SHIELDMSP / INTEGRATIONS
MVP IN DEVELOPMENTExtend the tools
you already trust.
Your security provider remains the detection layer. ShieldMSP is being designed around provider alerts and scoped response APIs, beginning with Microsoft Defender.
DEVELOPMENT DIRECTION
A clear scope. An honest roadmap.
These labels describe intended MVP scope and planned development. They are not a claim of production availability or a certified partnership.
| Integration / capability | Development scope | Purpose |
|---|---|---|
| Microsoft Defender | MVP focus | Primary alert source for the API-based MVP; intended provider path for bounded endpoint response. |
| Sigma & MITRE ATT&CK | MVP design | Deterministic rule evaluation and technique mapping provide decision and investigation context. |
| AI assistance | MVP design | Context, explanations, and analyst recommendations; separate from action authorization. |
| SentinelOne | Planned adapter | Secondary endpoint security source. Connector readiness and action coverage require validation. |
| ConnectWise / Autotask | Planned workflow | Ticketing with incident context, response history, and escalation guidance. |
| RMM platforms | Planned workflow | Deployment and operational integration, with scope and provider permissions to be validated. |
| Identity & email | Future scope | Account and email containment extend beyond the endpoint-focused MVP. |
| Custom agent & Linux | Future scope | Custom endpoint agent work is deferred. Broader operating-system coverage needs separate validation. |
Keep detection where it belongs.
Signals in. Context preserved.
Provider-specific alerts are validated and normalized into a common schema. Source identity, customer ownership, endpoint, and rule context stay associated with the incident.
Commands out. Scope constrained.
Response depends on the provider’s validated capabilities and scoped credentials. Sending a command and verifying its result are separate stages.
LET’S BUILD WHAT COMES NEXT
Put control at the
center of your response.
Help shape ShieldMSP around
your MSP’s real-world operations.