The following 7-minute video provides an overview of where Blumira fits in the market and how to get started with Blumira's MSP program: Blumira MSP Program and Product Overview - XDR.
Helping you succeed with Blumira is the most important thing we do. If you need help with your account, start by looking through the articles below.
The following 7-minute video provides an overview of where Blumira fits in the market and how to get started with Blumira's MSP program: Blumira MSP Program and Product Overview - XDR.
Thanks for your feedback!
Use the information below to contact Blumira's Partnership team and team members.
MSP Team | Program Support, NFR Setup, and Sales Support
|
Jeremy Young | Director, Partner Strategy
|
Chris Furner | MSP Solutions Engineer
|
Russ Gregory | MSP Specialist
|
Blake Myers | MSP Coordinator
|
Thanks for your feedback!
After a customer decides to use Blumira, you can customize our template slide deck to help you quickly onboard and train them on how to use our app.
Click the following image to make a copy of and then customize our Onboarding Google Slides Template or download the PowerPoint file.
Thanks for your feedback!
Blumira provides aggregate volume discounts to our MSP partners so that you can resell Blumira at healthy product margins. Internal use of your NFR account is free for up to a year. To continue free NFR for longer than a year, you’ll need to add paying customers to your MSP Portal. When you are ready to add clients on a paid edition, then you will commit to a monthly minimum dollar amount via a signed order form. That commitment drives your partner cost for all of your sub-accounts until you increase your commitment via a new order form.
The table below shows the current monthly minimum commitment for each MSP license tier. Your commitment to a monthly minimum determines the pricing for all of your sub-accounts. Tiers do not change automatically.
We bill monthly, in arrears, based on the actual aggregate usage above your monthly minimum commitment across all clients. If usage across all clients does not exceed the minimum, we bill the minimum.
Reference: See Blumira Pricing for information about the features included in each edition.
Sub-Account Pricing |
|||||||
---|---|---|---|---|---|---|---|
Description | Term | Monthly Minimum Commit | XDR Platform |
SIEM + Endpoint Visibility (Equivalent to Advanced+) |
SIEM Pro | Blumira Agent Add-on | Free SIEM |
MSRP $24 | MSRP $18 | MSRP $12 | MSRP $6 | Free | |||
Blumira 2023 MSP Plan - Tier 1 | 1 year | $425 | $10.00 | $8.50 | $5.00 | $4.00 | Free |
Blumira 2023 MSP Plan - Tier 2 | 1 year | $1,875 | $9.00 | $7.50 | $4.50 | $3.75 | Free |
Blumira 2023 MSP Plan - Tier 3 | 1 year | $3,250 | $8.00 | $6.50 | $4.00 | $3.50 | Free |
Blumira 2023 MSP Plan - Tier 4 | 1 year | $6,000 | $7.50 | $6.00 | $3.50 | $3.25 | Free |
Blumira 2023 MSP Plan - Tier 5 | 1 year | $11,000+ | $6.50 | $5.50 | $3.00 | $3.00 | Free |
To get billing started for a customer in your Blumira MSP Portal, email [email protected] or your Partner Specialist to inform them of what your minimum monthly commitment will be. The minimum commitment drives your pricing for all customers under your account. We will send you an order form to e-sign in accordance with your selection.
You can use the Blumira MSP Price Calculator (XLSX file download) to determine the pricing for Blumira editions that include the Blumira agent. These editions - Advanced+, XDR Platform, and SIEM + Endpoint Visibility - include 1 agent per user, but you can calculate for additional agents if needed. The calculator helps with determining the maximum deployable agent count and the total cost.
Tip: Consult your Blumira order form to determine which edition(s) apply to your MSP.
Thanks for your feedback!
Blumira bills MSPs monthly, in arrears, based on actual usage above a minimum commitment. The MSP commitment to Blumira is annual and breaks into 12 monthly minimum commitments. When actual usage across all of your customers exceeds your monthly minimum commitment, we bill for actual usage.
Important: Blumira charges per user, with a total user count that refers to the number of knowledge workers each of your customers has.
