E6 / 8 Verified
eSentire
eSentire Managed Detection and Response
Uses multiple telemetry sources, security analysts, threat hunting, and response to operate a managed security program.
Managed Detection & Response
Make the MDR decision clearer.
Choose the people and service commitments behind your detection and response program. Establish who monitors, investigates, escalates, and acts.
Compare documented capabilities
Sorted by Verified features, highest first. Every research area counts once; tied counts share a rank. Dependencies, exclusions, and unestablished features do not count. These counts reflect documented coverage in this research, not overall product quality. Verified records documented functionality; it does not establish every subscription entitlement. Read each offering’s scope and package notes. Not established records a gap in this research.
| Assessed offering | Managed monitoring | Analyst investigation | Managed response | Threat hunting | Existing-stack support | Cloud & identity | Service visibility | Guidance & improvement |
|---|---|---|---|---|---|---|---|---|
| eSentire Managed Detection and Response#1 · 6 / 8 Verified | Verified | Not established | Verified | Verified | Verified | Verified | Not established | Verified |
| Expel Managed Detection and Response#2 · 5 / 8 Verified | Verified | Not established | Verified | Not established | Verified | Verified | Verified | Not established |
| Sophos Taegis MDR#2 · 5 / 8 Verified | Verified | Verified | Verified | Verified | Not established | Not established | Verified | Not established |
| Aurora Managed Detection and Response#4 · 4 / 8 Verified | Verified | Verified | Verified | Not established | Not established | Verified | Not established | Not established |
| Binary Defense Managed Detection and Response#4 · 4 / 8 Verified | Verified | Verified | Verified | Verified | Not established | Not established | Not established | Not established |
| Rapid7 Managed Detection and Response#4 · 4 / 8 Verified | Verified | Not established | Verified | Verified | Not established | Not established | Not established | Verified |
| Red Canary / Zscaler MDR#4 · 4 / 8 Verified | Not established | Not established | Not established | Verified | Verified | Verified | Verified | Not established |
| ReliaQuest GreyMatter managed security operations#4 · 4 / 8 Verified | Not established | Verified | Verified | Not established | Verified | Not established | Not established | Verified |
| SentinelOne Vigilance MDR#4 · 4 / 8 Verified | Verified | Verified | Verified | Verified | Not established | Not established | Not established | Not established |
| Falcon Complete MDR#10 · 3 / 8 Verified | Verified | Verified | Verified | Not established | Not established | Not established | Not established | Not established |
VerifiedModule / integration / activationOutside assessed baseNot established
A focused starting point
Explore the offering analyses.
Most Verified features first. Equal counts share a rank.
E5 / 8 Verified
Expel
Expel Managed Detection and Response
Operates managed detection and response using connected customer technologies, with investigation visibility through Workbench.
S(5 / 8 Verified
Secureworks (Sophos)
Sophos Taegis MDR
Provides Taegis-based monitoring and investigations with analyst access, response actions, and threat hunting.
AW4 / 8 Verified
Arctic Wolf
Aurora Managed Detection and Response
Provides managed monitoring across network, endpoint, and cloud environments with a concierge delivery model.
BD4 / 8 Verified
Binary Defense
Binary Defense Managed Detection and Response
Provides analyst-led managed detection and response informed by threat hunting and an attacker-focused approach.
R4 / 8 Verified
Rapid7
Rapid7 Managed Detection and Response
Combines a managed SOC with threat hunting, incident response, remediation, and security guidance.
RC4 / 8 Verified
Red Canary (Zscaler)
Red Canary / Zscaler MDR
Correlates security telemetry with detection engineering and human investigations across customer environments.
R4 / 8 Verified
ReliaQuest
ReliaQuest GreyMatter managed security operations
Connects existing tools to detect threats at their source and coordinate investigations, response, and posture improvements.
S4 / 8 Verified
SentinelOne
SentinelOne Vigilance MDR
Augments the SentinelOne platform with managed security monitoring, hunting, and tier-dependent threat response.
C3 / 8 Verified
CrowdStrike
Falcon Complete MDR
Pairs the Falcon platform with expert-operated monitoring, investigation, containment, and full-cycle remediation.
Three questions for your evaluation
- Who investigates an alert outside business hours?
- What response can the provider perform without asking us first?
- How are escalations, exclusions, and service commitments recorded?