No more typing reviews! Try our Samantha, our new voice AI agent.

CRITICALSTART vs Sophos MDR comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 3, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CRITICALSTART
Ranking in Managed Detection and Response (MDR)
27th
Average Rating
9.4
Reviews Sentiment
7.3
Number of Reviews
10
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (24th)
Sophos MDR
Ranking in Managed Detection and Response (MDR)
6th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
35
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2026, in the Managed Detection and Response (MDR) category, the mindshare of CRITICALSTART is 1.2%, up from 0.8% compared to the previous year. The mindshare of Sophos MDR is 2.7%, down from 6.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Managed Detection and Response (MDR) Mindshare Distribution
ProductMindshare (%)
Sophos MDR2.7%
CRITICALSTART1.2%
Other96.1%
Managed Detection and Response (MDR)
 

Featured Reviews

JH
Sr. Manager, Security Engineering at a financial services firm with 501-1,000 employees
The transparency of data in the platform is perfect: You see everything as they are seeing it
Their Zero Trust Analytics Platform (ZTAP) engine, which is kind of their correlation engine, is by far and away one of the best in the business. We can filter and utilize different lists to build out different alerts, such as, what to alert on and when not to alert. This engine helps reduce our number of alerts and false positives. The service's Trusted Behavior Registry helps the provider solve every alert. The way that they have it built out is very intelligent. The way every alert comes in, it gets triaged one direction or another. If it is already a false positive, then it is still getting addressed and reviewed on a regular cadence. Also, true positive alerts get escalated to the appropriate personnel. Its mobile app is great. The ability just to be able to quick reference and see what's coming in when you're on the move or go. You don't always need to have your computer or laptop handy, because you can operate it just from the mobile app. It can communicate with analysts, which is great. The mobile app is great at affecting the efficiency of our security operations. Those guys are using it throughout the day, whether that be at the office, home, or off hours. Typically, they triage from the mobile app. Then, if an escalation needs to be done on a computer, they will pull out a computer. We were on the original UI for a few years, so the updated UI has been a refreshing change. It has significantly more ability to filter and translate data, then load that data. It is rather intuitive to click through for some of our junior analysts or interns, especially as we are starting to onboard and teach them different aspects of the security operations team.
Ahmed_Fahmy - PeerSpot reviewer
Operations Technical Lead at IT Supporters
Comprehensive management and support continuously enhance threat detection and response
Based on user feedback and reviews, here are some areas where Sophos MDR could be improved and suggestions for additional features that could be included in future releases: Areas for Improvement: ---------------------- * Resource Utilization: Some users have noted that Sophos MDR can be resource-intensive, which may impact system performance. Optimizing the software to be less demanding on system resources could enhance the overall user experience. * Support Responsiveness: While the dedicated MDR team is highly praised, the standard support has received mixed. Improving the responsiveness and effectiveness of the general support team could address this concern. * Integration with Other Tools: Enhancing integration capabilities with a wider range of third-party security tools and platforms could provide a more seamless experience for users who rely on multiple security. Suggested Additional Features: ------------------------------ * Advanced Reporting and Analytics: Introducing more detailed and customizable reporting and analytics features could help organizations better understand their security posture and the effectiveness of the MDR service. * Automated Incident Response Playbooks: Providing automated playbooks for common security incidents could help organizations respond more quickly and effectively to. * Enhanced Threat Intelligence: Incorporating more advanced threat intelligence capabilities, including real-time updates and predictive analytics, could help organizations stay ahead of emerging. * User Training and Awareness Programs: Offering integrated user training and awareness programs as part of the MDR service could help organizations improve their overall security culture and reduce the risk of human error

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The new mobile app is awesome. It is one of the best I've ever seen. It's much better than its predecessor. It's more intuitive, a whole lot easier to navigate and get where you need to go. It's less repetitive and just generally easier to use. It allows me to not have to be sitting at my computer all the time. I can be on my phone or tablet or wherever I'm at. It makes it a lot easier to answer tickets and do that kind of thing."
"The biggest lesson is transitioning from alert overload to being at a point where we do have eyes on alerts, where every alert is truly possible."
"There is a team of people who monitor our traffic and processes 24/7, so if anything raises a flag or alert, it will escalate back to me right away. That's the most incredible part: Humans working behind the scenes 24/7 to monitor our networks."
"I also use their mobile app. It's very easy to use and very convenient to be able to respond to alerts wherever you are. I love the app. You can respond and communicate, per ticket, with their SOC in near real-time. The response is very quick."
"The most valuable feature of their service is their tuning... If we were getting 1,000 alerts a day without them, they tune it until they know what to do for 999 of them, and one will make it through to us per day. That tuning is the most valuable part of their solution."
"We are absolutely seeing return on our investment from CRITICALSTART's services, as they're doing the job of a 24/7 SOC at a fraction of the price that it would cost me to run it myself."
"The way that the user interface presents data enables our team to be able to make decisions significantly quicker, rather than have to dig into the details or go back to the original tools."
"When I start thinking about if I were to try to light up a SOC, which I've done before and I have no interest in doing, it could be a million dollars a year or more to do that, and for what I am paying them for the managed fees, it's a steal."
"Sophos MDR has positively impacted my organization by helping us significantly, leading to fewer incidents, faster response times, and less downtime for our team because the MDR team works around the clock, has the authority to quarantine malware, and handles everything on our Sophos Central portal with full visibility."
"The solution provides the best security features."
"The initial setup is quick and simple. A couple of clicks, and you're up and running."
"It is a stable solution...It is a scalable solution."
"The product’s most valuable feature is rapid response."
"We receive multiple benefits from Sophos MDR, including cloud monitoring integrated, which means it's not necessary that we need to connect to the device."
"I like Sophos MDR's inbuilt feature for DLP (Data Loss Prevention)."
"It provides reliable protection and clear data on its performance metrics, enabling straightforward communication of its capabilities."
 

