CISO Tribune

Vendor comparison · 2 companies

Expel vs Kyndryl

Expel sells managed detection and response (MDR) delivered through its Workbench platform, with 24x7 human analysts working in the security tools a customer already has. Kyndryl provides mission-critical enterprise technology services, offering advisory, implementation and managed service capabilities. CISO Tribune files both under MDR and managed SOC. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Expel
  • Kyndryl
Expel vs Kyndryl: Products, Customers and Funding Compared
ExpelExpel sells managed detection and response (MDR) delivered through its Workbench platform, with 24x7 human analysts working in the security tools a customer already has.expel.comKyndrylKyndryl provides mission-critical enterprise technology services, offering advisory, implementation and managed service capabilities.kyndryl.com
What it sells
  • Expel MDR[5][7]A managed detection and response service that works with the security tools a customer already has.
  • Ruxie[3][5]Expel's AI and automation engine used in its MDR service.
  • Kyndryl Consult[5][7]Technology consulting from digital transformation strategy to implementation.
  • Kyndryl Bridge[5][7]An open integration platform for IT environments.
Categories
Headquarters
Not stated on its pagesNew York, United States[1]
Founded
Not stated on its pages2021
Ownership and funding
Not stated on its pagesPublic (NYSE: KD)[2][5][6][7]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • June 15, 2026Kyndryl launched a European Principal Markets organization and appointed David Soto as its President.[8]
G2 and Gartner Peer Insights
  • G2: listed, seen November 3, 2026[4]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[6]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetFrom its own pages, Kyndryl sells mainly to enterprises with complex technology environments. The company says it helps customers in every industry. Kyndryl Consult is aimed at organizations pursuing digital transformation. Kyndryl Bridge is described as giving enterprises visibility across their technology estates.
Last verified
September 27, 2026November 9, 2026

Where they overlap

  • MDR and managed SOC is the primary category of both Expel and Kyndryl.

Where they differ, field by field

  • Kyndryl is also filed under Incident response and forensics and Security consulting and advisory.
  • Expel lists Expel MDR and Ruxie. Kyndryl lists Kyndryl Consult and Kyndryl Bridge.
  • Kyndryl is headquartered in New York, United States.
  • Kyndryl was founded in 2021.
  • Kyndryl is a public company listed on NYSE as KD.

How they differ

Expel sells Expel MDR, a managed detection and response service with 24x7 analysts who work in the security tools a customer already has. Expel also sells Ruxie, its AI and automation engine, and offers email threat detection and response. Expel states a 14-minute mean time to remediate for its MDR service.

Kyndryl describes itself as a global infrastructure consulting, implementation and managed services provider. CISO Tribune files Kyndryl under incident response and forensics and security consulting and advisory as well. Kyndryl sells Kyndryl Consult, technology consulting from digital transformation strategy to implementation, and Kyndryl Bridge, an open integration platform for IT environments. Kyndryl says it serves thousands of customers in more than 60 countries. The overlap is in managed security services, while Expel's offering centers on detection and response and Kyndryl's spans broader IT consulting and operations.

Kyndryl is headquartered in New York, United States, was founded in 2021, and is listed on NYSE as KD. Expel names Microsoft, AWS, Google Cloud, CrowdStrike, Okta and Wiz among its integrations. Kyndryl is an AWS partner. On June 15, 2026, Kyndryl launched a European Principal Markets organization, and it has opened a new Cyber Defense Operations Center in Paris.

What it sells: Expel

What Expel MDR does[5][7]
Expel MDR provides 24x7 SOC monitoring, with analysts who investigate and respond. Expel says it connects to an existing stack and correlates threats across endpoint, identity, cloud, network, SaaS and more. Expel states a 14-minute mean time to remediate.
What Ruxie does[3][5]
Expel says Ruxie gathers evidence, enriches alerts and matches patterns in seconds. Expel analysts then investigate and make the critical calls.

What it sells: Kyndryl

What Kyndryl Consult does[5][7]
Kyndryl Consult provides outcome-driven technology consulting. Kyndryl Consult covers digital transformation strategy, enterprise architecture and organizational change management, through to deep solutioning and implementation. Kyndryl Consult has a global network of technology strategy and implementation consultants.
What Kyndryl Bridge does[5][7]
Kyndryl Bridge is an open integration platform designed to help orchestrate and innovate across an IT environment. Kyndryl Bridge gives enterprises visibility across their technology estates. Kyndryl describes Kyndryl Bridge as AI-powered.

