---
title: LevelBlue MDR / MXDR Reviews
meta_title: 'LevelBlue MDR / MXDR Reviews 2026: Details, Pricing, & Features | G2'
meta_description: Filter 256 reviews by the users' company size, role or industry
  to find out how LevelBlue MDR / MXDR works for a business like yours.
aggregate_rating:
  rating_value: 4.5
  review_count: 256
  scale: '5'
date_modified: '2026-07-13'
parent_category:
  name: System Security
  url: https://www.g2.com/categories/system-security
---

# LevelBlue MDR / MXDR Reviews
**Vendor:** LevelBlue  
**Category:** [Managed Detection and Response (MDR)  Software](https://www.g2.com/categories/managed-detection-and-response-mdr)  
**Average Rating:** 4.5/5.0  
**Total Reviews:** 256
## About LevelBlue MDR / MXDR
LevelBlue’s Managed Extended Detection and Response (MXDR) service delivers continuous, expert-driven protection across networks, endpoints, identities, cloud apps, and email. Backed by a 24/7 SOC, LevelBlue helps organizations rapidly realize value from existing technology investments while reducing cyber risk in complex hybrid environments. Our seasoned security engineers provide co-management for your XDR and SIEM, ensuring both are expertly managed and optimized to stay ahead of evolving threats. LevelBlue empowers your team with proprietary threat intelligence, flexible integration with existing technologies, and measurable outcomes—strengthening enterprise security and partnering with you to minimize cyber risk. Recent LevelBlue Acquisitions: - Alert Logic is a LevelBlue Co. - Trustwave is a LevelBlue Co. - Cybereason is a LevelBlue Co.



## LevelBlue MDR / MXDR Pros & Cons
**What users like:**

- Users value the **informative and easy-to-navigate dashboard** , enhancing their overall experience with LevelBlue MDR/MXDR. (1 reviews)
- Users find the **deployment process easy** , praising the informative dashboard and straightforward agent installation. (1 reviews)
- Users find the **easy installation** process of LevelBlue MDR / MXDR to be straightforward and user-friendly. (1 reviews)
- Users appreciate the **compliance support** of LevelBlue MDR/MXDR, facilitating certifications like SOC2 and HITRUST efficiently. (1 reviews)
- Users value the **full visibility** of incidents with detailed breadcrumb trails on each occurrence. (1 reviews)

**What users dislike:**

- Users find the **difficult navigation** of the vulnerability list to be frustrating and hard to comprehend. (1 reviews)
- Users find the **inefficient alert system** could use further refinement for a smoother experience after setup. (1 reviews)
- Users find the **poor reporting** of LevelBlue MDR/MXDR frustrating due to limited formats and navigation challenges. (1 reviews)

## LevelBlue MDR / MXDR Reviews
  ### 1. Alert Logic Cybersecurity Monitoring In-Depth

**Rating:** 5.0/5.0 stars

**Reviewed by:** Juan M. | President , Consulting, Small-Business (50 or fewer emp.)

**Reviewed Date:** October 19, 2024

**What do you like best about LevelBlue MDR / MXDR?**

The deep technology stack includes six proprietary technologies, allowing fast detection and response. As a cybersecurity consultant, I have experience with six implementations in Puerto Rico. PRASA, ACAA, Inmediata, Grupo Menonita, Universidad del Caribe and Mueblerías Berríos.

I like the ease of deployment and the visibility of the topography best. You have logs and IDS packet inspections in a single console coupled with continuous deep vulnerability scans. The first scans reveal the healthy and unhealthy assets that need remediations. Also, the VM scan is risk-based in attacking the NOW or Critical 9-10 CVE first.

The deep technology stack gives you a comprehensive view of all ecosystem assets, their health, and critical vulnerabilities. This holistic approach significantly reduces the attack surface, enhancing your cybersecurity. posture. Alert Logic's technology stack is unique in the marketplace...

Alert Logic also provides an app that can always be on-call 24/7 and respond to automated playbooks.

The interaction and notifications with Alert Logic go smoothly, with critical notifications for 5 minutes or less.

I have been a Partner of Alert Logic for +3 years and have accumulated experience in 6 implementations.

I am a Global Member of the FORTRA-Alert Logic Partner Advisory Council responsible for advising Alert Logic on improving existing services and designing new services to be included in their roadmap. 

On November 13, 2024, I am leading a User Group for seven existing Alert Logic clients with the following agenda: 1. Innovation Roadmap, Implementation Best Practices, and the Role of Offensive Security to maximize your security posture.

As a consultant, I use Microsoft Power BI to help clients remediate vulnerabilities since the initial scans generate 25,000-30,000 critical vulnerabilities.

