Try our new research platform with insights from 80,000+ expert users

Fortra's Alert Logic MDR vs Intercept X Endpoint comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 3, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortra's Alert Logic MDR
Ranking in Managed Detection and Response (MDR)
18th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
11
Ranking in other categories
Vulnerability Management (34th), SOC as a Service (3rd)
Intercept X Endpoint
Ranking in Managed Detection and Response (MDR)
8th
Average Rating
8.4
Reviews Sentiment
6.7
Number of Reviews
109
Ranking in other categories
Endpoint Protection Platform (EPP) (13th), Endpoint Detection and Response (EDR) (16th), ZTNA (10th), Extended Detection and Response (XDR) (13th), Ransomware Protection (4th)
 

Mindshare comparison

As of February 2026, in the Managed Detection and Response (MDR) category, the mindshare of Fortra's Alert Logic MDR is 1.0%, down from 1.1% compared to the previous year. The mindshare of Intercept X Endpoint is 1.1%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Managed Detection and Response (MDR) Market Share Distribution
ProductMarket Share (%)
Intercept X Endpoint1.1%
Fortra's Alert Logic MDR1.0%
Other97.9%
Managed Detection and Response (MDR)
 

Featured Reviews

reviewer2191746 - PeerSpot reviewer
President at a tech services company with 11-50 employees
It's a highly mature, competitively priced solution that provides total visibility into your ecosystem. FORTRA's Alert Logic has the only Cybersecurity Platform that integrates XDR+WAF+VM+DLP in one.
Alert Logic offers total visibility into the client's IT ecosystem. The solution's intrusion detection system inspects 100 percent of the network packets and installs universal agents on all physical and virtual servers for log collection. Alert Logic also aggregates logs of the client's various 3rd Party security tools into a single pane of glass. All of the analytics from those data feeds got to a 24/7 SOC with sophisticated resources. Alert Logic has massive threat intelligence resources to provide additional context to the incident response declarations. They do all the heavy lifting for clients who lack the technology and resources to operate their own SOC. The client is solely responsible for the incident response component. The macro analytics resides on Alert Logic's cloud. You have the ECM response and business application team on the client side. Everything works in tandem, which is the only way you can deal with the advanced threats we face today, especially the ransomware families. If you don't respond in minutes, you're in trouble.
AM
IT Head at Dee Development
Has struggled to detect major threats but has offered basic protection over time
Intercept X Endpoint could learn from CrowdStrike in terms of overall performance and filtering because performance is most important, especially these days as Windows is getting buggier and buggier, which puts a huge load on the PC, and even with the most advanced CPUs and everything in place, it still lags in performance in so many places, thanks to Windows' clumsy design of these collaboration suites that make it extremely heavy on PC's resources. The interface of Intercept X Endpoint is quite old-fashioned. The Sophos interfaces, including for Intercept X Endpoint, are quite bad actually; to be very honest, even in UTM boxes, they are not great at all. You can hardly see a very small portion of windows while it's creating the firewall rules, and we have been complaining about this for quite some time, but there hasn't been any improvement on those grounds. Intercept X Endpoint's anti-ransomware capabilities failed us during a bad attack, and just because of our own backup policies, we could restore our normal operations; otherwise, if we had to depend on this solution, we would have been long dead because the infection was so bad, it couldn't even detect the infection. Intercept X Endpoint cannot handle zero-day attacks; in my experience, last year, we had this major issue with a malware attack, and it happened just because of our backup policies that we were able to recover without any support from Sophos, which just told us they would charge us some 1 Crore in rupees. Intercept X Endpoint should improve their implementation; things will never be perfect for the new world. This new world is always facing new kinds of attacks and new ways to compromise the system. They need to learn fast, implement fast, and sometimes redesigning the solution is the solution—not just patchwork. There was a time we used to love Sophos because of its fresh design and innovative thought. In my experience, when technical companies are led by MBA professionals, they lose their shine on the technical part and become more dependent on target sales; it turns into a marketing-centric operation that loses the technical focus completely.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The installation and configuration were slick."
"Everything is in one dashboard; I'm notified when there's an incident and advised on what steps to take."
"The solution was consistently available, and I cannot recall any instances where it was down."
"Notifications and the detail of notifications are most valuable. It is a user-friendly solution."
"It has the ability to install agents. It is pretty straightforward. You can automate the process pretty easily."
"It is a very stable product."
"The initial setup is pretty straightforward."
"While I still have on-premises appliances, I can remotely monitor everything from the cloud, and Alert Logic's ease-of-access features have helped me streamline my workflow and reduce implementation time."
"I appreciate the ability to use the latest endpoint protection features in case of an infection or cyber threat. This is especially true when using the product with a Sophos firewall solution, like the XG series. They collaborate effectively in the event of a cyber threat."
"It is stable."
"It is stable and has a good price. I find it very good."
"One of the best use cases involves synchronized security staff, which allows us to manage both the firewall and the anti-virus features from the cloud."
"Sophos Intercept X is easy to install and has a lower price than similar solutions."
"It is a very scalable solution."
"The solution has very good usability."
"Technical support from Sophos is rated as nine out of ten, which represents high quality."
 

