Hexnode expands XDR in ANZ with macOS support, threat intelligence and automated remediation
Hexnode, the enterprise software division of Mitsogo, has expanded its Hexnode XDR product with additional threat detection, alert prioritisation and remediation features, alongside new support for macOS.
The update targets a common operational challenge for security teams: turning detection into action quickly enough to reduce risk on affected endpoints. Hexnode said the new capabilities are designed to reduce manual steps between identifying suspicious activity and applying corrective actions.
The company framed the release against what it described as a widening gap between AI-driven attacks and response capability in Australia and New Zealand. It cited survey findings that 14% of organisations in Australia and New Zealand could respond to an AI-automated attack at machine speed, with most still relying on partly or entirely manual response processes.
“We built Hexnode XDR around one complaint we heard constantly: security tools are good at telling you something is wrong, and bad at helping you do anything about it. More alerts was never the request. Fewer steps between the alert and the fix — that was the request,” said Apu Pavithran, CEO and Founder of Hexnode, during the HexCon26 opening keynote.
Hexnode said its XDR platform integrates natively with Hexnode UEM, combining threat detection, device intelligence and endpoint management. The company said this is intended to link investigations with actions on devices, such as containment and remediation, rather than requiring separate workflows.
In detection and triage, Hexnode said the latest version of Hexnode XDR brings threat signals and contextual data into a centralised incident view. New or highlighted capabilities include integrations with Mandiant (Google Threat Intelligence) and Recorded Future for cross-referencing endpoint activity against external intelligence, sandbox analysis for examining suspicious files, anomaly detection for unusual activity, and AI-assisted investigation through Hexnode Genie AI, which provides plain-language alert summaries and recommendations.
The update also adds alert prioritisation, ranking alerts by severity and urgency, and asset scoring, which assigns endpoints a dynamic risk score. Hexnode said administrators can configure exclusions for trusted files, applications and processes in an effort to reduce false positives.
For response, Hexnode said Hexnode XDR now supports endpoint isolation intended to allow one-click network isolation while maintaining management access through Hexnode. It also includes vulnerability management that identifies missing patches and vulnerabilities, with remediation carried out through Hexnode UEM, and automated remediation that triggers predefined fixes based on configured rules and policies.
Hexnode also pointed to custom dashboards aimed at keeping key metrics visible to different roles. It said integrations with Splunk and QRadar can connect Hexnode XDR with existing SIEM platforms for broader investigation and reporting.
The company said alert prioritisation, asset scoring and automated remediation are intended to provide the context and response framework for future AI-assisted SOC workflows, with deeper AI-assisted investigation and orchestration planned across Hexnode XDR and the wider Hexnode platform.
About Author
