No more typing reviews! Try our Samantha, our new voice AI agent.
reviewer2175261 - PeerSpot reviewer
Director of Information Security at a healthcare company with 11-50 employees
Real User
May 8, 2023
Improved our organization by multiplying our security forces and offers customizable event detection and response
Pros and Cons
  • "The case interface is Binary Defense MDR's most valuable feature."
  • "We found a couple of bugs in the user interface."

What is our primary use case?

We are a small cybersecurity team for a medical advice company. We use an MDR platform, which gives us access to a team of security analysts in a SOC. The analysts send us daily reports of security events, which they rate as critical, high, medium, or low. They also work with us to determine what threats we need to be most concerned about, such as those that could impact our Google Workspace or AWS environments. The analysts then create playbooks to help us respond to these threats, and they monitor our environment 24/7. We communicate with the analysts via Slack, and they call us if they identify a critical threat. Overall, the MDR platform has been very effective in helping us to multiply the force of our small team.

Binary Defense's cloud-based SIEM solution is fully deployed in the cloud. They collect logs from AWS and Google Workspace and then integrate those logs into their data lake. They then use the cloud to integrate their data lake into their SIM solution. Finally, they put the SIEM solution into a user interface, which is where users interact with it.

How has it helped my organization?

Binary Defense MDR is primarily integrated into our AWS environment, but it is made up of multiple components. My technical lead said that it was very easy to integrate into our Google Workspace environment. I did not have much involvement in the integration, but my subject matter experts said that their integration was very seamless.

Binary Defense offers customizable event detection and response. For example, if we have a confidential file, we can tell Binary Defense to flag any emails or other communications that contain certain keywords. This type of customization allows us to focus on the specific events that are most important to us. Binary Defense also offers 30-day retrospectives and monitoring for employee terminations, so we can be sure that our data is protected.

The Open XDR strategy made my life so much easier. It helped us to secure our infrastructure from end to end so that we can detect and remediate threats quickly and effectively. One of the biggest benefits of Open XDR is that it allows us to rely on a single partner to monitor our systems. This frees up our time so that we can focus on other aspects of security. Another benefit of Open XDR is that it is incredibly communicative. We have a Slack channel where we can quickly and easily communicate with our partners. This has been invaluable in the event of critical incidents.

Binary Defense MDR improved our organization by multiplying our security forces. They filled a huge security gap by providing end-to-end monitoring of our Google Workspace and AWS environments. This gives us peace of mind knowing that someone is watching our systems 24/7.

Binary Defense MDR significantly improved our security posture. They filled a major blind spot in our security program by monitoring our systems 24/7. They have also been a valuable asset to our team, helping us to pass our SOC 2 audit with flying colors. Additionally, they helped us to comply with a variety of regulatory requirements, including those of the FDA, GDPR, and HIPAA. Overall, Binary Defense MDR has been a tremendous asset to our organization and has helped us to improve our security posture significantly.

We have a dashboard that shows us all the cases that Binary Defense handles. Without looking at it, I would say they handle 90 to 98 percent of our low-level alerts. This means that when they bring something to my team or me, we know that it is worth looking at. They have already looked at it and determined whether or not it is something that needs to be escalated to the client. If it is not, we can simply mark it as closed and move on. We only need to analyze about three percent of the alerts that Binary Defense looks at. This is because they automate the process of reviewing low-level alerts, freeing up our team to focus on more complex issues.

Binary Defense MDR significantly reduced our IT team's workload. We could not do without them. Their services allow us to monitor a large number of alerts seamlessly and completely automated. Without Binary Defense, we would not be able to maintain our strong security posture.

Binary Defense MDR saved our organization a significant amount of time. We no longer have to spend hours manually searching for and investigating security threats. Instead, Binary Defense's team of experts does this for us 24/7. This freed up our time to focus on other important tasks, such as developing new products and services.

What is most valuable?

The case interface is Binary Defense MDR's most valuable feature. When we receive an event that needs to be escalated to the client, Binary Defense MDR handles 90 to 95 percent of the cases internally. This saves us the time and effort of having to manage our own case or event management system.

What needs improvement?

We have great visibility into their Google Workspace, but there are some limitations. I'm not sure if they're on our end or Google's end, but we haven't been able to integrate our Gmail system with Binary Defense's. We did the analysis, but it would have been too cumbersome and noisy. So we're monitoring Google on our side. That's something we haven't been able to automate yet.

Buyer's Guide
Binary Defense MDR
November 2026
Learn what your peers think about Binary Defense MDR. Get advice and tips from experienced pros sharing their opinions. Updated: November 2026.
921,714 professionals have used our research since 2012.

For how long have I used the solution?

I have been using Binary Defense MDR for one year.

What do I think about the stability of the solution?

Overall, Binary Defense MDR's stability is good. We found a couple of bugs in the user interface. The service has never been down, and they are very communicative about when they will be doing maintenance, as we would expect. This maintenance is very limited. When I found bugs or clunkiness in the user interface, I communicated the issues to Binary Defense, and they were fixed quickly.

