G2

Emanuele B.

SOC Analyst

Enterprise (> 1000 emp.)

10/29/2026

"Intuitive UI, Fast Onboarding, and Powerful Threat Detection"

5/5

What do you like best about Sophos MDR?

What I appreciate most about Sophos MDR is the visibility and flexibility it provides when investigating security events. The threat detection capabilities are comprehensive, while the platform remains intuitive and easy to use. The onboarding process was very smooth, and Live Response has proven particularly valuable because it allows me to carry out my own endpoint investigations in parallel with the MDR team’s analysis. I also find the AI Assistant very useful for quickly summarizing case findings and reviewing the most relevant details. Review collected by and hosted on G2.com.

What do you dislike about Sophos MDR?

The main area I would like to see improved is Live Discover, as query response times can occasionally be a bit slow, possibly due to their impact on endpoint resources. The Threat Detection Dashboard also has a slight learning curve and can initially feel somewhat confusing. That said, after working through a few cases and detections, the interface becomes much easier to understand and navigate. Review collected by and hosted on G2.com.

What problems is Sophos MDR solving and how is that benefiting you?

Sophos MDR gives us clearer visibility into our corporate assets and our users’ security posture, and it helps us monitor and address threats such as phishing, token theft, credential theft, and malware across both endpoints and servers. As a result, our cybersecurity monitoring capabilities have become stronger, and our overall ability to detect and respond to potential security incidents has improved. Review collected by and hosted on G2.com.