Try our new research platform with insights from 80,000+ expert users

Arctic Wolf Managed Detection and Response vs Sophos MDR comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Binary Defense MDR
Sponsored
Ranking in Managed Detection and Response (MDR)
7th
Average Rating
9.2
Number of Reviews
16
Ranking in other categories
No ranking in other categories
Arctic Wolf Managed Detecti...
Ranking in Managed Detection and Response (MDR)
2nd
Average Rating
9.2
Reviews Sentiment
10.0
Number of Reviews
19
Ranking in other categories
SOC as a Service (1st)
Sophos MDR
Ranking in Managed Detection and Response (MDR)
5th
Average Rating
8.4
Number of Reviews
29
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2024, in the Managed Detection and Response (MDR) category, the mindshare of Binary Defense MDR is 0.6%, up from 0.4% compared to the previous year. The mindshare of Arctic Wolf Managed Detection and Response is 9.8%, down from 10.7% compared to the previous year. The mindshare of Sophos MDR is 6.3%, up from 6.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Managed Detection and Response (MDR)
 

Featured Reviews

Rich Ullom - PeerSpot reviewer
Worth the money, fantastic communication, and fast service with an average response time of about four minutes on an alert
This is my third SOC. I have never had anybody react as well. So, it's hard for me to provide something that they could do better because I'm really happy with them. I just signed another three-year contract with them. I don't find any downside to them, but if I have to put one, it would be consistent manpower or staffing. The only area where the solution can be improved is going to be with people. As they grow, they are struggling with the same thing that every other company is, which is getting talent and getting that talent to stay, but they've just revised their tiering system to go from a flat analyst and manager to a three-tier solution where it goes through two or three before it gets elevated. That seems to have worked out well, so if one level misses it, the next one picks it up, and it works out fine. Consistent staffing is the only challenge they have because when you're hiring level-one analysts, you go through them pretty quickly. You'll probably hire them at 50K or 55K, and after they do it for a year, they find out they can make 85K somewhere else, and they bounce. So, their turnover is a little high, but that's it.
Jared Kruger - PeerSpot reviewer
Particularly valuable for smaller and mid-sized businesses without a dedicated cybersecurity team
The scalability of this solution is great. It offers user-based licensing, so if there is an increase in the number of IT users, it can easily scale accordingly. In contrast to other solutions that base pricing on data ingestion, which can be challenging as data grows, user count tends to be more predictable, making this model highly scalable. Arctic Wolf is flexible and works with clients to ensure smooth scaling. Our clients for this solution come from a range of business sizes, primarily focusing on small and medium-sized enterprises. We generally don't cater to large enterprises, but instead, our clients typically fall within the medium-sized category, with user counts ranging from 50 to around 3,000.
ManelAlvarez - PeerSpot reviewer
Quarantines and removes threats from the network
The most important aspect is a EC2 deployment which is a remote deployment done for new customers using Sophos. Approximately ninety-five percent of EC2 deployment is automated, requiring only a review or customization for the customer's needs. Another key feature is the centralized control of updates, allowing for scheduling any interaction with the endpoint. Additionally, the new platform and system operations, along with IOCs, are updated daily. Sophos has a very good policy at good prices. Since I have a local contact with the salespeople, they provide me discounts. It's very stable and competitive. When the customers have budget, they can opt for CrowdStrike. However, when the customers have budget constraints on daily servers, and when the customers prefer to integrate mobile platforms with different technologies, they can use this one technology. Overall, I rate the solution an eight out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"With Binary Defense, we don't just get an alert, but also a detailed rundown of why they're alerting us on it. They tell us what was executed, or the username, script, or IP. That way, we're not wasting time investigating."
"Among the valuable features are the agent, continuous reporting, and dashboard. It has all the features we need and we haven't had to customize it, other than turning on certain features that we wanted."
"The case interface is Binary Defense MDR's most valuable feature."
"Binary Defense is comprehensive. We see most of the questionable activity. Once you see things a couple of times and are familiar with the processes, you know what those are. The level of activity is definitely favorable."
"One of the main benefits of Binary Defense MDR is the ability to easily meet with their support team to discuss any issues we encounter."
"The best part about Binary Defense MDR is that it runs on everything, and they keep an eye on things 24/7."
"Our mean time to response has gone down. We're much faster with direct response and have more investigative capabilities than we did before."
"Binary Defense has a human service department that provides live monitoring for our systems."
"This service makes answering audits much easier since it covers so many security best practices."
"The agents give pretty good visibility into what is happening at the endpoint."
"Arctic Wolf is our eyes and ears 24/7 because we can't possibly watch all of our alerts. We may see all of these alerts, but our attention is distracted because we're working on other things."
"The visibility into our endpoints is huge."
"Whenever there is a major thing like Exchange vulnerabilities, it scans our Exchange server for indicators of compromise. It then alerts us and points exactly where we need to go to check for ourselves if it is normal or not."
"The most valuable aspect of this solution is the managed detection and response component."
"We can effectively manage the massive amounts of security data that we receive from various sources such as firewalls, switches, endpoints, and other log sources."
"The tool's most valuable feature is its ease of implementation."
"The product gives us good visibility into what is happening inside the company."
"The authentication it offers minimizes the risk of access."
"The most valuable feature is threat hunting."
"The user doesn't need a technician; it offers 24/7 support to identify and manage your infrastructure and take complete care of any technological incidents."
"The solution is stable."
"The product’s most valuable features are integration and endpoint protection."
"Sophos MTR will stop the threat as it is happening. Intercept X, which is a part of it, has the ability to roll back, so the attack is undone. And then the advanced edition of MTR lets me handle the threat by talking on the phone. I don't have to deal with it. I don't have to just go through emails back and forth. We don't have to pay extra for Rapid Response services. If something is happening, they're right on top of it."
"I like Sophos MDR's inbuilt feature for DLP (Data Loss Prevention)."
 