We send you one invoice each month that is based on the number of billable users for all sub-accounts that are on paid editions. A snapshot of the accounts tab of your MSP Portal is taken on the last day of each month to capture the number of users. You are responsible for the accuracy of the user counts and editions of your accounts. We will send a billing report that shows details for each sub-account.
After you add a credit card, you have the option to set your invoice to autopay.
Thanks for your feedback!
If you have questions about your billing, please contact Blumira at [email protected].
Thanks for your feedback!
To update the billing email address for your organization:
Thanks for your feedback!
View Blumira's current operational status on this status page.
Thanks for your feedback!
Below, we provide several tips to help orient you within the app and ensure your success as you start using Blumira as an MSP.
The videos in these articles can help you to visualize how to navigate the app:
Follow the steps outlined below to connect your data sources to send logs to Blumira, start receiving findings, and add other users who will be using Blumira with you.
Task |
Link |
Est. Time |
Description |
Notes, Tips, and Tricks |
Set up Blumira Cloud Connectors for your NFR |
Link |
varies |
See the full list of Cloud Connectors. |
Follow each article's instructions to configure the external app and gather the API credentials to use in the Cloud Connector. |
Deploy Blumira Agent for endpoints |
Link |
5 min |
Collect logs from your endpoints for the supported platforms noted in the installation guide. |
NFR accounts can deploy up to 5 agents. Also see Activating Blumira Agent in your NFR account and sub-accounts. |
Configure email alerts to your ticketing tool |
5 min |
Notifications are sent via email, voice, and text alerts. With the Monitor role, you can set up a notification-only profile that will route email alerts to your PSA. For ConnectWise Manage customers, follow these instructions to set up a parser for Blumira alerts. |
If you'd like to receive findings in MS Teams, follow these instructions. Important: Notifications about Blumira findings provide only a summary. You must follow the link in the notifications to view full matched evidence and act on the remediation workflows in the app. |
|
Add teammates who will need access to remediate workflows |
5 min |
Use the MSP portal to add users and assign them to accounts. Users added in Blumira as app users are unrelated to billable user counts. |
Since access to Blumira requires MFA, and Responders are assigned for chain of custody auditing, any employees who will be responding to Blumira findings should be added as users with the appropriate role. |
|
Set up a Blumira sensor on Ubuntu |
20 min |
Set up an Ubuntu host that will be used for the Blumira sensor that connects to services and collects your logs. Suggested requirements for sensor host:
Steps for installing the Blumira sensor are included. |
For the best performance, we recommend using a virtual machine. It can go anywhere that makes sense depending on the network. They are frequently added to a server in a data center that has spare VM space. They are also commonly placed in Azure, AWS, etc. It just depends on the network. Tip: Take a snapshot of the VM before running the curl script, and use it as a template for streamlining future sensor rollouts. |
|
Add a honeypot module to your Blumira sensor |
1 min |
The sensor doubles as a log shipper and a Honeypot. Follow the docs to run our Dogemira script, which creates a honeytoken in your AD Domains for visibility into Kerberoasting and AS-REP roasting behavior. |
Name the Honeypot something like "DiskStation" to make it enticing. Tip: The Honeypot is an excellent way to demo the SIEM. You can run live detection tests on it and see findings show up in real-time. |
|
Send firewall logs to the sensor |
5 min |
For most firewalls, configuring logging entails sending Syslog from your firewall to the IP Address of the Blumira Sensor over port 514. Check the documentation for guidance on your specific brand of firewall. |
Ensure that you follow the documentation. Our parsing relies on receiving the logs in the expected format. |
|
Enable enhanced Windows logging |
and |
25 min |
Deployment of our Advanced Logging GPO and Honeytoken script can further enhance Blumira’s threat detection capabilities on Windows endpoints. |
|
Connect other relevant modules |
varies |
Check out our documentation page and Deploying Blumira for our latest integration list. We continue to add more over time. Data ingestion is unlimited, so the more security-relevant data, the better. |
||
Add your customer accounts |
varies |
Add your customer tenant accounts directly in the app using the MSP Portal. |
For bulk upload, download the Account Upload Template (CSV), fill it out, and return it to [email protected]. Our team will then import and create all the customer accounts in bulk for you. | |
Review pricing information |
|
Information about pricing tiers, what a billable user is, and other specifics that help you understand the MSP pricing structure and billing process. |
||
Review additional documentation |
|
|
Some of these articles are relevant to all customers and not just to MSPs, so they are hosted on the general support site. Some articles are in the partner support site because the information is specific to MSPs. |
Thanks for your feedback!