Questions about Expel and Kyndryl

What do Expel and Kyndryl sell?
Expel sells Expel MDR and Ruxie. Kyndryl sells Kyndryl Consult and Kyndryl Bridge.
Are Expel and Kyndryl in the same category?
Yes. MDR and managed SOC is the primary category of both on CISO Tribune.
Where are Expel and Kyndryl headquartered?
Kyndryl is headquartered in New York, United States.
When were Expel and Kyndryl founded?
Kyndryl was founded in 2021.
Who owns Expel and Kyndryl?
Kyndryl is a public company listed on NYSE as KD.
Who are Expel and Kyndryl sold to?
From its own pages, Kyndryl sells mainly to enterprises with complex technology environments.
What have Expel and Kyndryl announced recently?
June 15, 2026: Kyndryl launched a European Principal Markets organization and appointed David Soto as its President.

About Expel

Expel sells managed detection and response (MDR) delivered through its Workbench platform, with 24x7 human analysts working in the security tools a customer already has. Expel says its service is built so that technology makes it fast and humans make it accurate.[5]

Expel describes the service as managed detection and response with analysts who can be reached directly over Slack or Teams. Expel says customers connect Workbench to their existing stack, and Expel then correlates threats across endpoint, identity, cloud, network, SaaS and more. Expel says no agents need to be deployed and no rip-and-replace is required.[5]

Ruxie is the name Expel gives its AI and automation engine. Expel says Ruxie gathers evidence, enriches alerts and matches patterns so that Expel analysts can investigate and make the critical calls. Expel states a 14-minute mean time to remediate for its MDR service.[5]

Expel Workbench is the platform through which customers see Expel's work. Expel says customers can see every investigation and response in real time inside Workbench.[5]

Expel says its MDR covers cloud, endpoint, identity, network, SaaS, email and more, across more than 160 technology integrations. Expel names Microsoft, AWS, Google Cloud, CrowdStrike, Okta and Wiz among those integrations.[5][10]

Expel also offers email threat detection and response, in which Expel says it monitors the email environment 24x7. Expel says this works alongside Proofpoint, Mimecast, Abnormal Security and Sublime. Expel also describes MDR coverage of the AI attack surface, covering attacker use of AI, employee misuse of AI tools and attacks on customer-built AI systems, with detections mapped to MITRE ATLAS.[6][7]

Expel was started by practitioners. Dave Merkel is co-founder and Chief Executive Officer, Justin Bajko is a co-founder and Chief Strategy Officer, and Yanek Korff is a co-founder and Chief Operating Officer. Greg Notch is Chief Technology Officer.[8]

2. Expel says Workbench infrastructure runs on GCP and AWS in the U.S, and that alert data is retained up to 15 months, configurable per contract.[1][2][5][9]

Expel on the record

Sources

Expel full record

  1. [1]Workbench operations platformExpel · expel.com · published August 5, 2026 · Tier A
  2. [2]Expel announces 20 million in series b fundingExpel · expel.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Leading managed detection and response (MDR) provider | ExpelExpel · undated page, accessed October 24, 2026 · Tier A
  4. [4]Expel Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 24, 2026 · Tier C
  5. [5]Managed Detection and Response Services | Expel MDRExpel · undated page, accessed November 3, 2026 · Tier A
  6. [6]Email threat detection | ExpelExpel · undated page, accessed November 3, 2026 · Tier A
  7. [7]AI attack surface coverage | ExpelExpel · undated page, accessed November 3, 2026 · Tier A
  8. [8]Company | ExpelExpel · undated page, accessed November 3, 2026 · Tier A
  9. [9]Security and compliance support from your MDR | ExpelExpel · undated page, accessed November 3, 2026 · Tier A
  10. [10]Managed Security Solutions | ExpelExpel · undated page, accessed November 3, 2026 · Tier A

Kyndryl full record

  1. [1]2021 04 12 IBMs Independent Managed Infrastructure Services Business to be Named KyndrylIBM · newsroom.ibm.com · published April 12, 2021 · Tier A
  2. [2]investors.kyndryl.comKyndryl Holdings, Inc. · investors.kyndryl.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Cyber resilienceKyndryl · kyndryl.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]2021 11 04 Kyndryl Completes Separation from IBMKyndryl · kyndryl.com · published November 4, 2021 · Tier A
  5. [5]Kyndryl United StatesKyndryl · undated page, accessed October 26, 2026 · Tier A
  6. [6]Kyndryl, Inc. Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 26, 2026 · Tier C
  7. [7]Investor Relations | Kyndryl Holdings, Inc.Kyndryl Holdings, Inc. · undated page, accessed November 4, 2026 · Tier A
  8. [8]Kyndryl launches European Principal Markets and appoints David Soto as President to strengthen its leadership in EuropeKyndryl · published June 15, 2026 · Tier A
  9. [9]Kyndryl launches new agentic AI services to support agentic-driven workforce strategy development and customer experienceKyndryl · published November 13, 2025 · Tier A

Spot a factual error? Request a correction.