I'm a fan of how many technicians they have in several areas of expertise for the Splunk platform, specifically. I can always go to them and ask questions to find possible solutions.

Deepwatch has been a highly responsive and collaborative partner. When they escalate alerts, they are truly critical with no false positives. We have a strong working relationship between our SOC teams, and their customer success manager stays closely engaged. They help us fine-tune alerting, answer questions quickly, and ensure we are aligned on priorities. This partnership has improved our operational efficiency and confidence in our detection strategy.

Working on MDR with Deepwatch is an amazing experience for myself. The whole team is flexible, responsive, knowledgeable, and professional. I reach out to DeepWatch on a daily basis; whether it's a member or an issue/improvement on hand. We have a success manager assigned to us, Caroline G. We have a bi-weekly call to discuss issues, roadblocks, future implementation, and status updates. We often communicate over email & slack outside the bi-weekly calls. Caroline is consistently available for us outside of her work hours; Sick day, PTO, and off hours. She is a very joyous person to be around with; which allows customers to approach her easily, feeling open to reach out to her. I worked with a few MDR engineers; Chase C., Steven L., Titi O., Kane H., Larry S., and more. The team is very knowledgeable; very capable of addressing our initial setups, troubleshooting log ingestions, defining alerts, and provided solutions for improvement. The knowledge base articles written by a few of the engineers were very helpful; very easy to read and understand. I don’t know who managed our log ingestion applications but they are performing an excellent job; we are up to date with our OS and application version. The detection engineers provides very well defined alerts; which provides activities we may not be aware of. We had a false alarm, but at the time an admin was unable to verified their actions within the network. Deepwatch was there, treating the scenario as a possible intrusion. All hands on deck, Deepwatch were there, performing their duties as much as they possibly can. That to me is the key - Deepwatch was there for us during a possible instrusive situation. I hope to keep to continue having Deepwatch’s support. Caroline G and the MDR engineers really deserve a raise, promotion, and award. Very dedicated, intelligent, and professional team.