As an MSP Administrator, you can use the MSP Portal to see and manage your customer accounts directly in the app. In the MSP Portal, you can:
Watch a video walk-through of the MSP Portal here: MSP Portal Walk Through.
Thanks for your feedback!
The following video is a demonstration of the Blumira Advanced edition and how MSPs can use it:
Thanks for your feedback!
As an MSP with an NFR account, you can use Blumira’s SIEM features for your own organization’s security practices while also managing your customers’ Blumira implementations. When Blumira creates your NFR account, it is considered the top-level parent account from which you can manage your own deployment and the deployment for each of your customers.
Some MSPs have internal controls, separated helpdesk and IT teams, or data security reasons for which they need to limit access to their organization’s log data. Some of their staff members only need access to their customers’ Blumira accounts, which means their organization should not use the top-level NFR account for both customer management and internal use of Blumira.
Deciding if you must separate your internal deployment for logging and detections into your own sub-account depends on the level of visibility of event logs that you want to give your organization’s users.
Important: All app users with access to an organization’s Blumira account have access to view and search log data and findings for the account. To fully restrict a user’s access to data, you must not add a user to the organization.
If you determine that you must limit internal access to your Blumira data, do not configure Cloud Connectors or sensors in the top-level parent account. Instead, use your parent account only for administration of users and sub-accounts, and create an internal sub-account dedicated to your organization’s use of Blumira’s SIEM features.
To create and use your internal sub-account for detections:
If you have not yet requested an NFR account and know you will need an internal sub-account, email [email protected] and the MSP Team can set up both the top-level account and the internal sub-account for you from the start.
Administrators of an NFR account automatically get access to and administrator-level permissions for the MSP’s top-level account and all sub-accounts. Administrators are the only users with access to the MSP Portal where they can add new users and new customer accounts. Administrators can optionally also have the responder role if they also need to respond to findings in the app.
A user that is granted administrator and responder roles in the MSP Portal is automatically added to all child accounts with both sets of permissions.
If a user is added as a Responder to the top-level account, the user gets responder-level permissions to the MSP account and can be individually assigned to specific child accounts.
Although other roles (Manager and Monitor) exist in Blumira, those are not compatible with user management in the MSP Portal and therefore cannot be used in top-level NFR accounts. Manager and Monitor can be assigned in sub-accounts.
Reference: See the capabilities of each role in About Blumira role for MSPs.
Thanks for your feedback!
Blumira’s Security Operations and Support (SOS) teams are here to support customers who are using any of Blumira's paid plans. Blumira's Free SIEM does not include live support.
To contact Blumira, do one of the following depending on if you are experiencing an emergency:
You can expect to receive an initial response from us within the following timeframes, depending on the priority of the issue and the support hours included with your licensed edition:
The following are our active support hours:
Outside of critical issues, we are not available when certain U.S. holidays are observed, including (but not limited to):
Contacts |
Role |
Contact Information |
Security Operations & Support Teams |
Security Help, Product Support, Troubleshooting |
Click Support in the lower-right corner of the screen |
Thanks for your feedback!
Below are some examples of the frequently seen detections across our customers that you might see once you get started. Keep in mind that detections vary based on the integrations that are sending logs. Blumira has hundreds of pre-tuned detections, and our Incident Detection Engineering team adds more every week.
Thanks for your feedback!
The table below displays the different MSP user roles that are available in Blumira, with a list of each of their capabilities.
