Comodo MDR vs Netsurion comparison

Read 24 Netsurion reviews

5,877 Views
1,881 Comparison Views

92% willing to recommend

Comodo MDR

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 3, 2026

Comodo MDR and Netsurion compete in the managed detection and response market. Data comparisons indicate that Netsurion appears superior due to its extensive feature set, although customers generally are satisfied with Comodo MDR's pricing and support.

Features: Comodo MDR provides advanced threat detection, real-time monitoring, and automated response capabilities. Netsurion offers comprehensive network visibility, customized alerting, and integration flexibility.

Ease of Deployment and Customer Service: Comodo MDR is noted for its quick deployment and responsive support. Netsurion provides a seamless deployment experience paired with accessible and proactive customer service.

Pricing and ROI: Comodo MDR is noted for a competitive pricing structure and favorable ROI. Netsurion may have a higher initial cost, but its extensive features and long-term value justify the investment.

To learn more, read our detailed Comodo MDR vs. Netsurion Report (Updated: September 2026).

Comodo MDR vs. Netsurion

Download the complete report

Helped 913,806 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Comodo MDR

Ranking in Managed Detection and Response (MDR)

40th

Average Rating

10.0

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Netsurion

Ranking in Managed Detection and Response (MDR)

31st

Average Rating

8.4

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Managed Security Services Providers (MSSP) (21st), Security Information and Event Management (SIEM) (48th), SOC as a Service (7th), Extended Detection and Response (XDR) (42nd)

Mindshare comparison

As of September 2026, in the Managed Detection and Response (MDR) category, the mindshare of Comodo MDR is 0.9%, up from 0.4% compared to the previous year. The mindshare of Netsurion is 1.2%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Managed Detection and Response (MDR) Mindshare Distribution
Product	Mindshare (%)
Netsurion	1.2%
Comodo MDR	0.9%
Other	97.9%

Managed Detection and Response (MDR)

Featured Reviews

Navin Mohinani

CEO at Forte IT Solutions

Have faced integration challenges but continue to benefit from strong security and proactive response features

The biggest advantage of the product, as I see it as a reseller, is its security and reporting. The automated incident response feature in Comodo MDR works fantastic. When customers install custom tailor-made software which is not recognized by Comodo MDR endpoint detection response tool, it runs in an isolated environment, virtual environment, sandbox environment. If it determines that this software is not secure, not verified, or not approved by system admin, it blocks the software immediately. The software will not run, and it sends a report to the admin email instantly. If there is any issue with the software or if any incident such as a malware attack or ransomware attack is happening, or something is trying to make changes to the system files, it immediately blocks the software tool and reports back to the admin. As a reseller partner and secondary admin for the customers, my team and I directly receive a mail, and we take control of that machine. It even blocks complete network access to that machine. On the hardware side, if there is a hard disk full or RAM 90% usage or CPU 90% usage or any of these incidents, we set up an alert notification option for it. The moment these incidents occur, it sends an alert so we can recommend customers upgrade their hardware or check if there is any malfunctioning software consuming too much RAM and CPU. This incident response use case helps us keep customer machines' performance to the maximum. The 24/7 monitoring capability supports a lot in contributing to our cybersecurity strategy. It is very much compatible with our goal.

Read full review

John-Berry

Information Technology Manager at ProfitSolv

The SOC center monitors, hunts, and notifies us of threats around the clock

I know they are working to resolve this issue, but Netsurion is currently unable to retrieve logs from S3 buckets. We use WP Engine for a lot of web hosting as well as AWS, and both of these platforms use S3 buckets. I would like Netsurion to be able to pull logs from Linux devices. We have some of that capability, and I believe they can do it. However, the way it works with Amazon is strange and glitchy. Therefore, working something out with Amazon would be great. Netsurion's SOC can be a bit too aggressive at times. We have asked them to adjust their playbook because I am tired of being notified about the same issue multiple times a day. I am aware of the issue, and it is not a cause for concern. Let's only take action on this issue if we see an actual problem.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The automated incident response feature in Comodo MDR works fantastic; when customers install custom tailor-made software which is not recognized by Comodo MDR, it runs in an isolated environment, and if it determines the software is not secure, it blocks it immediately and sends a report to the admin."

"One of the most valuable features is its around-the-clock, 365-day-a-year online technical support."

"The product is fairly new compared to others like Trend Micro or Symantec. However, it offers sophisticated features, especially in scanning and analyzing activities on workstations or servers. It can prevent malicious operations from spreading to other applications or the network. This feature is particularly effective because it operates at the IO level, unlike behavior or signature analysis used by other products. It contains threats and alerts administrators about whether they are false positives or real threats that need immediate action or support recommendations."

"However, it offers sophisticated features, especially in scanning and analyzing activities on workstations or servers."

"With the managed component, we get that personal attention and that consistent team to deal with, and to some extent, it's like they're part of our IT team."

"The biggest lesson I have learned is that the outsourcing of this service has a dramatic impact on the organization."

"Netsurion's security operations center is critical for us because they provide 24/7 monitoring, we've never had another company meet the same need in the past, and it's a valuable tool to have."

