Try our new research platform with insights from 80,000+ expert users

Microsoft Defender Experts for Hunting vs Netsurion comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Defender Experts ...
Ranking in Managed Detection and Response (MDR)
18th
Average Rating
8.6
Reviews Sentiment
5.6
Number of Reviews
4
Ranking in other categories
No ranking in other categories
Netsurion
Ranking in Managed Detection and Response (MDR)
39th
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
24
Ranking in other categories
Managed Security Services Providers (MSSP) (33rd), Security Information and Event Management (SIEM) (54th), SOC as a Service (15th), Extended Detection and Response (XDR) (43rd)
 

Mindshare comparison

As of March 2026, in the Managed Detection and Response (MDR) category, the mindshare of Microsoft Defender Experts for Hunting is 1.7%, up from 1.7% compared to the previous year. The mindshare of Netsurion is 0.7%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Managed Detection and Response (MDR) Mindshare Distribution
ProductMindshare (%)
Microsoft Defender Experts for Hunting1.7%
Netsurion0.7%
Other97.6%
Managed Detection and Response (MDR)
 

Featured Reviews

Mondher-Smii - PeerSpot reviewer
Cybersecurity Manager at Insomea
Has supported clients in managing incidents through clear pricing and hybrid deployment options
What really stands out about Microsoft Defender Experts for Hunting is that it's easy to use. The cost is clear, and the pricing is transparent. The onboarding of the product on the customer's environment is straightforward. We can use it in a hybrid environment, in the cloud, or on-premise environment. This is the main advantage regarding this product. If it's configured correctly, everything will be good, resilient, and secure, which supports threat mitigation efforts depending on the configuration on the tenant and the parameters on Microsoft Defender Experts for Hunting. Threat intelligence updates have some impact on our overall security posture. They give us external eyes regarding threat actors, which is good. It's very helpful to enrich the SIEM, which is Microsoft Sentinel. It's a good feature that we can include threat intel on the product.
John-Berry - PeerSpot reviewer
Information Technology Manager at ProfitSolv
The SOC center monitors, hunts, and notifies us of threats around the clock
I know they are working to resolve this issue, but Netsurion is currently unable to retrieve logs from S3 buckets. We use WP Engine for a lot of web hosting as well as AWS, and both of these platforms use S3 buckets. I would like Netsurion to be able to pull logs from Linux devices. We have some of that capability, and I believe they can do it. However, the way it works with Amazon is strange and glitchy. Therefore, working something out with Amazon would be great. Netsurion's SOC can be a bit too aggressive at times. We have asked them to adjust their playbook because I am tired of being notified about the same issue multiple times a day. I am aware of the issue, and it is not a cause for concern. Let's only take action on this issue if we see an actual problem.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution helps to detect some suspicious items for us and our clients."
"Easy to use is what my customers say is the biggest benefit of Microsoft Defender Experts for Hunting for them."
"The best feature of this solution is that it is an integrated and comprehensive solution for the entire Microsoft ecosystem."
"What really stands out about Microsoft Defender Experts for Hunting is that it's easy to use, the cost is clear, and the pricing is transparent, with straightforward onboarding in hybrid, cloud, or on-premise environments."
"What really stands out about Microsoft Defender Experts for Hunting is that it's easy to use, the cost is clear, and the pricing is transparent, with straightforward onboarding in hybrid, cloud, or on-premise environments."
"I like the UI, overall. I like the main page and there are aspects of the search page that I like. When you bring it up on the left-hand side of the page, as you look at the events, the ability to simply hit and click the plus/minus to pull events in and out of the overall view is well done and is very effective from a threat-hunting and an analysis perspective. I like the detail it shows."
"The managed service is great value which saves you a full-time employee on your staff by being able to outsource it to EventTracker to review all the logs and cull through the data to make recommendations and identify threats, then how to remediate them."
"The biggest lesson I have learned is that the outsourcing of this service has a dramatic impact on the organization."
"EventTracker has increased productivity and saved us time, absolutely."
"The product satisfies our compliance, and thus, all of our auditors."
"The most important feature is keeping track of when accounts are created and deleted, when permission groups are changed, and memberships are changed in groups; and overall, how many errors are occurring on the various systems that we're monitoring."
"If I were to look at logs manually, there's no way I could do that; as an example, there are 48 million logs processed a day, so it gives me a good structure to be able to look at the different incidents which are created and do different searches."
"I think Netsurion scales well. We've gone from a small number of agents up to thousands. So I would imagine that it would continue to scale. I don't see any issue with that."
 

