The security team chose the product. I wasn't involved in the process.

I evaluated deepwatch. Alert Logic is more mature, with 20-plus years of development. While deepwatch is a very advanced MDR, it is only about five or six years in the CMMI process. Alert Logic also has advantages in online compliance and security reporting. It covers several regulatory mandates, such as PCI, HIPAA, SOC2, etc. with automated compliance features, which is somewhat unique in the industry.  

We do use Trend Micro as well. We are an MSP, so there are different clients using different products, and Alert Logic is one of them. 

I don't have purchasing power. Management said, "We are getting this product. Here it is. Put it in." There was no discussion with the engineers.

Other solutions that we evaluated were Datadog and LogRhythm, but it is not an apples to apples comparison.

Alert Logic was not my choice. I implemented it, and said, "Here you go guys. Kick the tires."

We also evaluated on-premise and open source products. We went with Alert Logic because it was quicker to implement.