--- title: Sophos MDR Reviews meta\_title: 'Sophos MDR Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 506 reviews by the users' company size, role or industry to find out how Sophos MDR works for a business like yours. aggregate\_rating: rating\_value: 4.7 review\_count: 506 scale: '5' date\_modified: '2026-08-12' parent\_category: name: System Security url: https://www.g2.com/categories/system-security --- # Sophos MDR Reviews & Product Details Visit Website Sophos Managed Detection and Response (MDR) is a fully managed service delivered by experts who detect and respond to cyberattacks targeting your computers, servers, networks, cloud workloads, email accounts, backups, and more. Our highly skilled security analysts stop advanced human-led attacks and take immediate action to neutralize threats before they can disrupt your business operations or compromise your sensitive data. * * * Product Website Sophos MDR Seller [Sophos](https://www.g2.com/sellers/sophos) Discussions [Sophos MDR Community](https://www.g2.com/products/sophos-mdr/discuss) Solution Type Best-of-Breed Overview by Justin Han Show More ## Value at a Glance Averages based on real user reviews. ### Time to Implement 1 month [ View More Pricing Information ](https://www.g2.com/products/sophos-mdr/pricing) ## Sophos MDR Integrations (15) What do users say about integrations? Verified by Sophos MDR [ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Azure Portal ](https://www.g2.com/products/azure-portal/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Cisco Duo ](https://www.g2.com/products/cisco-duo/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") FortiGate-VM NGFW ](https://www.g2.com/products/fortigate-vm-ngfw/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") FortiManager ](https://www.g2.com/products/fortimanager/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft 365 ](https://www.g2.com/products/microsoft365/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft Defender for Identity ](https://www.g2.com/products/microsoft-defender-for-identity/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Rapid7 Next-Gen SIEM ](https://www.g2.com/products/rapid7-next-gen-siem/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") SonicWall Next Generation Firewall ](https://www.g2.com/products/sonicwall-next-generation-firewall/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Sophos Email ](https://www.g2.com/products/sophos-email/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Sophos Endpoint ](https://www.g2.com/products/sophos-endpoint/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Sophos Firewall ](https://www.g2.com/products/sophos-firewall/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Sophos Intercept X ](https://www.g2.com/products/sophos-sophos-intercept-x/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Splunk Enterprise ](https://www.g2.com/products/splunk-enterprise/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Veeam Data Platform ](https://www.g2.com/products/veeam-data-platform/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") VEEAM Recovery Orchester ](https://www.g2.com/products/veeam-recovery-orchester/reviews) Show More ![shiv k.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "shiv k.") SK shiv k. DevSecOps Mid-Market (51-1000 emp.) 12/27/2025 "Centralized Security and Effortless Threat Isolation" 4.5/5 What do you like best about Sophos MDR? best thing is that it is centerlized and if any attack or virus detedted it islotae the system then admin can review all log from central port Review collected by and hosted on G2.com. What do you dislike about Sophos MDR? there is no depth of exclusion if want exlude all subdomain can not use \*.domian.com need to manualy define all URL and for some custom app or script that you have to define fix path location otherwise MDR blocck and remove that Review collected by and hosted on G2.com. What problems is Sophos MDR solving and how is that benefiting you? all device log are centlized and i can apply policy from a cental point to all endpoints Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite ![Verified User in Higher Education](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Higher Education") AH Verified User in Higher Education Mid-Market (51-1000 emp.) 6/5/2026 "Reassuring, Proactive Security Monitoring You Can Trust" 4.5/5 What do you like best about Sophos MDR? It’s reassuring to know that a team of professionals is continually monitoring our security environment and will take action if any threats arise. Review collected by and hosted on G2.com. What do you dislike about Sophos MDR? The only negative thing I can think of is the price Review collected by and hosted on G2.com. What problems is Sophos MDR solving and how is that benefiting you? Cybersecurity assurance that provides peace of mind for all stakeholders. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![John R.