Kaseya’s introduction of four key enhancements—the launches of Kaseya SIEM and MDR, AMSI integration with Datto EDR, and Windows ARM64 support for ransomware and rollback—are designed to help MSP operations become more streamlined, more secure, and easier to manage as they grow.
These updates span endpoint security and device coverage, giving MSPs stronger protection across modern environments while making it easier to maintain consistency. The goal is simple: deliver better security without adding complexity. This is critical because security has become one of the biggest drivers of MSP growth. The opportunity is there, but expectations are higher; clients expect MSPs to take ownership of cybersecurity from end to end. That includes everything from phishing and ransomware to the growing number of identity-based attacks.
Delivering consistent protection across every endpoint and environment is no longer optional. That’s why these key developments are making a real difference—here’s how.
Deeper visibility into hidden threats
The integration of Windows Antimalware Scan Interface (AMSI) into Datto EDR gives MSPs better visibility into script-based activity, including tools like PowerShell often used in more advanced attacks. Instead of relying only on file-based detection, suspicious behavior can be identified earlier—before it executes.
That visibility is important because many modern threats are designed to blend in with normal administrative activity. Spotting those patterns sooner helps MSPs respond faster and reduce risk.
A more unified view of security
One of the biggest challenges MSPs face today is that security incidents rarely stay confined to a single system or device. An email compromise can result in a breach, which can quickly spread to endpoints, cloud apps, and the network itself.
That’s the problem Kaseya is aiming to solve with the launch of Kaseya SIEM.
Instead of forcing MSPs to sort through disconnected alerts across multiple tools, Kaseya SIEM pulls data from endpoints, cloud applications, email, firewalls, and networks into a single view. The goal is to help MSPs identify related activity across environments faster and with more context.
The platform also gives MSPs flexibility in how they operate. Teams can investigate incidents themselves, rely on SOC support when needed, or combine both approaches depending on the client environment. Detection rules can also be customized over time, helping MSPs fine-tune protection without losing visibility or control.
It’s also designed to reduce one of the biggest operational headaches in cybersecurity: alert fatigue. By combining AI-driven correlation with human analyst review, the platform helps surface the incidents that require attention, instead of overwhelming teams with noise.
Extending Protection to Newer Devices
Kaseya is also expanding protection across a wider range of devices. With added support for Windows ARM64 systems in both Datto AV and Datto EDR, MSPs can apply the same security policies to newer hardware, without exceptions or additional tools.
As environments become more diverse, consistency becomes harder to maintain. Broader coverage makes it easier to standardize protection, improving both efficiency and overall security posture.
Ransomware detection and rollback capabilities are now included as part of that same support, giving MSPs a built-in way to recover systems if an attack gets through. Instead of relying on separate tools or processes, recovery becomes part of the same workflow as detection and response.
That means faster recovery from encryption attacks and a more reliable way to get systems back up and running.
Expanding around-the-clock security coverage
As security environments continue to expand, many MSPs are also reevaluating how they manage monitoring and response at scale. Around-the-clock coverage is becoming harder to maintain internally without adding significant overhead.
That’s where the launch of Kaseya MDR comes into play.
Built as a complete evolution of RocketCyber, Kaseya MDR combines AI-assisted threat detection with human-led response across endpoints, Microsoft 365, and firewalls. Backed by a global SOC operating out of Florida and Ireland, it gives MSPs a way to extend security monitoring and response coverage without dramatically increasing internal resources.
Additionally, unlike MDR platforms that require MSPs to replace their existing security stack, Kaseya MDR offers additional flexibility by integrating with both Kaseya and third-party EDR tools. That allows teams to maintain protection across different client environments, without forcing migrations or standardization to a single vendor.
It also helps reduce the operational burden that often comes with MDR. AI-driven triage and event correlation reduce alert noise before incidents ever reach analysts, allowing teams to focus on validated threats instead of sorting through hundreds of raw alerts.
When action is needed, response measures like device isolation, account locking, and session revocation can be executed directly through the SOC, allowing incidents to be contained faster and with less manual intervention.
Enhancing agility and security for MSPs
Cybersecurity has always been a top-of-mind issue for MSPs, but with bad actors getting smarter with AI-powered tools, it’s more pressing than ever. These new innovations help to bring detection, protection and recovery into a single, consistent model, making it easier for you to focus on delivering value to your clients, not hunting for threats in the dark.
It isn’t just about having advanced tools. It’s about delivering security in a way that’s easier to manage, easier to scale, and more aligned with what clients expect today.
