Netsurion vs Secureworks Taegis Managed XDR / MDR comparison

Netsurion and Secureworks are both solutions in the Managed Security Services Providers (MSSP) category. Netsurion is ranked #5 with an average rating of 8.6, while Secureworks is ranked #1 with an average rating of 7.7. Additionally, 92% of Netsurion users are willing to recommend the solution, compared to 92% of Secureworks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Netsurion and Secureworks Taegis Managed XDR / MDR based on real PeerSpot user reviews.

Find out in this report how the two Managed Security Services Providers (MSSP) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Netsurion vs. Secureworks Taegis Managed XDR / MDR Report (Updated: October 2024).

Buyer's Guide

Netsurion vs. Secureworks Taegis Managed XDR / MDR

October 2024

Download the complete report

Helped 815,854 peers since 2012

Categories and Ranking

Binary Defense MDR

Featured Reviews

Rich Ullom

AVP, IT Security Compliance and Audit/Information Security Officer at Western Reserve Group

May 1, 2023

Worth the money, fantastic communication, and fast service with an average response time of about four minutes on an alert

This is my third SOC. I have never had anybody react as well. So, it's hard for me to provide something that they could do better because I'm really happy with them. I just signed another three-year contract with them. I don't find any downside to them, but if I have to put one, it would be consistent manpower or staffing. The only area where the solution can be improved is going to be with people. As they grow, they are struggling with the same thing that every other company is, which is getting talent and getting that talent to stay, but they've just revised their tiering system to go from a flat analyst and manager to a three-tier solution where it goes through two or three before it gets elevated. That seems to have worked out well, so if one level misses it, the next one picks it up, and it works out fine. Consistent staffing is the only challenge they have because when you're hiring level-one analysts, you go through them pretty quickly. You'll probably hire them at 50K or 55K, and after they do it for a year, they find out they can make 85K somewhere else, and they bounce. So, their turnover is a little high, but that's it.

Read full review

John-Berry

Information Technology Manager at ProfitSolv

Sep 11, 2023

The SOC center monitors, hunts, and notifies us of threats around the clock

I know they are working to resolve this issue, but Netsurion is currently unable to retrieve logs from S3 buckets. We use WP Engine for a lot of web hosting as well as AWS, and both of these platforms use S3 buckets. I would like Netsurion to be able to pull logs from Linux devices. We have some of that capability, and I believe they can do it. However, the way it works with Amazon is strange and glitchy. Therefore, working something out with Amazon would be great. Netsurion's SOC can be a bit too aggressive at times. We have asked them to adjust their playbook because I am tired of being notified about the same issue multiple times a day. I am aware of the issue, and it is not a cause for concern. Let's only take action on this issue if we see an actual problem.

Read full review

Tom Kar

Senior Security Specialist at Sopra

Aug 25, 2023

Has a user-friendly setup process, but its query language needs improvement

The product has valuable features for the EDR section. We can easily isolate affected machines in the network. It helps us prevent the spreading of malware or ransomware further Secureworks Taegis ManagedXDR's query language and stability need improvement. Additionally, its price could be better…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"One of the main benefits of Binary Defense MDR is the ability to easily meet with their support team to discuss any issues we encounter."

"The customization has been the most valuable aspect and was really the reason we ended up selecting Binary Defense. They worked with us to provide exactly the level of support, features, response, and collaboration we needed."

"The most valuable part of Binary Defense is its team of cybersecurity analysts. Their analysts filter out the noise and only forward the critical threats that require a response instead of false positives."

"The speed at which their services are reactive is valuable. Nowadays, when a threat hits an endpoint, you've got minutes, not hours or days. Their average response time is about four minutes on an alert. For anything that needs to be sent to us, it's about fourteen minutes, which is pretty good. They're the third SOC that I've used in fifteen years. By far, they are the quickest ones to act. When you're looking at prevention, that's a key factor."

"The most valuable feature is reviewing tickets and the notes added by technicians."

"The best part about Binary Defense MDR is that it runs on everything, and they keep an eye on things 24/7."

"With Binary Defense, we don't just get an alert, but also a detailed rundown of why they're alerting us on it. They tell us what was executed, or the username, script, or IP. That way, we're not wasting time investigating."

