Arctic Wolf Managed Detection and Response vs Netsurion comparison

Comparison Buyer's Guide

Executive Summary

We performed a comparison between Arctic Wolf Managed Detection and Response and Netsurion based on real PeerSpot user reviews.

Find out in this report how the two SOC as a Service solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Arctic Wolf Managed Detection and Response vs. Netsurion Report (Updated: May 2024).

Buyer's Guide

Arctic Wolf Managed Detection and Response vs. Netsurion

May 2024

Download the complete report

Helped 787,061 peers since 2012

Categories and Ranking

Binary Defense MDR

Featured Reviews

reviewer2185968

Head of Cybersecurity at a sports company with 501-1,000 employees

May 16, 2023

Our security alerts have been reduced significantly due to the higher level of analysis we now receive

The biggest aspect for us is that they are able to conform to our environment and utilize our tools. That way, we still maintain ownership of all the data and access to the applications, and we never lose control of the ability to run the solution ourselves if we need to. They're also very flexible in terms of what they're willing to bring to the table as well as having their own solutions that they provide if you don't have anything that you're using yourself. In terms of threat intelligence, as we make recommendations and suggestions to them for modifications to the reports so that they work better in our environment, they're working on putting them into place. And they're giving us feedback on what they can and can't do, meaning they're being very transparent. Binary Defense has also been great, so far, with integrating all the different things that we're trying to put together. They're also even helping guide us regarding some other tools that we're looking to implement. And those tools will have additional integrations into our main SIEM platform that we're using. They definitely have the knowledge and the insight to accomplish an open XDR strategy for securing infrastructure. With some of their own agents and tools that they are able to deploy into the environment, they're able to determine what's happening and put into effect the kill chain at the earliest possible point to help protect the overall network.

Read full review

reviewer2352813

Service Security Analyst at a government with 11-50 employees

Mar 5, 2024

Provides visibility into the environment, responds to threats quickly, and the documentation is pretty good

The solution helps monitor our endpoints and network traffic. It alerts us whenever something's going down. It has been pretty helpful The product helps with visibility. The agents that are installed help detect threats. The agents give pretty good visibility into what is happening at the…

Read full review

reviewer1717125

Cyber Security Specialist at a financial services firm with 11-50 employees

Nov 16, 2021

Allowed us to consolidate cybersecurity technology but there's a steep learning curve for onboarding and deployment

The product is based on an agent initially intended to talk internally, and they've simply tweaked it to talk externally. It's inside of a network versus talking on the internet. If they redeveloped the product to use internet options that are part of the operating system, it would add more security. Netsurion would keep pace with the computer as it updates and the technologies change. If it were to talk using the internet options inherent in the operating system, the communication would be better and more frequent. It would be part of the operating system. It would work like opening a browser and hitting the internet rather than being a standalone solution. I've suggested redeveloping the application to work more fluidly with current technology instead of working as an old solution in a new application.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature is reviewing tickets and the notes added by technicians."

"The speed at which their services are reactive is valuable. Nowadays, when a threat hits an endpoint, you've got minutes, not hours or days. Their average response time is about four minutes on an alert. For anything that needs to be sent to us, it's about fourteen minutes, which is pretty good. They're the third SOC that I've used in fifteen years. By far, they are the quickest ones to act. When you're looking at prevention, that's a key factor."

"The best part about Binary Defense MDR is that it runs on everything, and they keep an eye on things 24/7."

"The case interface is Binary Defense MDR's most valuable feature."

"The most valuable features are the SIEM and the ticketing function; the latter is very smooth and easy to read and understand. We don't have any issues looking at the ticketing information when we're trying to identify what's going on."

"The most valuable part of Binary Defense is its team of cybersecurity analysts. Their analysts filter out the noise and only forward the critical threats that require a response instead of false positives."

"Binary Defense has a human service department that provides live monitoring for our systems."

"Binary Defense's most valuable feature is the 24/7 monitoring and threat hunting. Their team checks the latest breaches and how they're done."