For your information, Xpert IT Services is also a Partner of SecureWorks, DeepWatch, and Huntress. This gives me objectivity and a solid competitive knowledge base for this evaluation of Alert Logic. I also uploaded an RFQ I developed and conducted for PRASA with five competitors, including Sophos, SecureWorks, Accenture, and GM Security.

**What do you dislike about LevelBlue MDR / MXDR?**

The implementation is simple; however, it needs improvement in project management. They should leverage their offensive security tools, which include pent-testing and attack simulations, to validate the implementation.

**What problems is LevelBlue MDR / MXDR solving and how is that benefiting you?**

Deep visibility and best practices with advanced Ransomware defenses. Also, Compliance online reporting. Most clients must be aware of their assets' health or risk-based vulnerabilities. They can segment their network defenses by extending universal agents and IDS to protect all assets. Universal agents are implemented on all servers and network devices with three functionalities: Log generation, Vulnerability Scan, and File Integrity Monitoring (FIM). The IDS is both virtual and an appliance, which gives you extended coverage flexibility in a cost-effective way. Alert Logic integrates all the client's SaaS and PaaS via API at no additional cost.

**Official Response from Product  Marketing:**

> We're thrilled your experience as a consultant has been positive with Alert Logic, and we love working with you. Thank you for your review, Juan!

  ### 2. Provided my company with more visilibility and peace of mind because it 24/7 SOC team

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Government Administration | Enterprise (> 1000 emp.)

**Reviewed Date:** May 15, 2024

**What do you like best about LevelBlue MDR / MXDR?**

Alert Logic is user-friendly and offers experienced staff to assist with the onboarding process. We opted for the 24/7 SOC due to our limited security team staff within a large organization. The app alerts us to potential high and critical risks, helping to ensure our company's safety. The dashboard is intuitive and efficient, and contacting their experts regarding any incident-related issues is straightforward. Communication with Fortra is prompt, and we utilize and monitor Fortra daily.

**What do you dislike about LevelBlue MDR / MXDR?**

The integration process has been somewhat sluggish because the IT system is complex. For solutions like this that run continuously in the background, it is advisable to conduct vulnerability scans during off-peak production hours to avoid slowing down the main production.

**What problems is LevelBlue MDR / MXDR solving and how is that benefiting you?**

Our team is small, consisting of a mix of seasoned members and those who are new and less experienced. In the past, we had limited insight into our IT network, but with recent improvements in visibility, we realized the absence of a 24/7 Security Operations Center team. Consequently, we decided to engage an external SOC service with Fortra.

**Official Response from Product  Marketing:**

> We're so glad you're having a good experience with Alert Logic, and seeing value. Thank you so much for taking the time to leave a review.

  ### 3. find success for compliance, security, and reporting

**Rating:** 5.0/5.0 stars

**Reviewed by:** David W. | Security Engineer, Enterprise (> 1000 emp.)

**Reviewed Date:** August 20, 2024

**What do you like best about LevelBlue MDR / MXDR?**

This product enables our organization to meet compliance requirements for log storage and access. This tool will enable IT to meet requirements for certifications such as SOC2 and HITRUST. It has plugins for a wide range of third-party products.

**What do you dislike about LevelBlue MDR / MXDR?**

The option for "topology" appears twice in the menu so that gets a little confusing.

**What problems is LevelBlue MDR / MXDR solving and how is that benefiting you?**

Our business needs to monitor logs for all of our devices, create alerts, and store this data securely.

**Official Response from Product  Marketing:**

> Thank you, David, for catching the repeat of “topology” on our menu; I’ve shared this feedback with our team managing this area. We’re happy that we’re able to support your team in meeting compliance regulations as well as solve your problem in being able to efficiently monitor logs across your environment.

  ### 4. Fast Time to Value with Broad Threat Detection Capabilities

**Rating:** 4.5/5.0 stars

**Reviewed by:** Fritz P. | Manager - Service Engineering and Architecture, Mid-Market (51-1000 emp.)

**Reviewed Date:** November 08, 2024

**What do you like best about LevelBlue MDR / MXDR?**

Alert Logic is very easy to deploy, and has very broad security detections capabilities from detecting vulnerability, exposures, anomalous events based on logs, intrusions and lateral movements based on HIDS. Alert Logic also uses a very extensive querying language that will not rely on parsers when creating custom searches or rules. It is very easy to operationalize and realize the worth of your investment with Alert Logic.

**What do you dislike about LevelBlue MDR / MXDR?**

The tiering licensing model especially and inability to customize dashboards and reports.

**What problems is LevelBlue MDR / MXDR solving and how is that benefiting you?**

We are an MSOC provider using Alert Logic as our main platform and collaborating partner when it comes to threat detection. Alert Logic benefits us on achieving faster time to implement the product, filtered and curated alerts which resulted into a faster time to respond by reducing the time to validate and investigate on false positive alerts. Alert Logic also helped us gain end-to-end visibility on the customer's environment without having the complexity to implement and integrate different security controls.

