Secureworks Taegis Managed XDR / MDR vs Sophos MDR comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Binary Defense MDR
Sponsored
Ranking in Managed Detection and Response (MDR)
7th
Average Rating
9.2
Number of Reviews
15
Ranking in other categories
No ranking in other categories
Secureworks Taegis Managed ...
Ranking in Managed Detection and Response (MDR)
8th
Average Rating
7.8
Number of Reviews
13
Ranking in other categories
Managed Security Services (1st)
Sophos MDR
Ranking in Managed Detection and Response (MDR)
6th
Average Rating
8.6
Number of Reviews
24
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2024, in the Managed Detection and Response (MDR) category, the mindshare of Binary Defense MDR is 0.8%, up from 0.6% compared to the previous year. The mindshare of Secureworks Taegis Managed XDR / MDR is 5.1%, down from 6.0% compared to the previous year. The mindshare of Sophos MDR is 6.0%, down from 6.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Managed Detection and Response (MDR)
Unique Categories:
No other categories found
Managed Security Services
7.7%
No other categories found
 

Featured Reviews

BP
Jun 9, 2023
Gives us visibility into current critical security events and improves our time to respond
They send us alerts and have done a really good job of eliminating the false positives. Early on, there were quite a few. But as they learned about our organization and the roles of individuals within it, that has drastically gone down. For example, initially, they would say so-and-so ran a script. Now, they know who our sys admins are and that running that script is typical for them. The benefits are the visibility into current critical security events and the effect on our time to respond. Binary Defense has helped reduce our security alerts because we know where our trouble points are, or if we're missing things, and what we need to deploy. It has given us visibility into what to put in and that is how it has helped us the most. I would estimate it has reduced our security alerts by 60 to 70 percent. It has improved our security posture significantly. And because they do a lot of the management for us, it has reduced our team's workload. We only have to work on the stuff that's identified as something we need to work on, so it has definitely helped performance.
SL
Jun 21, 2023
Offers proactive threat hunting and actively examines our environment
With SecureWorks, we have an incident retainer. So if there's an event, they bring in people to handle a formal incident, and we have a certain amount of hours we can use. Sometimes, it feels like they're milking the retainer a little bit. They tend to involve people who don't necessarily need to be part of the incident or call it for false positives now and then. It hasn't cost us anything, so it's just a minor issue. We've never exceeded our retainer amount. But, it seems a little bit inefficient sometimes. Secureworks's support integration is really nice. Secureworks's integrations are quite good. So, in future releases, reporting could be a little bit better in terms of what has happened, but we're able to get what we need out of it. It's just that it's not as far along as it could be.
ManelAlvarez - PeerSpot reviewer
Jun 6, 2024
Quarantines and removes threats from the network
The most important aspect is a EC2 deployment which is a remote deployment done for new customers using Sophos. Approximately ninety-five percent of EC2 deployment is automated, requiring only a review or customization for the customer's needs. Another key feature is the centralized control of updates, allowing for scheduling any interaction with the endpoint. Additionally, the new platform and system operations, along with IOCs, are updated daily. Sophos has a very good policy at good prices. Since I have a local contact with the salespeople, they provide me discounts. It's very stable and competitive. When the customers have budget, they can opt for CrowdStrike. However, when the customers have budget constraints on daily servers, and when the customers prefer to integrate mobile platforms with different technologies, they can use this one technology. Overall, I rate the solution an eight out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Binary Defense has a human service department that provides live monitoring for our systems."
"The best part about Binary Defense MDR is that it runs on everything, and they keep an eye on things 24/7."
"The most valuable features are the SIEM and the ticketing function; the latter is very smooth and easy to read and understand. We don't have any issues looking at the ticketing information when we're trying to identify what's going on."
"The most valuable part of Binary Defense is its team of cybersecurity analysts. Their analysts filter out the noise and only forward the critical threats that require a response instead of false positives."
"The speed at which their services are reactive is valuable. Nowadays, when a threat hits an endpoint, you've got minutes, not hours or days. Their average response time is about four minutes on an alert. For anything that needs to be sent to us, it's about fourteen minutes, which is pretty good. They're the third SOC that I've used in fifteen years. By far, they are the quickest ones to act. When you're looking at prevention, that's a key factor."
"Binary Defense's most valuable feature is the 24/7 monitoring and threat hunting. Their team checks the latest breaches and how they're done."
"Our mean time to response has gone down. We're much faster with direct response and have more investigative capabilities than we did before."
"One of the main benefits of Binary Defense MDR is the ability to easily meet with their support team to discuss any issues we encounter."
"This solution gathers the information logs from all devices and correlates all the information. It notifies us of any critical events taking place across our networks which has been valuable."
"There are some patent pending detectors within the platform that provides a lot of value."
"We can easily isolate affected machines in the network."
"The most valuable features are IDS and IPS."
"We don't have a full SOC, so it's helpful to have them sifting through our alerts and only bringing actionable items to us."
"It provides more visibility and more control over endpoints. It reduces the noise. It clears things and only shows things that are really important. It only shows those things that need to be looked at or need to be investigated further. Other similar solutions give you a lot of alerts and other things, but Secureworks gives you a defined or less noisy view so that you can work or focus on things that are important in terms of investigation, response, and remediation."
"Securworks' threat intel seems pretty decent, and they integrate with several solutions we have, such as Azure AD, so all our Microsoft 365 stuff is covered."
"The pricing is flexible."
"The user doesn't need a technician; it offers 24/7 support to identify and manage your infrastructure and take complete care of any technological incidents."
"Sophos MDR has improved the threat detection process by identifying and addressing the issues before they become severe."
"The most valuable feature is the ability to integrate multiple functions into a single dashboard regardless of the vendors being integrated."
"The product’s most valuable feature is ease of use."
"Sophos MTR will stop the threat as it is happening. Intercept X, which is a part of it, has the ability to roll back, so the attack is undone. And then the advanced edition of MTR lets me handle the threat by talking on the phone. I don't have to deal with it. I don't have to just go through emails back and forth. We don't have to pay extra for Rapid Response services. If something is happening, they're right on top of it."
"The solution provides the best security features."
"There are lots of benefits because it includes real-time network threat detection (RNT), IP spoofing prevention, and a 24/7 support system. There is also protection against ransomware attacks."
"The important mechanism is the dilation of the desktop. It quarantines and removes threats from the network. Sometimes, security devices similar to firewalls are used. It also creates dynamic rules to protect against attacks. The security cross-synchronization is very important."
 