Cons

"The only area for improvement that I can think of relates to statistical analysis for SLAs. They are in the middle of moving to a new product called D3 which is going to do some backend work for them. I know they are working to improve some of the help desk statistics, such as the time the tickets open and the time they are closed."
"I don't find any downside to them, but if I have to put one, it would be consistent manpower or staffing. The only area where the solution can be improved is going to be with people. As they grow, they are struggling with the same thing that every other company is, which is getting talent and getting that talent to stay, but they've just revised their tiering system to go from a flat analyst and manager to a three-tier solution where it goes through two or three before it gets elevated. That seems to have worked out well, so if one level misses it, the next one picks it up, and it works out fine."
"We should be able to isolate devices faster. They should shorten the time between clicking on a device to contain it and carrying out the action. That would be a welcome improvement."
"The current reporting system could benefit from improvement."
"It's hard to think of anything that they need to improve on, but just to point out something, I would like to see them provide advanced XDR."
"It's sometimes difficult to know when to engage Binary Defense or TrustedSec, their sister company. TrustedSec is more focused on offensive security, as opposed to the defensive security that the MDR solution provides. It would be awesome if there were a better bridge between that relationship for when we need to get more proactive services or when we need to do a penetration test."
"The most significant area for improvement is in support for non-English speakers; we're a global organization, so many of our users are not English speakers, which can make interacting with them a challenge. There's no Chinese language support, so we must rely on what we can do with the internet. We don't expect Binary Defense to build a language staff, but details can get lost in translation when we assume the whole world speaks English."
"I would like to see more frequent check-ins with our security status."
"I would actually be interested in having fewer features at a lower price."
"It's nitpicky; however, if it could integrate with more of our products, like our CRM, that would be ideal. They may only integrate with Salesforce. We use a different mid-market CRM."
"It would be great if the whole process of determining vendor risk could be simplified by Arctic Wolf."
"I have heard that the tool doesn't go right to the endpoints."
"We get a lot of false alarms, but that's because they don't know our network in detail. I think that could be alleviated if we told them more about our network so they could create rules to skip some of those things."
"Arctic Wolf Managed Detection and Response's analysis and remediation parts could be improved. It's not bad, but it needs improvement."
"In the future, I would like to see a summary report."
"They focus on detecting administrator-level control compromises. Because they're focusing more on administrator-level compromise, they are less able to see if an individual user has been compromised. It is, admittedly, very difficult because they don't know what normal human behavior is. If a hacker compromises a human account and then acts just like the human, how are you ever going to notice, unless you have some inside knowledge of how the company works? For example, they overlook account lockouts on user accounts, whereas in our own alerting system, we do not. We review every account lockout, and if it is bad, we contact the person, whereas they think of that as noise because they're more focused on the administrator-level compromise."
"The product must provide zero trust security."
"They should improve XDR and threat protection capabilities for zero-day attacks."
"The product's pricing could be less expensive."
"The integration with third-party solutions as an area for slight improvement"
"Sophos MDR lacks integration with MDM solutions."
"The technical team for Sophos MDR is not so good since they take a long time, like a week, to provide a solution to a simple case or problem we face in our company."
"The solution is expensive for customers."
"The product's stability needs improvement."
 

