Secureworks Taegis XDR

My main use case for Secureworks Taegis XDR is detection, and I rely on it for reporting mostly to triage alerts that are high and critical and intelligence.

A good example of how I use Secureworks Taegis XDR for detection and triage is when we're onboarding a new compromised device, and I'm able to see all the activity that the test was doing and then match that with the detection from Secureworks Taegis XDR.

In my opinion, the best features that Secureworks Taegis XDR offers are the features that are on the sub screen.

Secureworks Taegis XDR has positively impacted my organization with searches and resources for the analysts.

When I mention searches, it has made investigations easier for my organization. Secureworks Taegis XDR helps me go from the alert to a search and investigation, which I find very helpful, though I have seen other languages that take a little more time to understand.

Regarding improvements, I think there are some additional searches and features that could enhance Secureworks Taegis XDR.

I would like to see more automation and more workbooks as needed improvements. I chose this rating for Secureworks Taegis XDR because there is still some room for improvement, especially when it comes to automation and some of the cases or playbooks.

I have been using Secureworks Taegis XDR for about a couple of years.

On a scale of one to ten, I would rate Secureworks Taegis XDR about eight.

Regarding Secureworks Taegis XDR's AI capabilities, I think that a lot of the functionality is similar in terms of understanding which manages AI risks and keeps things secure.

Secureworks Taegis XDR is deployed in my organization using a private cloud.

Clients are primarily using Secureworks Taegis XDR for securing endpoints, networks, and extending to cloud, identity management, and email protection. It functions as an antivirus in enterprise terms, known for being an EDR, MDR, and XDR. For organizations looking for ransomware protection, threat detection, and incident response, it works as cloud security monitoring as well, monitoring cloud environments for any suspicious activity and detecting threats.

Threat hunting and SOC augmentation represent the most special features about Secureworks Taegis XDR, where some of the best people in cybersecurity proactively search, provide reports, and deliver indicators of compromise for any activity in your network. This monitoring and reporting can be conducted weekly or monthly.

Centralized security monitoring and reporting is one of the most valuable aspects, as security fundamentally revolves around compliance. Having a centralized security monitoring platform that detects endpoints, networks, and cloud environments, including servers and switches, is essential. Secureworks Taegis XDR's architecture involves a collector device that collects all your data, even from small laptops, and allows you to monitor everything in one platform. This centralized system provides compliance and security visibility, ensuring evidence and visibility for your security and any compliance requirements you have.

Analytics with Secureworks Taegis XDR give you a full preview of everything on your device. It takes all the inputs and outputs of your infrastructure; for example, if it is a firewall, it scans all of the traffic. While it is not a SIEM, it is an open XDR, which excels at conducting analytics. This represents one of its best features because Secureworks has implemented a machine learning model that can detect and analyze everything independently, providing AI-driven features.

Integration with third-party tools is quite seamless. Secureworks Taegis XDR can integrate with virtually anything. One of the best features of this product is its integration capabilities with multiple sources of EDRs and any operating system, whether protecting Linux or Windows servers. It boasts very good integration, and if a specific integration is not available, you can raise a ticket to Secureworks, and they will work on your integration, whatever it is, even if it is custom-built software.

Secureworks Taegis XDR absolutely aids in efficiency. SOC augmentation extends an organization's existing SOC, which helps reduce alert fatigue significantly. It provides additional threat intelligence and expert investigation, making it very useful for organizations that have a security team but lack twenty-four seven coverage.

If there were a next release of the product, I would like to see an increase in playbooks, specifically for augmentation and automation. Increasing the automation playbooks would be beneficial, as there are templates for implementing automation.

I have not heard anyone report stability issues, and I believe Secureworks Taegis XDR is approximately ninety-nine point nine percent stable without any reliability issues or latency problems.

Secureworks Taegis XDR is very highly scalable.

