Comodo MDR vs Netsurion comparison

Xcitium and Netsurion are both solutions in the Managed Detection and Response (MDR) category. Xcitium is ranked #38, while Netsurion is ranked #39. Xcitium holds a 0.8% mindshare in MDR, compared to Netsurion’s 0.7% mindshare. Additionally, 100% of Xcitium users are willing to recommend the solution, compared to 92% of Netsurion users who would recommend it.

Comodo MDR

Read 3 Comodo MDR reviews

595 Views
595 Comparison Views

100% willing to recommend

Netsurion

Read 24 Netsurion reviews

2,213 Views
642 Comparison Views

92% willing to recommend

Comodo MDR

Netsurion

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 3, 2024

Comodo MDR and Netsurion are competing cybersecurity solutions offering managed detection and response services. Comodo MDR is cost-effective and supports efficiency, while Netsurion attracts tech buyers with superior features.

Features: Comodo MDR includes real-time threat detection, advanced endpoint protection, and automated incident response. Netsurion provides extensive network security, streamlined security controls, and integrated threat intelligence.

Ease of Deployment and Customer Service: Comodo MDR ensures straightforward deployment and robust support for quick integration. Netsurion offers detailed deployment guidelines and proactive support, minimizing downtime during setup.

Pricing and ROI: Comodo MDR's competitive pricing offers attractive ROI due to lower setup costs and quick threat response benefits. Netsurion presents higher initial costs but delivers significant ROI through comprehensive network defense features.

To learn more, read our detailed Comodo MDR vs. Netsurion Report (Updated: March 2026).

Buyer's Guide

Comodo MDR vs. Netsurion

March 2026

Download the complete report

Helped 884,873 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Comodo MDR

Ranking in Managed Detection and Response (MDR)

38th

Average Rating

10.0

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Netsurion

Ranking in Managed Detection and Response (MDR)

39th

Average Rating

8.4

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Managed Security Services Providers (MSSP) (33rd), Security Information and Event Management (SIEM) (54th), SOC as a Service (15th), Extended Detection and Response (XDR) (43rd)

Mindshare comparison

As of March 2026, in the Managed Detection and Response (MDR) category, the mindshare of Comodo MDR is 0.8%, up from 0.2% compared to the previous year. The mindshare of Netsurion is 0.7%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Managed Detection and Response (MDR) Mindshare Distribution
Product	Mindshare (%)
Comodo MDR	0.8%
Netsurion	0.7%
Other	98.5%

Managed Detection and Response (MDR)

Featured Reviews

Navin Mohinani

CEO at Forte IT Solutions

Have faced integration challenges but continue to benefit from strong security and proactive response features

The biggest advantage of the product, as I see it as a reseller, is its security and reporting. The automated incident response feature in Comodo MDR works fantastic. When customers install custom tailor-made software which is not recognized by Comodo MDR endpoint detection response tool, it runs in an isolated environment, virtual environment, sandbox environment. If it determines that this software is not secure, not verified, or not approved by system admin, it blocks the software immediately. The software will not run, and it sends a report to the admin email instantly. If there is any issue with the software or if any incident such as a malware attack or ransomware attack is happening, or something is trying to make changes to the system files, it immediately blocks the software tool and reports back to the admin. As a reseller partner and secondary admin for the customers, my team and I directly receive a mail, and we take control of that machine. It even blocks complete network access to that machine. On the hardware side, if there is a hard disk full or RAM 90% usage or CPU 90% usage or any of these incidents, we set up an alert notification option for it. The moment these incidents occur, it sends an alert so we can recommend customers upgrade their hardware or check if there is any malfunctioning software consuming too much RAM and CPU. This incident response use case helps us keep customer machines' performance to the maximum. The 24/7 monitoring capability supports a lot in contributing to our cybersecurity strategy. It is very much compatible with our goal.