What do I think about the scalability of the solution?

Binary Defense integrated so well with our organization that we have not needed to scale our security operations. I am hesitant to speculate on how their service would look for a giant enterprise, but for our medium-sized organization, they are perfectly scaled to our environment.

How are customer service and support?

We have had very few interactions with Binary Defense's support team. I think there have been two or three instances. In one case, they fixed a problem very quickly, within a couple of hours. In the other cases, we just asked them clarifying questions. I mainly work with one person, who is one of their leads. I deal with him several times a week. If I have a problem, I just tell him about it and he usually fixes it right away. Only a couple of times have I had to submit a ticket, and that was only because I didn't want to bother my contact. In those cases, they were still very responsive and fixed the problem quickly.

Overall, I have been very impressed with their support team. They are always quick to respond and they are always willing to help.

Which solution did I use previously and why did I switch?

Before we brought in an MDR provider, we were very scattered. We had to look at three different screens on AWS, two different screens on Google Workspace, and five or six different tools for vulnerability scanning. This required a lot of time and attention, and we weren't able to correlate all of the information together. Even for minor alerts, we had to look in three different places on two or three different platforms. Now that we have Binary Defense, we have a single pane of glass for all of our security information. This saved us a lot of time and effort, and it made it much easier to identify and respond to threats.

How was the initial setup?

The initial setup was very straightforward. From a technical perspective, we integrated the system in a couple of days. Binary Defense then had to do some work on the back end, which took a few weeks. During that time, we had weekly meetings for one or two hours each day to discuss the integration. This was mostly to dial in different systems and get our team ready to work. The technical integration was straightforward, and we were able to migrate to their newest system in just two hours.

As the director of information security, I organized the team on our end and made sure we had the right engineers. It took two engineers to complete the integrations. We had one engineer for AWS and one engineer for Google Workspace. They did independent integrations on their systems. I was responsible for the meetings and other tasks.

It took a couple of days to get everything wired up. It then took about 20 to 30 days to start getting valid cases and to denoise the data. We are constantly denoising, but I would say the technical integration took a couple of days. The full integration, however, took about 30 days to really get the engine running. During that time, we were meeting with Binary Defense every week for about two hours. Now we meet with them every other week for an hour to discuss high-level cases. We have constant communication with them. Overall, I would say the full baked-in integration took about 30 days.

What about the implementation team?

I consider Binary Defense to be part of my team. I interact with two of their employees on a regular basis. They are as communicative in our Slack channel as I would expect from any of my internal subject matter experts. I literally treat them as part of my team. For me, they are an absolute partner. They don't just disappear once we're integrated. They are a very dedicated team. I'm actually surprised by how dedicated they are. They are a fantastic partner for us.

What was our ROI?

Binary Defense MDR saved us at least two or three full-time analysts. We would have needed to hire these analysts in-house, as well as a security management tool like Splunk. These costs would have been significant.

In addition to the financial savings, Binary Defense MDR has also given us peace of mind. We now have much better visibility into our network systems, which was not the case before. This has been a valuable asset.

If I had to cut any budget, Binary Defense MDR would be the last line item I would cut. It is a valuable service that saved us money and gives us peace of mind.

What's my experience with pricing, setup cost, and licensing?

After we acquired this platform, we met with a number of different vendors. Binary Defense came in with a proposal that was surprisingly affordable. In fact, we were able to recoup the cost of their services within a short period of time. This is because Binary Defense is able to provide the same level of security as a team of two or three in-house analysts but at a fraction of the cost. As a result, Binary Defense is saving us an estimated $250,000 to $300,000 per year.

What other advice do I have?

I give Binary Defense MDR a nine out of ten.

We are a small to medium-sized organization. For us, the pricing was very advantageous. We were incredibly happy with the pricing. I think that for a larger enterprise, the cost would be considerably more. However, given the pricing that we have, I would imagine that it is very competitive pricing for an enterprise customer. I would have no problem recommending Binary Defense to a company of my size or, say, twice my size. However, for larger enterprises, I would recommend doing your due diligence. I don't know how Binary Defense's pricing scales, but I'm sure they have a system in place. I just don't know what that pricing would be. For our size organization, I would pay double the price and still have an advantage. Overall, I was very happy with Binary Defense's pricing.

We integrate two of our main systems: our corporate system, which is Google Workspace, and our main production environment, where we interact with customers. Our product is deployed on AWS. These are our two locations. However, they are all brought together into a single unified platform, which is the Binary Defense UI that we interact with.

My manager is a Cyber Risk and Control Manager. He does the initial triage of incidents. I then review the incidents that he has triaged. I reach out to three different stakeholders in the system, and I raise issues with them a few times a week. We do this via Slack. If we need to investigate an incident, the stakeholders log into the user interface. In addition, we have a few other people who have access to the system in case of an emergency. I would say that there are about five people who use the system regularly. My manager and I use it every day, and the other three people use it a few times a month. We are able to triage most incidents via Slack.