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "John R.") JR John R. I.T. Administrator Mid-Market (51-1000 emp.) 8/11/2025 "Easy Management and Strong Ransomware Detection in Sophos MDR" 5/5 What do you like best about Sophos MDR? Sophos MDR is a great product. I love how easy it is to manage and also I love how the licensing works for the product. The controls are very granular and can be setup differently for different users, groups and computers/devices. You can sync all of your active directory users and groups so that you have more control over which users cand which devices have more strict controls and it allows for website filtering and device control. Also when combined with Sophos Intercept-X it is one of the best solutions to monitor for potential Ransomware attacks. Review collected by and hosted on G2.com. What do you dislike about Sophos MDR? Logging into Sophos Central to manage Sophos MDR can be a bit slow and painful at first as there is so many features and options, site navigation can be a bit slow. Also the amount of options for implementation at first can be a bit daunting. Review collected by and hosted on G2.com. What problems is Sophos MDR solving and how is that benefiting you? Ransomeware detection was a huge point for us and Sophos MDR combined with Sophos Intercept-X is very good at ransomeware detection. Also, the licensing for Sophos MDR is very straight forward and easy to understand. The way the license their products fit very well for our medium sized business. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite LB LAURENCE B. Lead Infrastructure Engineer Mid-Market (51-1000 emp.) 8/11/2025 "Sophos MDR gives us the confidence that we are as secure as possible 24/7 all around the world." 5/5 What do you like best about Sophos MDR? Sophos 24/7 MDR was such a great move for us, we have over 300 users in almost every continent and a very small IT team. The level of comfort and security the MDR product has provided to us is immeasurable. With a centralised platform that is intuitive to use and simple to get how to guides for, it's a de-cluttered space that allows us to focus on the actual issues. The professional services team spend a good amount of time ensuring it is setup correctly and that you are supported as you stand up the products. Injecting our 365 defender logs into their datalake takes care of an additional platform we no longer have to check. Authorising the team to be able to take action when it is out of hours gives a level of trust that we are without doubt more secure with it than without it. I like that the same team of service leader and engineer are still working with us beyond the initial sales and implementation stages so we are not wasting time going over historical issues. Review collected by and hosted on G2.com. What do you dislike about Sophos MDR? While the professional services team do ensure your on-boarding is seamless, a little gap of maybe understanding our environment more would cause a few less false positives. We have global users that access our CRM platform via AVD and this is all hosted in Azure UK, if that had been taken into account at the start, there would be less tickets created for these users accessing from different geographical locations. This is a very minor problem that maybe more complex companies would maybe be larger for them. Review collected by and hosted on G2.com. What problems is Sophos MDR solving and how is that benefiting you? Phishing attacks, MITM attacks, data loss, and credential theft. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Jeury S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Jeury S.") JS Jeury S. Analista de Ciberseguridad y Vulnerabilidades Banking Mid-Market (51-1000 emp.) 8/7/2025 "Active and reliable protection with real human support" 4.5/5 What do you like best about Sophos MDR? The most useful thing is to have a team of experts working in the background, detecting and responding to incidents before they become serious problems. The 24/7 analysis capability, detailed reports, and smooth communication with the Sophos team make a big difference. Review collected by and hosted on G2.com. What do you dislike about Sophos MDR? Overall, the experience has been very good, but if there's something I would improve, it would be that some reports could be presented in a simpler way so that non-technical people can also understand them without difficulty. Sometimes the amount of technical information can be overwhelming if one is not familiar with certain terms. Review collected by and hosted on G2.com. What problems is Sophos MDR solving and how is that benefiting you? Sophos MDR helps us face one of the biggest challenges we had: the lack of visibility and response to threats in real time. Before, we relied entirely on our internal capabilities, which were limited by resources and time. With Sophos MDR, we now have a specialized team that constantly monitors our infrastructure, detecting suspicious behaviors, investigating incidents, and responding quickly. This has allowed us to reduce the risk of breaches, avoid major damage, and focus on our operations without constantly worrying about potential threats. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller inviteAI Translated ![Luis P.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Luis P.") LP Luis P. Cyber Security Specialist Mid-Market (51-1000 emp.) 8/5/2025 "Sophos MDR has provided us with reliable, expert 24/7 threat detection and response" 4.5/5 What do you like best about Sophos MDR? What I like most about Sophos MDR is the 24/7 expert monitoring and rapid response to real threats. The service gives us peace of mind knowing that a skilled team is actively hunting, detecting, and neutralizing threats around the clock—even when our internal IT team is offline. Their proactive threat hunting and clear, actionable guidance during incidents make a huge difference in minimizing downtime and reducing risk. The integration with Sophos Central also gives us a unified view of our security landscape, making it easier to track threats and overall activity. In short, the combination of human expertise with powerful technology is what truly sets Sophos MDR apart. Review collected by and hosted on G2.com. What do you