As of November 2025, we’re no longer accepting new customers for the Co-Managed Sentinel Subscription. However, we continue to support existing customers of the service.
Zscaler MDR’s Co-Managed Sentinel Subscription is an annual subscription that provides ongoing management of the health, analytics, and administrative operations for your Microsoft Sentinel environment. It includes three key features needed to maintain a functional and healthy Microsoft Sentinel instance:
Ongoing Health Checks
Zscaler MDR will build and deploy a series of rulesets and workbooks to establish a baseline then monitor the health and operational status of your Microsoft Sentinel instance. Zscaler MDR staff will then alert you if we detect any issues. We’ll also meet with you monthly to conduct an overall health check review of your Microsoft Sentinel environment.
Analytics
Zscaler MDR will conduct ongoing development of analytic rulesets and threat hunting queries for your Microsoft Sentinel deployment based on current threats identified by our detection engineers and intelligence operations. We’ll conduct any necessary tuning of the analytics and deploy updates on a quarterly basis.
Management Support
The subscription includes a package of 20 Microsoft Sentinel Management Support hours per quarter (for a total of 80 hours per year) to be used for the following activities:
Log Source Management
Upon request, Zscaler MDR will facilitate log ingestion into your Microsoft Sentinel instance by leveraging Microsoft and third-party data connectors and build out any necessary data parsers.
Automation and Visualization
Upon request, Zscaler MDR will update or create new automations and visualizations. These activities include building out or refreshing existing workbooks, dashboards, playbooks, and automations within Microsoft Sentinel.
Custom Analytics
Upon request, Zscaler MDR will create custom analytic rulesets and threat hunting queries for Microsoft Sentinel based on your unique requirements. Zscaler MDR will conduct any necessary tuning of the custom analytics to your Microsoft Sentinel deployment.
Health Check Support
Upon request, Zscaler MDR will provide support to address issues identified by the Health Checks.
Guided Support Option
Upon request, Zscaler MDR, will assign our experts to work alongside and upskill your Security team.
Using Management Support Hours
To spend your Microsoft Sentinel Management Support hours, please submit a request to the Zscaler MDR Support team:
Sign in to the Support Center.
Click Contact Us at the top-right.
(Optional) Add CC emails for any other people in your organization you want to notify.
Choose Technical Support from the How can we help you? dropdown.
Choose Co-Managed Sentinel Subscription Customers from the Product dropdown.
Enter your request title under Subject.
Enter a Description of your request.
Click Submit.
Please see the Support Center Guide for more information.