"The most valuable features are the SIEM and the ticketing function; the latter is very smooth and easy to read and understand. We don't have any issues looking at the ticketing information when we're trying to identify what's going on."

More Binary Defense MDR pros

"Netsurion's 24/7 monitoring has enhanced the overall security of the company. They have someone looking at the data 24/7 who will call us as needed. If their team spots a malicious process after hours, they notify the appropriate person by phone. We get a lot of actionable threat intelligence from Netsurion. For example, if a user clicks on a malicious link in a web page and starts an unusual process that isn't on the white-list, Netsurion's team can detect it and prevent it from executing. Afterward, they'll notify us by telephone, so we can respond and clean up whatever damage has occurred."

"When it comes to threat detection and response, it does a very good job detecting and blocking on its own. And the SOC is a nice added value because they're doing analysis on things that aren't as obvious, on things that you can't just detect with a signature or behavior. Also, any SIEM will come with a lot of noise, so having them do a lot of the initial analysis to find out what's critical and what issues are false alarms is very good."

"The real-time alerting for things such as people getting dropped into a VPN group or the domain admin group — things like that which really shouldn't happen without proper change management, but we all know the reality, they do from time to time — gives me real-time visibility into what's going on."

"They have a number of integrations with different products. Google Workspace is one of them, and Microsoft Azure is another one. They integrate with a number of other things, such as Duo for multi-factor authentication. They can pull the logs from Duo to see if users are coming from bad repeatable IPs or if there are malicious known IPs that may be popping up in the logs. They are able to see that, and they can identify that. Some of the other integrations they do are from inside your network. For firewalls, they can integrate with SonicWall, Cisco, Fortinet, etc. They have a pretty wide variety of things to integrate with and be able to pull the logins from those devices."

"I think Netsurion scales well. We've gone from a small number of agents up to thousands. So I would imagine that it would continue to scale. I don't see any issue with that."

"The product satisfies our compliance, and thus, all of our auditors. All of the data that we use and store for all security events is required by our auditors to be kept in a central storage location."

"There are a host of things that are most valuable. Obviously monitoring our environment and reporting out different events is important. They perform a suite of services. They monitor all of our servers, all of our key infrastructure, like our DNS, our switches, all that stuff. They aggregate and correlate that quarterly. They'll tell us if we're getting a lot of login failures and something is going on or if something's weird."

"What I like most about Netsurion is the level of visibility and reporting."

More Netsurion pros

"This solution gathers the information logs from all devices and correlates all the information. It notifies us of any critical events taking place across our networks which has been valuable."

"Securworks' threat intel seems pretty decent, and they integrate with several solutions we have, such as Azure AD, so all our Microsoft 365 stuff is covered."

"It provides more visibility and more control over endpoints. It reduces the noise. It clears things and only shows things that are really important. It only shows those things that need to be looked at or need to be investigated further. Other similar solutions give you a lot of alerts and other things, but Secureworks gives you a defined or less noisy view so that you can work or focus on things that are important in terms of investigation, response, and remediation."

"The initial setup was very straight forward."

"There are some patent pending detectors within the platform that provides a lot of value."

"The most valuable feature is the fast alerting and response time."

"The most valuable feature is the support. The support chat. It's always connecting to people. And you open the chat, and it's not about that automated response. It's actually a human being that responds to you."

"The solution definitely made us way more aware of the possibilities out there."

More Secureworks Taegis Managed XDR / MDR pros

Cons

"We found that an earlier version of the agent had high memory usage and that was a bit concerning, but we raised the concern with their support team and they immediately replied that they had noticed the same thing and had a candidate fix already available... it totally fixed the issue."

"The only area for improvement that I can think of relates to statistical analysis for SLAs. They are in the middle of moving to a new product called D3 which is going to do some backend work for them. I know they are working to improve some of the help desk statistics, such as the time the tickets open and the time they are closed."

"While my understanding is that they're working on this, I would like to see some more of the quantification or reporting."