Notes:
Feature/Capability |
MSP NFR Account |
Sub-Account | |||||
Administrator |
Responder |
Administrator | Manager | Responder | Monitor | ||
MSP Portal |
Accounts |
✅ |
🚫 |
🚫 |
🚫 |
🚫 |
🚫 |
Users |
✅ |
🚫 |
🚫 |
🚫 |
🚫 |
🚫 |
|
Settings |
✅ |
🚫 |
🚫 |
🚫 |
🚫 |
🚫 |
|
Dashboards |
Summary |
✅ |
🚫 |
✅ |
🚫 |
🚫 |
🚫 |
Responder |
🚫 |
✅ |
🚫 |
🚫 |
✅ |
🚫 |
|
Manager |
✅ |
🚫 |
✅ |
✅ |
🚫 |
🚫 |
|
Security |
✅ |
✅ |
✅ |
✅ |
✅ |
🚫 |
|
Monitor |
✅ |
🚫 |
✅ |
✅ |
🚫 |
✅ |
|
Reporting |
Create Reports |
✅ |
✅ |
✅ |
✅ |
✅ |
🚫 |
View Reports |
✅ |
✅ |
✅ |
✅ |
✅ |
🚫 |
|
View Findings |
✅ |
✅ |
✅ |
✅ |
✅ |
🚫 |
|
Act on Findings |
✅ |
✅ |
✅ |
🚫 |
✅ |
🚫 |
|
Assign Findings |
✅ |
✅ |
✅ |
✅ |
✅ |
🚫 |
|
Add/Edit Detection Filters in Findings |
✅ |
✅ |
✅ |
✅ |
✅ |
🚫 |
|
Blumira Agent*** |
View and manage installation keys |
✅ |
🚫 |
✅ |
🚫 |
🚫 |
🚫 |
View and manage agent devices |
✅ |
✅ |
✅ |
✅ |
✅ |
🚫 |
|
Settings |
Manage Blocklists |
✅ |
✅ |
✅ |
✅ |
✅ |
🚫 |
View Blocklists |
✅ |
✅ |
✅ |
✅ |
✅ |
🚫 |
|
Manage Detection Rules |
✅ |
🚫 |
✅ |
✅ |
🚫 |
🚫 |
|
View Detection Rules |
✅ |
✅ |
✅ |
✅ |
✅ |
🚫 |
|
View/Delete Filters in Detection Rules |
✅ |
✅ |
✅ |
✅ |
✅ |
🚫 |
|
Manage Sensors |
✅ |
🚫 |
✅ |
✅ |
🚫 |
🚫 |
|
Manage Cloud Connectors |
✅ |
🚫 |
✅ |
✅ |
🚫 |
🚫 |
|
Manage Users |
✅ |
🚫 |
✅ |
✅ |
🚫 |
🚫 |
Thanks for your feedback!
As an MSP, you can add users to a customer sub-account and manage their user settings (role, contact details, location, notification preferences) all within the Settings section of the Blumira app.
This article is for adding Blumira users who need access to one specific account only, like end users from a co-managed customer for example. Blumira users that work as part of the MSP organization can be managed in the MSP Portal. See Adding and updating users in MSP Portal for more information.
Note: The term "users" in this article refers to the people who will log in and utilize Blumira's features according to their assigned Blumira role(s). This is not the same as billable users.
You must be an Administrator for the organization and have the sub-account registered under your MSP account before proceeding with managing users in the organization. Follow the steps in Adding and updating customer accounts in MSP Portal before proceeding with the steps below.
Currently, Administrators can only add new users to Blumira within the app.
Note: If you get an error while trying to add a user, it is most likely because they already exist in another Blumira account. If you get an error like this, email [email protected] with a description of what you are trying to do and they will help.
To add a user to an organization:
In order to practice strong security standards, we ask that company Admins reset MFA for their Blumira account users.
As an administrator, to reset MFA for one of your Blumira users:
Findings trigger notifications that are sent immediately and according to your users' notification settings. Ensure that your users are able to receive notifications from Blumira to handle findings in an appropriate timeframe. (See About Blumira findings for recommended response times.)
As an Administrator or Manager, you can edit the Notifications your Blumira users receive.
To edit a user's notification settings:
Alternatively, users can open and edit their own Notification Settings from any page within Blumira by clicking the bell icon at the top of any screen.
As an Administrator or Manager in Blumira, you can delete users from your organization's account.
To remove a user:
Thanks for your feedback!
In the MSP Portal, as a Blumira user with an Administrator role in a Blumira NFR account, you can add additional users to the parent account, manage their roles across all accounts, and assign them to customer accounts.
