CISO Tribune

Vendor comparison · 2 companies

Blackpoint Cyber vs UnderDefense

Blackpoint Cyber sells managed detection and response to organizations of all sizes around the world, along with the CompassOne platform. UnderDefense sells UnderDefense MAXI, a security and compliance automation platform, and an MDR service in which security experts monitor, detect and respond to incidents. CISO Tribune files both under MDR and managed SOC. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Blackpoint Cyber
  • UnderDefense
Blackpoint Cyber vs UnderDefense: Products, Customers and Funding Compared
Blackpoint CyberBlackpoint Cyber sells managed detection and response to organizations of all sizes around the world, along with the CompassOne platform.blackpointcyber.comUnderDefenseUnderDefense sells UnderDefense MAXI, a security and compliance automation platform, and an MDR service in which security experts monitor, detect and respond to incidents.underdefense.com
What it sells
  • CompassOne[1][4][5]A platform that consolidates siloed tools and signals, uniting prevention and detection.
  • Attack Surface Management[5]Unifies asset, vulnerability, and security event data into a single view across client environments.
  • UnderDefense MAXI[1][2][3][5][6]A security and compliance automation platform. UnderDefense MAXI integrates with SIEMs, firewalls and endpoint protection solutions.
  • UnderDefense Agentic AI SOC[4]AI agents investigate each alert. Analysts on shift 24/7 decide what happens next.
  • MDR[1][2][6]Security experts monitor, detect and respond to incidents.
  • Cloud-based SIEM[2]A cloud-based SIEM that collects, analyzes and responds to security events.
  • CIS AWS Benchmark assessment[8]A self-service assessment of AWS security.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[6]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[10]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Blackpoint Cyber states that it provides managed detection and response to organizations of all sizes around the world. Blackpoint Cyber describes businesses as under pressure from tool sprawl and limited resources. Its attack surface management covers on-premises, cloud, and hybrid environments.UnderDefense MAXI integrates with a customer's security infrastructure, including SIEMs, firewalls and endpoint protection solutions. UnderDefense offers compliance templates to organizations working toward standards such as SOC2 and ISO 27001. UnderDefense MAXI provides executive-level reports for C-level readers.
Last verified
November 2, 2026October 26, 2026

Where they overlap

  • MDR and managed SOC is the primary category of both Blackpoint Cyber and UnderDefense.

Where they differ, field by field

  • Blackpoint Cyber is also filed under Identity threat detection and response, SIEM and Vulnerability management. UnderDefense is also filed under Penetration testing and red team services, Compliance automation and SOAR and security automation.
  • Blackpoint Cyber lists CompassOne and Attack Surface Management. UnderDefense lists UnderDefense MAXI, UnderDefense Agentic AI SOC, MDR, Cloud-based SIEM and CIS AWS Benchmark assessment.

How they differ

CISO Tribune files both Blackpoint Cyber and UnderDefense under MDR and managed SOC as their primary category. Blackpoint Cyber sells managed detection and response along with the CompassOne platform, and it offers a 24/7 human-led, AI-accelerated SOC. UnderDefense sells an MDR service in which security experts monitor, detect and respond to incidents, plus UnderDefense MAXI, a security and compliance automation platform.

Blackpoint Cyber also sells Attack Surface Management, which unifies asset, vulnerability, and security event data across client environments and covers on-premises, cloud, and hybrid environments. CISO Tribune files Blackpoint Cyber additionally under Identity threat detection and response, SIEM, and Vulnerability management. UnderDefense MAXI provides pre-built compliance templates for standards such as SOC2 and ISO 27001, and it integrates with SIEMs, firewalls and endpoint protection solutions. UnderDefense also sells an Agentic AI SOC in which AI agents investigate each alert and analysts on shift 24/7 decide what happens next, a cloud-based SIEM, and a self-service CIS AWS Benchmark assessment. CISO Tribune files UnderDefense additionally under Penetration testing and red team services, Compliance automation, and SOAR and security automation.

Blackpoint Cyber states that it provides managed detection and response to organizations of all sizes around the world. UnderDefense states that it serves organizations across five continents that represent multiple industries. UnderDefense also reports that, in cooperation with the Computer Emergency Response Team of Ukraine (CERT-UA), it participated in a series of Incident Response cases.

What it sells: Blackpoint Cyber

What CompassOne does[1][4][5]
CompassOne is a platform offered to businesses. CompassOne covers how assets relate to one another and how they contribute to risk, with contextual relationships to findings such as vulnerabilities, weaknesses, and security events.
What Attack Surface Management does[5]
Blackpoint Cyber attack surface management unifies asset, vulnerability, and security event data across client environments, from endpoints to cloud to identity. It brings together asset discovery, threat detection, vulnerabilities, and posture management into one platform. It covers on-premises, cloud, and hybrid environments and includes an asset inventory of devices, identities, users, and applications.

What it sells: UnderDefense

What UnderDefense MAXI does[1][2][3][5][6]
UnderDefense MAXI natively monitors endpoints, networks, users and decoy beacons. UnderDefense MAXI provides ready-to-use playbooks, AI-powered alert enrichment and notifications through Slack, Jira or a preferred tool. UnderDefense MAXI provides pre-built compliance templates for standards such as SOC2 and ISO 27001.
What UnderDefense Agentic AI SOC does[4]
UnderDefense Agentic AI SOC uses AI agents that investigate each alert. Analysts on shift 24/7 decide what happens next.
What CIS AWS Benchmark assessment does[8]
UnderDefense offers a self-service CIS AWS Benchmark assessment. The assessment covers evaluating the maturity of cloud security controls, identifying misconfigurations, providing detailed mitigation instructions and giving a summary table with a final CVSS v3.0 score.

