ESET and Sekoia Partner to Strengthen AI-Driven Cyber Threat Detection and Response

ESET,  a leader in cybersecurity solutions and services, announced an integration of ESET with Sekoia , a leading provider of detection and response solutions, to enhance the security resiliency of organizations.

These days, security teams are facing vast amounts of pressure to have their fingers on the pulse of all things security, adjusting their workflows to detect and contain threats as quickly as possible, and doing so across multiple tools and data sources. However, when endpoint alerts are isolated from these broader workflows (and critical context), investigations tend to take longer. This can create further issues down the line, where this complexity gives way to alert fatigue, missed detections, and in the end, incidents or potentially even a data breach.

ESET, keen on solving this problem, laid down foundational efforts to make the ESET PROTECT platform comprehensively simple, with a focus on ease of use and visibility. The same idea spurred the development of our integrations, where each solves a different security dilemma, thus venting pressure from select SOC workflows.

Sekoia’s mission—offering businesses and public organizations a scalable non-disruptive AI SOC platform to deliver the best protection technologies against cyber threats—echoes our own, which is why integrating makes perfect sense.

On that note, ESET PROTECT’s integration with Sekoia Defend brings endpoint protection and AI-driven detection together in a coordinated workflow. By forwarding endpoint telemetry and alerts from ESET PROTECT to Sekoia Defend, the integration enables enriched correlation, advanced detection logic, and automated response actions. This synergy helps SOC teams resolve incidents faster and more efficiently.

“The integration between Sekoia Defend and ESET PROTECT is a powerful combination for SOC teams. By uniting ESET’s rich endpoint telemetry with our CTI-driven detection and automated response capabilities, we are giving analysts the critical context they need to cut through the noise and respond to threats at machine speed. This partnership reinforces our commitment to building an open, interoperable security ecosystem and providing organizations with the autonomy and advanced capabilities necessary to defend against today’s sophisticated cyber threats.”

– Vikraman Selvarajan, Global Director of Strategic Alliances, Sekoia

The way the integration works is that ESET PROTECT (Cloud or On-Prem) exports endpoint telemetry in JSON format via secure syslog (TLS). Events are sent to a configured forwarder, which includes the Sekoia intake key, and securely forwards data to Sekoia Intake. Within Sekoia Defend, events are parsed, normalized, enriched with CTI, and processed through detection rules. Correlated alerts are escalated with full context, enabling analysts to investigate incidents and initiate automated response actions through integrated playbooks and ESET PROTECT APIs.

“At ESET, we put our customers at the center of everything we do and building an open security ecosystem with like minded partners is a core part of that commitment. Security leaders across enterprises, SOCs, and MSSPs are under constant pressure to simplify operations without sacrificing visibility or protection. By integrating ESET PROTECT with Sekoia Defend, we combine our research driven endpoint telemetry with Sekoia’s advanced XDR capabilities, delivering greater context, faster response, and more effective threat management. As two European cybersecurity vendors, we’re also proud to support organizations that value trusted, ‘Made in EU’ technologies.”

– Wolf Schumacher, Vice President of Global Partnerships and Alliances, ESET