Notes:
The Users section of the MSP Portal provides the ability to add users to your parent and child accounts, and it displays a summary of all the existing users. The user summary table includes the following information:
Tip: To add multiple users at the same time to your NFR account, download the User Upload Template (CSV), fill it out, and return it to [email protected]. Our team will then import and create all the users in bulk for you.
To add a single user to the MSP organization’s NFR account:
You can update an existing MSP parent account users’ information, the accounts they have access to, and their roles in the MSP Portal.
Important: The changes made in MSP Portal impact all of the child accounts the user is associated with. To make individual changes per organization, follow the steps in Managing users in sub-accounts, which are done in the Settings > Users section of the app instead of the MSP Portal > Users section.
To view and edit a user’s roles across all customer accounts:
To edit a user’s details in MSP Portal:
To add or remove a user from multiple accounts in MSP Portal:
Thanks for your feedback!
If a customer wants to stop using Blumira and the sub-account needs to be removed from your NFR account, it is important to notify Blumira by email as soon as possible. First, notify Blumira, then complete the steps below as the account administrator to deactivate logging, findings, and scheduled report notifications.
Determine if the customer plans to stop using Blumira entirely or if they plan to continue to use Blumira on their own or with a different MSP. Including this information in the request helps us to provide continuity of service through the transition period.
Send an email request to [email protected] and CC [email protected].
Important: Always loop in the MSP team ([email protected]) to any conversation where you, as the MSP, or your customer wants to de-provision a Blumira account. Our MSP partners are the administrators and owners of their customers’ sub-accounts, and Blumira requires notification from the account owner prior to performing any changes that impact subscription agreements and billing.
Include these details in the email:
To provide the above information, you can copy and paste this list below into an email and insert the appropriate answers:
Organization: <name>
Current Blumira Edition: <Free, SIEM Pro, SIEM + Endpoint Visibility, etc.>
End-of-service date: <date>
Is the account moving? <yes/no/unknown>
De-provisioning complete? <yes/no>
Before we can permanently remove a customer's account, an account Administrator must complete the steps below to help prepare for the appropriate transition. If the customer is canceling and has no plan to continue using Blumira, stop sending logs and alerts before the end-of-service date.
Remove all of the customer's sensors:
Remove all of the customer's Cloud Connectors:
Delete all scheduled reports:
A Blumira Support team member confirms the completion of a full de-provisioning and the date that service ends, if appropriate.
Thanks for your feedback!
Executive Summaries provide a high-level view of the security value Blumira is bringing to your organization by visualizing how much data Blumira received and analyzed, how many findings Blumira generated for suspected threats, and how many findings your team resolved.
These summaries are generated by Blumira at the start of each month and quarter, and they include a rolling trend of the previous 12 months of data for your organization. Copies of previous summaries are stored in the app so that you can download those at any time.
You can also optionally configure a recipients list for emailed copies of the reports.
Reference: See Using Executive Summaries for instructions on how to update these settings.
MSPs can manage the settings for Executive Summaries per account; there are no global or cascading configuration options to bulk change settings for your MSP organization or your sub-accounts. You must configure each account with your desired preferences for each of the following optional settings:
Note: No recipients are selected by default for MSP-managed Blumira accounts. You must add recipients to receive the reports in an emailed format. Consider using a distribution list for your organization to centralize the delivery of Executive Summaries instead of selecting user roles. Even if you do not select any recipients, the reports will still be available in the app for you to download each month.
Thanks for your feedback!
Blumira Agent helps you to detect and respond to threats on Windows endpoints. See these related articles for details about pricing, installing, and managing Blumira Agent on your Windows endpoints:
If an account is licensed for the SIEM + Endpoint Visibility or XDR Platform editions, Blumira Agent is already activated upon upgrading to those licenses. To activate the Blumira Agent features in Advanced Edition, you must click Activate in the informational card that is displayed on either of the Blumira Agent screens.
Important: By activating the Blumira Agent you are agreeing to be bound by the MSP agreement terms and to be billed according to your agent usage.
If you decide to install Blumira Agent on many devices at once, such as with automation, it is important to avoid installing the agent on more devices than the account is licensed to use. Blumira connects only to the number of agents licensed for the account at the time of deployment.