Maintenance on our end is a process of removing noise. We are constantly adjusting settings and making sure everything works properly. This includes our biweekly phone calls with the platform's developers, who are always working to improve the system. We believe that maintenance is essential to get the most out of the platform, and we are committed to investing the time and resources necessary to keep it running smoothly.

For organizations that don't think their MDR is an extension of their team, given the size of the organization, if they are not getting the quality of service and the quality of reports and cases, I would immediately recommend Binary Defense. I would share our experience with them and give them access to our reports and cases. If they are not getting the same quality of service, I would recommend Binary Defense as a perfect fit for our size organization.

No system like an MDR or a SIEM is perfect. It is only as good as the data that is input into it. Our team must be prepared to work with the MDR provider to ensure that the data is accurate and relevant. The MDR provider cannot read our minds and know what is important to us. They need our help to filter out the noise and identify the real threats.

To get the most out of our MDR solution, we should be prepared to dedicate some time to working with the provider. This may include:

  • Meeting with the provider regularly to discuss our security needs and goals.
  • Reviewing the alerts that the provider generates and providing feedback on their accuracy.
  • Working with the provider to develop and implement remediation plans for any threats that are identified.

MDR is not a hands-off solution. It is a partnership between our team and the MDR provider. By working together, we can create a more secure environment for our organization.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
PeerSpot user
Erik Bailey - PeerSpot reviewer
CIO at Anaqua
Real User
Apr 4, 2023
Fully dedicated team looking at security saves us time and, potentially, wins business for us
Pros and Cons
  • "The customization has been the most valuable aspect and was really the reason we ended up selecting Binary Defense. They worked with us to provide exactly the level of support, features, response, and collaboration we needed."
  • "We found that an earlier version of the agent had high memory usage and that was a bit concerning, but we raised the concern with their support team and they immediately replied that they had noticed the same thing and had a candidate fix already available... it totally fixed the issue."

What is our primary use case?

We're using it as a security operations center. Our main product is an Intellectual Asset Management system hosted in a SaaS environment. We have two hosting facilities, one at IBM Cloud and one at Microsoft Azure. We wanted an external provider to watch those servers for any indications of compromise and to immediately intervene if there was anything of concern. 

As we have been growing, we wanted to ensure there are extra measures put in place, and therefore involved an organization that had the security knowledge and the capabilities to work with us in a customized fashion.

How has it helped my organization?

When our clients talk with us about storing their data in our servers, because ours is a SaaS model, they need validation that it is secure. Having this outsourced SOC, Binary Defense, ensures that we can look our clients in the eye and say, "Your data is secure. It is being monitored 24/7/365 by a dedicated team of security professionals." That's huge. We're buying peace of mind and the ability to tell our clients that their data is secure (and we know it's secure because we have a team of experts watching it all the time).

It has certainly improved our security posture. We were a secure organization six months ago but even more so now because of our relationship with Binary Defense. They give us that second set of detection and are looking at everything because that's their job. They're not doing security in addition to other things. They're doing security, period. That laser focus on security adds to our internal security posture. It's now the sum total of the experts within our organization plus Binary Defense.

Another benefit has been the time savings in client security assessments. When we tell a prospect or a client that we're using a managed, outsourced SOC, that saves the back-and-forth of having to justify our internal security operations. They know there's a fully dedicated team looking at security, and that saves us time and, potentially, wins us business that we might not have been able to previously.

What is most valuable?

The customization has been the most valuable aspect and was really the reason we ended up selecting Binary Defense. They worked with us to provide exactly the level of support, features, response, and collaboration we needed. We didn't have to force-fit anything. They were able to customize their offerings specifically for our needs.

The most important thing for us is that, internally, Binary Defense has a toolbox they can use in any way needed and they were able to layer onto the systems we already had in place. They didn't come in and say, "Oh, you have to scrap everything that you already have." Instead, what they said was, "Great, here's what you have and here's what we're going to layer on. We'll combine it all together and give you a unified impression." That was really important to us. We already had a fair number of security tools in place that we like and trust. The fact that Binary Defense could work with them and layer on top of them was huge.

I have been very impressed with the level of partnership, and I don't use that word lightly. They really are a partner. They're not a vendor, they're a partner. Their staff has just been superlative.

Another valuable aspect is that they have an excellent ability to integrate with other applications and tools. We have all the external servers that support our SaaS operations already complete and we're now rolling it out on internal servers, like engineering and development and support servers. I don't think we've had a single issue with compatibility. It just drops in. It's seamless. We don't need to reboot the system when we deploy the agent. The integration is outstanding.

They also bring a solid XDR strategy to the table. Another important aspect of our partnership is that we’re putting our trust in Binary Defense. I trust them, and that's really what this whole thing is based on. They need to earn that trust—and they have. In terms of the threat landscape and looking at issues that come up, they're very solid.

When implementing a system like this, one would expect false positives. It's going to raise issues from normal business operations that are actually fine but just look bad. There are two things to note here. First, the rate of false positives has been quite low and has actually been decreasing over time as Binary Defense learns our operations, which is great. Second, and more importantly, the things they were raising were completely reasonable. For example, we added an administrator to the server and received an alert, which was great, because if a bad actor were to get into the system, it would be detected.