More Binary Defense MDR pros

"After an easy onboarding, the monitoring started immediately."

"The product provides integrations with several different SaaS applications."

"The visibility into our endpoints is huge."

"They provide useful quarterly updates."

"Arctic Wolf is our eyes and ears 24/7 because we can't possibly watch all of our alerts. We may see all of these alerts, but our attention is distracted because we're working on other things."

"Security protection is the best feature of this product."

"The tool's most valuable feature is its ease of implementation."

"They have a portal where you can evaluate and mitigate any vulnerabilities that you and your network might have."

More Arctic Wolf Managed Detection and Response pros

"There are a host of things that are most valuable. Obviously monitoring our environment and reporting out different events is important. They perform a suite of services. They monitor all of our servers, all of our key infrastructure, like our DNS, our switches, all that stuff. They aggregate and correlate that quarterly. They'll tell us if we're getting a lot of login failures and something is going on or if something's weird."

"The most important feature is keeping track of when accounts are created and deleted, when permission groups are changed, and memberships are changed in groups; and overall, how many errors are occurring on the various systems that we're monitoring."

"I think Netsurion scales well. We've gone from a small number of agents up to thousands. So I would imagine that it would continue to scale. I don't see any issue with that."

"I like the UI, overall. I like the main page and there are aspects of the search page that I like. When you bring it up on the left-hand side of the page, as you look at the events, the ability to simply hit and click the plus/minus to pull events in and out of the overall view is well done and is very effective from a threat-hunting and an analysis perspective. I like the detail it shows."

"They have what they call Elasticsearch which is very quick, although that's only available for the last seven days' worth of data. It used to be that, if I wanted to do a search from three days ago, it might take me 10 to 15 minutes because it had to actually unzip some archive files. So I really like that feature. It's almost instantaneous for anything within the last seven days."

"The SIEMs and managed service are its most valuable features. We get a weekly report from them which provides a culmination of them combing through millions of events which are triggered across our network every day and minute. Their information security experts basically boil that down to a report which I get emailed once a week. It identifies potential threats and the remediation that I should take to be able to quell those threats."

"When it comes to threat detection and response, it does a very good job detecting and blocking on its own. And the SOC is a nice added value because they're doing analysis on things that aren't as obvious, on things that you can't just detect with a signature or behavior. Also, any SIEM will come with a lot of noise, so having them do a lot of the initial analysis to find out what's critical and what issues are false alarms is very good."

"They have a number of integrations with different products. Google Workspace is one of them, and Microsoft Azure is another one. They integrate with a number of other things, such as Duo for multi-factor authentication. They can pull the logs from Duo to see if users are coming from bad repeatable IPs or if there are malicious known IPs that may be popping up in the logs. They are able to see that, and they can identify that. Some of the other integrations they do are from inside your network. For firewalls, they can integrate with SonicWall, Cisco, Fortinet, etc. They have a pretty wide variety of things to integrate with and be able to pull the logins from those devices."

More Netsurion pros

Cons

"We found that an earlier version of the agent had high memory usage and that was a bit concerning, but we raised the concern with their support team and they immediately replied that they had noticed the same thing and had a candidate fix already available... it totally fixed the issue."

"The most significant area for improvement is in support for non-English speakers; we're a global organization, so many of our users are not English speakers, which can make interacting with them a challenge. There's no Chinese language support, so we must rely on what we can do with the internet. We don't expect Binary Defense to build a language staff, but details can get lost in translation when we assume the whole world speaks English."

"The only area I see for improvement with Binary Defense is their service portal. It could benefit from some enhancements."

"We found a couple of bugs in the user interface."

"We should be able to isolate devices faster. They should shorten the time between clicking on a device to contain it and carrying out the action. That would be a welcome improvement."

"If I were shopping for an MDR solution today, I would not only look for a company that has the ability to alert, detect, and remediate, but also the ability to integrate vulnerability management. That's a big thing that they're lacking today."

