteDog is also now working with Glasshive to provide Silver-level and higher partners with free marketing materials, outbound communications, lead generation and CRM functionality, he said.
View the full CRN article.

Simply put, WhiteDog has solved the MSP problem. Their platform is literally what we've been trying to build for the last two years.
We deployed WhiteDog out to our first client, 300 endpoints, in a week and a half.
- James Berger
Co-founder & CIO