The alerts we've received have been spot-on and we have had zero real alerts, which is a good thing.

For how long have I used the solution?

We have been using Binary Defense MDR for about six months.

What do I think about the stability of the solution?

The stability of the solution has been perfect, other than one issue where an agent had high memory usage, but that has not come back. It's been reliable.

What do I think about the scalability of the solution?

The scalability is fine. We're licensed for 1,400 seats and we're using about three-quarters of them so far, and we're continuing to roll out. There have been no issues with scalability. 

I can't speak to a scenario where you're deploying higher amounts of seats, but certainly, in the hundreds or low thousands, we've had no issues at all.

How are customer service and support?

The technical support is excellent. We found that an earlier version of the agent had high memory usage and that was a bit concerning, but we raised the concern with their support team and they immediately replied that they had noticed the same thing and had a candidate fix already available. Other clients were already testing the fix and found it resolved the issue, and they asked if we would like to test it as well. We said yes and deployed it, and it totally fixed the issue. It then rolled out automatically to the rest of our suite with the next available update. It was seamless.

All software has issues and it's a question of how the provider addresses those issues, and Binary Defense was outstanding.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

This is our first MDR SOC.

One of the reasons we considered Binary Defense MDR in the first place is that we have a several-year relationship with their sister company, TrustedSec. They do things like penetration tests and we have them on retainer for incident response. We envisioned that it would be—and it has actually been—a benefit having our MDR provider related to our security consultants. The relationship between Binary Defense and TrustedSec has been valuable for us.

How was the initial setup?

Our deployment model for the solution is all Azure and IBM Cloud and we use an IaaS model. We have hundreds of virtual machines and we have rolled out the agent to each of them. We're fully a Windows organization, so we've only deployed the Windows agent. We've deployed it to virtual machines in Azure, Azure Government, and IBM Cloud, in various locations around the world.

I directed the team that did the initial setup. It was very straightforward. You run an installer and it's there and you don't have to reboot. It just works. I did this as part of the proof of concept and you're able to see it reporting into the master console within a few minutes. It's very easy. It's very well documented.

The solution doesn't require any active maintenance. It automatically updates. Every month or so I receive an email that says, "There's a new version of the agent. Here are the new features. Yours will auto-update within the next couple of weeks unless you've disabled auto-update." It's basically set-and-forget.

What about the implementation team?

We received the information from Binary Defense but we did the work ourselves, but we did work with them to ensure we were going down the right path. They conducted checks on everything and reported back to us on effectiveness. We validated the approach with the team, but we did the work.

We had two people working on the implementation, but it wasn't full-time. We used an automated tool to push it out. We didn't deploy to hundreds of VMs manually.

What was our ROI?

We haven't yet seen ROI because we haven't had an issue, but these expenditures were approved by our board. It is known that this is money needed to protect the organization and reliably stay in business. 

There is a "peace of mind ROI", that can't be quantified. Do I think we're getting good value for the money? Yes, I do.

What's my experience with pricing, setup cost, and licensing?

The pricing is on target. Working with their sales team on pricing negotiations was a pleasant process. They were very respectful of the constraints we had and I feel that we're paying a fair price.

If you're considering a managed detection and response solution but the cost is an issue, you can pay a fixed amount now or, potentially, a catastrophically larger amount later. There is a saying that there are two types of people in the world: those who have had a hard drive failure and those who will have a hard drive failure. The same is true in cybersecurity. It's not a question of if, but a question of when a security issue will arise. It is incumbent on every IT professional to have as many arrows in their quiver as possible for handling those situations. Ideally, we prevent it from happening, but if something gets through, we must be able to detect it and respond.

What you're buying is peace of mind. You know that even at 3:00 AM on Christmas Eve if something happens, it's going to be taken care of quickly, and that counts for a lot.

Which other solutions did I evaluate?

We evaluated other options but the key reason we chose Binary Defense was the customization. The MDR industry is fairly robust at this point and everyone has pretty similar capabilities. In fact, some of the capabilities of their competitors were actually a little ahead of what Binary Defense has, but the customization and the ability to work with us to fit into our existing environment was what catapulted the company to the top of the pack.

Most, if not all, of the providers we looked at, would work and have the base features we needed, but for our particular environment and the customizations we needed, Binary Defense was by far the best.

What other advice do I have?

We still monitor internally so it hasn't reduced our workload, but it has made us more efficient. It's like putting on a pair of glasses. The world is sharper as a result of the information they're providing us.

With the last six months under our belt, I've been very impressed with the operations, both from a technical perspective as well as from management and executive perspectives.

