# How customizable are reporting and alerts in Sophos MDR for incident analysis?

Sophos MDR has been helpful for continuous security monitoring, threat detection, and incident response support, with added security expertise that reduces the workload on internal IT teams. The main gap for me is reporting: I would like more detail in incident analysis, clearer remediation recommendations, and more flexibility to configure alerts. Better integration with existing security tools and workflows would also make day-to-day management more efficient. How are others handling reporting, alert tuning, and integrations with Sophos MDR?

##### Post Metadata
- Posted at: 16 days ago
- Author title: Associate Director
- Net upvotes: 1


## Comments
### Comment 1

The weekly and monthly threat reports have been useful for me to track what was detected and proactively hunted without having to dig through everything myself. I also like the AI summaries since they enrich the data and make it quicker to understand what happened, and automatic remediation has helped reduce the back-and-forth during incidents. My main frustration is integrations: it hasn’t matched what’s listed on the website, even though what’s available has still been enough for day-to-day use.

##### Comment Metadata
- Posted at: 2 days ago
- Author title: Business Development Manager - West



### Comment 2

I’ve found the regular health checks helpful, and the team’s advice is usually practical when we’re tuning what to pay attention to. One thing I’d still like is faster response on non-critical alerts, since smaller orgs can’t afford much downtime. I also wish it were easier to talk directly with the technical team outside a ticket just to understand how something works. On integrations, I’m hoping Fusion expands into M365 and firewall visibility so we can manage more from a single dashboard.

##### Comment Metadata
- Posted at: 9 days ago
- Author title: IT Service Manager



### Comment 3

For incident analysis, the MDR SOC incident response has been strong for us because they often identify and remediate issues before we even notice them. What’s helped on the reporting side is the detailed synopsis they send after an incident, which we’ve been able to use for compliance reporting. That said, I agree some dashboard detections feel too vague to act on right away and we end up needing other tools to dig in.

##### Comment Metadata
- Posted at: 14 days ago
- Author title: IT Director




## Related Product
[Sophos MDR](https://www.g2.com/products/sophos-mdr/reviews)

## Related Category
[Managed Detection and Response (MDR)](https://www.g2.com/categories/managed-detection-and-response-mdr)

## Related discussions
- [How well does Trello scale into a larger team?](https://www.g2.com/discussions/1-how-well-does-trello-scale-into-a-larger-team)
  - Posted at: over 13 years ago
  - Comments: 6
- [Can we please add a new section](https://www.g2.com/discussions/2-can-we-please-add-a-new-section)
  - Posted at: over 13 years ago
  - Comments: 0
- [Quantifiable benefits from implementing your CRM](https://www.g2.com/discussions/quantifiable-benefits-from-implementing-your-crm)
  - Posted at: over 13 years ago
  - Comments: 4