Caution: Using an installation key that is already at its limit will install the agent on your device, but the agent will not connect to Blumira or appear in the app. Installing Blumira Agent on a device that never connects to the app requires additional steps to remove it from the device. See Uninstalling the Blumira Agent service from a device that failed connection.
There are two different values in the app that limit the number of devices on which you can deploy Blumira Agent:
Administrators can verify in the app how agent deployment for an account compares to its agent limit.
In Blumira Agent > Installation, two informational cards at the top of the screen display the maximum number of allowed devices next to the number currently deployed. View which devices have successfully connected to Blumira in the Blumira Agent > Devices screen.
When creating a new key from the Installation page, you are prompted to type a limit for that key. You can edit the value on the installation key detail screen.
When an installation key's device limit is reached:
Thanks for your feedback!
When you are ready to add your first customer, you will need to make a commitment in order to get discounted pricing. Review MSP pricing and How Blumira bills MSPs, decide where you would like to start, and then follow the steps below.
Reference: See Selling the value of the paid Blumira editions to learn more about what customers gain with paid editions.
To add a customer account to your Blumira NFR account:
Tip: To add multiple customers at the same time to Blumira, download the Account Upload Template (CSV), fill it out, and return it to [email protected]. Our team will then import and create all the customer accounts in bulk for you.
If your customer already has a Blumira account and wants you to manage it, please email [email protected] with the following message and CC the customer admin for approval:
You can view and manage the details of your sub-accounts in Accounts (MSP Portal > Accounts). This is also where you can quickly add members of your MSP organization to the sub-account.
To edit your customer’s account information and assigned users:
Thanks for your feedback!
You can find the documentation for all Blumira integrations on our customer support site in the Deploying Blumira section. These documents might not contain details that are specific to MSPs. If you have suggestions about how we can improve the instructions that we provide for MSPs, please let us know.
Thanks for your feedback!
You can send Blumira's finding notifications and scheduled reports to your professional services automation (PSA) system, such as ConnectWise Manage, Datto Autotask, or N-able.
Tip: See Parsing Blumira findings in ConnectWise Manage for information about how to parse and route tickets based on customer account information.
Most MSPs designate an email address that can be used for creating tickets via email, such as [email protected]. You can continue to use this same email address, but some MSPs prefer to create a separate email address for automated alerts from security tools. If you decide now to use your primary ticketing email address with Blumira, you can change it later.
After you determine which email address to use to receive notifications from Blumira, you must create a notification-only user in your account.
To create a notification-only user account:
This new user, by default, receives notifications about all Blumira findings, which then appear as new tickets in your PSA tool. If you want to customize the notification settings for this user (i.e., only receive notifications for specific types of findings or priority levels), you can do so in Settings > Users > Edit > Edit User Notifications.
Note: When you create the new user account using your ticketing email address, you will receive a new user welcome email as a ticket. It is not necessary to activate this user account in order to receive notifications.
You might find it helpful for scheduled reports to be sent directly as a ticket, to notify IT staff of available reports and assign work to the appropriate internal resource. If you wish to do this, as mentioned at the top of this article, first determine what email address you wish to use.
To send scheduled reports to your PSA:
Thanks for your feedback!
As an MSP with multiple customers in Blumira, you may want to associate the Blumira finding email notifications to the correct customer in your professional services automation (PSA) ticketing queue. You can leverage the customer name provided in the email subject line to parse and route email notifications. This article explains how ConnectWise Manage allows some parsing of email based on attributes in the subject line.
The subject line of finding email notifications from Blumira is formatted as follows: Finding_Type | Finding_Priority | Finding_Name @ Company_Name.
Reference:
Ensure your customer sub-accounts' names in Blumira match one of the following values in ConnectWise Manage and follow the same naming conventions used in your PSA:
To update an organization name in Blumira:
Navigate to MSP Portal > Accounts.
In the Accounts table, click the row of the account you want to edit.
In the options menu that appears, click Account Settings.
In the Account name box, type the name of the customer organization.
Important: Major name changes, such as when re-branding, require additional manual updates in our systems. When making major name changes in the app, please also inform us in a message by either sending an email to [email protected] or using the Support button below.