"It's a deny-all policy, so there's an access list on each machine, and it was effortless to tune it for our software because we have four pieces of intellectual property used in-house, and that was super easy to get up and running compared to some of the other solutions I've seen."

"When I looked last week, we probably averaged about 20 million log entries a day. So, we certainly can't individually manage that. Just looking at the reports, then trying to go back and find anything that was questionable, was a challenge. Therefore, the managed service has been invaluable to us in terms of being able to narrow the scope of what really needs to be looked at and bringing those things to our attention to be dealt with."

"The real-time alerting for things such as people getting dropped into a VPN group or the domain admin group — things like that which really shouldn't happen without proper change management, but we all know the reality, they do from time to time — gives me real-time visibility into what's going on."

"I think Netsurion scales well. We've gone from a small number of agents up to thousands. So I would imagine that it would continue to scale. I don't see any issue with that."

"If we need to do a search for user lockouts, we can go, search, and find locations where they have been locked out, then keep track of those events, historically."

More Netsurion pros

Cons

"I think having a higher level of MDR would be beneficial, although it's quite expensive."

"They should consider adopting the desktop version as a solution."

"I think having a higher level of MDR would be beneficial, although it's quite expensive. This would involve not just monitoring the network but also taking actions to stop and detect threats. We haven't implemented this yet, but we're considering it for our organization's plans."

"Users pay $60 per user per year, and in case there is an issue, support tickets take nearly three days or sometimes even more for a clear resolution or an answer."

"Their SOC team can't understand our network because they haven't worked in the actual company. This does negatively affect security posture, e.g., if you don't have knowledge about the network, then you will miss things."

"I would also like to have a dashboard that I can access anytime to review the real-time data from their website."

"I would like to see a faster response when we see things like 15,000 lockouts. I really wished that I had known that on Friday afternoon rather than waiting until I got the weekly report today. By the same token, they are looking at it from the point of view that this is a system or software malfunction. This is not a bad actor repeating the exact same password three times a second. Therefore, they can tell that this is not a bad thing. However, it's not a security event but it is an operational event for me. Knowing this sort of thing would help my team and me out more because then we would be able to clear out a lot of network traffic that we didn't know was going on. So, we would like quicker updates on non-high security events."

"With version 8, there are quite a few things. The query tool was one of the big ones, and the query speed was one of the big ones, but they've made some great strides between versions 8 and 9. There were also issues in version 8 around the ability to get the data back out. It's one thing to collect data, but it's a whole other thing to be able to present it or run it in a timely manner. The old tool, depending on how far back I was looking, might even time out and I would have to run it again."

"The weekly reporting could use some improvement. For example, when we handed them our landscape document, it took longer than I would have liked for those details to become noticeable within the reports."

"Communication is always something that can be improved, but I feel that any time we've had a communication issue, it's quickly addressed when we bring those up at the monthly meetings. Usually, it's an individual that wasn't clear in the communication, it's not the process per se. You always have to be able to segregate if the process didn't work or an individual either didn't say the right thing or my people didn't understand what they were being told."

"The hosted on-premise hardware that we were using was having issues. The performance of it was horrendous, but we weren't using it."

"The upfront costs have increased, and we have been locked into this contract."

More Netsurion cons

Pricing and Cost Advice

"The tool's pricing is high compared to other products. If you want to target a certain quantity, it should provide discounts to enterprises."

"The pricing falls within the moderate range."

"In the security space, it's hard to quantify your return on investment. So, I don't. We spend about $40,000 a year and so. It's hard to say if the SIEM saved that much money."

"We put together the package of what we needed. It was based pretty much on the number of agents that we were deploying. If we needed to manage logging from certain specific applications, like Active Directory and SQL Server, there has been no additional cost for that. We had agents deployed for those specific servers and the applications were included, then there was just an additional installation that they had to do for us."

"Licensing is very easy. Our CIO takes care of the billing, but in terms of price point, he hasn't complained, so it must be good."

"It is a bit expensive as compared to some of the other products that have come out in recent years. Expense-wise, the only downside is that it is not cheap."

"The solution is fairly expensive, but in my experience, all of the SIEM applications that I've evaluated or looked at cost about the same."

"When we first got the EventTracker product, we were using SIEM Simplified. At the time they didn't call it that, but it was more of a service thing. So, there was a bit more hand-holding and getting stuff set up, along with failure reports, that they did during the first one to two years. Then, we decided that the the additional money to have someone do these daily reports wasn't terribly useful, so we discontinued that service."

"EventTracker's subscription-based model is interesting as far as yearly license type stuff. It's nice because you know what it's going to be next year. We haven't really looked at any other solutions. The pricing at the time compared to the other solutions was a lot less. A couple of years ago, we actually looked at Splunk. The amount in Splunk's licensing model is based on 20 gigs a day, or something like that. Based on our number of logs and stuff that we were already generating, the costs would be substantially more for the amount of logs that we would be getting."

"You are paying for different levels, especially as far as the monitoring goes and how often you review it with the team. The other factor that figures in is how many nodes are on your network, such as clients, network equipment, servers, etc. There are some additional pieces on top of that, but it's laid out pretty simply, as far as how much you're going to pay for a node."