Cons

"We tried the proactive threat hunting feature, but it was not a good experience with Microsoft Defender Experts for Hunting. It created more trouble than expected with false positives and non-expected answers."
"There is a lot of change in a small period. This might not be helpful for IT administrators and users."
"There is a lot of change in a small period. This might not be helpful for IT administrators and users."
"The solution’s user interface could be improved."
"The deployment of the agents could be a bit easier. We always seem to have a bit of a challenge with that. A lot of times the agents either don't deploy or they quit responding, then we have to go and redeploy them."
"Communication is always something that can be improved, but I feel that any time we've had a communication issue, it's quickly addressed when we bring those up at the monthly meetings."
"They have their programs and tools that you have to put into your own environment. We basically ingest all the log data and then push it out to them. I wish it was a little bit different than that where we just push directly towards them. I do not know if that is a function that they thought would be better in terms of security, but I wish that instead of doing that, it should go from the device to them and not from the device to another system and then out to them. There seem to be some drawbacks to doing that."
"The biggest problem is that we have too many domain controllers. So, we have to keep all the clients and main system updated with the latest versions along with making sure all the firewalls are open."
"The agents on the endpoints seem to fail quite a bit, requiring manual involvement from the local administrators. I would like to see their product be much more ad hoc and update automatically."
"Using Netsurion has not meant we have consolidated cybersecurity technologies."
"Probably the biggest thing is just: Can I search for this and what's the best way to do it? If I'm looking for two events versus a singular event, I just throw it back at them."
"The MITRE ATT&CK framework could be faster when identifying and understanding sophisticated threats. Whenever something happens, we usually get notified a couple hours later."
 

Pricing and Cost Advice

Information not available
"The pricing and licensing seem very reasonable. The managed service part of it feels like it gives me the equivalent of a full-time engineer for a lot less money. So, I feel it's a good value."
"We have seen time and cost savings. It prevents us from having to hire specialized people for this type of work. We would need to hire six staff members to accommodate the same service."
"In the security space, it's hard to quantify your return on investment. So, I don't. We spend about $40,000 a year and so. It's hard to say if the SIEM saved that much money."
"Netsurion's pricing is extremely fair and flexible. The price of their SIEM product is reasonable, and you can pay for those services you want on top of that. It wasn't cheap, but it's competitive, and we intend to renew our contract."
"I don't know if the pricing is by the seat but we're paying about $20,000 to 25,000 a year. On top of that, we pay for the managed support services. That runs us about another $35,000 or $40,000 a year."
"We put together the package of what we needed. It was based pretty much on the number of agents that we were deploying. If we needed to manage logging from certain specific applications, like Active Directory and SQL Server, there has been no additional cost for that. We had agents deployed for those specific servers and the applications were included, then there was just an additional installation that they had to do for us."
"It is a bit expensive as compared to some of the other products that have come out in recent years. Expense-wise, the only downside is that it is not cheap."
"EventTracker's subscription-based model is interesting as far as yearly license type stuff. It's nice because you know what it's going to be next year. We haven't really looked at any other solutions. The pricing at the time compared to the other solutions was a lot less. A couple of years ago, we actually looked at Splunk. The amount in Splunk's licensing model is based on 20 gigs a day, or something like that. Based on our number of logs and stuff that we were already generating, the costs would be substantially more for the amount of logs that we would be getting."
report
Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.
885,264 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
23%
Financial Services Firm
9%
Comms Service Provider
6%
Energy/Utilities Company
6%
Performing Arts
13%
Manufacturing Company
10%
Outsourcing Company
8%
Healthcare Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise7
Large Enterprise7
 

Questions from the Community

What needs improvement with Microsoft Defender Experts for Hunting?
Microsoft now changes a lot in products, which might be a disadvantage right now. There is a lot of change in a small period. This might not be helpful for IT administrators and users. New features...
What is your primary use case for Microsoft Defender Experts for Hunting?
Right now we manage some firewalls using Microsoft products. In regard to Microsoft Defender Experts for Hunting, I have been working with this product so far. Mainly and basically for incident han...
What advice do you have for others considering Microsoft Defender Experts for Hunting?
The pricing, engineers behind Microsoft Defender Experts for Hunting, changes, and support services make the difference compared to other products. In terms of pricing, the solution is good, and th...
Ask a question
Earn 20 points
 

Also Known As

No data available
Netsurion Managed Threat Protection, Netsurion EventTracker
 

Overview

 

Sample Customers

Information Not Available
The Salvation Army, The FRESH Market, Pacific Western Bank, NASA, American Academy of Orthopaedic Surgeons (AAOS), and Talbot’s Stores
Find out what your peers are saying about Microsoft Defender Experts for Hunting vs. Netsurion and other solutions. Updated: March 2026.
885,264 professionals have used our research since 2012.