WatchGuard Technologies has launched expanded network detection and response (NDR) capabilities designed to simplify advanced threat detection for managed service providers and small to midsize enterprises. The new offerings include WatchGuard NDR for Firebox, Managed NDR and Total NDR. NDR for Firebox embeds detection directly into existing firewall environments, eliminating the need for standalone sensors or additional hardware. Managed NDR services, delivered by WatchGuard's Security Operations Centre, provide continuous monitoring and guided response for organisations without dedicated security teams. Total NDR integrates with ThreatSync XDR and enables automated IP blocking across third-party firewalls from Fortinet, Palo Alto Networks and Check Point. The company aims to address security gaps exploited by threat actors using encrypted traffic and stolen credentials, making NDR accessible without requiring specialised staff or infrastructure.

WatchGuard expands NDR capabilities, making advanced network threat detection practical for MSPs and midmarket organizations. Embedded detection, managed services, and automated response simplify NDR adoption for SMEs and MSPs. SEATTLE, March 26, 2026 (GLOBE NEWSWIRE) - WatchGuard(R) Technologies, a global leader in unified cybersecurity for MSPs, today announced new WatchGuard NDR for Firebox, Managed NDR and Total NDR offerings for organizations to easily deploy and scale AI-powered threat detection that uncovers, investigates and contains malicious activity without added complexity. This expansion of its award-winning network detection and response (NDR) capabilities further enables small and midsize enterprises (SMEs) and managed service providers (MSPs) to address critical network security gaps vulnerable to modern exploitation. The newly expanded WatchGuard NDR capabilities include: * WatchGuard NDR for Firebox embeds advanced detection directly into existing firewall environments, eliminating the need for standalone sensors or new hardware. Organizations gain deep traffic visibility and behavioral analysis using telemetry already present within their networks. Delivered through a unified management experience and integrated into the WatchGuard Unified Security Platform(R), detection becomes a natural extension of existing security operations rather than a separate tool requiring additional oversight. * For organizations without dedicated security operations teams, WatchGuard Managed NDR services, delivered by the WatchGuard Security Operations Center (SOC), provide continuous monitoring, investigation, and guided response. This allows MSPs and SMEs to operationalize advanced detection without building or staffing an internal SOC. * Total NDR extends coverage through integration with ThreatSync XDR, while WatchGuard NDR enables automated IP blocking across third-party firewalls from Fortinet, Palo Alto Networks and Check Point, supporting coordinated enforcement across multi-vendor environments and accelerating threat containment. "Organizations understand they need detection beyond the firewall, but operational complexity has slowed adoption," said Andrew Young, chief product officer at WatchGuard. "We're simplifying how advanced detection is deployed and managed, so MSPs and IT teams can operationalize NDR without adding infrastructure, overhead, or specialized staff." By combining embedded detection, managed expertise and automated cross-platform response, WatchGuard is transforming network detection and response from a specialized capability into an accessible, scalable tenet of modern security operations. Threat actors routinely exploit encrypted traffic, stolen credentials, and trusted administrative tools to move laterally within a network and remain undetected. NDR has emerged as a critical layer for uncovering high-impact threats hidden within legitimate network traffic, but the technical and staffing resources required to support legacy solutions have prevented widespread MSP and SME adoption. WatchGuard's NDR capabilities analyze behavioral patterns across users, devices, and connections to identify malicious intent earlier, reduce attacker dwell time and limit breach impact. With this expansion, WatchGuard builds on its award-winning NDR solution, recognized by CRN as Network Security Product of the Year and by SPARK Matrix as a Leader, while making NDR more practical for everyday deployment and operations. "Many midmarket organizations recognize the importance of NDR but struggle with deployment and operational complexity," said Chris Kissel, research vice president, Security & Trust Products group at IDC. "Embedding detection into existing infrastructure and enabling automated response across mixed environments significantly lowers the barrier to adopting advanced threat protection."

Bell Cyber has launched CyberShield Connect, a fully managed cybersecurity solution targeting Canadian small and medium-sized enterprises. The service, powered by WatchGuard's Unified Security Platform, integrates cloud-managed security, automated deployment and Security Operation Centre-driven monitoring into a single package. The solution offers zero-touch onboarding and automated provisioning for rapid deployment, alongside continuous monitoring and coordinated threat response. It is operated by Bell Cyber's Canadian-based team, with monitoring and threat response delivered through Bell's national network to support Canadian data-residency and privacy requirements. CyberShield Connect is now available through Bell Cyber's managed services portfolio, with bilingual support across Canada and full availability throughout North America. The service aims to provide enterprise-grade protection whilst reducing operational complexity for resource-constrained SMEs.