Sophos

Sophos Managed Detection and Response

Composite Score

7.5 /10

CX Score

7.5 /10

24 Reviews Write a Review

Claim Software

What is Sophos Managed Detection and Response?

Sophos Managed Threat Response (MTR) provides 24/7 threat hunting, detection, and response capabilities delivered by an expert team as a fully-managed service. Built on our Intercept X Advanced with EDR technology, Sophos MTR fuses machine learning technology and expert analysis for improved threat hunting and detection, deeper investigation of alerts, and targeted actions to eliminate threats with speed and precision.

Company Details

Need Assistance?

We're here to help you with understanding our reports and the data inside to help you make decisions.

Get Assistance

Sophos Managed Detection and Response Ratings

Real user data aggregated to summarize the product performance and customer experience.
Download the entire Product Scorecard to access more information on Sophos Managed Detection and Response.

Product scores listed below represent current data. This may be different from data contained in reports and awards, which express data as of their publication date.

86 Likeliness to Recommend

1
Since last award

96 Plan to Renew

83 Satisfaction of Cost Relative to Value

1
Since last award

{y}

{name}

Emotional Footprint Overview

Product scores listed below represent current data. This may be different from data contained in reports and awards, which express data as of their publication date.

+84 Net Emotional Footprint

The emotional sentiment held by end users of the software based on their experience with the vendor. Responses are captured on an eight-point scale.

How much do users love Sophos Managed Detection and Response?

0% Negative

9% Neutral

91% Positive

Pros

Trustworthy
Effective Service
Respectful
Security Protects

Feature Ratings

Average 82

Threat Intelligence

Prevention

Proactive Threat Hunting

Incident Management

24/7/365 Security Monitoring

Vulnerability Management

Technology Management

Real-Time Threat and Anomaly Detection

IOC Focus and Management

Compliance Reporting and Archival Mechanisms

Use of the MITRE ATT&CK Framework

Vendor Capability Ratings

Average 80

Ease of Implementation

Ease of IT Administration

Ease of Customization

Availability and Quality of Training

Vendor Support

Breadth of Features

Business Value Created

Product Strategy and Rate of Improvement

Ease of Data Integration

Usability and Intuitiveness

Quality of Features

Sophos Managed Detection and Response Reviews

Siva Sankar C.

Role: Information Technology
Industry: Technology
Involvement: End User of Application

Validated Review

Verified Reviewer

Submitted Oct 2024

High number of features but needs tobe implemented

Likeliness to Recommend

10 /10

Pros

Performance Enhancing
Trustworthy
Unique Features
Efficient Service

Jesus J.

Role: Consultant
Industry: Technology
Involvement: IT Leader or Manager

Validated Review

Verified Reviewer

Submitted Nov 2024

Comprehensive security solution with strong threat

Likeliness to Recommend

9 /10

What differentiates Sophos Managed Detection and Response from other similar products?

Sophos Managed Detection and Response (MDR) stands out due to its synchronized security ecosystem, which integrates seamlessly with other Sophos products for unified threat detection, prevention, and response. Additionally, Sophos MDR leverages deep learning and AI-driven threat detection, providing proactive threat hunting and rapid incident response through both automated processes and experienced analysts.

What is your favorite aspect of this product?

My favorite aspect of Sophos Managed Detection and Response is its combination of AI-driven threat detection with expert human analysis. This blend allows for rapid, accurate responses to complex threats, giving an added layer of confidence in the security of our environment. The customizable service levels also make it flexible, so we can adjust the support to match our in-house capabilities.

What do you dislike most about this product?

What I dislike most about Sophos Managed Detection and Response is the limited integration with certain third-party tools. While it performs exceptionally well within the Sophos ecosystem, integrating it with other existing security tools can be challenging, which sometimes complicates workflows for organizations using diverse security solutions.

What recommendations would you give to someone considering this product?

For anyone considering Sophos Managed Detection and Response, I’d recommend evaluating the compatibility of your current security tools with the Sophos ecosystem to ensure smooth integration. Additionally, consider whether you prefer a fully managed or collaborative approach, as Sophos MDR allows flexibility in service levels, which can be tailored to your team’s capabilities and resources. Finally, take advantage of their trial or demo period to explore the platform’s interface and response workflows firsthand, as this can help you determine how well it aligns with your security operations.

Pros

Helps Innovate
Continually Improving Product
Reliable
Performance Enhancing

Jorge R.

Role: Consultant
Industry: Other
Involvement: End User of Application

Validated Review

Verified Reviewer

Submitted Sep 2024

good product but can be improved

Likeliness to Recommend

7 /10

What differentiates Sophos Managed Detection and Response from other similar products?

It has features that most manufacturers do not have.

What is your favorite aspect of this product?

The live reponse feature is the best.

What do you dislike most about this product?

Performance problems.

What recommendations would you give to someone considering this product?

For something simple to implement and to have good protection, it is recommended.