The most important advice I can give is to make sure you're comfortable with the company and the staff. All of the products that Binary Defense competes with basically do the same thing. They're all good and they're all going to help you. So the top consideration is whether you are comfortable with the people you're interacting with.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Microsoft Azure
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
PeerSpot user
Buyer's Guide
Binary Defense MDR
November 2026
Learn what your peers think about Binary Defense MDR. Get advice and tips from experienced pros sharing their opinions. Updated: November 2026.
921,714 professionals have used our research since 2012.
reviewer2208147 - PeerSpot reviewer
Infrastructure and Security Services Director at a manufacturing company with 1,001-5,000 employees
Real User
Jun 20, 2023
Gives us visibility into current critical security events and improves our time to respond
Pros and Cons
  • "Among the valuable features are the agent, continuous reporting, and dashboard. It has all the features we need and we haven't had to customize it, other than turning on certain features that we wanted."
  • "It's hard to think of anything that they need to improve on, but just to point out something, I would like to see them provide advanced XDR."

What is our primary use case?

We use it to get security notifications. There are only two security people on my team, and monitoring things 24/7 would take a team of 10 or 12. We use Binary Defense to help monitor things for us so that my team can work on the day-to-day security tasks.

How has it helped my organization?

They send us alerts and have done a really good job of eliminating the false positives. Early on, there were quite a few. But as they learned about our organization and the roles of individuals within it, that has drastically gone down. For example, initially, they would say so-and-so ran a script. Now, they know who our sys admins are and that running that script is typical for them.

The benefits are the visibility into current critical security events and the effect on our time to respond. Binary Defense has helped reduce our security alerts because we know where our trouble points are, or if we're missing things, and what we need to deploy. It has given us visibility into what to put in and that is how it has helped us the most. I would estimate it has reduced our security alerts by 60 to 70 percent. It has improved our security posture significantly.

And because they do a lot of the management for us, it has reduced our team's workload. We only have to work on the stuff that's identified as something we need to work on, so it has definitely helped performance.

What is most valuable?

Among the valuable features are the

  • agent and continuous reporting
  • dashboard.

It has all the features we need and we haven't had to customize it, other than turning on certain features that we wanted.

What needs improvement?

It's hard to think of anything that they need to improve on, but just to point out something, I would like to see them provide advanced XDR.

For how long have I used the solution?

I've been using Binary Defense MDR for a little over three years.

What do I think about the stability of the solution?

It's very stable.

What do I think about the scalability of the solution?

We have just under 2,300 agents deployed. I don't know how much it scales. I don't think we rank among the larger sizes of companies, but they thought we were a pretty big organization.

How are customer service and support?

Their support is great. Our experience with them has been very good every time we've had to contact them. They are responsive.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

We did not have a previous solution.

How was the initial setup?

The initial deployment of MDR was straightforward and very easy. It installs automatically and we were pretty impressed with that. They had the right tools to give us to deploy it.

There were three of us involved in the deployment, and that includes me as director of our team, but I didn't do much. It was mostly one technician with some help from another, and it really was done mostly by that one.

There is no maintenance on our side. They automatically update the agents.

What was our ROI?

The return on investment is the amount of time that we're saving and the fact that we're getting a security analyst. Without Binary Defense, we would only have a team of two security analysts. We would need 10 to 12 analysts to do what they're doing and give us 24/7 coverage. Without them, we only have nine-to-five coverage.

What's my experience with pricing, setup cost, and licensing?

The pricing is very good. They are definitely competitive and they were lower at the time that we went with them. That's not why we chose them, but it's always something you have to consider.

You need the right security tool. Cost doesn't matter if it's a little bit higher but it's the right solution for your business. You shouldn't skip on security for costs.

Which other solutions did I evaluate?

We did what we call a "battle card" and compared Binary Defense to CrowdStrike, Sophos, and other leaders. Our team's consensus was that they were the best fit for our organization. Compared to competing solutions, the response times from Binary Defense were equal or better.

What other advice do I have?

We have not done an integration of Binary Defense with other tools. We're looking at integrating it with our help desk, but we don't use ServiceNow. We use BMC Remedy and that's what we have to look into. I don't think any issues with the integration would be limitations of Binary Defense, but there might be with our older ticketing system. Binary Defense can work with many open APIs, if I recall correctly.

They also have a great open XDR strategy for securing infrastructure, although we haven't started using it. Early on, I talked about it with the owner of the company who was part of the technical team. It was definitely on their road map and something they knew they had to do and they were working on it.

Overall, our partnership with Binary Defense is excellent. If someone at another company that is using MDR doesn't think that their provider is an extension of their team, they have the wrong provider. Maybe they don't have Binary Defense, because it shouldn't be that way.

Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
PeerSpot user
reviewer2174550 - PeerSpot reviewer
IT Director at a venture capital & private equity firm with 51-200 employees
Real User
May 8, 2023
Has excellent integration with other applications and tools and is very customizable
Pros and Cons
  • "Binary Defense has a human service department that provides live monitoring for our systems."
  • "I would like to see more frequent check-ins with our security status."

What is our primary use case?

We use Binary Defense MDR as a third-party managed malware protection service. It has visibility into all of our company's devices, and it can automatically report malware events.

Binary Defense has a cloud dashboard, but each of our network devices also has a piece of software that needs to be deployed. We can deploy this software using an executable file or through group policy. Each deployment takes about two or three minutes, so it is a relatively quick process.

How has it helped my organization?

