--- title: Sophos MDR Reviews meta_title: 'Sophos MDR Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 517 reviews by the users' company size, role or industry to find out how Sophos MDR works for a business like yours. aggregate_rating: rating_value: 4.7 review_count: 517 scale: '5' date_modified: '2026-10-12' parent_category: name: System Security url: https://www.g2.com/categories/system-security ---

Sophos MDR Pros and Cons: Top 5 Advantages and Disadvantages

Quick AI Summary Based on G2 Reviews

Generated from real user reviews

Users commend the efficient threat detection of Sophos MDR, noting its quick responses and practical solutions. (22 mentions)
Users value the 24/7 continuous monitoring of Sophos MDR, ensuring swift response to potential threats and enhancing security. (21 mentions)
Users find Sophos MDR to be easy to use, enjoying its smooth management and seamless integration with existing systems. (21 mentions)
Users value the 24/7 expert monitoring of Sophos MDR, providing unparalleled peace of mind against cyber threats. (13 mentions)
Users appreciate the quick response time of Sophos MDR, enhancing incident management efficiency and reliability. (13 mentions)
Users find Sophos MDR to be expensive, particularly challenging for smaller organizations with budget constraints. (8 mentions)
Users highlight communication issues with Sophos MDR, noting slow response times and overwhelming alert volumes. (7 mentions)
Users find the limited customization in alert handling restricts their ability to tailor responses effectively. (7 mentions)
Users are concerned about the complexity of integration, particularly with external alerting platforms, affecting efficiency. (6 mentions)
Users find the poor reporting issues in Sophos MDR frustrating due to complexity and lack of customization. (6 mentions)

5 Pros or Advantages of Sophos MDR

5 Cons or Disadvantages of Sophos MDR

Dominik A.
DA
Dominik A.
IT Project Advisory
Mid-Market (51-1000 emp.)
"Endpoint Security in time on point"
5/5
What do you like best about Sophos MDR?

The endpoint security solution is very easy to setup and use, the central management interface is very intuitive. The central policies were setup together with the technical consultants for a quick implementation. Review collected by and hosted on G2.com.

What do you dislike about Sophos MDR?

Real old operating systems are not supported, this is an issue that has to be solved physically. Review collected by and hosted on G2.com.

Verified User in Banking
AB
Verified User in Banking
Mid-Market (51-1000 emp.)
"Peace of Mind 24/7 with Experts Who Intervene and Neutralize Incidents"
5/5
What do you like best about Sophos MDR?

The possibility of having a team available 24/7 provides the peace of mind we need during hours when we don't have staff. The best part is that if an event occurs, their experts intervene to neutralize the situation. Review collected by and hosted on G2.com.

What do you dislike about Sophos MDR?

The support staff does not speak Spanish. This limits the intervention of the local team and the Sophos staff. Review collected by and hosted on G2.com.

Ramesh Y.
RY
Ramesh Y.
AGM IT
Real Estate
Enterprise (> 1000 emp.)
Business partner of the seller or seller's competitor, not included in G2 scores.
"Proactive 24/7 Protection and Incident Response That Cuts Workload"
5/5
What do you like best about Sophos MDR?

Proactive support and around-the-clock protection have reduced my workload, thanks to active incident response. Review collected by and hosted on G2.com.

What do you dislike about Sophos MDR?

Not applicable—no issues found in Sophos SMDR. Review collected by and hosted on G2.com.

Evren Kürşat .
E
Evren Kürşat .
Director of IT & Cyber Security Departments | Cloud & Infrastructure • Cybersecurity • IT Strategy
Mid-Market (51-1000 emp.)
"Sophos MDR Delivers 24/7 Monitoring and Rapid Response with Actionable Alerts"
5/5
What do you like best about Sophos MDR?

Sophos MDR is the 24/7 threat monitoring and rapid response capabilities provided by the security team. It significantly reduces the workload on our internal IT team while improving our overall security posture. The visibility and actionable alerts help us respond to incidents more quickly and effectively. Review collected by and hosted on G2.com.

What do you dislike about Sophos MDR?

Sophos MDR is that it does not offer Turkish language support, which can make management and communication less convenient for our team. Review collected by and hosted on G2.com.

Verified User in Building Materials
AB
Verified User in Building Materials
Enterprise (> 1000 emp.)
"Sophos MDR: Rapid Detection, 24/7 Expert Monitoring, and Smooth Collaboration"
4.5/5
What do you like best about Sophos MDR?

Sophos MDR (Managed Detection and Response) has delivered outstanding performance and fully deserves the top grade of 1. The service stands out through its rapid detection and response capabilities, 24/7 monitoring by experienced security analysts, and highly professional collaboration Review collected by and hosted on G2.com.