"I don't find any downside to them, but if I have to put one, it would be consistent manpower or staffing. The only area where the solution can be improved is going to be with people. As they grow, they are struggling with the same thing that every other company is, which is getting talent and getting that talent to stay, but they've just revised their tiering system to go from a flat analyst and manager to a three-tier solution where it goes through two or three before it gets elevated. That seems to have worked out well, so if one level misses it, the next one picks it up, and it works out fine."

"I would like to get more reports from Binary Defense about what they're blocking."

"It's hard to think of anything that they need to improve on, but just to point out something, I would like to see them provide advanced XDR."

"If I were shopping for an MDR solution today, I would not only look for a company that has the ability to alert, detect, and remediate, but also the ability to integrate vulnerability management. That's a big thing that they're lacking today."

"It's sometimes difficult to know when to engage Binary Defense or TrustedSec, their sister company. TrustedSec is more focused on offensive security, as opposed to the defensive security that the MDR solution provides. It would be awesome if there were a better bridge between that relationship for when we need to get more proactive services or when we need to do a penetration test."

More Binary Defense MDR cons

"I would like to see the dashboard come up more quickly."

"The agents on the endpoints seem to fail quite a bit, requiring manual involvement from the local administrators. I would like to see their product be much more ad hoc and update automatically."

"The solution's dashboard is okay. The one thing that we ran into are issues when we upgraded to the newer version. It uses Elasticsearch for the different dashboard entries. So, we were running on spinning disks, and Elasticsearch didn't work that well. A number of the different dashboards, like my dashboard or different things like that, pull from Elasticsearch. Since Elasticsearch really wasn't working, we were having some issues with that, but we just migrated."

"I'd like to see improvement in the ease of generating reports. It seems fairly cumbersome whenever you decide to start tracking new categories of events. It seems a little kludgy when trying to generate those reports."

"The biggest problem is that we have too many domain controllers. So, we have to keep all the clients and main system updated with the latest versions along with making sure all the firewalls are open."

"There are some issues with searches taking a long period of time, but they assured me that they have implemented a new search function that's available in version 9, but which requires a solid-state hard drive... Depending on how many logs you have it could take a long time to return the results if you're looking back prior to the last 30 days."

"With version 8, there are quite a few things. The query tool was one of the big ones, and the query speed was one of the big ones, but they've made some great strides between versions 8 and 9. There were also issues in version 8 around the ability to get the data back out. It's one thing to collect data, but it's a whole other thing to be able to present it or run it in a timely manner. The old tool, depending on how far back I was looking, might even time out and I would have to run it again."

"I would also like to have a dashboard that I can access anytime to review the real-time data from their website."

More Netsurion cons

"Dell Secureworks is for higher-end customers and it's not quite as straightforward to implement or to get up and running as some of the other solutions."

"The deployment could definitely be improved."

"This solution could be improved with a higher degree of automation such as automated emails, triggers and defining the severity of the cases."

"The integration with the Carbon Black sensor could be better. ManagedXDR doesn't seem to know how to extract the forensic data from an endpoint that was quarantined by Carbon Black."

"It would be nice if the solution were a little more affordable."

"Secureworks Taegis ManagedXDR's query language and stability need improvement."

"Dell Secureworks could improve its integration with other third-party solutions."

"In the next release of this solution, I would like to see file integrity monitoring."

More Secureworks Taegis Managed XDR / MDR cons

Pricing and Cost Advice

"It has been good. We have saved money, and we have a better product."

"The pricing isn't that bad, it's very competitive. I don't feel that it's over-priced and I don't feel that it's under-priced."

"Binary Defense has changed its pricing model from being primarily based on the volume of data to one based on escalations and incidents they handle."

"It's valued at the right price. Even with the number of endpoints we have, we don't feel that it's a lot more than any competitor. In fact, it might be less expensive when you look at the fact that you're getting a full flex SOC out of it along with the tools."

"The solution's price is spot on; if anything, it's slightly below the norm for most services. Compared to building the same team internally, it would cost more to create the same amount of capability than what we get from an external team. Price-wise, Binary Defense is in a great spot."

"After we acquired this platform, we met with a number of different vendors. Binary Defense came in with a proposal that was surprisingly affordable. In fact, we were able to recoup the cost of their services within a short period of time. This is because Binary Defense is able to provide the same level of security as a team of two or three in-house analysts but at a fraction of the cost. As a result, Binary Defense is saving us an estimated $250,000 to $300,000 per year."

