Arctic Wolf Managed Detection and Response vs. eSentire

[Artic Wolf SOC-as-a-Service is] great if you don't have a large team nor the time to look at all the systems in your network. They monitor 24x7x365 taking that burden away from a reduced IT team.

Incentivized

We need 7x24x365 network monitoring and proactive protection. eSentire can thwart an active attack which is the most critical part of the service. Unless you have your own SOC and have the ability to address potential breaches in your environment, you need a service like this. Most companies can't afford to run their own SOC.

Incentivized

• Monitoring 365 logins
• Monitoring Windows processes
• Active Directory monitoring

Incentivized

• 24x7 monitoring.
• Provides co-managed solution (in most cases).

Incentivized

• Too many independent dashboards to look at (they are working on consolidating)

Incentivized

• Proactively provide more detailed explanation of alerts without the need for a request for more info

Incentivized

Their portal is easy to use and they raise important incidents to us via email or phone. They have been good with us customizing the way we want to get important information. Sometimes there is a delay between when we have resolved and issue and it is updated on the portal.

Incentivized

The biggest issue with Crowdstrike was their sales staff - they were not very responsive. AWN does frequent check-ins with us, which helps communication. We have not had any issues with the service creating downtime. Whereas Crowdstrike had an issue in July 2024 that created many problems. This combined with the sales issues made it easy for us to go back to AWN.

Incentivized

eSentire is the best product in the MDR space for the following reasons: - They have been around for ~20 years (mature). - They have a proven track record of success. - They have an ecosystem of security analysts at all levels of comptetncy. - They have an excellent retention program that's designed to keep talent at eSentire.

Incentivized

• Stopped unauthorized 365 access on user account
• Pointed out malicious file activity on end point
• Alert sent when a domain admin account was enabled

Incentivized

• Positive ROI due to minimal security staff expenses.
• Negative ROI due to some security events not being actioned.

Incentivized