What do you dislike about Sophos MDR?

Nothing, everything works well and smooth Review collected by and hosted on G2.com.

Verified User in Electrical/Electronic Manufacturing
AE
Verified User in Electrical/Electronic Manufacturing
Enterprise (> 1000 emp.)
"Exceptional Support and Onboarding with Solid Threat Identification"
5/5
What do you like best about Sophos MDR?

Support and onboarding are exceptional. That said, the sheer number of integrations can feel overwhelming at first. Performance is solid, both in terms of threat identification and overall resource usage. Review collected by and hosted on G2.com.

What do you dislike about Sophos MDR?

It’s cloud-only, and the interface can be a bit tricky to navigate at times. Review collected by and hosted on G2.com.

Wolfgang H.
WH
Wolfgang H.
Specialist IT Core Services
Enterprise (> 1000 emp.)
"Strong SOC Team and Smooth Policy, Server & Client Management"
4.5/5
What do you like best about Sophos MDR?

The SOC Team and the management of the policies, server and clients. Review collected by and hosted on G2.com.

What do you dislike about Sophos MDR?

the role-based feature could be better. its not perfect for multi-sites. Review collected by and hosted on G2.com.

HK
Harsh K.
Technical Consultant
Mid-Market (51-1000 emp.)
"Feels Like a Real 24/7 Security Team Backing You Up"
4/5
What do you like best about Sophos MDR?

What I like most about Sophos MDR is that it genuinely feels like having a real security team backing you up 24/7, rather than just another tool that throws alerts at you. It takes a lot of pressure off because it actually investigates and responds to threats, instead of leaving you to handle everything on your own. Review collected by and hosted on G2.com.

What do you dislike about Sophos MDR?

What I dislike is that the initial setup and fine-tuning can feel a bit complex at first, especially if you’re new to MDR services. Also, some of the deeper insights and controls seem limited unless you’re fully invested in the Sophos ecosystem. Review collected by and hosted on G2.com.

SA
Shahid A.
SOC and Endpoint Lead
Enterprise (> 1000 emp.)
"Reliable 24/7 Threat Response Across 2000+ Endpoints"
5/5
What do you like best about Sophos MDR?

Sophos MDR scales effortlessly, we have over 2000 endpoints and the coverage remains consistent and reliable. Proactive communication from the MDR team during high-severity incidents really sets them apart. Review collected by and hosted on G2.com.

What do you dislike about Sophos MDR?

The MDR portal interface could be more intuitive, navigating past threat cases and filtering alerts isn't as smooth as it could be. Review collected by and hosted on G2.com.

VC
vladimir C.
Infrastructure Security analist
Transportation/Trucking/Railroad
Mid-Market (51-1000 emp.)
"Total Peace of Mind with Sophos MDR: 24/7 Security and Clear Alerts"
5/5
What do you like best about Sophos MDR?

What I appreciate most about Sophos MDR is that, essentially, I have a team of cybersecurity experts watching my network 24/7, without needing to hire my own staff. Let's be honest: I don't have the budget or the knowledge to maintain a security team that is alert at 3 in the morning monitoring threats.

What really gives me peace of mind is that they not only detect suspicious activities, but they also act immediately. I've been through a couple of situations where they notified me that they had blocked something suspicious and had already taken action before I even found out. It's like having a digital bodyguard that never rests.

Moreover, something that seems simple but is extremely valuable: the alerts I receive make sense. It's not a bombardment of incomprehensible technical notifications that only overwhelm. They clearly explain what happened, what actions they took, and if I need to do anything on my part. For someone who doesn't work in cybersecurity all day, that's priceless. It allows me to focus on my business, knowing that aspect is in the hands of professionals. Review collected by and hosted on G2.com.

What do you dislike about Sophos MDR?

Honestly, what impacts me the most is the price. It's not cheap at all, and for a small or medium-sized company like ours, it represents a considerable investment that really affects the monthly budget. Sometimes I question whether we really need such a high level of protection or if we're overpaying, although then I remember the scares we've had and my doubts fade away.

Another thing that frustrates me is the feeling of being too dependent on them. I feel like I've lost some direct control over our own infrastructure. If I want to make any changes or adjust the security settings, I have to request it from their team. Although they usually respond quickly, it's not the same as being able to do it myself at the moment I need it.

Also, at the beginning, the learning curve was quite steep. We had to modify some internal processes and there was some friction with the IT team, as they felt they were being "replaced" or supervised. That created tensions that we had to resolve with a lot of diplomacy.

Lastly, the monthly reports are sometimes too technical. When I have to present them to the board of directors, they don't want to see terms like "IOCs" or "lateral movement"; what they want to know, in clear and simple Spanish, is whether we are protected or not. Review collected by and hosted on G2.com.