Read full review

John-Berry

Information Technology Manager at ProfitSolv

The SOC center monitors, hunts, and notifies us of threats around the clock

I know they are working to resolve this issue, but Netsurion is currently unable to retrieve logs from S3 buckets. We use WP Engine for a lot of web hosting as well as AWS, and both of these platforms use S3 buckets. I would like Netsurion to be able to pull logs from Linux devices. We have some of that capability, and I believe they can do it. However, the way it works with Amazon is strange and glitchy. Therefore, working something out with Amazon would be great. Netsurion's SOC can be a bit too aggressive at times. We have asked them to adjust their playbook because I am tired of being notified about the same issue multiple times a day. I am aware of the issue, and it is not a cause for concern. Let's only take action on this issue if we see an actual problem.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The automated incident response feature in Comodo MDR works fantastic; when customers install custom tailor-made software which is not recognized by Comodo MDR, it runs in an isolated environment, and if it determines the software is not secure, it blocks it immediately and sends a report to the admin."

"One of the most valuable features is its around-the-clock, 365-day-a-year online technical support."

"The product is fairly new compared to others like Trend Micro or Symantec. However, it offers sophisticated features, especially in scanning and analyzing activities on workstations or servers. It can prevent malicious operations from spreading to other applications or the network. This feature is particularly effective because it operates at the IO level, unlike behavior or signature analysis used by other products. It contains threats and alerts administrators about whether they are false positives or real threats that need immediate action or support recommendations."

"Netsurion has its own security operations center, where it tracks information that comes across our telemetry."

"Netsurion's 24/7 monitoring has enhanced the overall security of the company. They have someone looking at the data 24/7 who will call us as needed. If their team spots a malicious process after hours, they notify the appropriate person by phone. We get a lot of actionable threat intelligence from Netsurion. For example, if a user clicks on a malicious link in a web page and starts an unusual process that isn't on the white-list, Netsurion's team can detect it and prevent it from executing. Afterward, they'll notify us by telephone, so we can respond and clean up whatever damage has occurred."

"We have also integrated our endpoint security into the Netsurion SIEM. That's important because we have all the events in one place; we don't have to manage them in multiple places. In addition, the embedded MITRE ATT&CK Framework was paramount in our decision to choose Managed Threat Protection because the MITRE Framework is the industry standard for threats."

"The SIEMs and managed service are its most valuable features. We get a weekly report from them which provides a culmination of them combing through millions of events which are triggered across our network every day and minute. Their information security experts basically boil that down to a report which I get emailed once a week. It identifies potential threats and the remediation that I should take to be able to quell those threats."

"The most valuable feature is that we get the events: the alerts about disk space and the security reports that we get once a day, including user lockouts and the like."

"They have what they call Elasticsearch which is very quick, although that's only available for the last seven days' worth of data. It used to be that, if I wanted to do a search from three days ago, it might take me 10 to 15 minutes because it had to actually unzip some archive files. So I really like that feature. It's almost instantaneous for anything within the last seven days."

"They have a number of integrations with different products. Google Workspace is one of them, and Microsoft Azure is another one. They integrate with a number of other things, such as Duo for multi-factor authentication. They can pull the logs from Duo to see if users are coming from bad repeatable IPs or if there are malicious known IPs that may be popping up in the logs. They are able to see that, and they can identify that. Some of the other integrations they do are from inside your network. For firewalls, they can integrate with SonicWall, Cisco, Fortinet, etc. They have a pretty wide variety of things to integrate with and be able to pull the logins from those devices."

"What I like most about Netsurion is the level of visibility and reporting."

More Netsurion pros

Cons

"Users pay $60 per user per year, and in case there is an issue, support tickets take nearly three days or sometimes even more for a clear resolution or an answer."

"They should consider adopting the desktop version as a solution."

"I think having a higher level of MDR would be beneficial, although it's quite expensive. This would involve not just monitoring the network but also taking actions to stop and detect threats. We haven't implemented this yet, but we're considering it for our organization's plans."

"They have their programs and tools that you have to put into your own environment. We basically ingest all the log data and then push it out to them. I wish it was a little bit different than that where we just push directly towards them. I do not know if that is a function that they thought would be better in terms of security, but I wish that instead of doing that, it should go from the device to them and not from the device to another system and then out to them. There seem to be some drawbacks to doing that."