"The pricing is on target. Working with their sales team on pricing negotiations was a pleasant process. They were very respectful of the constraints we had and I feel that we're paying a fair price."

"From the initial cost that Binary Defense came in with, we pared it down quite a bit over the course of 30 or 60 days. My leadership would say that their cost was high, but realistically, they were in line with the market."

More Binary Defense MDR pricing and cost advice

"The pricing and licensing seem very reasonable. The managed service part of it feels like it gives me the equivalent of a full-time engineer for a lot less money. So, I feel it's a good value."

"EventTracker's subscription-based model is interesting as far as yearly license type stuff. It's nice because you know what it's going to be next year. We haven't really looked at any other solutions. The pricing at the time compared to the other solutions was a lot less. A couple of years ago, we actually looked at Splunk. The amount in Splunk's licensing model is based on 20 gigs a day, or something like that. Based on our number of logs and stuff that we were already generating, the costs would be substantially more for the amount of logs that we would be getting."

"Our budget follows the calendar year. We just started a new budget year at the beginning of the month. We did budget for an increase in our threat management system selection. Therefore, we have the budget to implement and accommodate a threat management system change, including an increase for the quoted actions that we received to improve EventTracker. We are just waiting on our council to approve that budget, which might not be for a little while. Hopefully, when they do, we will be able to jump on doing something."

"Our pricing for Netsurion last year was US $52,000 per year."

"In the security space, it's hard to quantify your return on investment. So, I don't. We spend about $40,000 a year and so. It's hard to say if the SIEM saved that much money."

"When we first got the EventTracker product, we were using SIEM Simplified. At the time they didn't call it that, but it was more of a service thing. So, there was a bit more hand-holding and getting stuff set up, along with failure reports, that they did during the first one to two years. Then, we decided that the the additional money to have someone do these daily reports wasn't terribly useful, so we discontinued that service."

"We have seen time and cost savings. It prevents us from having to hire specialized people for this type of work. We would need to hire six staff members to accommodate the same service."

"Netsurion's pricing is competitive. At the same time, they're the only ones who do what we want to do the way we want it. I can't say we would've paid more, but we would've had to have come up with our own solution if they weren't providing that."

More Netsurion pricing and cost advice

"It is expensive but there is no better product than this."

"The pricing of Dell Secureworks is very reasonable."

"The Red Cloak agent is free."

"The price is kind of on par. The licensing was comparable to other solutions. It's not particularly high or low."

"Initially, the cost was going to be something around $160 or $170. And eventually, I think they brought it down to $110 and they also threw in some endpoint protection platforms."

"The pricing for this solution is reasonable. One agent costs approximately 270 dirhams/70 USD for one year. There is a reduction in cost per licence as the number of licences used increases."

"Secureworks Taegis ManagedXDR is very expensive and could be more cost-effective."

See which vendors are best for you

Use our free recommendation engine to learn which Managed Security Services Providers (MSSP) solutions are best for your needs.

See recommendations

815,854 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Healthcare Company

Financial Services Firm

Manufacturing Company

Computer Software Company

28%

Government

10%

Manufacturing Company

Financial Services Firm

Computer Software Company

23%

Financial Services Firm

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Binary Defense MDR?

The most valuable feature is reviewing tickets and the notes added by technicians.

See all answers

What is your experience regarding pricing and costs for Binary Defense MDR?

The pricing is very competitive; it's on par with or below others. For those sensitive to pricing, I'd advise that th...

See all answers

What needs improvement with Binary Defense MDR?

Sometimes, something may not install right; however, whenever we have challenges, they are very solution-oriented and...

See all answers

What do you like most about Netsurion Managed Threat Protection?

Expediting incident response is really great.

See all answers

What is your experience regarding pricing and costs for Netsurion Managed Threat Protection?

Their pricing is high. I don't know if it's a barrier. The quality speaks to the price. The price is the price. They ...

See all answers

What needs improvement with Netsurion Managed Threat Protection?

There is one area that needs improvement and that is with the agents and the server that's on-site. The system requir...