"Binary Defense MDR could be even better with additional features, like automatic scans and file quarantine."

"I want the ability to push agent updates to specific machines. We can quarantine them, but we can't push them out to a machine that isn't on the network. The updates are automatically pushed to the machines on the network, but employees may not have their laptops on or connected to the network, so sometimes we'd like to force those updates manually."

More Binary Defense MDR cons

"We get a lot of false alarms, but that's because they don't know our network in detail. I think that could be alleviated if we told them more about our network so they could create rules to skip some of those things."

"We need an easier way to audit and act on agents."

"It will be helpful if the dashboard is more granular."

"If you are not in the security field, this can be difficult to figure out from time to time."

"While it isn't a regular occurrence, there have been some gaps in response to some support questions. Questions get answered, yet there are times it takes longer than I'm comfortable with."

"I would actually be interested in having fewer features at a lower price."

"It would be great if the whole process of determining vendor risk could be simplified by Arctic Wolf."

"Arctic Wolf Managed Detection and Response's analysis and remediation parts could be improved. It's not bad, but it needs improvement."

More Arctic Wolf Managed Detection and Response cons

"Probably the biggest thing is just: Can I search for this and what's the best way to do it? If I'm looking for two events versus a singular event, I just throw it back at them. They're the experts on it."

"Netsurion's SOC can be a bit too aggressive at times."

"The weekly reporting could use some improvement. For example, when we handed them our landscape document, it took longer than I would have liked for those details to become noticeable within the reports."

"The agents on the endpoints seem to fail quite a bit, requiring manual involvement from the local administrators. I would like to see their product be much more ad hoc and update automatically."

"The threat detection and response is passive. We have asked if there were options for taking action, and we have not gotten any feedback on that, which would be useful to know. Depending on the situation and threat, some actions may not be possible, but we haven't gotten any feedback on what options could be directed and actionable with the understanding that it may have an extra cost. It would be nice to know or find out if it is actually possible to take actions by a SIEM service or a SIEM agent."

"It would be great if they had a client for phones by which they could push a notification to us, as opposed to via email."

"Where there is an opportunity for improvement is in the interface used for performing the searches. You have to understand Elasticsearch search too well for the security team to be able to take really full advantage of that part of the product. It's not as intuitive as I would like it to be for new staff coming in. The general query capability is a little bit challenging."

"I would like to see a faster response when we see things like 15,000 lockouts. I really wished that I had known that on Friday afternoon rather than waiting until I got the weekly report today. By the same token, they are looking at it from the point of view that this is a system or software malfunction. This is not a bad actor repeating the exact same password three times a second. Therefore, they can tell that this is not a bad thing. However, it's not a security event but it is an operational event for me. Knowing this sort of thing would help my team and me out more because then we would be able to clear out a lot of network traffic that we didn't know was going on. So, we would like quicker updates on non-high security events."

More Netsurion cons

Pricing and Cost Advice

"The pricing is very good. They are definitely competitive and they were lower at the time that we went with them."

"From the initial cost that Binary Defense came in with, we pared it down quite a bit over the course of 30 or 60 days. My leadership would say that their cost was high, but realistically, they were in line with the market."

"Binary Defense MDR is priced competitively and may be slightly lower than CrowdStrike."

"It's valued at the right price. Even with the number of endpoints we have, we don't feel that it's a lot more than any competitor. In fact, it might be less expensive when you look at the fact that you're getting a full flex SOC out of it along with the tools."

"Binary Defense has changed its pricing model from being primarily based on the volume of data to one based on escalations and incidents they handle."

"The solution's price is spot on; if anything, it's slightly below the norm for most services. Compared to building the same team internally, it would cost more to create the same amount of capability than what we get from an external team. Price-wise, Binary Defense is in a great spot."

"The pricing isn't that bad, it's very competitive. I don't feel that it's over-priced and I don't feel that it's under-priced."

"The pricing is on target. Working with their sales team on pricing negotiations was a pleasant process. They were very respectful of the constraints we had and I feel that we're paying a fair price."