"I would like to see the dashboard come up more quickly."

"I'd like to see improvement in the ease of generating reports. It seems fairly cumbersome whenever you decide to start tracking new categories of events. It seems a little kludgy when trying to generate those reports."

"We get a report generated on a particular day of the week and we go through it, trying to mitigate problems and make sure we're seeing everything that's happening. It would be helpful if the SOC spent a little more time with us going through some of those reports."

"Probably the biggest thing is just: Can I search for this and what's the best way to do it? If I'm looking for two events versus a singular event, I just throw it back at them. They're the experts on it."

"The solution's dashboard is okay. The one thing that we ran into are issues when we upgraded to the newer version. It uses Elasticsearch for the different dashboard entries. So, we were running on spinning disks, and Elasticsearch didn't work that well. A number of the different dashboards, like my dashboard or different things like that, pull from Elasticsearch. Since Elasticsearch really wasn't working, we were having some issues with that, but we just migrated."

"The agents on the endpoints seem to fail quite a bit, requiring manual involvement from the local administrators. I would like to see their product be much more ad hoc and update automatically."

"The weekly reporting could use some improvement. For example, when we handed them our landscape document, it took longer than I would have liked for those details to become noticeable within the reports."

More Netsurion cons

Pricing and Cost Advice

"The tool's pricing is high compared to other products. If you want to target a certain quantity, it should provide discounts to enterprises."

"The pricing falls within the moderate range."

"When we first got the EventTracker product, we were using SIEM Simplified. At the time they didn't call it that, but it was more of a service thing. So, there was a bit more hand-holding and getting stuff set up, along with failure reports, that they did during the first one to two years. Then, we decided that the the additional money to have someone do these daily reports wasn't terribly useful, so we discontinued that service."

"Netsurion's pricing is extremely fair and flexible. The price of their SIEM product is reasonable, and you can pay for those services you want on top of that. It wasn't cheap, but it's competitive, and we intend to renew our contract."

"It is a bit expensive as compared to some of the other products that have come out in recent years. Expense-wise, the only downside is that it is not cheap."

"The upfront costs have increased, and we have been locked into this contract. The cost of changing over from it is way too high."

"I don't know if the pricing is by the seat but we're paying about $20,000 to 25,000 a year. On top of that, we pay for the managed support services. That runs us about another $35,000 or $40,000 a year."

"Our budget follows the calendar year. We just started a new budget year at the beginning of the month. We did budget for an increase in our threat management system selection. Therefore, we have the budget to implement and accommodate a threat management system change, including an increase for the quoted actions that we received to improve EventTracker. We are just waiting on our council to approve that budget, which might not be for a little while. Hopefully, when they do, we will be able to jump on doing something."

"EventTracker's subscription-based model is interesting as far as yearly license type stuff. It's nice because you know what it's going to be next year. We haven't really looked at any other solutions. The pricing at the time compared to the other solutions was a lot less. A couple of years ago, we actually looked at Splunk. The amount in Splunk's licensing model is based on 20 gigs a day, or something like that. Based on our number of logs and stuff that we were already generating, the costs would be substantially more for the amount of logs that we would be getting."

"You are paying for different levels, especially as far as the monitoring goes and how often you review it with the team. The other factor that figures in is how many nodes are on your network, such as clients, network equipment, servers, etc. There are some additional pieces on top of that, but it's laid out pretty simply, as far as how much you're going to pay for a node."

More Netsurion pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.

See recommendations

884,873 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

No data available

Performing Arts

14%

Manufacturing Company

10%

Outsourcing Company

Retailer

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	7
Large Enterprise	7

Questions from the Community

What is your experience regarding pricing and costs for Comodo MDR?

The tool's pricing is high compared to other products. If you want to target a certain quantity, it should provide discounts to enterprises.

See all answers

What needs improvement with Comodo MDR?

