No more typing reviews! Try our Samantha, our new voice AI agent.

Expel vs Field Effect MDR comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Expel
Ranking in Managed Detection and Response (MDR)
12th
Average Rating
9.0
Reviews Sentiment
8.2
Number of Reviews
1
Ranking in other categories
SOC as a Service (4th)
Field Effect MDR
Ranking in Managed Detection and Response (MDR)
7th
Average Rating
9.2
Reviews Sentiment
7.5
Number of Reviews
31
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2026, in the Managed Detection and Response (MDR) category, the mindshare of Expel is 2.6%, up from 2.1% compared to the previous year. The mindshare of Field Effect MDR is 1.5%, down from 3.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Managed Detection and Response (MDR) Mindshare Distribution
ProductMindshare (%)
Field Effect MDR1.5%
Expel2.6%
Other95.9%
Managed Detection and Response (MDR)
 

Featured Reviews

reviewer2578461 - PeerSpot reviewer
MDR Specialist at a tech services company with 201-500 employees
Rapid threat management and diverse technology integration for effective monitoring
Expel has made it easier for companies to monitor and manage various log sources. With its vast integration portfolio, customers can efficiently monitor diverse environments. Time to value is quick, as Expel can turn their service up very rapidly. They have both automated active responses and human processes that quicken threat resolution.
reviewer2753850 - PeerSpot reviewer
Owner at a tech services company with 1-10 employees
Customer security is enhanced with software and update detection while licensing process needs improvement
A quick specific example of how I use Field Effect MDR to keep my customers secure is that it helps me identify computers that need updates, even when I believe they are already updated. Field Effect MDR finds software and Windows updates that aren't being completed, which I find very valuable.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Their threat hunting protocol and process with AI and machine learning are strong, allowing for active and rapid responses."
"One of the most useful and impressive features of the system is its detailed notification mechanism."
"The solution's advanced detection behaviors, automated notifications and responses, and automated remediation behaviors are valuable features."
"The most valuable aspects of Covalence for me are the exceptional customer service and the support from the dedicated team."
"The most valuable aspect of Field MDR is the comprehensive visibility the solution offers. Most solutions cover the traditional threat landscape of computers, endpoints, servers, etc. However, there are also things happening within the network environment, such as WiFi, mobile, the Internet of Things, smart TVs, video surveillance systems, etc., that have associated vulnerabilities. Most environments do not manage or protect these assets."
"The AROs have been incredibly helpful."
"We now have a single cybersecurity product that protects all of our threat services, and all the endpoints."
"Unlike previous solutions, where we were solely informed of security incidents, Covalence's MDR allows for real-time incident prevention."
"The most valuable aspect of Field Effect Covalence is its ability to continuously monitor for and identify potential threats."
 

Cons

"The one area where Expel may not measure up is if a customer requires a managed SIEM as part of their overall solution. There's a gap there, and solutions might require third-party assistance for management."
"There are tags for security threats, but I only view them. I do not action anything. I just see what is happening. Sometimes, they are a little bit vague, and I am unsure what they mean, so I leave that to the IT experts. Overall, we are quite satisfied with their product and how it is working."
"Covalence should provide a live view of the endpoint because the endpoint view in the portal is 5 to 15 minutes behind the actual status of the endpoint and its vulnerabilities. When it doesn't update with the actual status, it makes managing those things harder because sometimes something gets updated, and one of those vulnerabilities has gone away, but that doesn't appear in the ARO."
"Field Effect Covalence could benefit from enhancing its packing slip process."
"The interface is perhaps the weakest part of the entire platform, and that does not mean that it is deficient. It is just not as optimized and as efficient as other aspects of the platform."
"I would like Covalence to include patching."
"The cost of the solution has room for improvement."
"They put too much detail into the emails."
"It would be more effective if it could surgically isolate the specific malicious process instead of deleting the entire machine."
 

Pricing and Cost Advice

Information not available
"The cost of the solution is high."
"A top-tier competitor to Field Effect in Magic Quadrant that we had been using until our switch to Field Effect was a great product, but each capability had an additional charge. We had to license modules separately, and each of those add-ons had to be added onto its own consumption and agreement. It was a nightmare from a billing perspective because we had multiple agreements, and each one had a jagged anniversary or a renewal anniversary. It was a nightmare, whereas Field Effect MDR is one product."
"The licensing model itself is solid, but we're ironing out some inconsistencies in how customer profiles are configured."
"We were particularly impressed with their pricing model, which charges per user rather than per system."
"It is a little pricey. It is a little on the high end, but we are continuing to use it. We signed the contract and have not canceled, so we find value in having it."
"The pricing isn't sized, so Field Effect doesn't make it easy for anything under 25 users. I'm not crazy about that."
"Although Covalence is expensive, it provides good value for the price."
"While the contract duration might change, the pricing remains highly attractive."
report
Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.
911,994 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Construction Company
11%
Computer Software Company
8%
Manufacturing Company
8%
Computer Software Company
19%
Manufacturing Company
15%
Outsourcing Company
9%
Construction Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business32
Midsize Enterprise3
 

Questions from the Community

What is your experience regarding pricing and costs for Expel?
Expel's pricing has adapted as the market evolved and has become competitive over the past twelve months.
What needs improvement with Expel?
The one area where Expel may not measure up is if a customer requires a managed SIEM as part of their overall solution. There's a gap there, and solutions might require third-party assistance for m...
What is your primary use case for Expel?
I have experience reselling Expel. Customers often come to me wanting to evaluate multiple providers to make a choice based on their specific use cases, requirements, technology investments, and so...
What is your experience regarding pricing and costs for Field Effect Covalence?
Pricing was initially a concern, but the recent updates have resolved that by offering a more accessible buying cost.
What needs improvement with Field Effect Covalence?
One way Field Effect MDR can be improved is through its licensing process, which is not ideal. The licensing process is difficult because I have to access a separate website to complete it.
What is your primary use case for Field Effect Covalence?
My main use case for Field Effect MDR is keeping my customers secure.
 

Also Known As

Workbench, Expel SOC-as-a-Service
Field Effect Covalence
 

Overview

 

Sample Customers

Amanda Fennell CSO
Field Effect MDR is widely adopted by managed service providers (MSPs) and organizations with lean IT teams. It is used to monitor, detect, and respond to threats across distributed environments, helping businesses strengthen their cybersecurity posture while maintaining operational efficiency. Organizations rely on Field Effect MDR to protect hybrid infrastructures, secure cloud applications, and defend against modern threats, including increasingly automated and AI-driven attacks, while maintaining compliance and resilience in a rapidly evolving threat landscape.
Find out what your peers are saying about Huntress, SentinelOne, CrowdStrike and others in Managed Detection and Response (MDR). Updated: September 2026.
911,994 professionals have used our research since 2012.