Alibaba Cloud Managed Security Service (MSSP) is delivered by a team of experienced security experts and built on years of Alibaba Cloud's security best practices. The service provides comprehensive technical and consulting services to help you build, optimize, and secure your cloud defense system.
Service content
Service content varies by plan. Refer to the buy page for details.
Managed Security Service (MSSP) includes the following services:
Security assessment
The Managed Security Service (MSSP) team provides tailored diagnostic services based on your security requirements to comprehensively assess your business's security posture. Through in-depth analysis, we help you identify gaps between your current operations and industry best practices. We then develop practical security solutions to help you build a robust cloud defense system.
|
Category |
Service content |
Method |
|
Network security assessment |
|
Manual inspection and tool-based scanning |
|
Host security assessment |
|
Manual inspection and tool-based scanning |
|
Application security assessment |
|
Manual inspection and tool-based scanning |
Security detection and inspection
Managed Security Service (MSSP) provides comprehensive daily security monitoring and inspection services to help you analyze and manage threats across complex systems and application platforms. Using real-time monitoring, incident analysis, and professional solutions, we help you proactively respond to security attacks, reduce your operational workload, and ensure business stability.
Daily inspections include the following checks:
|
Security layer |
Content |
|
Security products and policies |
The enablement, authorization, configuration, and compliance status of security products and policies. |
|
Network security layer |
|
|
ECS instance operating system layer |
|
|
Application security layer |
|
|
Data layer |
|
Security hardening
Managed Security Service (MSSP) provides security hardening guidance based on the results of security assessments. We offer professional configuration recommendations for operating systems and network devices to address identified issues, effectively improving their security and resilience against attacks. By implementing these secure configurations and performing regular security assessments and maintenance, we help ensure your systems maintain a high level of security.
Security incident response
The MSSP incident response service leverages Alibaba Cloud's years of practical experience in offensive and defensive security and adheres strictly to national standards for information security incident handling. If a security incident occurs, we provide 24/7 remote incident response services. We follow a standardized process (prevention, intelligence gathering, containment, eradication, and recovery) to handle security incidents and help you restore business operations.
Additionally, based on the incident analysis, we provide post-incident planning and design services. We tailor cloud security management solutions to fundamentally reduce the likelihood of future security incidents and minimize their impact on your business.
Major event escort
The MSSP escort service provides comprehensive and professional security support. We can customize a dedicated protection plan based on the requirements of your major event. By combining advanced security products with our team of experienced experts, we deliver end-to-end services covering pre-event protection, real-time monitoring, and post-event analysis. This ensures the security and stability of your business during nationally important events or key corporate marketing campaigns.
Vulnerability management
MSSP offers a comprehensive vulnerability management service that covers multiple layers, including operating system vulnerabilities, application middleware vulnerabilities, and code vulnerabilities. By combining tool-based scanning with manual analysis, our security experts accurately identify potential vulnerabilities. We track the entire lifecycle from discovery to remediation, providing professional guidance to help you eliminate security risks in a timely manner and effectively prevent potential threats.
Security product operations
For enterprises that lack dedicated security personnel, MSSP provides comprehensive management services for a wide range of security products, including Alibaba Cloud Security products and third-party solutions. Through operational support and threat-driven configuration management, we tailor security policies to ensure the efficient operation of your security products, helping you build a solid and reliable cloud defense system.
Security effectiveness analysis
After security services are implemented, Managed Security Service (MSSP) leverages the Alibaba Cloud big data platform to build in-depth analysis models for a comprehensive evaluation of your cloud-based business assets. This includes key system identification, business threat analysis, and overall risk identification. Through threat intelligence analysis, we pinpoint residual risks in your business and prioritize them based on severity. This provides a concrete basis for your security planning and development, helping you build a more complete business protection system.
Service workflow
Key steps in the service workflow are described as follows:
-
Rapid onboarding after purchase: After you purchase any MSSP plan, our experts will contact you within one business day via phone, DingTalk, or email to establish a dedicated communication channel.
-
Information collection and plan customization: We assess your business architecture, operational status, and security requirements to create a custom plan, which we then confirm with you.
-
Plan implementation and delivery: We implement the confirmed plan and deliver services based on your edition to meet your specific needs.
-
Periodic inspection and effectiveness assurance: We conduct periodic inspections within the service scope, continuously verifying and optimizing security measures to ensure consistent protection.
-
Regular reporting and issue resolution: We regularly generate and deliver service reports that help you analyze issues, develop solutions, and track their implementation to ensure timely resolution.
-
End-to-end tracking and security management enhancement: By managing the complete lifecycle of pre-event prevention, real-time monitoring, and post-event optimization, we help improve your security management and reduce the likelihood of security incidents.
Purchase Managed Security Service
-
Log in to the Managed Security Service buy page.
-
On the buy page, select the service plan, quantity, and other required information.
For detailed parameter descriptions, see Activate Managed Security Service.
ImportantBefore purchasing, you must authorize the service by clicking Create Service-linked Role.
The configuration items include the following. For Service Plan, you can select Enterprise Edition, Escort Edition, or CTDR Managed. The Service Content includes eight items: security consulting, security assessment, security monitoring, security hardening, vulnerability notification, product training, a visualization portal, and summary and reporting. The Service Scope defaults to the number of your current ECS instances. A phone consultation is required for more than 900 instances. The Service Period supports 3-month, 6-month, 1-year, 2-year, 3-year, and 5-year options. We recommend that you select Auto-renewal, which renews the service on a monthly basis.
-
Click Buy Now and complete the payment.
Download a service report
-
Log in to the Managed Security Service (MSSP) console.
-
In the left-side navigation pane, choose .
-
On the Security Service page, find the service report you want and click Download in the Actions column.