What is our primary use case?
We are a small cybersecurity team for a medical advice company. We use an MDR platform, which gives us access to a team of security analysts in a SOC. The analysts send us daily reports of security events, which they rate as critical, high, medium, or low. They also work with us to determine what threats we need to be most concerned about, such as those that could impact our Google Workspace or AWS environments. The analysts then create playbooks to help us respond to these threats, and they monitor our environment 24/7. We communicate with the analysts via Slack, and they call us if they identify a critical threat. Overall, the MDR platform has been very effective in helping us to multiply the force of our small team.
Binary Defense's cloud-based SIEM solution is fully deployed in the cloud. They collect logs from AWS and Google Workspace and then integrate those logs into their data lake. They then use the cloud to integrate their data lake into their SIM solution. Finally, they put the SIEM solution into a user interface, which is where users interact with it.
How has it helped my organization?
Binary Defense MDR is primarily integrated into our AWS environment, but it is made up of multiple components. My technical lead said that it was very easy to integrate into our Google Workspace environment. I did not have much involvement in the integration, but my subject matter experts said that their integration was very seamless.
Binary Defense offers customizable event detection and response. For example, if we have a confidential file, we can tell Binary Defense to flag any emails or other communications that contain certain keywords. This type of customization allows us to focus on the specific events that are most important to us. Binary Defense also offers 30-day retrospectives and monitoring for employee terminations, so we can be sure that our data is protected.
The Open XDR strategy made my life so much easier. It helped us to secure our infrastructure from end to end so that we can detect and remediate threats quickly and effectively. One of the biggest benefits of Open XDR is that it allows us to rely on a single partner to monitor our systems. This frees up our time so that we can focus on other aspects of security. Another benefit of Open XDR is that it is incredibly communicative. We have a Slack channel where we can quickly and easily communicate with our partners. This has been invaluable in the event of critical incidents.
Binary Defense MDR improved our organization by multiplying our security forces. They filled a huge security gap by providing end-to-end monitoring of our Google Workspace and AWS environments. This gives us peace of mind knowing that someone is watching our systems 24/7.
Binary Defense MDR significantly improved our security posture. They filled a major blind spot in our security program by monitoring our systems 24/7. They have also been a valuable asset to our team, helping us to pass our SOC 2 audit with flying colors. Additionally, they helped us to comply with a variety of regulatory requirements, including those of the FDA, GDPR, and HIPAA. Overall, Binary Defense MDR has been a tremendous asset to our organization and has helped us to improve our security posture significantly.
We have a dashboard that shows us all the cases that Binary Defense handles. Without looking at it, I would say they handle 90 to 98 percent of our low-level alerts. This means that when they bring something to my team or me, we know that it is worth looking at. They have already looked at it and determined whether or not it is something that needs to be escalated to the client. If it is not, we can simply mark it as closed and move on. We only need to analyze about three percent of the alerts that Binary Defense looks at. This is because they automate the process of reviewing low-level alerts, freeing up our team to focus on more complex issues.
Binary Defense MDR significantly reduced our IT team's workload. We could not do without them. Their services allow us to monitor a large number of alerts seamlessly and completely automated. Without Binary Defense, we would not be able to maintain our strong security posture.
Binary Defense MDR saved our organization a significant amount of time. We no longer have to spend hours manually searching for and investigating security threats. Instead, Binary Defense's team of experts does this for us 24/7. This freed up our time to focus on other important tasks, such as developing new products and services.
What is most valuable?
The case interface is Binary Defense MDR's most valuable feature. When we receive an event that needs to be escalated to the client, Binary Defense MDR handles 90 to 95 percent of the cases internally. This saves us the time and effort of having to manage our own case or event management system.
What needs improvement?
We have great visibility into their Google Workspace, but there are some limitations. I'm not sure if they're on our end or Google's end, but we haven't been able to integrate our Gmail system with Binary Defense's. We did the analysis, but it would have been too cumbersome and noisy. So we're monitoring Google on our side. That's something we haven't been able to automate yet.
Buyer's Guide
Binary Defense MDR
November 2026
Learn what your peers think about Binary Defense MDR. Get advice and tips from experienced pros sharing their opinions. Updated: November 2026.
921,714 professionals have used our research since 2012.
For how long have I used the solution?
I have been using Binary Defense MDR for one year.
What do I think about the stability of the solution?
Overall, Binary Defense MDR's stability is good. We found a couple of bugs in the user interface. The service has never been down, and they are very communicative about when they will be doing maintenance, as we would expect. This maintenance is very limited. When I found bugs or clunkiness in the user interface, I communicated the issues to Binary Defense, and they were fixed quickly.
What do I think about the scalability of the solution?
Binary Defense integrated so well with our organization that we have not needed to scale our security operations. I am hesitant to speculate on how their service would look for a giant enterprise, but for our medium-sized organization, they are perfectly scaled to our environment.
How are customer service and support?
We have had very few interactions with Binary Defense's support team. I think there have been two or three instances. In one case, they fixed a problem very quickly, within a couple of hours. In the other cases, we just asked them clarifying questions. I mainly work with one person, who is one of their leads. I deal with him several times a week. If I have a problem, I just tell him about it and he usually fixes it right away. Only a couple of times have I had to submit a ticket, and that was only because I didn't want to bother my contact. In those cases, they were still very responsive and fixed the problem quickly.
Overall, I have been very impressed with their support team. They are always quick to respond and they are always willing to help.