**Official Response from Product  Marketing:**

> Thanks so  much for the review, Fritz. We're happy to hear about the benefits you and your customers are experiencing with Alert Logic.

  ### 5. Robust/Reliable Security, With Some Initial Setup Hurdles

**Rating:** 4.0/5.0 stars

**Reviewed by:** Amir S. | Tech Lead and Technical Architect, Small-Business (50 or fewer emp.)

**Reviewed Date:** November 03, 2024

**What do you like best about LevelBlue MDR / MXDR?**

Alert Logic MDR stands out in terms of detailed threat detection for varied environments I manage, like AWS, Azure, and on-premises. Its integration across platforms is smooth, allowing me to centralize security across client projects without much overhead. The real win, though, is their Security Operations Center (SOC) and access to cybersecurity experts. They are proactive, and the level of insight they bring means that I don’t have to worry about constantly staying ahead of threats by myself—they’re an extension of my team. I find their threat intelligence genuinely useful, especially when they help tune the detection systems to avoid false alarms.

**What do you dislike about LevelBlue MDR / MXDR?**

The only drawback is the upfront setup; it’s a bit of a learning curve, especially if your team is new to integrating MDR in multiple cloud environments. I wouldn’t call it out of reach, but it does need an experienced hand at the start. Also, advanced threat-hunting features are excellent, but they come at a premium—great for large projects but potentially overkill for smaller setups.

**What problems is LevelBlue MDR / MXDR solving and how is that benefiting you?**

Alert Logic MDR streamlines threat detection across AWS, Azure, and on-premises environments, providing centralized security without dedicating extensive internal resources. Its SOC team’s proactive monitoring allows me to focus on development while knowing our infrastructure is continuously and expertly protected.

**Official Response from Product  Marketing:**

> Thanks for taking the time to write a review, Amir. We are happy to hear the SOC's expertise and proactive monitoring has been beneficial for your organization's security.

  ### 6. Not the worst, not the best

**Rating:** 3.0/5.0 stars

**Reviewed by:** Monique L. | Product Security Sr. Analyst, Mid-Market (51-1000 emp.)

**Reviewed Date:** August 19, 2024

**What do you like best about LevelBlue MDR / MXDR?**

Having a 24/7 SOC that we don't have to manage is hands down my favorite. In addition to this, the reports run and are delivered on the schedule that we've selected.Without the reports, we'd possible miss findings that may no longer be in the console due to our ephemeral environment.

**What do you dislike about LevelBlue MDR / MXDR?**

It doesn't seem to always be accurate. It's hard to know where it's pulling information from when delivering findings. Because assets in our environment are ephemeral, Alert Logic findings come and go as well. This makes it hard to report out findings, determine trends or create baselines. Also, the way that the Health Exposures are reported isn't intuitive. We assume that everything is OK, so the tool should default to Unhealthy to show us what's *not* OK. We've been told in the past that sometimes the Unhealthy remediations will actually be listed in the Healthy remediations which is counterintuitive.

**What problems is LevelBlue MDR / MXDR solving and how is that benefiting you?**

Having Alert Logic MDR helps us most by being our 24/7 SOC.

**Official Response from Product  Marketing:**

> Hi Monique - Thank you for the positive feedback about having a 24/7 SOC. We're happy to hear that's been beneficial. We'll reach out directly regarding your feedback around accuracy and reporting. Your review is appreciated.

  ### 7. Alert Logic MDR Solution

**Rating:** 4.5/5.0 stars

**Reviewed by:** Vilas L. | Team Lead - IT Security, Enterprise (> 1000 emp.)

**Reviewed Date:** July 11, 2024

**What do you like best about LevelBlue MDR / MXDR?**

We are using Alert Logic MDR solution from almost 4 years and providing support to different customers. There are number of factor to consider for AL MDR solutions.
1. Alert Logic UI is very simplified
2. You can search logs very easily with filters
3. Vendor is proactively monitor all the events and informed customer in timely basic with email notification and calls.
4. Easy to manage/configure for Vulnerability scans and get reports in different format. PCI scan is very much usable for audits.
5. Get report quickly with various options to configure and download/schedule it.
6. You can reach our to vendor very easily and their response is very good

**What do you dislike about LevelBlue MDR / MXDR?**

I haven't explored for agent based Vulnerability scanning as of now but not found any option for it. Compare to other solution which provide agent based host scanning.

**What problems is LevelBlue MDR / MXDR solving and how is that benefiting you?**

Network Scanning, Log collections, Network traffic monitoring and identifying threats and vulnerabilities.

**Official Response from Product  Marketing:**

> Thank you, Vilas! This is great feedback for us. We appreciate your business.

