Try our new research platform with insights from 80,000+ expert users

Secureworks Taegis Managed XDR / MDR vs Sophos MDR comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 3, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Secureworks Taegis Managed ...
Ranking in Managed Detection and Response (MDR)
14th
Average Rating
7.8
Reviews Sentiment
7.1
Number of Reviews
14
Ranking in other categories
Managed Security Services Providers (MSSP) (2nd)
Sophos MDR
Ranking in Managed Detection and Response (MDR)
4th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
32
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2025, in the Managed Detection and Response (MDR) category, the mindshare of Secureworks Taegis Managed XDR / MDR is 3.5%, down from 5.7% compared to the previous year. The mindshare of Sophos MDR is 6.0%, down from 6.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Managed Detection and Response (MDR)
 

Featured Reviews

Tom Kar - PeerSpot reviewer
Has a user-friendly setup process, but its query language needs improvement
The product has valuable features for the EDR section. We can easily isolate affected machines in the network. It helps us prevent the spreading of malware or ransomware further Secureworks Taegis ManagedXDR's query language and stability need improvement. Additionally, its price could be better…
Shaun Gordon - PeerSpot reviewer
Extensive data lake, ease of use is great and you can really get started very quickly
Sophos MDR is a service. MDR is managed detection and response. It's a managed security service. So instead of having an anti-malware, which in Sophos' case would be Intercept X, with MDR, they add human-led threat hunting. It's a managed service. So it's not a product that you sell the client per se. You're selling them a service, which is almost like an SLA, and that includes Cloud MDR. MDR is not a product. It's a service. The reality is that when it comes to the likes of SentinelOne, McAfee, CrowdStrike, ESET, and all the other players out there, they're single-product security companies. CrowdStrike is an anti-malware. That's one thing. ESET, same thing. But if you look at the other vendors, within the appliances, you're looking at Fortinet, Palo Alto, and Checkpoint. They only sell firewalls. That's all they do. When you deal with Sophos, they are the entire product suite. They sell firewalls. They sell Intercept X, which is their anti-malware, Intercept X for Server with anti-malware, email protection with ties into Office 365, and Sophos Plus encryption. All of these security products pull telemetry. So every time somebody hits a firewall, it's called, for argument's sake, that goes into their central data lake. All the firewalls around the world add that information to a data lake. Now, when you're dealing with Sophos, because of their exposure, because they've got so many different products, their data lake is a lot more extensive than competing vendors because they're not relying on one threat factor. They're not relying on one area of expertise. They're a global company. So, I can't compare their telemetry, for instance, to the likes of CrowdStrike. If CrowdStrike has probably started doing appliances, then the users will get that benefit as well. Sophos is the only vendor that does do that. It's like hiring a security team. Sophos do things differently in that they've got more telemetry and more insight into a network because they offer a variety of products. The other part about it is Sophos MDR; the service, unlike other vendors like CrowdStrike, is not limited to their products. If you are running CrowdStrike in your company, for instance, you can get their integration packs, in which case Sophos will manage your CrowdStrike system for you. Whereas with CrowdStrike, it's only CrowdStrike. You are locked into that vendor. So Sophos offers that flexibility. It's a multi-vendor service as opposed to SentinelOne or CrowdStrike, which is a single-vendor service. For instance, if I'm running Sophos, I would like to go with CrowdStrike MDR. I would have to remove my entire security investment, in this case, Sophos, and reinstall CrowdStrike in order to use their service. Sophos doesn't have that problem. If you've got CrowdStrike and you've already invested in CrowdStrike, cool. You stay on CrowdStrike. They will still manage it for you.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"This solution gathers the information logs from all devices and correlates all the information. It notifies us of any critical events taking place across our networks which has been valuable."
"It provides more visibility and more control over endpoints. It reduces the noise. It clears things and only shows things that are really important. It only shows those things that need to be looked at or need to be investigated further. Other similar solutions give you a lot of alerts and other things, but Secureworks gives you a defined or less noisy view so that you can work or focus on things that are important in terms of investigation, response, and remediation."
"Secureworks Taegis Managed XDR MDR is a great product that has not posed any challenges from my perspective."
"The most valuable feature is the support. The support chat. It's always connecting to people. And you open the chat, and it's not about that automated response. It's actually a human being that responds to you."
"There are some patent pending detectors within the platform that provides a lot of value."
"We can easily isolate affected machines in the network."
"The pricing is flexible."
"The initial setup was very straight forward."
"I like Sophos MDR's inbuilt feature for DLP (Data Loss Prevention)."
"It is a scalable solution."
"The rapid response team acts quickly to relieve customers."
"The product's most valuable feature is its ability to view environmental activities."
"The product’s most valuable feature is rapid response."
"The initial setup is quick and simple. A couple of clicks, and you're up and running."
"The most valuable feature of the Sophos Managed Threat Response is the central management capabilities and monitoring."
"The automation feature in Sophos MDR provides reports and alerts."
 

