Skip to content

Detection Modes

Coro offers two modes of detection, depending on your subscription level:

Detection modes

Mode Description
Detection Only Coro detects suspicious events and presents raised tickets in the Console for visibility only. No remediation is available or performed, and tickets are automatically closed after a period of time.
Detection and Response This mode includes detection and a full range of automatic and admin-driven remediation capabilities.

In both modes, Coro tracks activity in the Activity Log for audit purposes.

To discuss the mode best suited to your needs, contact your sales representative or get in touch with Coro Support (via email at or through the Submit a support request link at the top of the page).