Secureworks Taegis VDR

My main use case for SecureWorks Taegis VDR  is as a central detection and response platform.

For detection and response, I use SecureWorks Taegis VDR  for threat detection, incident response, SOC efficiency, and alert reduction because it detects lateral movement, credential abuse, ransom activity, and provides a full attack story rather than just single alerts, allowing the SOC to act quickly.

My primary use case with SecureWorks Taegis VDR is for MDR and XDR  purposes.

SecureWorks Taegis VDR's best features include unified detection and response, as it pulls in alerts and logs from all my different tools such as EDR, SIEM , firewall, cloud services, and Windows machines, collecting everything into one clean dashboard where I can view all these items and eliminate the need to hunt through ten dashboards to piece a threat together.

I find it very easy to navigate and customize the dashboard to fit my team's needs once everything is set up, and it is very simple to view the dashboard after setup.

Cloud and hybrid support is another valuable feature of SecureWorks Taegis VDR, as it supports on-premise and cloud workloads, managing endpoints and network traffic to provide centralized visibility regardless of where my assets live, whether in the cloud or on-premise.

SecureWorks Taegis VDR has positively impacted my organization because of its ease of use.

The positive impacts include faster incident response, as I can detect, investigate, and contain threats much faster because it shows the full attack path in one place with deeper analysis of everything, and it reduces alert fatigue by consolidating alerts into one or two high-confidence incidents, which improves analysis efficiency and morale.

There is always room for improvement in SecureWorks Taegis VDR, especially regarding user interface and navigation, as the platform is powerful but the UI can feel complex for new users.

The integration setup time for SecureWorks Taegis VDR needs improvement, as although it integrates with many tools, the initial onboarding and log ingestion can take time and require significant technical effort, particularly when connecting multiple organizations to this one centralized solution.

I have been using SecureWorks Taegis VDR for almost four years.

SecureWorks Taegis VDR is stable.

The scalability of SecureWorks Taegis VDR is very good.

The customer support for SecureWorks Taegis VDR is the best thing they have, as I receive responses in about five seconds from real people, not AI.

I would rate the customer support for SecureWorks Taegis VDR a perfect ten out of ten.

I previously used a different solution, but most of my SecureWorks deployments were greenfield, usually switching from CrowdStrike or SentinelOne to SecureWorks Taegis VDR because of the centralized management feature.

I have seen a return on investment with SecureWorks Taegis VDR, as it delivers strong ROI by reducing security workload and preventing costly incidents, improving response speed and lowering operational costs, along with fewer security incidents.

My experience with the pricing, setup cost, and licensing for SecureWorks Taegis VDR is that it was very costly on a per-user price basis.

Before choosing SecureWorks Taegis VDR, I evaluated CrowdStrike and Microsoft Defender.

My advice for others looking into using SecureWorks Taegis VDR is to consider its tool consolidation feature, as it replaces the need to use multiple disconnected security tools and dashboards, saving on licensing and management costs. I would rate this product an eight out of ten overall.

My main use case for SecureWorks Taegis VDR  was initially conducting a proof of concept after we were using McAfee. I rolled it out to a pilot set of devices to understand how it functions, and the results were amazing because it provided detailed analysis.

A specific example of how SecureWorks Taegis VDR  helped my team during that pilot was detecting early credential abuse and lateral movement across my hybrid environment. Since we had SecureWorks Taegis VDR in place, we wanted to assess how it would detect these threats, and it was able to detect multiple servers using Kerberos and NTLM attacks. It also detected the lateral movement using valid credentials and captured the suspicious administrative commands that were executed in this multi-stage incident.

My main use case for SecureWorks Taegis VDR is that it is definitely one of the best tools in terms of high-fidelity detections, with initial access, credential abuse, lateral movement, and these elements mapped appropriately in terms of the MITRE ATT&CK framework.

The best features SecureWorks Taegis VDR offers that stand out to me are the dashboard and the automated response. Based on severity, it can isolate the affected device and disable the compromised account or reset the password for the compromised account, and also block suspicious networks while notifying the SOC analysts with enriched text content.

SecureWorks Taegis VDR has positively impacted my organization by correlating identity, endpoint, and network signals to detect credential-based attacks early and responding before lateral movement escalation in most of my scenarios.

I would like to improve SecureWorks Taegis VDR by enhancing the dashboard to provide a holistic view with granular data.

I also request the product engineering team for enhancements regarding integration, reporting, or user experience.

I have been using SecureWorks Taegis VDR from 2022 until today.

SecureWorks Taegis VDR is stable.

SecureWorks Taegis VDR's scalability is notable.

The customer support is good.

I previously used McAfee, which had become very traditional, so I had to switch.

I have seen a return on investment, specifically in terms of time saved.

I think the pricing, setup cost, and licensing of SecureWorks Taegis VDR are acceptable compared with CrowdStrike and other tools.

I chose SecureWorks Taegis VDR because I trust SecureWorks, having worked with McAfee, Symantec, Trend Micro, Kaspersky, Carbon Black, Cylance, CrowdStrike, Palo Alto Cortex XDR , and more. I know these products have evolved from traditional antivirus to EDR, and I would say SecureWorks Taegis VDR is outstanding among all the other vendors in terms of functionality, ease of access, and UI friendliness.

I found this interview absolutely fantastic.

I would advise others looking into using SecureWorks Taegis VDR that it is one of the reliable solutions anyone should try, and if it yields good results, I would definitely recommend switching to SecureWorks.

I recommend SecureWorks Taegis VDR because it is highly scalable by design and well-suited for mid-sized to very large enterprises, including global hybrid and cloud-heavy environments. Its cloud-native elastic architecture is built as a cloud-native SaaS platform that automatically scales compute and storage as telemetry volume increases without requiring customer-side infrastructure scaling, and it can handle bursty workloads such as incident spikes and ransomware attacks. I gave this product a rating of eight out of ten.

SecureWorks Taegis VDR  is used for telemetry, SOC operations, or endpoint management, depending on the configuration and the organization's requirements.

The solution helps by securing the brand of the organization, which is essential.

It is a one-stop solution for different needs with separate APIs. The product offers different solutions for different companies.

I have been using SecureWorks Taegis VDR  for about three years.

SecureWorks Taegis VDR is very stable, though there is scope for improvement.

I would rate the scalability an 8.5 out of ten.

The support is very effective and responsive, not only technically but also through quarterly meetings.

The initial setup is a comprehensive project managed activity.

We provide support as system integrators but do not use third-party services. Our organization has about one hundred ten security resources.

I would rate pricing a seven out of ten. There is room for improvement when it comes to affordability.

Palo Alto, Splunk, and ProStrike are other solutions that we evaluated.

As a system integrator, I maintain an unbiased opinion. The choice of solution depends on an organization's risk appetite and funding.

I would rate it a nine out of ten.