The customer service from Secureworks is quite helpful. The best aspect of this is the support window; you can click on the support link, and you will connect with a real person, not an AI, who will assist you. Given the high cost of the product, you would expect high-quality support, and security being a critical aspect elevates this expectation. I would rate the support a ten out of ten.

The deployment usually depends on the implementation team itself.

I see a return on investment despite the price being relatively high. It is costly, but it delivers whatever you ask for. Some people perceive advantages and disadvantages here; it can be complex if you want to integrate and tune multiple data sources based on your requirements. While some users find it complicated due to the numerous integrations in their environment, others find it very simple, as it allows for a plug-and-play setup where everything can be read seamlessly, and reports are generated easily.

One negative aspect I always hear from customers is about the cost. This product is not aimed at SMB regular customers, and it is definitely not for small businesses. Cost is a factor when considering this solution, particularly for large environments. Even with notable clients like the Pentagon and Qatar Energy, the high enterprise solution necessitates a total cost of ownership analysis before quoting.

I would not say there is anything that provides a one-to-one comparison with Secureworks Taegis XDR, but I think vendors like CrowdStrike, Fortinet, Palo Alto, and Trend Micro have their own open XDR solutions.

One of the best features of this product is its integration capabilities with multiple sources of EDRs and any operating system, whether protecting Linux or Windows servers. Secureworks Taegis XDR boasts very good integration, and if you do not have that integration, you can raise a ticket to Secureworks, and they will work on your integration, whatever it is, even if it is custom-built software.

The model clients usually use is a hybrid approach, as it can stretch to the cloud. I believe they utilize various cloud providers, including AWS, GCP, and Azure.

I rate this product a nine out of ten overall.

Secureworks Taegis XDR is designed for customers looking for next-generation antivirus or those who want to protect their systems from ransomware attacks or next-generation attacks. Customers seeking this type of solution primarily look for comprehensive threat protection capabilities.

We use the Threat Hunting feature of Secureworks Taegis XDR. Once we deploy this solution, we get visibility on a dashboard and we come to know what the challenges are in the customer's network. If there is any lateral movement about to happen, we can figure it out and catch it as well. The threat hunting part helps significantly with this capability.

Using Secureworks Taegis XDR has positively impacted our organization overall. It is quite competitive from a price perspective. Price is one of the advantages, and the second advantage is that it has a user-friendly GUI. The rules are very easy to set up and the dashboard is also very good.

To improve Secureworks Taegis XDR, we need to enhance the support part. Although the GUI is very user-friendly, the support needs to be increased for critical P1 tickets.

I have worked with Secureworks for 10 years.

Before working with Secureworks Taegis XDR, we considered other vendors like SentinelOne and CrowdStrike, which are competitors for Secureworks Taegis XDR and are also providing the same solution in the market.

The deployment of Secureworks Taegis XDR is quite simple. We have proper training for that and we have trained our engineers.

In a couple of hours, we are able to deploy Secureworks Taegis XDR. Only the agent deployment takes some time because it is dependent on the customer's number of users and the users' availability.

One person can deploy Secureworks Taegis XDR.

We purchased Secureworks Taegis XDR through a distributor. We place the order on the distributor and the distributor places the order to Secureworks Taegis XDR.

The integration part with third-party tools is easy and is not a challenge.

As of now, we have not worked with customizable workflows in Secureworks Taegis XDR.

I would rate this review as a 9.

I have known Secureworks Taegis XDR for about three or four years when I forgot about this solution that Broadcom has acquired. They have their security and then I think that was the time that Sophos also introduced their solutions. Most of the products are also in line with each other. If Trend Micro introduced this, of course, CrowdStrike introduced it, and Sophos as well will also introduce a solution like that.

Secureworks Taegis XDR is easy to deploy, although there may be some challenges. Most of the customers have their own IT team and will just ask for the license and they can do it by themselves.

I stand more as a reseller, but not as an integrator. It is more of a delivery and supply of this solution.

