We performed a comparison between Red Canary MDR and Sophos MDR based on real PeerSpot user reviews.
Find out in this report how the two Managed Detection and Response (MDR) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable feature is reviewing tickets and the notes added by technicians."
"Binary Defense's most valuable feature is the 24/7 monitoring and threat hunting. Their team checks the latest breaches and how they're done."
"One of the main benefits of Binary Defense MDR is the ability to easily meet with their support team to discuss any issues we encounter."
"The speed at which their services are reactive is valuable. Nowadays, when a threat hits an endpoint, you've got minutes, not hours or days. Their average response time is about four minutes on an alert. For anything that needs to be sent to us, it's about fourteen minutes, which is pretty good. They're the third SOC that I've used in fifteen years. By far, they are the quickest ones to act. When you're looking at prevention, that's a key factor."
"The customization has been the most valuable aspect and was really the reason we ended up selecting Binary Defense. They worked with us to provide exactly the level of support, features, response, and collaboration we needed."
"The best part about Binary Defense MDR is that it runs on everything, and they keep an eye on things 24/7."
"With Binary Defense, we don't just get an alert, but also a detailed rundown of why they're alerting us on it. They tell us what was executed, or the username, script, or IP. That way, we're not wasting time investigating."
"Among the valuable features are the agent, continuous reporting, and dashboard. It has all the features we need and we haven't had to customize it, other than turning on certain features that we wanted."
"The valuable features of this solution are it integrates well with different EDR software, such CrowdStrike, and Carbon Black, and the information it provides is helpful."
"The near real-time review translates into near real-time action. So, in addition to alerting, Red Canary MDR has response playbooks built out."
"The most valuable feature of the solution is its automation part."
"The solution works well for what we use it for and the support and protection are good."
"The most valuable features of Red Canary MDR are its modeled after the MITRE ATT&CK framework and we can easily automate the containment of the endpoint. Additionally, it is easy to use and we have never had an issue with it."
"The most valuable feature is the ability to integrate multiple functions into a single dashboard regardless of the vendors being integrated."
"The most valuable aspect of this solution is the ability to interact with the firewall and workstations seamlessly to shut down the threats. Additionally, you are able to control the workstations remotely."
"The product gives us good visibility into what is happening inside the company."
"The product’s most valuable feature is rapid response."
"The user doesn't need a technician; it offers 24/7 support to identify and manage your infrastructure and take complete care of any technological incidents."
"It is a scalable solution."
"There is a feature called XDR Central. With this, Sophos can connect to third-party security solutions."
"The product’s most valuable features are integration and endpoint protection."
"The most significant area for improvement is in support for non-English speakers; we're a global organization, so many of our users are not English speakers, which can make interacting with them a challenge. There's no Chinese language support, so we must rely on what we can do with the internet. We don't expect Binary Defense to build a language staff, but details can get lost in translation when we assume the whole world speaks English."
"We should be able to isolate devices faster. They should shorten the time between clicking on a device to contain it and carrying out the action. That would be a welcome improvement."
"It's sometimes difficult to know when to engage Binary Defense or TrustedSec, their sister company. TrustedSec is more focused on offensive security, as opposed to the defensive security that the MDR solution provides. It would be awesome if there were a better bridge between that relationship for when we need to get more proactive services or when we need to do a penetration test."
"We found a couple of bugs in the user interface."
"It's hard to think of anything that they need to improve on, but just to point out something, I would like to see them provide advanced XDR."
"I don't find any downside to them, but if I have to put one, it would be consistent manpower or staffing. The only area where the solution can be improved is going to be with people. As they grow, they are struggling with the same thing that every other company is, which is getting talent and getting that talent to stay, but they've just revised their tiering system to go from a flat analyst and manager to a three-tier solution where it goes through two or three before it gets elevated. That seems to have worked out well, so if one level misses it, the next one picks it up, and it works out fine."
"Binary Defense MDR could be even better with additional features, like automatic scans and file quarantine."
"The current reporting system could benefit from improvement."
"The price could always be better."
"I would like there to be an on-premise version of this solution for our data centers because of the proliferation of online threats."
"There should be an easier way to update agents to new levels in Red Canary MDR. However, it is not a huge issue but it would help."
"In general, the solution currently fails to provide a summary to its users."
"The most valuable feature of Red Canary MDR is the overall threat protection it provides."
"Its technical support could be better."
"There is room for improvement in performance and upgrades."
"Sophos MDR's support and basic training of their devices could be improved."
"The product's pricing could be less expensive."
"The reports should be more comprehensive and easier to organize."
"The technical team for Sophos MDR is not so good since they take a long time, like a week, to provide a solution to a simple case or problem we face in our company."
"Threat intelligence is an area for improvement for MDR."
"They should improve XDR and threat protection capabilities for zero-day attacks."
Red Canary MDR is ranked 11th in Managed Detection and Response (MDR) with 5 reviews while Sophos MDR is ranked 6th in Managed Detection and Response (MDR) with 20 reviews. Red Canary MDR is rated 9.2, while Sophos MDR is rated 8.4. The top reviewer of Red Canary MDR writes "An open-source tool that offers great automation capabilities". On the other hand, the top reviewer of Sophos MDR writes "Proactive protection, scalability, and cloud-based efficiency". Red Canary MDR is most compared with CrowdStrike Falcon Complete, Arctic Wolf Managed Detection and Response, Expel Workbench, Rapid7 MDR and ReliaQuest GreyMatter, whereas Sophos MDR is most compared with CrowdStrike Falcon Complete, SentinelOne Vigilance, Trend Micro Managed XDR, Arctic Wolf Managed Detection and Response and Bitdefender MDR. See our Red Canary MDR vs. Sophos MDR report.
See our list of best Managed Detection and Response (MDR) vendors.
We monitor all Managed Detection and Response (MDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
