Cybersecurity as a Service for AWS

What do you like best about the product?

Reliable, professional, keeps us safe with ease of mind.

What do you dislike about the product?

We haven't found one yet. Maybe some false positives within Google Workspace, but that wasn't an MDR issue.

What problems is the product solving and how is that benefiting you?

They give us ease of mind.

What do you like best about the product?

It’s easy to use and set up. Sophos also provides a global view of what’s happening in the world.

What do you dislike about the product?

The documentation of what is covered by Sophos and what is not.

What problems is the product solving and how is that benefiting you?

Sophos MDR solves the challenge of maintaining 24/7 availability without having to set up and train an internal team to handle investigations and conduct threat hunts.

What do you like best about the product?

Its 24x7 threat detection and its ability to integrate with M365 are the main highlights for me.

What do you dislike about the product?

There are additional costs for advanced features, as well as for deploying extra endpoints and agents.

What problems is the product solving and how is that benefiting you?

It provides a single pane of glass to view all threats, and its integration with M365 helps mitigate email-related threats.

What do you like best about the product?

It provides real peace of mind and takes a lot of strain off our small IT team by monitoring threats 24/7 and responding appropriately whenever action is needed.

What do you dislike about the product?

The main issue is that not all of our infrastructure and systems can be integrated.

What problems is the product solving and how is that benefiting you?

It keeps our business secure while also freeing up time for my team, who aren’t at the same technical level as Sophos engineers.

What do you like best about the product?

What I like most about Sophos MDR is its 24/7 threat monitoring, proactive threat detection, and rapid incident response capabilities. The combination of advanced threat intelligence, expert security analysts, and seamless integration with Sophos XDR and Endpoint Protection significantly strengthens our security operations.

Sophos Central provides excellent visibility and centralized management, making it easier to investigate threats and manage security incidents. The MDR service also reduces the workload on our internal IT security team and improves our overall security posture.

Overall, we are highly satisfied with Sophos MDR's reliability, effectiveness, and professional security services.

What do you dislike about the product?

Overall, we are highly satisfied with Sophos MDR and have not experienced any major issues. However, there are a few areas that could be improved. More customizable reporting options, greater visibility into detailed threat investigations, and additional flexibility in alert notifications would enhance the user experience. Additionally, more advanced configuration options could be simplified. These are minor improvement opportunities and do not affect our overall positive experience with Sophos MDR.

What problems is the product solving and how is that benefiting you?

Sophos MDR helps us address critical cybersecurity challenges such as advanced threats, ransomware attacks, suspicious activities, and the need for continuous security monitoring. Its 24/7 threat detection, proactive threat hunting, and rapid incident response capabilities significantly improve our overall security posture.

The biggest benefits are reduced workload for our internal IT security team, faster threat identification and investigation, and improved visibility across our IT infrastructure. Integration with Sophos Endpoint Protection and XDR enables centralized monitoring and more efficient security operations.

Overall, Sophos MDR helps us minimize security risks, improve operational efficiency, and maintain business continuity while allowing our IT team to focus on other critical business priorities.

What do you like best about the product?

I like that Sophos MDR has lots of integrations, including with our firewalls and Microsoft 365, so we can manage everything from one centralized dashboard. It’s easy to deploy, and the policies are straightforward. The support is very proactive, the response time is very good, and they work with us on each case to find a way to remediate it. The managed service means we don’t need a lot of people, which I find very helpful for our company. I also like having threat detections and case management centralized. The endpoint includes web filtering and threat protection, and the protection moves with the user wherever they go. I value the endpoint features, including live response and threat detection and management. Setup was very easy, and the onboarding team guided us through it.

What do you dislike about the product?

I’d like to track the alerts I receive by email in the portal so I can follow up on them. I’d also like more centralized visibility across network devices and infrastructure.

What problems is the product solving and how is that benefiting you?

We use Sophos MDR to integrate 365 and firewalls like Palo Alto and Fortigate, giving us a centralized overview on one dashboard.

What do you like best about the product?

I like the combination of 24/7 security monitoring and experienced security professionals who investigate potential threats on our behalf. It gives my internal cybersecurity team confidence that security events are monitored and investigated, including outside normal business hours. I also appreciate that Sophos MDR filters and investigates alerts, reducing the operational burden on our team and letting us focus more on governance, risk management, compliance, and strategic security initiatives. The setup was simple, and our local partner and Sophos global support were always there. I’m highly satisfied with its performance.

What do you dislike about the product?

I’d like Sophos MDR to provide more comprehensive and structured logging, event correlation, and automation. I’d also like centralized log retention and search, cross-platform event correlation, automated response workflows, stronger audit trails, and better security reporting. These improvements could reduce our dependency on a separate SIEM/SOAR solution and simplify security operations and costs.

What problems is the product solving and how is that benefiting you?

Sophos MDR helps us maintain 24/7 security monitoring and respond to cyber threats despite limited internal resources. It reduces the burden of reviewing alerts and investigating suspicious activity, while giving us specialized expertise to improve visibility, prioritize genuine threats, and respond more effectively.

What do you like best about the product?

A full MDR team with one core console that connects to all solutions. It also has the capability to remediate cases, along with detailed explanations for each case. Support from professional services, easy for use console, design and responsive, best relation cost benefits and reliability agents for endpoints. Finally the operation is easy to use with the AI for threat hunter.

What do you dislike about the product?

The alerts aren’t closed out for the MDR team, so you have to go through and review each alert one by one.

What problems is the product solving and how is that benefiting you?

They operate 24x7 and take immediate action when needed.

What do you like best about the product?

The 24/7 monitoring and the MDR team’s immediate response whenever a threat is found.

What do you dislike about the product?

You can only interact with a case through the portal, and you can’t respond directly to the email case alert.

What problems is the product solving and how is that benefiting you?

Having the SOC team in-house helps reduce staff bloat.

What do you like best about the product?

What I love most about Sophos MDR is its continuous monitoring and protection, early threat detection, and rapid response to security incidents. I also appreciate having cybersecurity experts who help reduce risks, improve environment visibility, and provide greater peace of mind to the IT team.

What do you dislike about the product?

One of the main areas of opportunity for Sophos MDR is that its implementation and configuration can require time and technical knowledge. Additionally, reliance on an external provider for managing certain incidents can limit the direct control of the IT team. It would also be useful to have greater flexibility in customizing alerts and reports, as well as improving integration with some existing tools.

What problems is the product solving and how is that benefiting you?

Sophos MDR helps solve problems related to late threat detection, ransomware attacks, malware, unauthorized access, and lack of specialized cybersecurity personnel. Its continuous monitoring and incident response allow timely identification and containment of threats, reducing risks and minimizing operational impact. This benefits me by providing greater protection, security visibility, and peace of mind, as well as reducing the IT team's workload.