  ### 8. Being my first MDR Experience as a new engineer, it's great!

**Rating:** 4.5/5.0 stars

**Reviewed by:** Hunter N. | Junior DevOps Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** August 15, 2024

**What do you like best about LevelBlue MDR / MXDR?**

Support is a big factor is whether or not I like a 3rd party service, and Alert Logic support is very helpful when dealing with setup, configuration, mitigation and resolution of all the problems that might arise in our AWS deployments. They have always been helpful and integration has always been easy when working on setup in our environments.

**What do you dislike about LevelBlue MDR / MXDR?**

Something that could be helpful is a smoother workflow for incidents and exposures. I understand that there are a lot of issues that come through and a lot of data to comb through to keep your environment secure, but it can get overwhelming openeing the incidents or exposures tab and seeing all of those notifications, often times duplicates of a single issue.

**What problems is LevelBlue MDR / MXDR solving and how is that benefiting you?**

Solving a lot of security issues that we see! Although I said workflow can be better in the previous question, it still is super helpful getting most of our exposures and incidents taken care of due to the help of support.

**Official Response from Product  Marketing:**

> We're grateful for your feedback, Hunter. It's great to hear the support has been strong for your AWS deployments and that we're solving security issues. If you'd like to discuss workflows more with our product team, please do feel free to reach out directly with additional feedback to mdrfeedback@fortra.com. 

  ### 9. SOC Partner for the business

**Rating:** 4.5/5.0 stars

**Reviewed by:** Nabeel S. | Associate Cloud Architect, Mid-Market (51-1000 emp.)

**Reviewed Date:** August 14, 2024

**What do you like best about LevelBlue MDR / MXDR?**

Simple and quick setup, the accuracy in detecting threats. Integration with our existing tools, official workshops and highly expert support. Getting vulnerability reports and visibility into the nodes is a great help.

**What do you dislike about LevelBlue MDR / MXDR?**

Price is high for SMB, customization are handled from the back system, takes so much to learn.

**What problems is LevelBlue MDR / MXDR solving and how is that benefiting you?**

Proactive threat detection and response. Compliance. Its has been handling most of the heavy lifting for us. Visibility across our landscape. Support is very punctual to respond and schedule on-demand sessions.

**Official Response from Product  Marketing:**

> Thanks for your review, Nabeel. We appreciate your feedback and are glad to hear how the solution is benefitting you.

  ### 10. Best MDR In the Market!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Tommylee S. | Especialista de Operaciones Sistemas Informacion, Enterprise (> 1000 emp.)

**Reviewed Date:** October 23, 2024

**What do you like best about LevelBlue MDR / MXDR?**

The best about Alert Logic is the best visibility to secure your whole network and can see all of what is happening in your daily company.

**What do you dislike about LevelBlue MDR / MXDR?**

Only harm is that it has some bugs which is not much. Other than that it works perfectly.

**What problems is LevelBlue MDR / MXDR solving and how is that benefiting you?**

It's helping us solve for future attacks like ransomware and we can see all the vulnerabilities in our network in which is a plus because we can be on top in the security area and be less vulnerable for attacks

**Official Response from Product  Marketing:**

> This is wonderful to hear the visibility is helping you become more proactive. Thank you for the review, Tommylee!


## LevelBlue MDR / MXDR Discussions
  - [What is Alert Logic MDR used for?](https://www.g2.com/discussions/what-is-alert-logic-mdr-used-for)
  - [What is AT&amp;T Managed Threat Detection and Response Service used for?](https://www.g2.com/discussions/what-is-at-t-managed-threat-detection-and-response-service-used-for)
  - [What is Alert Logic?](https://www.g2.com/discussions/what-is-alert-logic)

- [View LevelBlue MDR / MXDR pricing details and edition comparison](https://www.g2.com/products/levelblue-mdr-mxdr/reviews/levelblue-mdr-mxdr-review-4353307?section=pricing&secure%5Bexpires_at%5D=2026-07-16+18%3A44%3A21+-0500&secure%5Bsession_id%5D=e051feb5-dcff-4965-aaf8-2a3017360a2b&secure%5Btoken%5D=5d69dc87b1f15236accd40f898c66849032a9862d86e7dc9f6b521f030810ef6&format=llm_user)

## LevelBlue MDR / MXDR Features
**Platform Features**
- 24/7 support
- Proactive report alerts
- Application  control
- Proactive threat hunting
- Rapid response time
- Customizeable reports
- Managed Services

**Automation Capabilities**
- Automated remediation
- Automated investigation
- AI Agents

## Top LevelBlue MDR / MXDR Alternatives
  - [Sophos MDR](https://www.g2.com/products/sophos-mdr/reviews) - 4.7/5.0 (499 reviews)
  - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - 4.6/5.0 (417 reviews)
  - [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) - 4.8/5.0 (887 reviews)