Cons

"The most significant area for improvement is in support for non-English speakers; we're a global organization, so many of our users are not English speakers, which can make interacting with them a challenge. There's no Chinese language support, so we must rely on what we can do with the internet. We don't expect Binary Defense to build a language staff, but details can get lost in translation when we assume the whole world speaks English."
"It's sometimes difficult to know when to engage Binary Defense or TrustedSec, their sister company. TrustedSec is more focused on offensive security, as opposed to the defensive security that the MDR solution provides. It would be awesome if there were a better bridge between that relationship for when we need to get more proactive services or when we need to do a penetration test."
"It's hard to think of anything that they need to improve on, but just to point out something, I would like to see them provide advanced XDR."
"The current reporting system could benefit from improvement."
"I would like to see more frequent check-ins with our security status."
"We found that an earlier version of the agent had high memory usage and that was a bit concerning, but we raised the concern with their support team and they immediately replied that they had noticed the same thing and had a candidate fix already available... it totally fixed the issue."
"We found a couple of bugs in the user interface."
"While my understanding is that they're working on this, I would like to see some more of the quantification or reporting."
"It would be nice if the solution were a little more affordable."
"We did a PoC of their next-gen antivirus product, but it wasn't ready yet. It was underdeveloped and caused a lot of issues. We'd like to move away from Carbon Black, but they said that it's probably still not to a point where we'd be happy with it. Carbon Black and RedCloak seem to work fine for us."
"Tamper-proofing or tamper protection is still pending in Secureworks. Tamper protection will make it more secure. If I'm an admin of a device, I can uninstall an agent without the knowledge of the security or Secureworks admin. If someone gets hold of one endpoint with admin credentials, he can remove anything, and an organization will lose visibility. They need to work on providing more visibility across endpoints. A couple of times it has happened that the cloak agent is there, but it did not get activated, or there were some issues. The machine was restarted, but the cloak agent didn't run. In such cases, you have to troubleshoot. It is a big issue if a cyber attack is happening, and your machine is rebooted, but the events are not captured."
"In the next release of this solution, I would like to see file integrity monitoring."
"The deployment could definitely be improved."
"Dell Secureworks could improve its integration with other third-party solutions."
"Dell Secureworks is for higher-end customers and it's not quite as straightforward to implement or to get up and running as some of the other solutions."
"The integration with the Carbon Black sensor could be better. ManagedXDR doesn't seem to know how to extract the forensic data from an endpoint that was quarantined by Carbon Black."
"Sophos is not integrating the same console and umbrella with its product."
"The product's pricing could be less expensive."
"Once in a great while, an update fails."
"Threat intelligence is an area for improvement for MDR."
"The reports should be more comprehensive and easier to organize."
"The only challenge we face with the tool is the pricing. Clients often compare it with other products in the market and try to negotiate prices. This concern has caused some challenges in closing deals. Otherwise, as a product, we have no worries."
"It is a bit expensive. It could be cheaper. There are many competitive products in the market, like Kaspersky, McAfee Antivirus, and more."
"Sophos MDR’s pricing is the biggest factor that needs improvement per customers and technical professionals."
 