The solution is highly customizable, with a variety of options for deployment and reporting. For deployment, there are a few different options, including on-premises, cloud-based, and hybrid deployment. For reporting, there are also a variety of options, including a dashboard, email reports, and more.

Binary Defense MDR has excellent integration with other applications and tools. We have not experienced any compatibility issues with our many different operating systems and custom software. Binary Defense MDR seamlessly integrated with all of our systems and provided us with accurate and timely reporting.

Binary Defense MDR's Open XDR strategy is a great way to secure our infrastructure from end to end. It allows us to detect and remediate threats without having to do much work ourselves. In the past, we had to manually check and update our security software. Now, Binary Defense takes care of all of that for us. We can simply check reports and dashboards to make sure everything is running smoothly.

The biggest benefit of Binary Defense MDR is that it has freed up my time. As a one-man IT department, I have a lot on my plate. MDR takes care of a lot of the day-to-day security tasks, so I can focus on other things. This has been a huge relief, and it has allowed me to be more productive.

The number of security alerts has not changed, but I am now more confident in the security system, so I don't check them as often.

Binary Defense greatly improved its handling of our organization's security posture. We conducted a cybersecurity audit and went through a cyber insurance process. These measures were a significant part of improving our insurability and overall security score. As a result, we are now better protected from cyberattacks.

Binary Defense MDR helped our IT team save approximately three hours per week.

What is most valuable?

Binary Defense has a human service department that provides live monitoring for our systems. This is probably the most valuable aspect of their service, as it gives us peace of mind knowing that there are people actively watching over our systems and keeping them protected.

What needs improvement?

It would be helpful to have more personal interaction with Binary Defense. Currently, we rely on the system to run in the background and only speak with our security account manager quarterly. I would like to see more frequent check-ins with our security status.

For how long have I used the solution?

I have been using Binary Defense MDR for one year.

What do I think about the stability of the solution?

Binary Defense MDR is stable and reliable in my experience. I have never experienced any downtime or unavailability of the service. Alerts have been consistent and timely.

What do I think about the scalability of the solution?

We do not have much experience with the scalability of this solution. While they do offer other products, we are primarily focused on managed detection and response and security specialist services. As such, we have not yet had the need to scale.

We have three physical locations, and our Salesforce team is spread out across the country. Our company has 80 employees who use Binary Defense MDR.

Which solution did I use previously and why did I switch?

We previously used traditional antivirus solutions but switched to Binary Defense MDR because it was competitively priced and had a good reputation. Binary Defense is a local company to us in Ohio, and we had heard positive things about them from a former company of mine. We decided to switch to Binary Defense MDR based on a combination of factors, including price, reputation, and local ties.

How was the initial setup?

The initial setup is straightforward. We deployed Binary Defense's end-user software to all of our machines, including our computers and servers. We have a number of IUI group policies, which allow us to distribute software to certain machines at once. We also have remote users, who we can connect to and install the software on their computers. This process takes only two or three minutes. Once the software is installed, it is reported to Binary Defense's security center, where it is monitored immediately. The entire process is very seamless.

A total of five people were involved in the deployment. In addition to myself, there were four people from Binary Defense: an account manager, a security specialist, a software engineer, and a trainer.

What about the implementation team?

The implementation was completed with the assistance of Binary Defense. The software was quick to install, so most of the experience was spent training on Binary Defense's process for responding to alarms and alerts. This included what would happen if they detected malware, who our contact people were at different times of day, and the kind of reports we would receive. In essence, it was an introduction to their overall security strategy. The actual software installation was a very small part of the process, as it went very quickly.

What was our ROI?

We have definitely seen a return on investment. We were able to get rid of our traditional antivirus, which saved us quite a bit on our cyber insurance. We qualified for a lower rate because we had a higher security posture using Binary Defense MDR. It's also saving me hours per week. So, in the end, we have a better, more secure environment for roughly the same cost.

What's my experience with pricing, setup cost, and licensing?

Binary Defense MDR is priced competitively and may be slightly lower than CrowdStrike.

What other advice do I have?

I give Binary Defense MDR a ten out of ten.

Binary Defense MDR is a worthwhile investment for small IT departments, especially for those with limited resources. Larger departments may have a different evaluation process, but for small departments, the benefits are clear.

Binary Defense MDR automatically updates and has not required any maintenance from our team.

Our partnership with Binary Defense has been positive so far. We have not had any security threats, so I cannot yet evaluate their response to a security incident. However, the reporting and accessibility through the dashboard have been excellent. I have a granular view of all activities on our network, which has been very helpful.

People who don't feel that their current MDR provider is an extension of their team would be happy with Binary Defense MDR. It's a security solution that can be used to offload IT security tasks. For companies with dedicated security professionals, Binary Defense MDR would be a great tool. And even if they don't have dedicated security professionals, Binary Defense MDR would still be a great addition to their security team.

Organizations evaluating Binary Defense MDR should be familiar with using group policy tools to deploy the solution rapidly. This can save a significant amount of time compared to installing the solution one endpoint at a time. The size of the organization will affect the amount of time it takes to deploy the solution, as larger organizations will have more endpoints. Overall, using group policy to deploy Binary Defense MDR is a standard practice in IT.