More Netsurion pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.

See recommendations

913,806 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

No data available

Outsourcing Company

19%

Construction Company

12%

Performing Arts

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	7
Large Enterprise	7

Questions from the Community

What needs improvement with Comodo MDR?

Areas for improvement are mainly on the software side. They are trying to integrate some functionalities, but their API integration with some CRM and invoicing tools is not appropriate or 100% comp...

See all answers

What is your primary use case for Comodo MDR?

The major use case for the product is mainly for endpoint security and endpoint management.

See all answers

What advice do you have for others considering Comodo MDR?

The real-time threat analysis aspect of the product helps minimize downtime. If there is an issue, there is an issue. The moment it detects a removable issue, it removes it in the background. One o...

See all answers

Ask a question

Earn 20 points

Comparisons

Huntress Managed EDR vs Comodo MDR

Compared 8% of the time

SentinelOne Wayfinder Threat Detection and Response vs Comodo MDR

Compared 7% of the time

UnderDefense vs Comodo MDR

Compared 7% of the time

Bitdefender MDR vs Comodo MDR

Compared 6% of the time

CrowdStrike Falcon Complete MDR vs Comodo MDR

Compared 6% of the time

More Comodo MDR Competitors

IBM Security QRadar vs Netsurion

Compared 7% of the time

GoSecure Titan Platform vs Netsurion

Compared 7% of the time

Rapid7 InsightIDR vs Netsurion

Compared 6% of the time

Splunk Enterprise Security vs Netsurion

Compared 6% of the time

Arctic Wolf Managed Detection and Response vs Netsurion

Compared 4% of the time

More Netsurion Competitors

Product Reports

Managed Detection and Response (MDR)

Download Comodo MDR product report

Download Netsurion product report

Also Known As

Comodo Managed Detection and Response

Netsurion Managed Threat Protection, Netsurion EventTracker

Overview

Comodo MDR is a robust managed detection and response system providing comprehensive threat protection. It leverages advanced analytics and machine learning to safeguard enterprises from cyber threats efficiently.

Comodo MDR offers seamless integration to enhance security operations, targeting enterprises' critical needs with rapid threat response capabilities. It utilizes real-time monitoring and sophisticated threat intelligence to identify potential risks quickly, ensuring minimal disruption. Its adaptive technology aligns with organizational infrastructures, providing a strategic defensive perimeter around sensitive data and operations.

What are the most important features of Comodo MDR?

24/7 Threat Monitoring: Continuous security oversight to detect anomalies at any time.
Machine Learning: Advanced algorithms for predicting and preventing potential threats.
Incident Response: Fast and effective response strategies to mitigate attack impacts.
Customizable Dashboard: Tailored interfaces for real-time insights and control.
Threat Intelligence Feeds: Constant updates on emerging threats for proactive defense.

What are the benefits or ROI of using Comodo MDR?

Reduced Downtime: Minimizes business disruption with rapid incident response.
Cost Efficiency: Lowers security expenses by integrating advanced threat management.
Improved Security Posture: Strengthens defenses against evolving threats.
Scalability: Adapts to growing security demands with flexible capabilities.

Comodo MDR is extensively implemented across sectors like finance, healthcare, and retail, where data protection is paramount. It offers customized solutions to address industry-specific threats, ensuring compliance and data integrity. By aligning with sector demands, it enhances security measures to suit critical infrastructure requirements.

Xcitium

Netsurion offers robust SIEM capabilities enhanced by managed services, facilitating efficient threat identification and response with real-time alerts and comprehensive reporting.

Netsurion stands out for its integration of SIEM, IDS, and vulnerability management. Its real-time threat alerts and dashboards enhance user response capabilities. With centralized logging from Windows, Linux, Cisco devices, firewalls, and Active Directory, Netsurion enables effective compliance support for HIPAA and PCI standards. Managed Threat Protection with the embedded MITRE ATT&CK Framework enhances threat intelligence, while its evolving interface aims to improve user interactions. However, some users find deployment and searching challenging, pointing to areas for improvement.

What are Netsurion's key features?

SIEM Capabilities: Efficient threat identification using real-time alerts and dashboards.
Managed Services: Provides remote monitoring and advisory support.
Comprehensive Reporting: Assists in compliance and actionable insights.
MITRE ATT&CK Framework: Enhances threat intelligence and management.
Seamless Integration: Works with existing systems for streamlined operations.

What benefits should users consider in reviews?

Threat Response Tool: Rapid identification and response to security incidents.
Usability: Efforts to evolve and simplify user interactions.
Operational Efficiency: Streamlined processes through integration and managed services.
Compliance Support: Assistance with industry standards like HIPAA and PCI.

Netsurion is frequently implemented in industries requiring comprehensive security monitoring and compliance, such as healthcare and finance. It aids businesses in consolidating security efforts, offering insights into user activities and system changes, an asset for companies lacking substantial internal resources.

Sample Customers

Information Not Available

The Salvation Army, The FRESH Market, Pacific Western Bank, NASA, American Academy of Orthopaedic Surgeons (AAOS), and Talbot’s Stores

Comodo MDR vs. Netsurion