Cons

"The documentation, especially with the initial setup, needs improvement."
"I would like to see it do initial scans and start capturing data, which it will truly analyze, not just be a reporting system saying, "Here is an email. Here is an email. Here is an email.""
"They have ideas and email you whatever they find, but they don't have a dedicated security team who will work on an attack or a specific security instance."
"I would like more data on the alert payload. It would be good to have the ability to customize the alert payload to add whatever data that we want on there. Right now, it is a bit limited."
"Could be more of an endpoint protector."
"The product needs to mature. We don't want to be bombarded with unnecessary issues and have the real ones slip through."
"This product needs to mature more. While it is a good product, there are some areas where it needs work."
"Alert Logic needs to expand its SOCs to serve more markets, such as the Middle East and Asia. There should be infrastructure that covers more time zones. The company should also develop an EDR that is natively integrated into their solution. Currently, a client must buy another EDR solution like CrowdStrike or Sophos. I think Alert Logic is developing this. Built-in email security could also be developed and integrated."
"From my perspective, what needs to be improved in Intercept X Endpoint are the weak points of this solution and what needs to be eliminated or enhanced."
"Deployment on cloud needs to be carried out manually."
"The ADR functionalities feel like they aren't mature enough. It hasn't been a long time since Sophos has offered reproduction. Due to the fact that it's so young, it has fewer functionalities than other and more mature ADR solutions."
"Better protection in the endpoint, server, and mobile is needed."
"Technical support is too slow to schedule meetings."
"It would be better if it can automatically generate a report for each and every user so that the users get to know the things that shouldn't be accessed from their PCs. It can have information about malicious and non-malicious sites so users are aware of them, and they don't access malicious websites. Such reports can be generated at the end of the day. We should also be able to get through to their support team quickly. Currently, it takes more than half an hour to get through to a technical person."
"The after sales service and support could be improved."
"Mobile device management is a challenging area, and it can be improved. Some areas in the DLP solution can also be improved. It has the DLP capability, but it is not an all-out DLP program. I would like to see them improve the DLP solution in terms of reporting and possibly network monitoring. Currently, they only do the reporting parts of it."
 

Pricing and Cost Advice

"Its pricing is very reasonable considering what you get for what you pay. There is quite a good value there. Its licensing is also very logical. They've got the licensing price points at a reasonable level. It is on a monthly license but a yearly contract. There are no additional costs to the standard licensing fees."
"Almost any product that is on the AWS Marketplace is super easy to subscribe to."
"Our ROI would probably be zero. We don't even use it. It sits in there. We get emails and just delete them. Around the world, we don't even use it."
"Alert Logic has better competitive pricing than some of its competitors."
"Price of the solution was very reasonable considering the size of our organization at the time, and so it worked out perfectly."
"The price of the product is okay, in my opinion. The tool's cost per user and per annum basis is around INR 700 to 800."
"The solution requires an annual subscription."
"There is a yearly payment to be made. For each client, it costs around 15 dollars. There are no additional costs besides the licensing price we pay to use the solution."
"Its price depends on the scenario. It is very expensive, but it is not more expensive than other vendors. The price of Check Point and other vendors is much higher than Sophos."
"We renew the license for one year at $10,000."
"The product is moderately priced."
"It's not bad, but compared to competitors, it's a little bit on the high side. The price could be more competitive."
"We have bought a three-year license."
report
Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.
881,757 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Manufacturing Company
14%
Performing Arts
6%
Educational Organization
5%
Computer Software Company
13%
Comms Service Provider
9%
Manufacturing Company
8%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise2
Large Enterprise6
By reviewers
Company SizeCount
Small Business75
Midsize Enterprise22
Large Enterprise22
 

Questions from the Community

Ask a question
Earn 20 points
How does Crodwstrike Falcon compare with Sophos Intercept X?
I like that Crowdstrike Falcon allows me to easily correlate data between my firewalls. Its detection and machine learning are very valuable features. Crowdstrike Falcon also successfully prevents ...
What is your experience regarding pricing and costs for Sophos Intercept X?
Intercept X Endpoint has some impact on the budget. It is quite costly when measuring Intercept X Endpoint's protective capabilities against zero-day attacks.
 

Also Known As

Alert Logic MDR, Alert Logic Managed Detection and ResponseAlert Logic Threat Manager, Alert Logic Cloud Defender, Critical Watch FusionVM
Sophos Intercept X
 

Overview

 

Sample Customers

Information Not Available
Flexible Systems
Find out what your peers are saying about Fortra's Alert Logic MDR vs. Intercept X Endpoint and other solutions. Updated: January 2026.
881,757 professionals have used our research since 2012.