Sophos MDR Reviews & Product Details

Since implementing Sophos MDR, we have experienced a significant improvement in our security posture. Sophos MDR actively monitors our network and login activity, and they have alerted us to suspicious behavior on our Entra account within just one to two hours of compromise. Moreover, they provide clear, step-by-step remediation guidance, which has been invaluable. For our on-premises infrastructure, we’ve configured the system to allow Sophos to autonomously address any issues they detect. Review collected by and hosted on G2.com.

The endpoint agent can take a lot of system resources, especially when doing a scan Review collected by and hosted on G2.com.

Central management with a single pane of glass and the live human response to our MDR incidents. Not having to check emails or alerts and just knowing that someone will look after the issue is really helpful and less stressful than having to keep an eye on email/teams all the time. Review collected by and hosted on G2.com.

I haven't run into many downsides yet. The service has caught everything that it has detected since installation. Other than the software is using an outdated version of linux OS, I'm happy. Review collected by and hosted on G2.com.

What I like best about Sophos MDR is its 24/7 expert threat monitoring and rapid incident response, which gives us peace of mind knowing our systems are being actively protected by professionals. Review collected by and hosted on G2.com.

While Sophos MDR provides excellent threat detection and response, the pricing can be a bit high for smaller organizations, and some advanced configurations may require support assistance, which slightly limits flexibility for in-house teams. Review collected by and hosted on G2.com.

The proactive threat hunting and rapid incident response are truly what set Sophos MDR apart. Knowing that a team of experts is constantly monitoring our environment gives me unparalleled peace of mind Review collected by and hosted on G2.com.

There is nothing to dislike about this solution. It has consistently met and exceeded our expectations, delivering exactly what was promised. Review collected by and hosted on G2.com.

What we like best about Sophos MDR is the 24/7 expert threat monitoring and rapid response.

The MDR team acts as an extension of our internal security operations, providing actionable alerts and guided response support, which gives us confidence and peace of mind, especially outside business hours. Their expertise in investigating complex threats and reducing false positives has been a key advantage. Review collected by and hosted on G2.com.

What we dislike about Sophos MDR is the limited containment in specific threat scenarios.

In a recent case involving the Horabot trojan, MDR did not fully contain the threat — email propagation was not blocked in time, and containment actions required manual follow-up. This revealed a gap in automated response and containment capabilities for advanced or evasive threats. Review collected by and hosted on G2.com.

Key strengths include the speed of deployment and the ability to fully delegate threat management to the Sophos team, eliminating response delays that could prove extremely damaging. Another major advantage is the advanced reporting and the robust query database available to assess asset status. Review collected by and hosted on G2.com.

Despite being well-structured, the abundance of available data does take some getting used to. The inability to quickly and easily report false positives straight from the console is one possible drawback. Although the queries are clearly helpful, they appear to be more suited for seasoned users and are less useful for regular, daily tasks. That said, since this is a managed service, their use remains entirely optional. Review collected by and hosted on G2.com.

While we were a little reluctant to put our trust in an outside source for security, the Sophos MDR service has proven to be everything we had hoped for. Our company is no different in that we were being asked to do more with less staff. Having the Sophos MDR service allows us to sleep at night knowing that our IT environment is being watched 24/7 and that we don't need to wake up for every alert that hits our cell phones. Review collected by and hosted on G2.com.

As with any enterprise wide deployment, we had our share of bumps in the road. Our biggest issue was with the implementation of the client on our VDI environment. I wouldn't say this was a reason to look elsewhere ... just happened to be there was a bug with the Sophos integration on the specific version of VDI software we are using. Review collected by and hosted on G2.com.

Knowing when we have an issue and that it's taken care of ASAP! Getting an email of the full incident and how it was handled is a great service. Have peace of mind that if something major does come up, it is handled. We had a ransomware incident that was caught and stopped before we knew anything happened, all within minutes. Review collected by and hosted on G2.com.

I have not found something I dislike about the product. The threat view from how something tried to access the system and where it came from can be hard to read at times but very detailed. Maybe if they had an easier view for the incident path it took. Review collected by and hosted on G2.com.

Sophos Managed Detection and Response (MDR) is most helpful for its 24/7 threat monitoring and response capabilities, expert-led threat hunting, and full-scale incident response, which significantly improves an organization's security posture and frees up internal IT resources. The upsides include improved cyber defense, freed-up IT capacity, and a reduction in the risk of costly cyberattacks Review collected by and hosted on G2.com.

Sophos MDR can be expensive, particularly for smaller organizations. Communication issues, including slow response times and lack of local language support, are also mentioned as concerns. Furthermore, false positives can lead to wasted time and resources, and integration with existing security stacks might not always be seamless. Review collected by and hosted on G2.com.

The most helpful aspect of Sophos MDR is its proactive threat detection paired with expert, real-time support, which offers peace of mind by swiftly addressing security issues before they escalate. Review collected by and hosted on G2.com.

While Sophos MDR excels in proactive support, the least helpful aspect can be the occasional delay in communication during complex investigations, which may slow down the resolution process for intricate security incidents. Review collected by and hosted on G2.com.