See all answers

What do you like most about Secureworks Taegis ManagedXDR?

The most valuable feature is the support. The support chat. It's always connecting to people. And you open the chat, ...

See all answers

What is your experience regarding pricing and costs for Secureworks Taegis ManagedXDR?

It is worth the money. It is expensive but there is no better product than this.

See all answers

What needs improvement with Secureworks Taegis ManagedXDR?

The integration would look better with other products, with other EDRs, with other firewalls, with other older versio...

See all answers

Comparisons

CrowdStrike Falcon vs Binary Defense MDR

Compared 25% of the time

Darktrace vs Binary Defense MDR

Compared 22% of the time

SentinelOne Singularity Complete vs Binary Defense MDR

Compared 22% of the time

Arctic Wolf Managed Detection and Response vs Binary Defense MDR

Compared 16% of the time

Cortex XDR by Palo Alto Networks vs Binary Defense MDR

Compared 15% of the time

More Binary Defense MDR Competitors

Arctic Wolf Managed Detection and Response vs Netsurion

Compared 42% of the time

Sumo Logic Security vs Netsurion

Compared 30% of the time

Devo vs Netsurion

Compared 28% of the time

More Netsurion Competitors

CrowdStrike Falcon Complete MDR vs Secureworks Taegis Managed XDR / MDR

Compared 40% of the time

SentinelOne Vigilance vs Secureworks Taegis Managed XDR / MDR

Compared 15% of the time

Sophos MDR vs Secureworks Taegis Managed XDR / MDR

Compared 7% of the time

Arctic Wolf Managed Detection and Response vs Secureworks Taegis Managed XDR / MDR

Compared 5% of the time

Microsoft Defender Experts for Hunting vs Secureworks Taegis Managed XDR / MDR

Compared 5% of the time

More Secureworks Taegis Managed XDR / MDR Competitors

Product Reports

Buyer's Guide

Binary Defense MDR

November 2024

Download Binary Defense MDR product report

Buyer's Guide

Netsurion

November 2024

Download Netsurion product report

Buyer's Guide

Secureworks Taegis Managed XDR / MDR

October 2024

Secureworks Taegis Managed XDR / MDR report

Download Secureworks Taegis Managed XDR / MDR product report

Also Known As

Binary Defense Vision, Binary Defense Managed Detection and Response, Binary Defense Managed Detection & Response

Netsurion Managed Threat Protection, Netsurion EventTracker

Secureworks Red Cloak Managed Detection and Response, Dell Secureworks, SecureWorks Taegis Managed TDR

Learn More

Binary Defense

Video not available

Netsurion

Secureworks

Overview

Binary Defense provides a Managed Detection and Response service using an Open XDR strategy that detects and isolates threats early in the attack lifecycle. Expert security analysts in the Binary Defense Security Operations Center leverage an attacker’s mindset, monitoring your environments for security events 24x7x365 and acting as an extension of your security teams. When a security event occurs, Binary Defense analysts triage, disposition, and prioritize the event. Analysts conduct full kill chain analysis and supply tactical and strategic mitigation recommendations to your security team with the goal of increasing your organization’s security posture against the latest adversary threats.

Visit us online at https://www.binarydefense.com

Netsurion offers a comprehensive solution for centralized log management, SIEM, and managed services, ensuring continuous monitoring and security event analysis for diverse organizations, enhancing IT security and compliance.

Netsurion centralizes event management through SIEM and managed services. Organizations leverage it for vulnerability assessment and intrusion detection, integrating logs from Windows, Linux, and network devices. Its SOC provides 24/7 monitoring, ensuring compliance with PCI and audit standards. Real-time alerts and efficient log data aggregation enhance threat identification and response. Weekly reports and insights into user lockouts contribute to robust security management, beneficial for firms with constrained resources.

What are some key features of Netsurion?

SIEM Integration: Centralizes security event data for easier management.
Managed Services: Provides 24/7 SOC monitoring and support.
Real-TIme Alerts: Notifies of unusual security events promptly.
Threat Intelligence: Delivers actionable insights for proactive defense.
Seamless Platform Integration: Compatible with Office 365, firewalls, and other platforms.

