No more typing reviews! Try our Samantha, our new voice AI agent.

Expel vs JupiterOne comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Expel
Average Rating
9.0
Reviews Sentiment
7.6
Number of Reviews
1
Ranking in other categories
SOC as a Service (4th), Managed Detection and Response (MDR) (16th)
JupiterOne
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
2
Ranking in other categories
Vulnerability Management (50th), Identity and Access Management as a Service (IDaaS) (IAMaaS) (21st), Cloud Security Posture Management (CSPM) (31st), Cyber Asset Attack Surface Management (CAASM) (5th)
 

Mindshare comparison

Expel and JupiterOne aren’t in the same category and serve different purposes. Expel is designed for Managed Detection and Response (MDR) and holds a mindshare of 1.9%, up 1.8% compared to last year.
JupiterOne, on the other hand, focuses on Vulnerability Management, holds 0.3% mindshare, up 0.2% since last year.
Managed Detection and Response (MDR) Mindshare Distribution
ProductMindshare (%)
Expel1.9%
SentinelOne Wayfinder Threat Detection and Response7.2%
CrowdStrike Falcon Complete MDR6.1%
Other84.8%
Managed Detection and Response (MDR)
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
JupiterOne0.3%
Wiz5.5%
Qualys VMDR4.4%
Other89.8%
Vulnerability Management
 

Featured Reviews

reviewer2578461 - PeerSpot reviewer
MDR Specialist at a tech services company with 201-500 employees
Rapid threat management and diverse technology integration for effective monitoring
Expel has made it easier for companies to monitor and manage various log sources. With its vast integration portfolio, customers can efficiently monitor diverse environments. Time to value is quick, as Expel can turn their service up very rapidly. They have both automated active responses and human processes that quicken threat resolution.
CO
Security Analyst at a outsourcing company with 501-1,000 employees
Unified asset visibility has improved investigations and now simplifies tracking security assets
There are some features that I have shared with our customer service manager. One of them that is relevant to us at this time is the need for better determination of unified devices. Currently, JupiterOne uses hostname weights, MAC addresses, or IP addresses to tie devices together, but we have actually requested a way for us to make those determinations ourselves. For example, when externally scanning a device using Qualys, internally it gives an IP address or FQDN, while externally it might be different. We want to be able to decide ourselves that these two devices are the same device even when they have different names and IP addresses for external and internal use. The unified devices feature is valuable and did not used to exist, and it has been fantastic. However, I believe more can be done regarding unified devices, and giving users the privilege to tie them together would be a good addition to the platform. One of the other things that interest us in JupiterOne and why we really wanted to use the tool is the compliance feature. We wanted to use it to track our compliance since we are ISO 27001 certified. However, the compliance module has not worked well, and we have had to continue tracking our compliance manually with the tools we use. Although there are some works in progress to improve the compliance part of the tool, I think if they can get it up to speed, that would be a really good improvement.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Their threat hunting protocol and process with AI and machine learning are strong, allowing for active and rapid responses."
"The product’s UI is pretty decent and fast."
"JupiterOne helps us aggregate all those things on one single platform, allowing us to quickly identify what environment that asset lives in and what type of asset it is."
 

Cons

"The one area where Expel may not measure up is if a customer requires a managed SIEM as part of their overall solution. There's a gap there, and solutions might require third-party assistance for management."
"You can only write Python queries in Jupiter, not other languages, like, SQL or PySpark."
"However, the compliance module has not worked well, and we have had to continue tracking our compliance manually with the tools we use."
report
Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.
892,287 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
11%
Construction Company
10%
Retailer
8%
Financial Services Firm
15%
Construction Company
15%
Outsourcing Company
9%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Expel?
Expel's pricing has adapted as the market evolved and has become competitive over the past twelve months.
What needs improvement with Expel?
The one area where Expel may not measure up is if a customer requires a managed SIEM as part of their overall solution. There's a gap there, and solutions might require third-party assistance for m...
What is your primary use case for Expel?
I have experience reselling Expel. Customers often come to me wanting to evaluate multiple providers to make a choice based on their specific use cases, requirements, technology investments, and so...
What needs improvement with JupiterOne?
There are some features that I have shared with our customer service manager. One of them that is relevant to us at this time is the need for better determination of unified devices. Currently, Jup...
What is your primary use case for JupiterOne?
Our main use case for JupiterOne is as an asset catalog tool where we document all our assets that are integrated from different platforms such as Device42, Qualys, Microsoft M365, and Defender. We...
What advice do you have for others considering JupiterOne?
JupiterOne has many features. Although none comes to mind almost immediately, I know it often depends on how we are able to write or craft the queries. JupiterOne has been very instrumental to me i...
 

Also Known As

Workbench, Expel SOC-as-a-Service
No data available
 

Overview

 

Sample Customers

Amanda Fennell CSO
Information Not Available
Find out what your peers are saying about Huntress, CrowdStrike, Arctic Wolf Networks and others in Managed Detection and Response (MDR). Updated: April 2026.
892,287 professionals have used our research since 2012.