Pricing and Cost Advice

"It has been good. We have saved money, and we have a better product."
"It's valued at the right price. Even with the number of endpoints we have, we don't feel that it's a lot more than any competitor. In fact, it might be less expensive when you look at the fact that you're getting a full flex SOC out of it along with the tools."
"The pricing is very good. They are definitely competitive and they were lower at the time that we went with them."
"Binary Defense MDR is priced competitively and may be slightly lower than CrowdStrike."
"The pricing is on target. Working with their sales team on pricing negotiations was a pleasant process. They were very respectful of the constraints we had and I feel that we're paying a fair price."
"The solution's price is spot on; if anything, it's slightly below the norm for most services. Compared to building the same team internally, it would cost more to create the same amount of capability than what we get from an external team. Price-wise, Binary Defense is in a great spot."
"The pricing isn't that bad, it's very competitive. I don't feel that it's over-priced and I don't feel that it's under-priced."
"From the initial cost that Binary Defense came in with, we pared it down quite a bit over the course of 30 or 60 days. My leadership would say that their cost was high, but realistically, they were in line with the market."
"The pricing is pretty competitive."
"The pricing is fair."
"I find their pricing to be reasonable and competitive."
"I rate the tool's pricing a nine out of ten."
"It is more expensive than CrowdStrike, but it also has more features. I don't remember the amount, but I do remember that it was on the higher side. I believe we have five sensors, and the sensors have a yearly cost. We don't have any additional costs, but I know that if we have more features, they will add to the cost."
"Compared to other tools, Sophos has a pretty good price."
"The cost of the solution is based on how many users use it."
"I rate Sophos MDR’s pricing a seven or eight out of ten."
"The product is reasonably priced considering the cybersecurity features."
"Sophos MDR is less expensive than other products like Fortinet or Palo Alto."
"Sophos MDR could be more affordable."
"Sophos MDR is not a cheap product. Compared with other solutions in the market, Sophos MDR is available at a good price, especially considering its performance."
"The solution has subscription-based pricing plans."
report
Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.
816,406 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Healthcare Company
8%
Financial Services Firm
7%
Manufacturing Company
7%
Computer Software Company
15%
Manufacturing Company
11%
Government
7%
Financial Services Firm
6%
Computer Software Company
21%
Manufacturing Company
7%
Government
6%
Comms Service Provider
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Binary Defense MDR?
The most valuable feature is reviewing tickets and the notes added by technicians.
What is your experience regarding pricing and costs for Binary Defense MDR?
The pricing is very competitive; it's on par with or below others. For those sensitive to pricing, I'd advise that th...
What needs improvement with Binary Defense MDR?
Sometimes, something may not install right; however, whenever we have challenges, they are very solution-oriented and...
What do you like most about Arctic Wolf Managed Detection and Response?
The agents give pretty good visibility into what is happening at the endpoint.
What needs improvement with Arctic Wolf Managed Detection and Response?
I have heard that the tool doesn't go right to the endpoints. With CrowdStrike, I don't think that it is a bad thing ...
What do you like most about Sophos MDR?
The user doesn't need a technician; it offers 24/7 support to identify and manage your infrastructure and take comple...
What needs improvement with Sophos MDR?
Maybe the reporting needs improvement.
What advice do you have for others considering Sophos MDR?
I would recommend Sophas MDR to others as long as they have another software solution like a firewall to combine with...
 

Also Known As

Binary Defense Vision, Binary Defense Managed Detection and Response, Binary Defense Managed Detection & Response
Arctic Wolf AWN CyberSOC
Sophos Managed Threat Response
 

Overview

 

Sample Customers

Securitas USA, Black Hills Energy, Lincoln Electric,The J.M. Smuckers Company, New York Community Bank, State of Connecticut, NCR
Agero, Madison Memorial Hospital, DLZ, Howard LLP, City of Sparks
Information Not Available
Find out what your peers are saying about Arctic Wolf Managed Detection and Response vs. Sophos MDR and other solutions. Updated: October 2024.
816,406 professionals have used our research since 2012.