I am dealing with universities. The units have been distributed to all the faculty members, the teachers, and some of the admin staff. If someone claims a unit or it is not distributed as one distribution, we supply to them and they store it in their own storage area or storeroom. Then a faculty member claims it and they will provide some installation or initiation of the configuration of the laptop. I think it takes less than two hours to install everything, including the other applications. Of course, they provide buffer time. It is pretty much fast.

The analysis tools in Secureworks Taegis XDR that are most useful from my perspective are important to note. To be frank, I am not a security person. I am more of an infrastructure person. The reason why this solution is only involved or I was exposed to this is because I always bundle a security solution on every unit that we supply to our customers.

I talk about on-premises solutions. It is always on-premises or installed on endpoints.

Hardware compatibility could be an area for improvement. I do not know what the cause is. It is not on the application, but the support that they are asking for. Once we installed everything, it is there and we are good to leave it by themselves. They can administer it and configure it. The only time that they call us is when hardware failures occur.

That is the only room for improvement. Anything else the AVs or the other applications inside it are not that problematic.

I have known Secureworks Taegis XDR for about three or four years when I forgot about this solution that Broadcom has acquired.

Everyone does not utilize everything that is inside the application. I do not know if everybody utilized everything that is inside the application. But as far as we know, as long as their IT installed it, I think it is just there. We just leave it there. We do not have that much problem when it comes to the endpoint. Only if there are hardware issues and so on. On the application, on the antivirus, or things installed on the PC or the laptop, we encountered no problem at all. Once it is there, it is there. I think it is updating by itself. I do not know how their administrators are dealing with it, but the only problem that we encounter is if there are hardware problems such as battery issues.

Sophos support is good and helpful. We always seek support or help from a distributor and they are very accommodating.

I would rate the support from Sophos at an eight out of ten.

I do not know how much time implementation may require, but I think it is pretty much fast because they are doing it on a per-unit basis. For example, they have their storage, we supply the units, the laptops and the desktops, and once the user claims it, most of the customers that we are dealing with are universities.

I am not involved in the deployment. We are not providing the services for them anymore because they are capable.

I am familiar with IBM.

I am familiar with Sophos solutions. Secureworks Taegis XDR is the solution being discussed, which is a Network Detection and Response product.

I do not know if our customers use the threat hunting feature of Secureworks Taegis XDR. I am not sure because whatever is included in the license that we provide, I do not know if they utilize it much.

Customizable workflows in Secureworks Taegis XDR help to consolidate all of the processes. When it comes to Sophos specifically, there is not much complex activities that we have done with our customer. It is more of a direct installation or standalone installation of the solution.

The price for Secureworks Taegis XDR is very competitive. The good thing with Sophos is that it is very competitive with other solutions. In terms of support, they are all the same, but the price is very competitive compared to the other solutions. I would rate this review as a seven out of ten.

I worked with Secureworks Taegis XDR and implemented it for my customers. I deployed Sophos XDR for approximately 2,000 devices.

If your organization is experiencing a malware attack while using Secureworks Taegis XDR, you can directly block the malware from the console. The threat hunting feature was also beneficial.

I do not see any other problems with Secureworks Taegis XDR besides pricing. There is no room for improvement besides the pricing. All the features are already in place.

I have been dealing with Sophos for almost one year.

I do not see any other problems with Secureworks Taegis XDR besides pricing.

Sophos is a good XDR, and I recommend it for large companies since they have approximately 2,000 or 3,000 devices and can implement it as it is the best XDR. Smaller companies cannot afford it because of the price.

I rate the technical support by Sophos a 10.

The implementation is straightforward. It is a centralized deployment with Secureworks Taegis XDR, so you can deploy it through the centralized unit and it will automatically deploy on all those devices.

For 2,000 users, I estimate we required 10 to 11 engineers.

Smaller companies cannot afford it because of the price.

CrowdStrike is a good product, but I do not think it has any advantages over Secureworks Taegis XDR. Both Secureworks Taegis XDR and CrowdStrike are the same.

I did not integrate it with any third-party tools. Sophos is popular in my region. I rate this review a 10.