dislike about Sophos MDR? What I dislike most about Sophos MDR is that sometimes the volume of alerts can be overwhelming, especially during periods of heightened threat activity. While the team does a great job filtering and prioritizing, it can occasionally be challenging for our internal team to keep up with all notifications and follow-ups. Additionally, there can be occasional delays in communication when detailed investigation is needed, which can slow down incident resolution in complex cases. Finally, more customizable reporting options would be helpful to better align with specific organizational needs and compliance requirements. Review collected by and hosted on G2.com. What problems is Sophos MDR solving and how is that benefiting you? Sophos MDR is solving the challenge of continuous, expert cybersecurity monitoring and rapid incident response, which is difficult to maintain with limited internal resources. By detecting and neutralizing threats before they cause damage, it reduces our risk of breaches and downtime. This allows our team to focus on strategic initiatives while knowing our environment is proactively protected around the clock, ultimately improving our overall security posture and operational efficiency. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Arturo G.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Arturo G.") AG Arturo G. Gerente de Operaciones de TI Mid-Market (51-1000 emp.) 7/29/2025 "Sophos MDR offers a robust and responsive managed detection and response service." 4.5/5 What do you like best about Sophos MDR? What I like best about Sophos MDR is the 24/7 expert-led threat monitoring and response, which ensures that potential security incidents are swiftly identified, investigated, and neutralized—even outside business hours. The combination of real-time alerts, detailed reporting, and human-led analysis provides a high level of confidence in our overall security posture. Additionally, the integration with our existing Sophos ecosystem makes deployment and management seamless. Review collected by and hosted on G2.com. What do you dislike about Sophos MDR? What I dislike about Sophos MDR is that while the threat detection and response are excellent, the alert notification system can sometimes be overly sensitive, generating a high volume of low-priority alerts that require filtering. Additionally, the initial onboarding process could be more streamlined, especially when integrating with third-party tools or existing SIEM solutions. Some advanced customization options are also limited unless you're on the higher-tier service. Review collected by and hosted on G2.com. What problems is Sophos MDR solving and how is that benefiting you? Sophos MDR provides 24/7 expert threat detection and response, reducing risk, saving internal resources, and improving our overall security posture. Review collected by and hosted on G2.com. Show More 7/31/2025 Current UserValidated ReviewerIncentivizedSource: Seller invite ![Javier P.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Javier P.") JP Javier P. Ingeniero de soporte y ciberseguridad Mid-Market (51-1000 emp.) 8/20/2025 "EFFECTIVE IN SECURITY MATTERS" 5/5 What do you like best about Sophos MDR? What I like most about MDR is that they are monitoring my equipment 24/7 on security issues. This helps me focus on internal matters and my users, and not only that, if a finding occurs, they notify me even by phone call depending on the criticality. Also, what I like is the easy use of the management console. Review collected by and hosted on G2.com. What do you dislike about Sophos MDR? It would only be a point that communication with the engineers is only in English. Review collected by and hosted on G2.com. What problems is Sophos MDR solving and how is that benefiting you? The main problem it solves for me is that it helps me dedicate more time to internal issues of the company where I work and focus on the problems reported by my users, since the topic of monitoring and everything that involves security takes up a lot of time, and with Sophos, I don't have to worry about that. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller inviteAI Translated JJ jefferson j. Analista de Ciberseguridad y Vulnerabilidades Mid-Market (51-1000 emp.) 8/4/2025 "Continuous and effective protection with Sophos MD" 4.5/5 What do you like best about Sophos MDR? What I like most about Sophos MDR is its 24/7 monitoring with active response to real threats, which provides an additional layer of protection that goes beyond what we could cover internally. The Sophos analyst team acts quickly before incidents, communicates clearly, and collaborates directly in mitigation actions. Review collected by and hosted on G2.com. What do you dislike about Sophos MDR? What I like least about Sophos MDR is that some custom configurations and fine-tuning of alerts require additional support or intervention, which can slow down certain processes. Review collected by and hosted on G2.com. What problems is Sophos MDR solving and how is that benefiting you? Sophos MDR primarily addresses the difficulty of quickly detecting and responding to advanced threats and sophisticated attacks that could go unnoticed with traditional tools. By offering 24/7 monitoring by security experts and managed response, it significantly reduces detection and mitigation time, minimizing the impact of incidents on the organization. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller inviteAI Translated JW Jonathan W. Systems Administrator Mid-Market (51-1000 emp.) 7/11/2025 "Security without the hassle" 5/5 What do you like best about Sophos MDR? The Sophos GUI. It's every easy for you to navigate through the site and find what you need. I really like how ease of use it is when it comes to troubleshooting vulnerable users or machines. You can easily find the problem due to advanced features from the integrations they implemented. I've had to reach out to the customer support several times in order to fix a compromised user or machine; they've been extremely helpful. I came into the organization with Sophos already deployed, so I'm not sure how easy it was to implement but maintaining it has been a breeze. Review collected by and hosted on G2.com. What do you dislike about Sophos MDR? I've had one issue where I had to submit a ticket on a user that was compromised, I ended up submitting the wrong location and it took a day for Sophos to change it to the right support. That day in-between could've had serious consequences with our environment. It happens but I learned the right team and how to submit the problem right away to protect ourselves. Review collected by and hosted on G2.com. What problems is Sophos MDR solving and how is that benefiting you? Security, that's mainly what we needed and it's what Sophos has delivered on. We need to make sure that we are secure as we are a law firm that has to deal a lot with Law and ensure customer confidentiality. With Sophos I feel like we have that security and that ability to provide that confidentiality. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ## Questions about Sophos MDR? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about Sophos MDR ](https://www.g2.com/products/sophos-mdr/discussions/new) JV Jorge Villar • Last activity about 4 years ago In terms of security, does Sophos give a complete protection against virus and malware? 1 Upvote 1 [ Join the conversation ](https://www.g2.com/discussions/26270-in-terms-of-security-does-sophos-give-a-complete-protection-against-virus-and-malware) GU Guest User • Last activity about 1 year ago What is a threat response software? 0 Upvotes 1 [ Join the conversation ](https://www.g2.com/discussions/what-is-a-threat-response-software) [ View all Discussions ](https://www.g2.com/products/sophos-mdr/discuss) ## Pricing Insights Averages based on real user reviews. ### Time to Implement 1 month ### Return on Investment 11 months ### Average Discount 17% [ View More Pricing Information ](https://www.g2.com/products/sophos-mdr/pricing) Sophos MDR Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_a93bcb59d2050084ceba48d54ce4b6d0/arctic-wolf.png "Product Avatar Image") Arctic Wolf 4.7/5(280) [ Compare Now ](https://www.g2.com/compare/arctic-wolf-vs-sophos-mdr) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_da79dd9cca8cdc2d4a5eacbb02bf305b/huntress-managed-edr%282%29.png "Product Avatar Image") Huntress Managed EDR 4.8/5(890) [ Compare Now ](https://www.g2.com/compare/huntress-managed-edr-vs-sophos-mdr) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_37f63ab128674cec5a20823cf2ad4af4/blackpoint-cyber.jpg "Product Avatar Image") Blackpoint Cyber 4.7/5(258) [ Compare Now ](https://www.g2.com/compare/blackpoint-cyber-vs-sophos-mdr) ##### ##### Sophos MDR Features Platform Features 24/7 support Proactive report alerts Application control Automation Capabilities Automated remediation Automated investigation AI Agents [ View More Features ](https://www.g2.com/products/sophos-mdr/features) ## Top-Rated Alternatives [ ![Huntress Managed EDR](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Huntress Managed EDR") Huntress Managed EDR 4.8/5(890) ](https://www.g2.com/products/huntress-managed-edr/reviews) [ ![Arctic Wolf](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Arctic Wolf") Arctic Wolf 4.7/5(280) ](https://www.g2.com/products/arctic-wolf/reviews) [ ![Blackpoint Cyber](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Blackpoint Cyber") Blackpoint Cyber 4.7/5(258) ](https://www.g2.com/products/blackpoint-cyber/reviews) [ View All Alternatives ](https://www.g2.com/products/sophos-mdr/competitors/alternatives) ##### Categories on G2 [Managed Detection and Response (MDR)](https://www.g2.com/categories/managed-detection-and-response-mdr) ##### Explore More [Best platform for mobile-friendly online sales](https://www.g2.com/discussions/best-platform-for-mobile-friendly-online-sales)[Is SciNote worth committing to long-term as a scientific data management system for pharmaceutical research teams, given the regulatory requirements involved?](https://www.g2.com/discussions/is-scinote-worth-committing-to-long-term-as-a-scientific-data-management-system-for-pharmaceutical-research-teams-given-the-regulatory-requirements-involved%20)[Which video communication platform offers the most reliable conferencing features?](https://www.g2.com/discussions/which-video-communication-platform-offers-the-most-reliable-conferencing-features) [Which hard drive cloning platforms have the best recovery and undo capabilities for data safety during migrations?](https://www.g2.com/discussions/which-hard-drive-cloning-platforms-have-the-best-recovery-and-undo-capabilities-for-data-safety-during-migrations)[What desktop publishing software cuts the time it takes to create digital marketing materials from hours down to something a team can actually manage daily?](https://www.g2.com/discussions/what-desktop-publishing-software-cuts-the-time-it-takes-to-create-digital-marketing-materials-from-hours-down-to-something-a-team-can-actually-manage-daily)[Pros and Cons Details](https://www.g2.com/products/sophos-mdr/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)