Which solution did I use previously and why did I switch?
Before we brought in an MDR provider, we were very scattered. We had to look at three different screens on AWS, two different screens on Google Workspace, and five or six different tools for vulnerability scanning. This required a lot of time and attention, and we weren't able to correlate all of the information together. Even for minor alerts, we had to look in three different places on two or three different platforms. Now that we have Binary Defense, we have a single pane of glass for all of our security information. This saved us a lot of time and effort, and it made it much easier to identify and respond to threats.
How was the initial setup?
The initial setup was very straightforward. From a technical perspective, we integrated the system in a couple of days. Binary Defense then had to do some work on the back end, which took a few weeks. During that time, we had weekly meetings for one or two hours each day to discuss the integration. This was mostly to dial in different systems and get our team ready to work. The technical integration was straightforward, and we were able to migrate to their newest system in just two hours.
As the director of information security, I organized the team on our end and made sure we had the right engineers. It took two engineers to complete the integrations. We had one engineer for AWS and one engineer for Google Workspace. They did independent integrations on their systems. I was responsible for the meetings and other tasks.
It took a couple of days to get everything wired up. It then took about 20 to 30 days to start getting valid cases and to denoise the data. We are constantly denoising, but I would say the technical integration took a couple of days. The full integration, however, took about 30 days to really get the engine running. During that time, we were meeting with Binary Defense every week for about two hours. Now we meet with them every other week for an hour to discuss high-level cases. We have constant communication with them. Overall, I would say the full baked-in integration took about 30 days.
What about the implementation team?
I consider Binary Defense to be part of my team. I interact with two of their employees on a regular basis. They are as communicative in our Slack channel as I would expect from any of my internal subject matter experts. I literally treat them as part of my team. For me, they are an absolute partner. They don't just disappear once we're integrated. They are a very dedicated team. I'm actually surprised by how dedicated they are. They are a fantastic partner for us.
What was our ROI?
Binary Defense MDR saved us at least two or three full-time analysts. We would have needed to hire these analysts in-house, as well as a security management tool like Splunk. These costs would have been significant.
In addition to the financial savings, Binary Defense MDR has also given us peace of mind. We now have much better visibility into our network systems, which was not the case before. This has been a valuable asset.
If I had to cut any budget, Binary Defense MDR would be the last line item I would cut. It is a valuable service that saved us money and gives us peace of mind.
What's my experience with pricing, setup cost, and licensing?
After we acquired this platform, we met with a number of different vendors. Binary Defense came in with a proposal that was surprisingly affordable. In fact, we were able to recoup the cost of their services within a short period of time. This is because Binary Defense is able to provide the same level of security as a team of two or three in-house analysts but at a fraction of the cost. As a result, Binary Defense is saving us an estimated $250,000 to $300,000 per year.
What other advice do I have?
I give Binary Defense MDR a nine out of ten.
We are a small to medium-sized organization. For us, the pricing was very advantageous. We were incredibly happy with the pricing. I think that for a larger enterprise, the cost would be considerably more. However, given the pricing that we have, I would imagine that it is very competitive pricing for an enterprise customer. I would have no problem recommending Binary Defense to a company of my size or, say, twice my size. However, for larger enterprises, I would recommend doing your due diligence. I don't know how Binary Defense's pricing scales, but I'm sure they have a system in place. I just don't know what that pricing would be. For our size organization, I would pay double the price and still have an advantage. Overall, I was very happy with Binary Defense's pricing.
We integrate two of our main systems: our corporate system, which is Google Workspace, and our main production environment, where we interact with customers. Our product is deployed on AWS. These are our two locations. However, they are all brought together into a single unified platform, which is the Binary Defense UI that we interact with.
My manager is a Cyber Risk and Control Manager. He does the initial triage of incidents. I then review the incidents that he has triaged. I reach out to three different stakeholders in the system, and I raise issues with them a few times a week. We do this via Slack. If we need to investigate an incident, the stakeholders log into the user interface. In addition, we have a few other people who have access to the system in case of an emergency. I would say that there are about five people who use the system regularly. My manager and I use it every day, and the other three people use it a few times a month. We are able to triage most incidents via Slack.
Maintenance on our end is a process of removing noise. We are constantly adjusting settings and making sure everything works properly. This includes our biweekly phone calls with the platform's developers, who are always working to improve the system. We believe that maintenance is essential to get the most out of the platform, and we are committed to investing the time and resources necessary to keep it running smoothly.
For organizations that don't think their MDR is an extension of their team, given the size of the organization, if they are not getting the quality of service and the quality of reports and cases, I would immediately recommend Binary Defense. I would share our experience with them and give them access to our reports and cases. If they are not getting the same quality of service, I would recommend Binary Defense as a perfect fit for our size organization.
No system like an MDR or a SIEM is perfect. It is only as good as the data that is input into it. Our team must be prepared to work with the MDR provider to ensure that the data is accurate and relevant. The MDR provider cannot read our minds and know what is important to us. They need our help to filter out the noise and identify the real threats.
To get the most out of our MDR solution, we should be prepared to dedicate some time to working with the provider. This may include:
- Meeting with the provider regularly to discuss our security needs and goals.
- Reviewing the alerts that the provider generates and providing feedback on their accuracy.
- Working with the provider to develop and implement remediation plans for any threats that are identified.
MDR is not a hands-off solution. It is a partnership between our team and the MDR provider. By working together, we can create a more secure environment for our organization.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.