Sophos MDR Reviews & Product Details

Sophos MDR is a great product. I love how easy it is to manage and also I love how the licensing works for the product. The controls are very granular and can be setup differently for different users, groups and computers/devices. You can sync all of your active directory users and groups so that you have more control over which users cand which devices have more strict controls and it allows for website filtering and device control. Also when combined with Sophos Intercept-X it is one of the best solutions to monitor for potential Ransomware attacks. Review collected by and hosted on G2.com.

Logging into Sophos Central to manage Sophos MDR can be a bit slow and painful at first as there is so many features and options, site navigation can be a bit slow. Also the amount of options for implementation at first can be a bit daunting. Review collected by and hosted on G2.com.

Sophos 24/7 MDR was such a great move for us, we have over 300 users in almost every continent and a very small IT team. The level of comfort and security the MDR product has provided to us is immeasurable. With a centralised platform that is intuitive to use and simple to get how to guides for, it's a de-cluttered space that allows us to focus on the actual issues. The professional services team spend a good amount of time ensuring it is setup correctly and that you are supported as you stand up the products. Injecting our 365 defender logs into their datalake takes care of an additional platform we no longer have to check. Authorising the team to be able to take action when it is out of hours gives a level of trust that we are without doubt more secure with it than without it. I like that the same team of service leader and engineer are still working with us beyond the initial sales and implementation stages so we are not wasting time going over historical issues. Review collected by and hosted on G2.com.

While the professional services team do ensure your on-boarding is seamless, a little gap of maybe understanding our environment more would cause a few less false positives. We have global users that access our CRM platform via AVD and this is all hosted in Azure UK, if that had been taken into account at the start, there would be less tickets created for these users accessing from different geographical locations. This is a very minor problem that maybe more complex companies would maybe be larger for them. Review collected by and hosted on G2.com.

The most useful thing is to have a team of experts working in the background, detecting and responding to incidents before they become serious problems. The 24/7 analysis capability, detailed reports, and smooth communication with the Sophos team make a big difference. Review collected by and hosted on G2.com.

Overall, the experience has been very good, but if there's something I would improve, it would be that some reports could be presented in a simpler way so that non-technical people can also understand them without difficulty. Sometimes the amount of technical information can be overwhelming if one is not familiar with certain terms. Review collected by and hosted on G2.com.

What I like most about Sophos MDR is the 24/7 expert monitoring and rapid response to real threats. The service gives us peace of mind knowing that a skilled team is actively hunting, detecting, and neutralizing threats around the clock—even when our internal IT team is offline.

Their proactive threat hunting and clear, actionable guidance during incidents make a huge difference in minimizing downtime and reducing risk. The integration with Sophos Central also gives us a unified view of our security landscape, making it easier to track threats and overall activity.

In short, the combination of human expertise with powerful technology is what truly sets Sophos MDR apart. Review collected by and hosted on G2.com.

What I dislike most about Sophos MDR is that sometimes the volume of alerts can be overwhelming, especially during periods of heightened threat activity. While the team does a great job filtering and prioritizing, it can occasionally be challenging for our internal team to keep up with all notifications and follow-ups.

Additionally, there can be occasional delays in communication when detailed investigation is needed, which can slow down incident resolution in complex cases.

Finally, more customizable reporting options would be helpful to better align with specific organizational needs and compliance requirements. Review collected by and hosted on G2.com.

What I like best about Sophos MDR is the 24/7 expert-led threat monitoring and response, which ensures that potential security incidents are swiftly identified, investigated, and neutralized—even outside business hours. The combination of real-time alerts, detailed reporting, and human-led analysis provides a high level of confidence in our overall security posture. Additionally, the integration with our existing Sophos ecosystem makes deployment and management seamless. Review collected by and hosted on G2.com.

What I dislike about Sophos MDR is that while the threat detection and response are excellent, the alert notification system can sometimes be overly sensitive, generating a high volume of low-priority alerts that require filtering. Additionally, the initial onboarding process could be more streamlined, especially when integrating with third-party tools or existing SIEM solutions. Some advanced customization options are also limited unless you're on the higher-tier service. Review collected by and hosted on G2.com.

What I like most about MDR is that they are monitoring my equipment 24/7 on security issues. This helps me focus on internal matters and my users, and not only that, if a finding occurs, they notify me even by phone call depending on the criticality. Also, what I like is the easy use of the management console. Review collected by and hosted on G2.com.

It would only be a point that communication with the engineers is only in English. Review collected by and hosted on G2.com.

What I like most about Sophos MDR is its 24/7 monitoring with active response to real threats, which provides an additional layer of protection that goes beyond what we could cover internally. The Sophos analyst team acts quickly before incidents, communicates clearly, and collaborates directly in mitigation actions. Review collected by and hosted on G2.com.

What I like least about Sophos MDR is that some custom configurations and fine-tuning of alerts require additional support or intervention, which can slow down certain processes. Review collected by and hosted on G2.com.

The Sophos GUI. It's every easy for you to navigate through the site and find what you need. I really like how ease of use it is when it comes to troubleshooting vulnerable users or machines. You can easily find the problem due to advanced features from the integrations they implemented. I've had to reach out to the customer support several times in order to fix a compromised user or machine; they've been extremely helpful. I came into the organization with Sophos already deployed, so I'm not sure how easy it was to implement but maintaining it has been a breeze. Review collected by and hosted on G2.com.

I've had one issue where I had to submit a ticket on a user that was compromised, I ended up submitting the wrong location and it took a day for Sophos to change it to the right support. That day in-between could've had serious consequences with our environment. It happens but I learned the right team and how to submit the problem right away to protect ourselves. Review collected by and hosted on G2.com.

What I like best about Sophos MDR is the seamless integration into the entire Sophos security platform and the user-friendly operation. The MDR system works reliably in the background and provides advanced threat detection without requiring complex configurations. The combination of automated monitoring and easy handling makes it a valuable component of our security strategy. Review collected by and hosted on G2.com.

Honestly, it's hard for me to find anything negative about Sophos MDR. In the 6 years of use, there haven't been any significant problems or aspects that bothered me. The system runs stable and reliably meets all our requirements. Review collected by and hosted on G2.com.

I like that Sophos MDR provides round-the-clock monitoring by real experts who not only detect threats but also take action to stop them. It feels like having a full security operations center on my side, without the need to hire one in-house. What impressed me the most about Sophos MDR is how seamlessly it blends human expertise with technology-driven insights. Instead of only relying on automated alerts, their team actively investigates unusual activities, which eliminates the typical "alert fatigue" many IT teams face. It feels less like outsourcing a service and more like extending your security team with highly skilled professionals. Review collected by and hosted on G2.com.

Honestly, there’s very little to dislike about Sophos MDR. If I had to mention one thing, it would be that sometimes the detailed reports can be very technical for non-IT stakeholders. However, this is a minor point, as the team always provides clear explanations and guidance Review collected by and hosted on G2.com.