What I found most valuable about Sophos NDR is the level of awareness it brings to the network. It doesn’t just look for obvious threats — it pays attention to behavior. Seeing how devices communicate internally helped us understand our own environment better, not just from a security angle but from an operational one as well. Review collected by and hosted on G2.com.

There isn’t much to dislike. The initial period requires some observation while the system learns normal traffic patterns, but that’s expected for any behavior-based solution. Once that learning phase is complete, alerts become meaningful and well-prioritized, requiring very little tuning. Review collected by and hosted on G2.com.