More Binary Defense MDR pricing and cost advice

"The pricing is pretty competitive."

"I find their pricing to be reasonable and competitive."

"It is more expensive than CrowdStrike, but it also has more features. I don't remember the amount, but I do remember that it was on the higher side. I believe we have five sensors, and the sensors have a yearly cost. We don't have any additional costs, but I know that if we have more features, they will add to the cost."

"The pricing is fair."

"I rate the tool's pricing a nine out of ten."

"The pricing and licensing seem very reasonable. The managed service part of it feels like it gives me the equivalent of a full-time engineer for a lot less money. So, I feel it's a good value."

"We put together the package of what we needed. It was based pretty much on the number of agents that we were deploying. If we needed to manage logging from certain specific applications, like Active Directory and SQL Server, there has been no additional cost for that. We had agents deployed for those specific servers and the applications were included, then there was just an additional installation that they had to do for us."

"Netsurion's pricing is extremely fair and flexible. The price of their SIEM product is reasonable, and you can pay for those services you want on top of that. It wasn't cheap, but it's competitive, and we intend to renew our contract."

"Our pricing for Netsurion last year was US $52,000 per year."

"EventTracker's subscription-based model is interesting as far as yearly license type stuff. It's nice because you know what it's going to be next year. We haven't really looked at any other solutions. The pricing at the time compared to the other solutions was a lot less. A couple of years ago, we actually looked at Splunk. The amount in Splunk's licensing model is based on 20 gigs a day, or something like that. Based on our number of logs and stuff that we were already generating, the costs would be substantially more for the amount of logs that we would be getting."

"I don't know if the pricing is by the seat but we're paying about $20,000 to 25,000 a year. On top of that, we pay for the managed support services. That runs us about another $35,000 or $40,000 a year."

"It is a bit expensive as compared to some of the other products that have come out in recent years. Expense-wise, the only downside is that it is not cheap."

"Netsurion's pricing is competitive. At the same time, they're the only ones who do what we want to do the way we want it. I can't say we would've paid more, but we would've had to have come up with our own solution if they weren't providing that."

More Netsurion pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which SOC as a Service solutions are best for your needs.

See recommendations

787,061 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

18%

Healthcare Company

Manufacturing Company

Financial Services Firm

Computer Software Company

15%

Manufacturing Company

10%

Financial Services Firm

Government

Computer Software Company

31%

Manufacturing Company

12%

Government

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Binary Defense MDR?

The most valuable feature is reviewing tickets and the notes added by technicians.

See all answers

What is your experience regarding pricing and costs for Binary Defense MDR?

Binary Defense is fairly priced. I would say that Binary Defense is flexible in negotiating and tailoring a solution ...

See all answers

What needs improvement with Binary Defense MDR?

The only area I see for improvement with Binary Defense is their service portal. It could benefit from some enhanceme...

See all answers

What do you like most about Arctic Wolf Managed Detection and Response?

The agents give pretty good visibility into what is happening at the endpoint.

See all answers

What is your experience regarding pricing and costs for Arctic Wolf Managed Detection and Response?

The pricing is pretty competitive.

See all answers

What needs improvement with Arctic Wolf Managed Detection and Response?

It will be helpful if the dashboard is more granular. The vendor must allow us to see what they see on their end.

See all answers

What do you like most about Netsurion Managed Threat Protection?

Expediting incident response is really great.

See all answers

What is your experience regarding pricing and costs for Netsurion Managed Threat Protection?

Their pricing is high. I don't know if it's a barrier. The quality speaks to the price. The price is the price. They ...

See all answers

What needs improvement with Netsurion Managed Threat Protection?

There is one area that needs improvement and that is with the agents and the server that's on-site. The system requir...