Cons

"They could dig a little bit deeper into the Splunk alerts when they feel like they need to be escalated to us."
"It has frustrated us that they don't have a native Slack integration, because most things do now. That's something we've asked for, for years, and it just doesn't really seem like it's a priority."
"They could dig a little bit deeper into the Splunk alerts when they feel like they need to be escalated to us. For example, if a locked account shows up, they could do a little extra digging to verify that the locked account was due to a bad password on the local system. They could just do a little extra digging within the Splunk environment instead of pushing it onto us to go do that extra little digging."
"The biggest room for improvement is not necessarily in their service or offering, but in the products that they support."
"It costs a lot for what we felt comfortable to spend."
"The UI has become slower but it's not something I would call them out on."
"In terms of responsiveness, when I open up an alert, sometimes it takes a bit of time to load. However, it only happened once or twice."
"The only thing I can think of that I would like to see, and I'm sure they could work this into a service pretty easily, is not only alerts on issues that are affecting my company, but some threat intelligence of a general nature on what's out there in the environment. That might be a nice add-in."
"Once in a great while, an update fails."
"Some users have mentioned that Sophos MDR can be quite resource-intensive, which might affect the system."
"Maybe the reporting needs improvement."
"Its technical support could be better."
"The integration with third-party solutions as an area for slight improvement"
"It could be more secure."
"The product must provide zero trust security."
"There could be improvement in features like more detailed reporting for the end customer."
 

Pricing and Cost Advice

"It costs a lot for what we felt comfortable to spend."
"The pricing of other services was so insane that they weren't even an option."
"As far as the expense goes, it's very competitive pricing and the services you get are almost like you have a person on your team."
"Overall, for what I'm paying for it, and the benefit I'm getting out of it, it is right where it needs to be, if not a little bit in my favor. For what it costs me to actually have this service, I could afford one internal person to do that job, but now I have a team of 10 or more who are doing that job, and they don't sleep because they work shifts."
"The pricing has always been competitive. They have always been good to us. They will make it a fight. They don't try to hide anything; it's always been fully transparent and well-worth what we pay for it."
"I've told CRITICALSTART that I think the managed service they provide is cheaper than it should be. It's a really good deal."
"There are contractual penalties if their SLAs are not met. This commitment was very important in our decision to go with this service, because not having downtime is extremely important to us. The providers has not missed an SLA in the 18 months that I have worked with them."
"Sophos MDR is not a cheap product. Compared with other solutions in the market, Sophos MDR is available at a good price, especially considering its performance."
"I rate Sophos MDR’s pricing a seven or eight out of ten."
"Sophos MDR is a cheap solution."
"Compared to other tools, Sophos has a pretty good price."
"The product is reasonably priced considering the cybersecurity features."
"I would rate the price of Sophos MDR as a nine out of ten, with ten being the most expensive."
"Sophos MDR is less expensive than other products like Fortinet or Palo Alto."
"The cost of the solution is based on how many users use it."
report
Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.
913,806 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
17%
Construction Company
11%
Financial Services Firm
8%
Healthcare Company
7%
Computer Software Company
12%
Manufacturing Company
11%
Comms Service Provider
8%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise3
Large Enterprise4
By reviewers
Company SizeCount
Small Business27
Midsize Enterprise4
Large Enterprise7
 

Questions from the Community

Ask a question
Earn 20 points
What needs improvement with Sophos MDR?
I think Sophos MDR can be improved, but as of now, it is good, very useful and reliable. They could improve it by adding another solution such as CrowdStrike or Trend Micro. If they integrate those...
What advice do you have for others considering Sophos MDR?
My advice to others looking into using Sophos MDR is to purchase it because it is a very good and reliable solution. I give this review a rating of ten out of ten.
What is your experience regarding pricing and costs for Sophos Managed Threat Response?
The pricing of Sophos MDR is reasonable and competitive, scoring about nine out of ten. When compared to other products like Trend Micro, Bitdefender, or Kaspersky, its pricing holds up well.
 

Also Known As

Critical Start, CriticalStart
Sophos Managed Threat Response
 

Overview

Find out what your peers are saying about CRITICALSTART vs. Sophos MDR and other solutions. Updated: September 2026.
913,806 professionals have used our research since 2012.