UnderDefense
56 reviews
- 1 profiles
- 5 categories
Average star rating
4.9
Serving customers since
2017
UnderDefense Reviews
UC
Verified User in Computer Software
Autonomous AI SOC directly over our Splunk setup with zero migration required
Our day-to-day work centers on high-volume data engineering and software development, so our security telemetry is tightly wired into our Splunk setup. When we decided to add AI capabilities to our SOC, every vendor we spoke with tried to force a platform shift — either migrating us to their stack or moving our logs out of our environment. UnderDefense was the only team that took a pragmatically open approach. They connected directly to our Splunk setup in week one with zero log re-formatting and zero data migration. Keeping full control of our data lake while gaining autonomous threat triage gave us immediate value without the operational friction.
OM
Oleksandr M.
Bridging Technology and Business for GrowthBrought Elastic, SentinelOne, AWS, Azure. Nothing Replaced. The Whole Stack Got Sharper.
We evaluated several MDR providers before choosing UnderDefense. What stood out in the PoC: investigation speed, and the platform layering on top of our existing tools rather than replacing them. SentinelOne, Microsoft Defender, and our 4TB Elastic SIEM deployment stayed in place. The UnderDefense team configured and tuned the entire environment end-to-end.
Our operation spans five countries and the coverage model works consistently across all of them. Same escalation paths, segmented visibility by org unit and region, no separate tooling per location.
In April 2026, proactive threat hunting caught a phishing campaign we had zero visibility on, traced it to a Microsoft 365 Direct Send misconfiguration, and delivered a full root cause analysis and fix the same day. The team's day-to-day changed after this engagement: less reactive work, more time on infrastructure, and a level of confidence in coverage we didn't have before.
UC
Verified User in Computer Software
An intelligent layer over our security stack that genuinely cuts down operational overhead
What sets the UnderDefense Agentic SOC apart is its ability to conduct end-to-end triage autonomously. In our environment, which handles high volumes of integrations, data transfers, and SaaS configurations, alert fatigue can easily become a major resource drain. Instead of simply forwarding raw alerts, the platform's AI agents actively investigate them. They pull the relevant context from our logs, correlate user activity across our infrastructure, and determine whether a flag is a false positive or an actual threat. The depth of the automated investigations is impressive, allowing our internal team to step back from the daily grind of log analysis and focus on broader architecture and strategy.
About
What is UnderDefense?
UnderDefense is an Agentic AI SOC and Compliance Automation platform trusted by 200+ enterprises across the US and EU. It works on top of the security stack you already own — SIEM, EDR, cloud, identity — with no tool replacement and no headcount expansion. AI agents handle alert enrichment, cross-environment correlation, and threat investigation at machine speed; the 24/7 IR team takes over for critical escalations and complex cases. 250+ integrations, 96% MITRE ATT&CK coverage, zero ransomware incidents across 10 years of operation. Proven across technology, healthcare, financial services, and manufacturing. For more information, visit underdefense.com.
Details
Year Founded
2017
Website
underdefense.com