See all answers

Comparisons

Darktrace vs Binary Defense MDR

Compared 38% of the time

SentinelOne Singularity Complete vs Binary Defense MDR

Compared 22% of the time

Cortex XDR by Palo Alto Networks vs Binary Defense MDR

Compared 15% of the time

CrowdStrike Falcon vs Binary Defense MDR

Compared 13% of the time

More Binary Defense MDR Competitors

CrowdStrike Falcon Complete vs Arctic Wolf Managed Detection and Response

Compared 21% of the time

Red Canary vs Arctic Wolf Managed Detection and Response

Compared 9% of the time

Huntress vs Arctic Wolf Managed Detection and Response

Compared 9% of the time

Microsoft Defender Experts for Hunting vs Arctic Wolf Managed Detection and Response

Compared 6% of the time

Adlumin Security Operations Platform vs Arctic Wolf Managed Detection and Response

Compared 6% of the time

More Arctic Wolf Managed Detection and Response Competitors

CyberHat CYREBRO vs Netsurion

Compared 33% of the time

More Netsurion Competitors

Product Reports

Buyer's Guide

Binary Defense MDR

June 2024

Download Binary Defense MDR product report

Buyer's Guide

Arctic Wolf Managed Detection and Response

June 2024

Arctic Wolf Managed Detection and Response report

Download Arctic Wolf Managed Detection and Response product report

Buyer's Guide

Netsurion

May 2024

Download Netsurion product report

Also Known As

Binary Defense Vision, Binary Defense Managed Detection and Response, Binary Defense Managed Detection & Response

Arctic Wolf AWN CyberSOC

Netsurion Managed Threat Protection, Netsurion EventTracker

Learn More

Binary Defense

Arctic Wolf Networks

Video not available

Netsurion

Overview

Binary Defense provides a Managed Detection and Response service using an Open XDR strategy that detects and isolates threats early in the attack lifecycle. Expert security analysts in the Binary Defense Security Operations Center leverage an attacker’s mindset, monitoring your environments for security events 24x7x365 and acting as an extension of your security teams. When a security event occurs, Binary Defense analysts triage, disposition, and prioritize the event. Analysts conduct full kill chain analysis and supply tactical and strategic mitigation recommendations to your security team with the goal of increasing your organization’s security posture against the latest adversary threats.

Visit us online at https://www.binarydefense.com

Built on the industry’s only cloud-native platform to deliver security operations as a concierge service, the Arctic Wolf® Managed Detection and Response (MDR) solution eliminates alert fatigue and false positives to promote a faster response with detection and response capabilities tailored to the specific needs of your organization. Your Arctic Wolf Concierge Security® Team (CST) works directly with you to perform threat hunting, incident response, and guided remediation, while also providing strategic recommendations uniquely customized for your environment.

Our open XDR platform unifies your existing security telemetry to deliver wider attack surface coverage and deeper threat analytics resulting in greater security visibility. Our SOC does the heavy lifting for you of proactive threat hunting, event correlation and analysis, and provides you with guided remediation. The result is a force multiplier that allows your IT team to be confident and in control again while also maximizing all of your cybersecurity investments.

Sample Customers

Securitas USA, Black Hills Energy, Lincoln Electric,The J.M. Smuckers Company, New York Community Bank, State of Connecticut, NCR

Agero, Madison Memorial Hospital, DLZ, Howard LLP, City of Sparks

The Salvation Army, The FRESH Market, Pacific Western Bank, NASA, American Academy of Orthopaedic Surgeons (AAOS), and Talbot’s Stores

Buyer's Guide

Arctic Wolf Managed Detection and Response vs. Netsurion

May 2024

Free Report: Arctic Wolf Managed Detection and Response vs. Netsurion

Find out what your peers are saying about Arctic Wolf Managed Detection and Response vs. Netsurion and other solutions. Updated: May 2024.

DOWNLOAD NOW

787,061 professionals have used our research since 2012.

See our Arctic Wolf Managed Detection and Response vs. Netsurion report.

See our list of best SOC as a Service vendors and best Managed Detection and Response (MDR) vendors.

We monitor all SOC as a Service reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.