Are there any cybersecurity as a service (CSaaS) providers that actually offer end-to-end security?

When you look at the EDRs like CrowdStrike and Cylance, initially they were do-it-yourself and then it became a SIGI play. Of course CrowdStrike was a marketplace play from day one. Today I still don't see a truly managed CrowdStrike offered. They do have services but they don't come out and say so like Expel’s model—I own the tech, people and delivery. I haven't seen that from these big companies.

Of all the offerings, if you look at these vendors, they're definitely not offering end-to-end. Arctic Wolf Networks and Alert Logic might because they do anything and everything for everybody. But when you look at BlueVoyant, Royal Quest and Expel, they're clear on what they won't offer. They're in that EDR, MDR space, treading cautiously: “Bring in your own tech, we'll manage it for you.”

CrowdStrike was first to do endpoint detection and response (EDR) technically and sell it in their Falcon product. Cylance went with prevention first as did SentinalOne. CrowdStrike started wrapping services around it because after people bought into the technology, they were still having issues with the complexities because it's a complicated space. So because it's a complicated product, CrowdStrike saw an opportunity to make money by selling a service on top of it. That removed a road block for some people who wanted the capability and better protection but had a hard time recruiting all the people required. And it's easier for CrowdStrike to recruit and retain with all the pizazz and market buzz.

I would argue that even in a real enterprise, you don't have full-scope endpoint management in the traditional IT space, let alone in the security aspect of that endpoint. It's because we all cut corners and don't have agents on everything. I could say it's a problem with the vendors and that they're doing it to maximize their PnL and meet the customer’s needs as best as they see fit. But internally, I still think that most internal enterprises I know don't manage the endpoints completely, not to the extent that they probably should. We get to the 80% and we call it done.