Detection & Response

Pick the first of two products.

Open a name for its full profile

Microsoft Sentinel
Capabilities only
Microsoft · Commercial · 7 capabilities in this domain
Select
Splunk Enterprise Security
Capabilities only
Splunk · Commercial · 6 capabilities in this domain
Select
Google Security Operations
Capabilities only
Google · Commercial · 5 capabilities in this domain
Select
CrowdStrike Falcon Next-Gen SIEM
Capabilities only
CrowdStrike · Commercial · 4 capabilities in this domain
Select
Elastic Security
Capabilities only
Elastic · Freemium · 4 capabilities in this domain
Select
Microsoft Defender XDR
Capabilities only
Microsoft · Commercial · 4 capabilities in this domain
Select
CrowdStrike Falcon Complete
Capabilities only
CrowdStrike · Commercial · 3 capabilities in this domain
Select
Panther
Capabilities only
Panther Labs · Commercial · 3 capabilities in this domain
Select
Microsoft Defender Experts for XDR
Capabilities only
Microsoft · Commercial · 2 capabilities in this domain
Select
Tines
Capabilities only
Tines · Freemium · 2 capabilities in this domain
Select
Wazuh
Capabilities only
Wazuh · Open Source · 2 capabilities in this domain
Select
Sigma
Capabilities only
SigmaHQ · Open Source · 1 capabilities in this domain
Select

In Detection & Response

Microsoft Defender Experts for XDR

Microsoft · Detection & Response

CommercialCompany

Defender Experts for XDR adds 24x7 expert investigation and response guidance to Defender XDR, with managed hunting and optional response actions.

What it does2 capabilities · 1 at full coverage

1 of 2 at full coverage.

What it proves5 controls across 1 framework

Satisfied through its capabilities, not claimed by the vendor.

What it stops3 techniques

3 techniques countered, 3 of them common

Where it runs1 phase · 1 way to deploy

Capabilities per lifecycle phase

How it is delivered

Managed service

What it unlocks1 activity · reaches level 4

Program activities its capabilities support, reaching level 4. Supporting an activity is not completing it.

Level 4

How it holds up

Not assessed yet: no strengths, limits or evaluation scores. 47 of 340 products carry an assessment and 29 are scored.

What it costsManaged service subscription

LicensingManaged service subscription

Priced perendpoint or user per year including service

BillingSubscription

Scales withCovered endpoints or users plus service tier

Total cost

Offsets analyst headcount; compare against fully loaded SOC staffing cost.

What it takes to runStaffing, standing it up, and what it promises

DeliveryCo-Managed

Coverage24x7

What it works with

No supported language, standard, integration or named feature recorded.

What else to look at7 siblings

Same family

What backs this up

No measurement, incident or pipeline using it.

Gantry 7.1.0 · OFF.12 · OFF.13