Pricing and Cost Advice

"Binary Defense has changed its pricing model from being primarily based on the volume of data to one based on escalations and incidents they handle."
"From the initial cost that Binary Defense came in with, we pared it down quite a bit over the course of 30 or 60 days. My leadership would say that their cost was high, but realistically, they were in line with the market."
"After we acquired this platform, we met with a number of different vendors. Binary Defense came in with a proposal that was surprisingly affordable. In fact, we were able to recoup the cost of their services within a short period of time. This is because Binary Defense is able to provide the same level of security as a team of two or three in-house analysts but at a fraction of the cost. As a result, Binary Defense is saving us an estimated $250,000 to $300,000 per year."
"It's valued at the right price. Even with the number of endpoints we have, we don't feel that it's a lot more than any competitor. In fact, it might be less expensive when you look at the fact that you're getting a full flex SOC out of it along with the tools."
"The pricing is very good. They are definitely competitive and they were lower at the time that we went with them."
"Binary Defense MDR is priced competitively and may be slightly lower than CrowdStrike."
"The solution's price is spot on; if anything, it's slightly below the norm for most services. Compared to building the same team internally, it would cost more to create the same amount of capability than what we get from an external team. Price-wise, Binary Defense is in a great spot."
"The pricing is on target. Working with their sales team on pricing negotiations was a pleasant process. They were very respectful of the constraints we had and I feel that we're paying a fair price."
"The Red Cloak agent is free."
"It is expensive but there is no better product than this."
"The pricing of Dell Secureworks is very reasonable."
"The price is kind of on par. The licensing was comparable to other solutions. It's not particularly high or low."
"Secureworks Taegis ManagedXDR is very expensive and could be more cost-effective."
"The pricing for this solution is reasonable. One agent costs approximately 270 dirhams/70 USD for one year. There is a reduction in cost per licence as the number of licences used increases."
"Initially, the cost was going to be something around $160 or $170. And eventually, I think they brought it down to $110 and they also threw in some endpoint protection platforms."
"MDR is a complete enterprise solution, and compared to other OEMs, it is one of the cheapest."
"Sophos MDR is a cheap solution."
"Compared to other tools, Sophos has a pretty good price."
"I would rate the price of Sophos MDR as a nine out of ten, with ten being the most expensive."
"The solution is expensive."
"Sophos MDR could be more affordable."
"The tool is too expensive for small companies."
"The cost of the solution is based on how many users use it."
report
Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.
793,295 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Healthcare Company
8%
Manufacturing Company
7%
Financial Services Firm
7%
Computer Software Company
22%
Financial Services Firm
10%
Manufacturing Company
8%
Government
7%
Computer Software Company
21%
Manufacturing Company
8%
Government
7%
Financial Services Firm
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Binary Defense MDR?
The most valuable feature is reviewing tickets and the notes added by technicians.
What is your experience regarding pricing and costs for Binary Defense MDR?
Binary Defense is reasonably priced, considering that it saves us from hiring personnel and deters threats that could...
What needs improvement with Binary Defense MDR?
The only area I see for improvement with Binary Defense is their service portal. It could benefit from some enhanceme...
What do you like most about Secureworks Taegis ManagedXDR?
The most valuable feature is the support. The support chat. It's always connecting to people. And you open the chat, ...
What is your experience regarding pricing and costs for Secureworks Taegis ManagedXDR?
It is worth the money. It is expensive but there is no better product than this.
What needs improvement with Secureworks Taegis ManagedXDR?
The integration would look better with other products, with other EDRs, with other firewalls, with other older versio...
What do you like most about Sophos MDR?
The user doesn't need a technician; it offers 24/7 support to identify and manage your infrastructure and take comple...
What needs improvement with Sophos MDR?
The product must provide zero trust security. The security tools for the endpoints must communicate with the firewalls.
What advice do you have for others considering Sophos MDR?
We use the tool in our company. Our customers also use it. We are partners and resellers. I recommend the product to ...
 

Also Known As

Binary Defense Vision, Binary Defense Managed Detection and Response, Binary Defense Managed Detection & Response
Secureworks Red Cloak Managed Detection and Response, Dell Secureworks, SecureWorks Taegis Managed TDR
Sophos Managed Threat Response
 

Overview

 

Sample Customers

Securitas USA, Black Hills Energy, Lincoln Electric,The J.M. Smuckers Company, New York Community Bank, State of Connecticut, NCR
RICOH, Owens and Minor
Information Not Available
Find out what your peers are saying about Secureworks Taegis Managed XDR / MDR vs. Sophos MDR and other solutions. Updated: May 2024.
793,295 professionals have used our research since 2012.