How can companies benefit from using Netsurion?

Enhanced Security Management: Real-time monitoring and alerts streamline threat response.
PCI Compliance: Supports meeting audit and regulatory requirements efficiently.
Resource Optimization: Weekly reports and detailed insights aid decision-making for limited-resource organizations.
Improved Threat Detection: Consolidating logs and real-time intelligence helps in identifying threats swiftly.

Netsurion is implemented across industries like finance, healthcare, and retail, where security is crucial. These sectors require robust monitoring and compliance solutions, utilizing Netsurion's seamless integration with their existing infrastructure to manage security operations effectively, addressing both regulatory needs and threat management.

Secureworks Taegis Managed XDR is a managed detection and response (MDR) tool that combines security analytics software, 24x7 support, threat hunting, and incident response into a standalone product. In a single dashboard, users can see the whole story of their endpoint, network, and cloud activity, making event correlation simple. XDR operationalizes threat intelligence by automatically connecting our threat landscape knowledge with your security telemetry and regularly updated threat intelligence.

Secureworks Taegis Managed XDR gives your security operations teams more confidence when responding to security problems. Security analysts have additional power to actively examine and proactively look for risks in your environment with features like longer log retention, search query, user-defined reporting, and custom use case support. XDR may easily replace your current SIEM, allowing you to receive actionable insights into malicious activities as well as sophisticated threat detection. This solution provides you with enough business and security context for you to understand an investigation and take appropriate action.

Secureworks Taegis Managed XDR Features

Secureworks Taegis Managed XDR has many valuable key features. Some of the most useful ones include:

24/7 service
Live chat with experts
Interface for collaborative investigation
Use of prioritization and threat triage
Use of investigation and validation
Use of executed containment
Use of threat engagement manager
Full access to Taegis advanced analytics
Supports cloud, network, and endpoint
Supports AWS, Azure, O365
Use of applied threat intelligence
Use of remote incident response services
CTU's global threat hunting and research is ongoing
Use of response action execution
Access to monthly targeted threat hunting
Support provided for integration of third-party data source technologies to ensure coverage across your environment

Secureworks Taegis Managed XDR Benefits

There are many benefits to implementing Secureworks Taegis Managed XDR. Some of the biggest advantages the solution offers include:

Improve threat detection and response time: Users have access to Secureworks Taegis Managed XDR’s team of experts, who research and respond to threats on their behalf 24/7. This solution can cut dwell times from the industry average of 111 days to minutes and hours.
Industry leader on your side: To safeguard you around the clock, Secureworks Taegis Managed XDR’s security professionals are supported by 20+ years of security experience and insights from 1,400+ annual IR engagements and their extensive threat research.
Reduce cost and operational burden: Save money (413% ROI, according to a Forrester Consulting TEI research) while relieving your employees of the strain and allowing them to focus on strategic projects.

Reviews from Real Users

Secureworks Taegis Managed XDR stands out among its competitors for a number of reasons. One major reason is its easy deployment.

A Solutions Architect at a computer software company, writes, “The deployment was easy. We just put on some of the end points, so we're still talking about what's going on there. But to my knowledge, there's been no issues with it.”

Sample Customers

Securitas USA, Black Hills Energy, Lincoln Electric,The J.M. Smuckers Company, New York Community Bank, State of Connecticut, NCR

The Salvation Army, The FRESH Market, Pacific Western Bank, NASA, American Academy of Orthopaedic Surgeons (AAOS), and Talbot’s Stores

RICOH, Owens and Minor

Buyer's Guide

Netsurion vs. Secureworks Taegis Managed XDR / MDR

October 2024

Free Report: Netsurion vs. Secureworks Taegis Managed XDR / MDR

Find out what your peers are saying about Netsurion vs. Secureworks Taegis Managed XDR / MDR and other solutions. Updated: October 2024.

DOWNLOAD NOW

815,854 professionals have used our research since 2012.

See our Netsurion vs. Secureworks Taegis Managed XDR / MDR report.

See our list of best Managed Security Services Providers (MSSP) vendors and best Managed Detection and Response (MDR) vendors.

We monitor all Managed Security Services Providers (MSSP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.