The procedure provided below is limited to parsing only email subject lines.
To add a parser in ConnectWise Manage:
You can wait for your next Finding or you can follow the instructions at Testing Blumira detections to test your parser.
Alternatively, you can simply send an email to the correct address using the subject format: Finding_Type | Finding_Priority | Finding_Name @ Company_Name. Edit the “Customer_Name” to match an existing customer’s name.
Thanks for your feedback!
Thanks for your feedback!
This article explains the valuable features gained by using the paid editions of Blumira. General information about all of the Blumira editions is provided at blumira.com/pricing.
Note: The MSRP is not the partner cost. See MSP pricing for details about our MSP pricing tiers.
The table below includes more information about the features gained by using the paid editions of Blumira.
Category |
Additional Features with Paid Editions |
Security Operations and Technical Support |
Product and security support are available only to the paid editions. |
Additional operational dashboards that provide detailed insights to security and management teams. |
|
Data retention |
Longer periods of data retention:
|
With the paid editions, you can add filters to customize our detection rules so that findings are not generated for known and safe conditions. | |
|
|
Blumira's dynamic blocklists help you to reduce your overall attack surface and by providing your next-generation firewall (NGFW) with a regularly-updated aggregate of blocklist and threatlist data. Use XDR Platform edition to automate blocking for faster response. |
|
The Blumira honeypot, an XDR Platform edition feature, deploys a fake NAS DiskStation into a container on your sensor. This provides enough functionality to catch most attackers who are not rather advanced, and it is especially protective against insiders who might be probing internally. |
|
|
|
Create custom reports and schedule reports to be delivered via email at a frequency of your choice. |
Thanks for your feedback!
When you are preparing for your next quarterly business review or another executive-level meeting, use Blumira's Executive Summaries to show the value that Blumira is bringing to your customers.
For more details about these monthly and quarterly summaries, see Using Executive Summaries.
Thanks for your feedback!
Thanks for your feedback!
This video provides an overview of Blumira Free:
You can also download this PDF to show your customers what they receive with Blumira Free.
Thanks for your feedback!
Download the following PDF to read Blumira's 2022 report on the State of Detection & Response:
Thanks for your feedback!
The following infographic, Critical Security: Logging, Detection & Response is great to leave behind after a meeting:
Thanks for your feedback!
The following are case studies that our partners and customers have shared about how their organizations have benefitted from Blumira:
Thanks for your feedback!
Some prospective customers might not know why they might need a SIEM solution, so beginning the sales process might involve educating them about the problem that it solves. You can use the Blumira website's glossary of terms, which includes commonly-asked questions about SIEMs and the value that they provide, to help answer these questions for your customers.
Thanks for your feedback!
Blumira’s modern security platform helps your organization to easily meet and exceed compliance requirements for logging, monitoring, threat detection and response. The articles linked below explain how Blumira supports your compliance efforts.
Reference: You can find all of these articles at blumira.com/compliance.
Thanks for your feedback!
Thanks for your feedback!
You can download the following PDF to review the value of Blumira:
Thanks for your feedback!
You can use the following one-pager to provide prospective customers a quick overview of the value of Blumira for small and medium businesses.
Click either image below to download the file as a PDF:
Thanks for your feedback!
You can download this PDF to view a data sheet that describes Blumira's comprehensive security coverage for threat detection.
Thanks for your feedback!
You can download this PDF to understand how Blumira's detections identify the top MITRE ATT&CK techniques to help you and your customers respond quickly to contain them.
Thanks for your feedback!
Thanks for your feedback!
You can use the following resources to email customers about Blumira's offerings:
Thanks for your feedback!
You can use the following resources to spread the word on your social channels about Blumira's Free SIEM:
Thanks for your feedback!
The Blumira Style Guide (PDF) is a brief overview of the Blumira logos, fonts, colors and secondary colors and more to help you understand how to present the Blumira brand in your marketing and sales materials.
Thanks for your feedback!
Some partners like to include Blumira's logo in their sales and marketing materials to help highlight Blumira as one of their product offerings.
You can download the following .zip files, which contain Blumira's logos in both PNG and EPS formats:
Thanks for your feedback!