Soc Analyst at a media company with 501-1,000 employees
Real User
Top 10
Jun 26, 2026
Everything is good with Alert Logic MDR. If I had to pick one area where Alert Logic MDR could be even better, it would be the rollback feature, which is currently for Windows only. If it existed for Linux and Mac, it would be beneficial.
Solutions Architect at a tech vendor with 10,001+ employees
Real User
Top 5
Jun 22, 2026
I think Alert Logic MDR could be improved. If Alert Logic MDR not only detected incidents but also allowed us to block those incidents or isolate any affected asset, that would be beneficial.
Security Analyst at a consultancy with 10,001+ employees
Real User
Top 5
May 10, 2026
One major missing feature was the ability to see if vulnerabilities were exploitable, which required extra effort for us. Alert Logic did not adhere fully to the CVSS standards, offering only high, medium, and low categories rather than the detailed CVSS scale. Additionally, the reports were very basic and required considerable work to finalize.
Initially, we observed multiple false positive alerts with Cybereason Managed Detection & Response. We've worked with Cybereason to whitelist and fine-tune alerts, particularly those related to ESLR detection, which created more noise in our environment. Identifying the purpose of each feature and its necessity for detection needs improvement.
System Analyst at a tech services company with 11-50 employees
Real User
Top 10
Feb 27, 2025
The interface, particularly the dashboard we use for looking at alerts, could be improved. The ease of use of the dashboard and accessing security reports needs enhancement.
If the language barrier was addressed, it would lower the barrier for a number of German customers. It would take away a unique selling point for our own specialist managed service. I'm a bit hesitant, however, this would improve the product or the offering. Detection time already is very quick. The completeness of the offering was integrating more data. I am discussing with a customer who wishes to include identity data. Detecting early when someone tries to compromise your ID would be a nice feature.
Learn what your peers think about LevelBlue Managed Detection and Response. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
Head of Research Development and Innovation at CSIR
Real User
Top 10
Aug 21, 2023
My company's issue with the solution stems from the fact that for every client, we have to spin up a new Cybereason instance, so there is not a single Cybereason instance where you can manage all your clients. For every new client or every new case, my company has to spin up a new instance, because of which there is a new URL. My company has to invest in enrolling people again and add all your new IOCs back into each instance. There is no centralized way to manage multiple instances of Cybereason, which is probably the biggest issue that wouldn't allow onboarding someone new, causing a lot of effort in the initial setup, maybe through a whole different web interface at times.
Alert Logic MDR provides robust 24/7 threat detection and response, leveraging AI and behavior analysis to offer organizations comprehensive protection with minimal system impact.
Alert Logic MDR is a managed detection and response service optimized for detecting cyber threats with global visibility. It integrates with ticketing tools and enhances investigative capabilities. Organizations benefit from its efficient alert system and proactive security measures, although it seeks improvements...
Everything is good with Alert Logic MDR. If I had to pick one area where Alert Logic MDR could be even better, it would be the rollback feature, which is currently for Windows only. If it existed for Linux and Mac, it would be beneficial.
I think Alert Logic MDR could be improved. If Alert Logic MDR not only detected incidents but also allowed us to block those incidents or isolate any affected asset, that would be beneficial.
One major missing feature was the ability to see if vulnerabilities were exploitable, which required extra effort for us. Alert Logic did not adhere fully to the CVSS standards, offering only high, medium, and low categories rather than the detailed CVSS scale. Additionally, the reports were very basic and required considerable work to finalize.
Initially, we observed multiple false positive alerts with Cybereason Managed Detection & Response. We've worked with Cybereason to whitelist and fine-tune alerts, particularly those related to ESLR detection, which created more noise in our environment. Identifying the purpose of each feature and its necessity for detection needs improvement.
The interface, particularly the dashboard we use for looking at alerts, could be improved. The ease of use of the dashboard and accessing security reports needs enhancement.
If the language barrier was addressed, it would lower the barrier for a number of German customers. It would take away a unique selling point for our own specialist managed service. I'm a bit hesitant, however, this would improve the product or the offering. Detection time already is very quick. The completeness of the offering was integrating more data. I am discussing with a customer who wishes to include identity data. Detecting early when someone tries to compromise your ID would be a nice feature.
My company's issue with the solution stems from the fact that for every client, we have to spin up a new Cybereason instance, so there is not a single Cybereason instance where you can manage all your clients. For every new client or every new case, my company has to spin up a new instance, because of which there is a new URL. My company has to invest in enrolling people again and add all your new IOCs back into each instance. There is no centralized way to manage multiple instances of Cybereason, which is probably the biggest issue that wouldn't allow onboarding someone new, causing a lot of effort in the initial setup, maybe through a whole different web interface at times.