Areas for improvement are mainly on the software side. They are trying to integrate some functionalities, but their API integration with some CRM and invoicing tools is not appropriate or 100% comp...

See all answers

What is your primary use case for Comodo MDR?

The major use case for the product is mainly for endpoint security and endpoint management.

See all answers

Ask a question

Earn 20 points

Comparisons

Huntress Managed EDR vs Comodo MDR

Compared 13% of the time

Carbon Black Managed Detection and Response vs Comodo MDR

Compared 8% of the time

Bitdefender MDR vs Comodo MDR

Compared 8% of the time

Sophos MDR vs Comodo MDR

Compared 7% of the time

More Comodo MDR Competitors

IBM Security QRadar vs Netsurion

Compared 7% of the time

GoSecure Titan Platform vs Netsurion

Compared 5% of the time

Rapid7 InsightIDR vs Netsurion

Compared 5% of the time

Legato Security vs Netsurion

Compared 5% of the time

Sumo Logic Security vs Netsurion

Compared 5% of the time

More Netsurion Competitors

Product Reports

Buyer's Guide

Managed Detection and Response (MDR)

February 2026

Download Comodo MDR product report

Buyer's Guide

Netsurion

March 2026

Download Netsurion product report

Also Known As

Comodo Managed Detection and Response

Netsurion Managed Threat Protection, Netsurion EventTracker

Overview

Comodo MDR is a 24/7 Security Operations Center delivered as a Service (SOCaaS). Our
service provides a team of security researchers who extend your IT team to safeguard your IT systems and infrastructure.

Using Comodo SIEM and endpoint management technologies along with threat intelligence from the Comodo Threat Lab, our security experts hunt for vulnerabilities, continuously monitor your IT systems for indications of compromise, and contain advanced threats. We work closely with your IT team to prioritize and fix security flaws and remediate issues.

Xcitium

Netsurion offers robust SIEM capabilities enhanced by managed services, facilitating efficient threat identification and response with real-time alerts and comprehensive reporting.

Netsurion stands out for its integration of SIEM, IDS, and vulnerability management. Its real-time threat alerts and dashboards enhance user response capabilities. With centralized logging from Windows, Linux, Cisco devices, firewalls, and Active Directory, Netsurion enables effective compliance support for HIPAA and PCI standards. Managed Threat Protection with the embedded MITRE ATT&CK Framework enhances threat intelligence, while its evolving interface aims to improve user interactions. However, some users find deployment and searching challenging, pointing to areas for improvement.

What are Netsurion's key features?

SIEM Capabilities: Efficient threat identification using real-time alerts and dashboards.
Managed Services: Provides remote monitoring and advisory support.
Comprehensive Reporting: Assists in compliance and actionable insights.
MITRE ATT&CK Framework: Enhances threat intelligence and management.
Seamless Integration: Works with existing systems for streamlined operations.

What benefits should users consider in reviews?

Threat Response Tool: Rapid identification and response to security incidents.
Usability: Efforts to evolve and simplify user interactions.
Operational Efficiency: Streamlined processes through integration and managed services.
Compliance Support: Assistance with industry standards like HIPAA and PCI.

Netsurion is frequently implemented in industries requiring comprehensive security monitoring and compliance, such as healthcare and finance. It aids businesses in consolidating security efforts, offering insights into user activities and system changes, an asset for companies lacking substantial internal resources.

Netsurion

Sample Customers

Information Not Available

The Salvation Army, The FRESH Market, Pacific Western Bank, NASA, American Academy of Orthopaedic Surgeons (AAOS), and Talbot’s Stores

Buyer's Guide

Comodo MDR vs. Netsurion

March 2026

Free Report: Comodo MDR vs. Netsurion

Find out what your peers are saying about Comodo MDR vs. Netsurion and other solutions. Updated: March 2026.

DOWNLOAD NOW

884,873 professionals have used our research since 2012.

See our Comodo MDR vs. Netsurion report.

See our list of best Managed Detection and Response (MDR) vendors.

We monitor all Managed Detection and Response (MDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.