Which deployment model are you using for this solution?

Hybrid Cloud
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
PeerSpot user
reviewer2172486 - PeerSpot reviewer
Senior Manager, Cybersecurity at a energy/utilities company with 501-1,000 employees
Real User
May 3, 2023
Assisted us in decreasing the number of security alerts we receive, but the integration can be improved
Pros and Cons
  • "One of the main benefits of Binary Defense MDR is the ability to easily meet with their support team to discuss any issues we encounter."
  • "The current reporting system could benefit from improvement."

What is our primary use case?

We use Binary Defense MDR to monitor our security alerts and network traffic continuously. The solution provides a monitoring service that includes initial triage of alerts and escalation to my team for further action.

How has it helped my organization?

Binary Defense MDR is willing to customize its services to meet its customers' needs. Although they have standard service level agreements and escalation pathways, they are flexible and open to adopting solutions or practices that work better for their customers. They are committed to working closely with their customers and customizing their services to ensure their satisfaction.

Binary Defense MDR has improved our visibility through the implementation of some best practices in tuning and helping us establish our security solutions. These areas have provided the most benefit for us.

Binary Defense MDR has assisted us in decreasing the number of security alerts we receive. This has been achieved through the tuning aspect, where a significant amount of noise is generated, and they continuously collaborate with my team to reduce this noise, enabling us to concentrate on the critical components.

Binary Defense MDR has enhanced our security posture in terms of visibility and detection. The improvement is a result of the combination of their service and the technology implemented by my team. As a result of this project, we have significantly increased our ability to detect and respond to threats. Overall, the project and the service have minimized our threat landscape and enhanced our security posture.

Initially, there was a lot of noise and not much value in the alerts we received. We worked closely with Binary Defense to improve the process and specify our requirements. Through this partnership, they have improved their processes and quality checks to provide a better service. In the beginning, the influx of false positives increased my team's workload, but we worked to reduce the noise and focus only on what mattered. This took time, but overall, there have been improvements in reducing the additional workload for my team. However, we still want to be alerted when additional work is needed. Binary Defense's initial triaging has eliminated the need for my team to analyze every single alarm and alert.

What is most valuable?

One of Binary Defense MDR's main benefits is the ability to easily meet with their support team to discuss any issues we encounter. The team works with us to develop a plan to mitigate the issue and then implements a solution going forward to resolve it. Their responsiveness and willingness to adapt to our needs as a customer has been the greatest benefit.

What needs improvement?

Historically, Binary Defense MDR did not have a strong ability to integrate with other applications or solutions. However, they are currently undergoing a transformation driven by previous issues, where there was a need for capabilities to streamline operations. As a result, they are in the process of implementing additional solutions that will enable integrations with other platforms and applications.

The current reporting system could benefit from improvement. It would be helpful to have regular reports that provide value and clearly demonstrate the team's accomplishments over the past month. This should include information on resolved issues, metrics, and any additional details that highlight the team's contributions.

For how long have I used the solution?

I have been using Binary Defense MDR for six months.

What do I think about the stability of the solution?

Binary Defense MDR is a stable solution with a commitment to ongoing improvement. Without their continued efforts to get better and implement changes based on our feedback, this review would be quite different. The organization has also brought in a new leadership team, which has brought fresh ideas and a clear vision for improvement. This partnership, combined with the leadership team's efforts, has led to increased stability and sustainability for the company.

What do I think about the scalability of the solution?

Binary Defense MDR is scalable. 

How are customer service and support?

The Binary Defense support team is a great team to collaborate with. They hold regular meetings with the project team, offer suggestions, and establish rules within the system. Once completed, they transfer these responsibilities to their production team that handles MDR services in a steady-state manner.

Which solution did I use previously and why did I switch?

I changed to a specialized provider from our previous solution. I aimed to look for a smaller organization that I could potentially partner with more effectively. Large companies often treat their clients as just another component of their operations. Therefore, I sought a smaller niche firm to work with closely and create something together, resulting in a better relationship and improved work outcomes. Consequently, we decided to partner with Binary Defense.

How was the initial setup?

The setup process is complicated. I am uncertain whether this is due to our own internal issues, or if it is partly a result of my environment and our own processes. While it was easy to initially set up the platform, the integration, and tuning required a significant amount of time. The deployment also took a lot of time, and it took us around six to eight months to achieve a steady state where we were satisfied with everything. Fifteen to twenty people were required for the deployment.

What about the implementation team?

The implementation was completed by Binary Defense's professional services.

What was our ROI?

The primary return on investment has been in risk reduction, which has allowed us to gain better visibility of our environment. We can now identify our biggest threats and tailor our defense strategies to protect against them. This also helps when communicating with regulatory commissions and government entities, as we can demonstrate our 24/7 monitoring capability and provide additional assurance. Risk reduction and improved communication with stakeholders are our two most significant ROIs.