Pros

Client Friendly Policies
Transparent
Trustworthy
Efficient Service

Cons

Less Performance Enhancing

Most Popular Sophos Managed Detection and Response Comparisons

Field Effect MDR
Compare
Alert Logic MDR
Compare
Crowdstrike Falcon Platform
Compare
Cynet 360
Compare
Netsurion
Compare
Rapid7 Managed Detection and Response
Compare

See All Alternatives

Sophos Managed Detection and Response

What is Sophos Managed Detection and Response?

Company Details

Need Assistance?

Sophos Managed Detection and Response Ratings

86 Likeliness to Recommend

1 Since last award

96 Plan to Renew

83 Satisfaction of Cost Relative to Value

1 Since last award

Emotional Footprint Overview

+84 Net Emotional Footprint

How much do users love Sophos Managed Detection and Response?

Pros

Feature Ratings Average rating of all product features, some of which may not be shown below

Threat Intelligence Security threat intelligence feed integration with ability to update multiple uses and control updating behaviors.

Prevention Offers capable next-gen AV (NGAV) and host protection.

Proactive Threat Hunting Leverages TTPs, threat Intelligence, and IOCs, to create hypotheses in order to investigate and identify abnormal activity that may be malicious.

Incident Management Includes incident diagnosis, escalation, investigation, resolution and recovery, and closure.

24/7/365 Security Monitoring MDR provider should include a team of experienced security analysts monitoring the network 24/7 to identify abnormal activity and mitigate against threats.

Vulnerability Management Discover and fix vulnerabilities in the system.

Technology Management Continuously manages and monitors systems and technology. Integrates with existing technology.

Real-Time Threat and Anomaly Detection Real-time or near real time threat detection of attacks and anomalous behavior.

IOC Focus and Management Should include a wide variety of IOCs, but is more focused on behaviors and behavioral detection; IOCs are not as simple to manage.

Compliance Reporting and Archival Mechanisms System archives incidents and produces comprehensive reports to stakeholders about current vulnerabilities and past vulnerabilities and remediation efforts.

Use of the MITRE ATT&CK Framework Threat modeling capabilities and allows for mapping use cases to established TTPs, in order to facilitate rapid incident response.

Vendor Capability Ratings Average rating of all vendor capabilities, some of which may not be shown below

Ease of Implementation Successfully implementing new software is necessary to realize its full value and promote end user adoption. This data indicates whether or not the product is easy to implement.

Ease of IT Administration This data indicates whether IT personnel will be able to resolve issues and perform configurations efficiently and effectively.

Ease of Customization Don't get bogged down in a difficult customization; use this data to make sure you can easily achieve the functionality you need for your particular situation.

Availability and Quality of Training Effective and readily available training enables users to get the most out of the software you've chosen. Use this section to make sure your vendor's training programs and materials measure up.

Vendor Support The importance of vendor support will vary for each organization depending on internal capabilities, but there will always be issues that only the vendor can resolve.

Breadth of Features Users prefer feature rich software that enables them to perform diverse series of tasks. This data expresses user satisfaction with the product's breadth of features.

Business Value Created Software needs to create value for employees, customers, partners, and, ultimately, shareholders. This data expresses user satisfaction - or lack thereof - with the product's business value.

Product Strategy and Rate of Improvement Vendors who don't stay on top of emerging needs and trends won't enable you to meet your business goals. Use this data to separate innovators from imposters.

Ease of Data Integration Use this data to determine whether the product will cause headaches or make data integration easy.

Usability and Intuitiveness End user learning curves cost the organization money. Pay attention to your end users' technical ability to determine how important UX is in your purchase.

Quality of Features Feature quality is just as important as quantity. Use this data to determine if this product will do what you're purchasing it to do, easily, intuitively, reliably, and effectively.

Sophos Managed Detection and Response Reviews

Siva Sankar C.

High number of features but needs tobe implemented

Likeliness to Recommend

Pros

Jesus J.

Comprehensive security solution with strong threat

Likeliness to Recommend

Pros

Jorge R.

good product but can be improved

Likeliness to Recommend

Pros

Cons

Most Popular Sophos Managed Detection and Response Comparisons

Field Effect MDR

Alert Logic MDR

Crowdstrike Falcon Platform

Cynet 360

Netsurion

Rapid7 Managed Detection and Response

1
Since last award

1
Since last award

Feature Ratings

Threat Intelligence

Prevention

Proactive Threat Hunting

Incident Management

24/7/365 Security Monitoring

Vulnerability Management

Technology Management

Real-Time Threat and Anomaly Detection

IOC Focus and Management

Compliance Reporting and Archival Mechanisms

Use of the MITRE ATT&CK Framework

Vendor Capability Ratings

Ease of Implementation

Ease of IT Administration

Ease of Customization

Availability and Quality of Training

Vendor Support

Breadth of Features

Business Value Created

Product Strategy and Rate of Improvement

Ease of Data Integration

Usability and Intuitiveness

Quality of Features