Cons

"Dell Secureworks could improve its integration with other third-party solutions."
"This solution could be improved with a higher degree of automation such as automated emails, triggers and defining the severity of the cases."
"Secureworks Taegis ManagedXDR's query language and stability need improvement."
"The integration would look better with other products, with other EDRs, with other firewalls, with other older versions of firewalls, and the versions of software and hardware."
"Dell Secureworks is for higher-end customers and it's not quite as straightforward to implement or to get up and running as some of the other solutions."
"The integration with the Carbon Black sensor could be better. ManagedXDR doesn't seem to know how to extract the forensic data from an endpoint that was quarantined by Carbon Black."
"In terms of ROI, I'd be surprised if there is any investment return on the SIM."
"We did a PoC of their next-gen antivirus product, but it wasn't ready yet. It was underdeveloped and caused a lot of issues. We'd like to move away from Carbon Black, but they said that it's probably still not to a point where we'd be happy with it. Carbon Black and RedCloak seem to work fine for us."
"Once in a great while, an update fails."
"The only challenge we face with the tool is the pricing. Clients often compare it with other products in the market and try to negotiate prices. This concern has caused some challenges in closing deals. Otherwise, as a product, we have no worries."
"There is room for improvement in performance and upgrades."
"Sophos is not integrating the same console and umbrella with its product."
"The product's pricing could be less expensive."
"Its technical support could be better."
"The solution is expensive for customers."
"Sophos MDR could offer more integration packs and more vendor flexibility."
 

Pricing and Cost Advice

"It is expensive but there is no better product than this."
"The price is kind of on par. The licensing was comparable to other solutions. It's not particularly high or low."
"The pricing for this solution is reasonable. One agent costs approximately 270 dirhams/70 USD for one year. There is a reduction in cost per licence as the number of licences used increases."
"Secureworks Taegis ManagedXDR is very expensive and could be more cost-effective."
"The pricing of Dell Secureworks is very reasonable."
"Initially, the cost was going to be something around $160 or $170. And eventually, I think they brought it down to $110 and they also threw in some endpoint protection platforms."
"The Red Cloak agent is free."
"The product is reasonably priced considering the cybersecurity features."
"Sophos MDR is less expensive than other products like Fortinet or Palo Alto."
"The tool is too expensive for small companies."
"It is an expensive platform."
"MDR is a complete enterprise solution, and compared to other OEMs, it is one of the cheapest."
"Compared to other tools, Sophos has a pretty good price."
"The cost of the solution is based on how many users use it."
"I rate Sophos MDR’s pricing a seven or eight out of ten."
report
Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.
865,295 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
22%
Manufacturing Company
8%
Financial Services Firm
8%
Government
7%
Computer Software Company
17%
Manufacturing Company
9%
Educational Organization
7%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Secureworks Taegis ManagedXDR?
The most valuable feature is the support. The support chat. It's always connecting to people. And you open the chat, and it's not about that automated response. It's actually a human being that res...
What is your experience regarding pricing and costs for Secureworks Taegis ManagedXDR?
It is worth the money. It is expensive but there is no better product than this.
What needs improvement with Secureworks Taegis ManagedXDR?
I would not say there is a potential area of improvement. I am also waiting to see what Sophos will bring in terms of enhancement. There is room for AI integration as the industry evolves, and more...
What do you like most about Sophos MDR?
The user doesn't need a technician; it offers 24/7 support to identify and manage your infrastructure and take complete care of any technological incidents.
What needs improvement with Sophos MDR?
I don't have many suggestions for improvement in Sophos MDR as it performs quite well. It would be beneficial to have the ability to pull a report of all incident responses within a tenant, with ca...
What advice do you have for others considering Sophos MDR?
I believe Sophos MDR pricing is reasonable for my customers. I would recommend those planning to use Sophos MDR to consider what financial impact a compromise could have on their organization and c...
 

Also Known As

Secureworks Red Cloak Managed Detection and Response, Dell Secureworks, SecureWorks Taegis Managed TDR
Sophos Managed Threat Response
 

Overview

 

Sample Customers

RICOH, Owens and Minor
Information Not Available
Find out what your peers are saying about Secureworks Taegis Managed XDR / MDR vs. Sophos MDR and other solutions. Updated: July 2025.
865,295 professionals have used our research since 2012.