What's my experience with pricing, setup cost, and licensing?

Binary Defense has changed its pricing model from being primarily based on the volume of data to one based on escalations and incidents they handle. This change is positive because it encourages clients to provide as much data as possible to assist the Binary Defense team in triaging and identifying true positives. However, they also aim to keep costs within a set parameter. This allows for better management of costs and higher accuracy in detecting true positives while minimizing false alerts.

What other advice do I have?

I give Binary Defense MDR a seven out of ten.

For someone who wants to purchase a managed detection response solution but is concerned about the cost, I would like to understand the primary concern, whether it's related solely to cost or to the cost model. Depending on the company and its requirements, the reason for cost concerns can vary greatly. If the concern is cost, I may not have much to say. However, if I ask questions to better understand their concerns and where they should focus their security monitoring, perhaps they can reduce the volume they send and focus on a smaller solution, such as an EDR, instead of sending their firewall logs.

The maintenance is performed by either Binary Defense or their technology provider.

Binary Defense MDR has demonstrated a willingness to invest in our relationship to the same extent as we do. As a result of our ongoing collaboration, they have reciprocated our efforts. Although having a third party as an extension of our team can be challenging, we believe that frequent communication and nurturing this partnership will lead to better outcomes. Our experience with Binary Defense has been positive overall.

To evaluate the solution, individuals should consider running a proof of value or a proof of concept, if possible. It would be beneficial to have Binary Defense demonstrate the value and services they can offer to gain an understanding of the type of service provided by their MDR solution.

Which deployment model are you using for this solution?

On-premises
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
PeerSpot user
Jay Ketchaver - PeerSpot reviewer
Senior Manager of Information Technology and Security at a comms service provider with 51-200 employees
Real User
Dec 29, 2023
Offers stability, quick response times, and great tech support
Pros and Cons
  • "The best part about Binary Defense MDR is that it runs on everything, and they keep an eye on things 24/7."
  • "Binary Defense MDR could be even better with additional features, like automatic scans and file quarantine."

What is our primary use case?

We rely on Binary Defense MDR to protect our servers and employee computers from malware. It keeps a constant watch and lets us know quickly if there is any suspicious activity.

How has it helped my organization?

I like Binary Defense MDR's customizability. They have been great with technical support, customer service, and our account managers. Always happy with their overall support. 

Using Binary Defense has brought our organization more peace of mind and excellent security. 

Fortunately, we haven't faced major cybersecurity issues, but I trust that if we did, Binary Defense would catch them before things got out of hand. It has significantly improved our security posture compared to before we had them and it has greatly reduced my IT team's workload. 

It also saves me time, at least an hour a day or more.

I love our partnership with Binary Defense. Bringing it to the board has made my life much easier and provides me with significant peace of mind. If you don't see your enterprise MDR provider as an extension of your team, you probably have a strong team. However, Binary Defense is so focused on security that they are top-notch in our view. They are a trusted partner for us.

What is most valuable?

The best part about Binary Defense MDR is that it runs on everything, and they keep an eye on things 24/7. As a one-man IT security team, I can't handle it all alone. Knowing we have a solid product and a reliable partner watching over everything allows me to sleep soundly at night.

What needs improvement?

In terms of improvement, Binary Defense MDR could be even better with additional features, like automatic scans and file quarantine.

For how long have I used the solution?

I have been using Binary Defense MDR for almost four years.

What do I think about the stability of the solution?

I haven't experienced any issues with stability. There is no lagging, crashing, or downtime. Everything runs smoothly.

What do I think about the scalability of the solution?

It is highly scalable.

How are customer service and support?

The technical support is very quick and helpful. I would rate them as a nine out of ten.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

Before Binary Defense, we used Webroot antivirus. We switched because Webroot missed a serious security incident. After a demo and comparing it with other options, I found Binary Defense to be the best all-around solution.

How was the initial setup?

The initial setup was straightforward and it took about a week to deploy the solution. I worked with the Binary Defense team for guidance, but I handled the actual implementation myself. It was straightforward, and I had helpful interactions, including discussions with their head of software development.

What's my experience with pricing, setup cost, and licensing?

Binary Defense's pricing and licensing are standard compared to others offering similar products. I would say it is worth the cost because it significantly improves your security and can save you more in the long run by preventing major cybersecurity incidents.

What other advice do I have?

Binary Defense hasn't necessarily reduced the number of security alerts, but the fact that they handle it means I don't have to sift through them. Most of the time, they spot serious issues, saving me a lot of time and providing a sense of security. It has been great. I would say Binary Defense is at the top in terms of response times. As soon as something happens, I'm hearing about it. 

My advice to others is that if you choose Binary Defense, you will be in good hands. They are thorough, attentive, and always ready to help. Overall, I would rate Binary Defense MDR as a nine out of ten.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
PeerSpot user
Buyer's Guide
Download our free Binary Defense MDR Report and get advice and tips from experienced pros sharing their opinions.
Updated: November 2026
Buyer's Guide
Download our free Binary Defense MDR Report and get advice and tips from experienced pros sharing their opinions.