Cybereason Managed Detection & Response Reviews

I am part of a reseller with two roles. We are a Managed Service Provider ourselves, and in a way, we compete with managed detection and response with the MDR product. 

In our managed service, we use the NGAV product and mainly the EDR product to provide our service. In some situations, we resell all three products or even four. We resell NGAV and EDR to customers who want to run it on their own, and we resell these products, including MDR, with a managed service from Cybereason, where the customer prefers that. 

When we sell the XDR product, MDR is always included. This depends on the customer situation. We resell MDR when the customer is price-sensitive and needs real 24/7 service. The Cybereason model is more economical than ours. We are more flexible but more expensive.

The quick reaction and the ability to restore the state before within a short time are significant. It is quick to detect, quick to react, and able to bring back the state to get rid of the damage. It's very reliable. When something happens, they see it.

My company uses Cybereason Managed Detection & Response for incident response, and whenever there is a breach, we support some clients. In short, we also manage it for our company's clients.

The most valuable feature of the solution is endpoint management. Though I can't remember what it is exactly called, it is the isolation feature that allows you to isolate malware as soon as the tool detects it, especially when it doesn't respond to quarantine. The investigation feature allows you to search and see what has happened in the logs.

We use Cybereason Managed Detection & Response for general security and monitoring of our environment. This includes threat detection and response to ensure we are aware of threats that are in our environment.

The pricing is valuable because we do not need to have our own data center and software licensing for monitoring. The response from the service provider is quick and responsive. They inform us of threats even before we are aware, through reports. Automated information on zero-day threats is provided without us needing to ask. Another feature we like is that they can detect threats and alert us even when we are not at work.