Questions about Blackpoint Cyber and UnderDefense

What do Blackpoint Cyber and UnderDefense sell?
Blackpoint Cyber sells CompassOne and Attack Surface Management. UnderDefense sells UnderDefense MAXI, UnderDefense Agentic AI SOC, MDR, Cloud-based SIEM and CIS AWS Benchmark assessment.
Are Blackpoint Cyber and UnderDefense in the same category?
Yes. MDR and managed SOC is the primary category of both on CISO Tribune.
Who are Blackpoint Cyber and UnderDefense sold to?
Blackpoint Cyber states that it provides managed detection and response to organizations of all sizes around the world. UnderDefense MAXI integrates with a customer's security infrastructure, including SIEMs, firewalls and endpoint protection solutions.

About Blackpoint Cyber

Blackpoint Cyber sells managed detection and response to organizations of all sizes around the world, along with the CompassOne platform. Blackpoint Cyber offers a 24/7 human-led, AI-accelerated SOC. Blackpoint Cyber describes businesses as under constant pressure to serve clients, juggle tool sprawl, and close security gaps with limited resources. Blackpoint Cyber states that alert-only MDR adds noise instead of relief and leaves attackers room to spread.[3][4]

CompassOne is a platform offered to businesses. Blackpoint Cyber says its platform consolidates siloed tools and signals, uniting prevention and detection. CompassOne covers how assets relate to one another and how they contribute to risk, with contextual relationships to findings such as vulnerabilities, weaknesses, and security events.[4][5]

Blackpoint Cyber offers attack surface management that unifies asset, vulnerability, and security event data into a single, contextualized view across client environments, from endpoints to cloud to identity. Blackpoint Cyber brings together asset discovery, threat detection, vulnerabilities, and posture management into one platform. Blackpoint Cyber attack surface management covers on-premises, cloud, and hybrid environments. Blackpoint Cyber attack surface management builds and updates the relationships between assets, threats, and vulnerabilities across the entire attack surface.[1][2][5]

Blackpoint Cyber attack surface management integrates with EDRs, Microsoft 365, Google Workspace, identity providers, firewalls, and vulnerability scanners, to automate asset discovery, threat detection, and risk analysis. Blackpoint Cyber attack surface management includes an asset inventory of devices, identities, users, and applications in a unified view. Blackpoint Cyber attack surface management extends visibility into cloud platforms to reveal misconfigurations, policy drift, insecure access policies, and over-privileged users, all monitored in real time.[2][5]

Blackpoint Cyber attack surface management continuously monitors assets and alerts on suspicious behavior, enabling Blackpoint’s 24/7 SOC to detect emerging threats. Blackpoint Cyber integrations centralize threat detection, response, and monitoring in a unified platform. Blackpoint Cyber describes attack surface monitoring as continuously tracking assets and exposures for changes and emerging threats.[5]

Blackpoint Cyber defines attack surface management as the continuous process of discovering, monitoring, and reducing every point where an attacker could gain access, across endpoint, cloud, identity, and network. Blackpoint Cyber describes cyber asset attack surface management, or CAASM, as unifying data from existing tools into a complete, continuously updated view of all assets and their risks.[5]

Blackpoint Cyber states its mission as providing 24/7/365 managed detection and response to organizations of all sizes around the world. Blackpoint Cyber states that all full-time roles at Blackpoint include participation in one of its employee equity programs, with plan details varying by country of employment.[1][2][3][5]

Blackpoint Cyber on the record

Sources

Blackpoint Cyber full record

  1. [1]Blackpoint cyber unveils new identity threat ai soc agentBlackpoint Cyber · blackpointcyber.com · published July 8, 2026 · Tier A
  2. [2]blackpointcyber.comBlackpoint Cyber · blackpointcyber.com · undated page, accessed November 2, 2026 · Tier A
  3. [3]Careers - Blackpoint CyberBlackpoint Cyber · undated page, accessed November 10, 2026 · Tier A
  4. [4]Managed Detection and Response (MDR) Platform - Blackpoint CyberBlackpoint Cyber · undated page, accessed November 10, 2026 · Tier A
  5. [5]Attack Surface Management Solutions - Blackpoint CyberBlackpoint Cyber · undated page, accessed November 10, 2026 · Tier A
  6. [6]Blackpoint Cyber Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

UnderDefense full record

  1. [1]underdefense.comUnderDefense · underdefense.com · undated page, accessed October 26, 2026 · Tier A
  2. [2]Compliance PricingUnderDefense · undated page, accessed November 10, 2026 · Tier A
  3. [3]Agentic AI SOC & Compliance Automation Platform | UnderDefenseUnderDefense · undated page, accessed November 10, 2026 · Tier A
  4. [4]Elastic Cloud Pricing 2026: Serverless, Hosted, and SIEMUnderDefense · undated page, accessed November 10, 2026 · Tier A
  5. [5]Cloudflare Pricing 2026: WAF, Zero Trust, and EnterpriseUnderDefense · undated page, accessed November 10, 2026 · Tier A
  6. [6]Palo Alto Networks Pricing 2026: Firewalls, SASE, and XDRUnderDefense · undated page, accessed November 10, 2026 · Tier A
  7. [7]2025 MXDR Pricing Guide: Choosing the Right MXDR providerUnderDefense · undated page, accessed November 10, 2026 · Tier A
  8. [8]Episode 4: Cyber Resilience 201 — AWS Cloud Security - UnderDefenseUnderDefense · undated page, accessed November 10, 2026 · Tier A
  9. [9]E-Mail Under Attack - UnderDefenseUnderDefense · undated page, accessed November 10, 2026 · Tier A
  10. [10]UnderDefense MAXI Reviews & Product DetailsG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.