Slack integration for notifications and support requests. Support requests are handled very quickly and accurately. Review collected by and hosted on G2.com.

Lack of support for EKS in AWS GovCloud. This was promised to us before we signed our contract, but later was removed from the roadmap. GovCloud is an essential part of our business and this lack of support leaves a large gap in our monitoring and alerting. Review collected by and hosted on G2.com.

Expel is extremely communicative letting us know what they are seeing in our environment within a very short timeframe. Their representatives and engineers are always eager to assist and get the right people on calls so that an issue can be resolved promptly. Review collected by and hosted on G2.com.

I have not had any downfalls or issues with Expel at this time. My only small complaint is that sometimes after they have been notified of something they still report on it and open another ticket when we have already verified the issue and acknowledged it with them. Review collected by and hosted on G2.com.

Expel analysts are very prompt in response. Whenever I have a query, I always say @Ruxie and the analysts provide accurate information. 24/7 coverage is also very helpful.

It is easy to navigate around the platform. Easy to implement and there are enough guidelines to work on the integrations.

Customer support is prompt and easy to contact Review collected by and hosted on G2.com.

When it comes to resolving or troubleshooting, it takes a very long time. Review collected by and hosted on G2.com.

But what grab my attention is the quick detection and response to security threats Expel provides. It’s saved a bunch of time in monitoring threats and even in incident response. This has also integrated nicely with our existing SIEM tools, so we haven’t had to make major changes to how we currently run. Furthermore their team insights and recommendations have allowed us to be a bit more proactive about security management. Review collected by and hosted on G2.com.

Expel is a kind of reliable solution, however, there are some aspects which deserve better mentioning. For example, alerting system has no customization, certain alerts are general, so it is challenging to prioritize the alerts received. Still, it is superb for overall security management, but there are some particular security issues that it doesn’t describe comprehensively, so we have to use some other tools to fill the gaps. Review collected by and hosted on G2.com.

Without a doubt, I like Expel because it provides quite detailed actionable insights in order to make fast decisions. It is integrated with our other systems well enough so we have all our security related information in one place. I like how it’s able to deliver automatic threat detection, fast updates. In addition, being easy to use, the platform enables less experienced team members to handle it without requiring much training. Review collected by and hosted on G2.com.

What I’ve seen as a drawback with Expel is that the way it reports could be more customizable. The default reports cover the basics, but options are few and far between when you want a little more specific or in depth insight. However, it can be a little hand limited, and if I need something slightly different, I wind up spending additional time tinkering with formatting and manually manipulating reports to work. It can slow down decision making and reduce workflows efficiencies. Review collected by and hosted on G2.com.

Expel's workbench MDR platform is an extensive and feature rich service offering. It has out of the box integrations available for all major service offerings like AWS, Azure, Gsuite, Okta, GitHub, Office365, Crowdstrike and many more. You can easily implement detection and response capabilities for your computing infrastructure irrespective of on-prem, cloud or hybrid architectures. Expel's 24X7 advance SOC team is highly responsive and effcient in detection and response activities. Their Service support team is extremely attentive and responsive for any sort of issues raised by customer. Review collected by and hosted on G2.com.

They don't have any major downsides which I'm aware. The only thing which can be added to improve the offerings are automated workflows which can be helpful for remediation. Review collected by and hosted on G2.com.

The Expel team has a solid set of skills that span a reasonable breadth of what you would expect to find in a Security Operations organization and delivered via a technology platform that is both flexible and powerful. While implementation isn't necessarily simple, it is fairly straight-forward and what you would expect when looking at a service that needs to ingest things like various security platform logs. The documentation can be a mixed bag - some of the articles are fantastic and provide great details about the topics, while others feel outdated as a result of changes outside of Expel's control (e.g. when Google makes changes to how logging works, there is a lag to when Expel's documentation is updated to reflect those changes). Overall, Expel has done a great job of keeping up with our environment in terms of triaging and dispositioning alerts that come into the service. They have been responsive to additional context and information provided by our team as well.

One of the key areas of strength for Expel historically has been their responsiveness to support requests from our team. In the past, these requests were quickly acknowledged and the appropriate support resources are deployed to help. More recently, this experience has been less consistent and less straightforward, in part due to changes in how support gets engaged. That said, Expel has observed and identified the unexpected downsides to some of the recent changes, and they have made a point of working directly with customers to improve it. That is a promising approach that will, hopefully, lead to a more seamless and easier support experience. Review collected by and hosted on G2.com.

Despite the capabilities of the technical platform and the strength of the analysts providing the service, there is still a limit to the environmental/organizational knowledge inherent in the service. This leads to a fairly frequent need for engagement with our internal team to get clarification and verification. While seeking that verification is not necessarily a downside (some of these requests are absolutely necessary), they can become repetitive as a result of the lack of organizational knowledge retention within Expel specific to the customer environments.

More recently, there has been some shift in the thoroughness or evidence of human analysis prior to escalation/engagement with our internal team by Expel. While the automation capabilities of Expel are impressive, they often fall short of correlating with concurrent or historic activity, which is often a rich source of context. This may not always eliminate the need for direct engagement, but it would likely cut down on the frequency and limit it to higher-impact instances. Review collected by and hosted on G2.com.

What I like best about Expel is that it provides me with security alerts and ways for me to contact support in situations where I need assistance. Review collected by and hosted on G2.com.

There are times when I receieve alerts where I have provided instructions that someone will be working in another country and so suppress those alerts but Expel still alerts about it. Support has been helpful where we follow up with those alerts to supress them. Review collected by and hosted on G2.com.

The onboarding experience has been very structured and detailed, with Expel taking the time to address all questions. The system integration and tracking has been very helpful. The biggest ease has been the ability to verify non-malicious behavior within Slack with a quick button. Customer support has also been reasonably quick, and again it's helpful to have conversations within a Slack thread.

The platform itself has an easy-to-use interface with great visibility into how logs from different applications are being used for alerts. The full visibility into the detection strategy and the ease with which we can answer questions about the specific detections for the logs, has already been very useful. Review collected by and hosted on G2.com.

While Expel has the most integrations compared to the other products that we reviewed, the only gap that we currently have is around the number of available integrations. While there is a lot of focus on the applications that we CAN integrate, it would be helpful to understand the gaps in monitoring due to the applications in our environment that were not supported. Review collected by and hosted on G2.com.

Expel has set a new standard for what a managed SOC should be. Beyond their breadth of integrations, they provide fantastic support and somehow seem to directly connect us with an engineer when needed. Perhaps most importantly, they heavily emphasize customer feedback and continually add features and improve user experience. Expel is not your typical SOC where feature requests seem to find a black hole. Review collected by and hosted on G2.com.

I can think of no downsides. Expel is a young company, so sometimes technical documentation is not the clearest. That's my only nit to pick and has no impacted the quality of service we receive. Review collected by and hosted on G2.com.