Vendor comparison · 2 companies
Leonardo provides cyber security and digital resilience offerings including managed SOC services, incident response, threat intelligence, investigation support systems and secure analytics platforms for governments, critical infrastructure operators and enterprises. UnderDefense sells UnderDefense MAXI, a security and compliance automation platform, and an MDR service in which security experts monitor, detect and respond to incidents. CISO Tribune files both under MDR and managed SOC. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.
Up to four companies side by side.
| LeonardoLeonardo provides cyber security and digital resilience offerings including managed SOC services, incident response, threat intelligence, investigation support systems and secure analytics platforms for governments, critical infrastructure operators and enterprises.leonardo.com | UnderDefenseUnderDefense sells UnderDefense MAXI, a security and compliance automation platform, and an MDR service in which security experts monitor, detect and respond to incidents.underdefense.com | |
|---|---|---|
| What it sells | ||
| What it sells |
|
|
| Categories | ||
| Categories | ||
| Headquarters | ||
| Headquarters | Not stated on its pages | Not stated on its pages |
| Founded | ||
| Founded | Not stated on its pages | Not stated on its pages |
| Ownership and funding | ||
| Ownership and funding | Not stated on its pages | Not stated on its pages |
| Named customers | ||
| Named customers | Not stated on its pages | Not stated on its pages |
| Recent news | ||
| Recent news |
| Not stated on its pages |
| G2 and Gartner Peer Insights | ||
| G2 and Gartner Peer Insights | ||
| Who it fits | ||
| Who it fits | Not written yet | UnderDefense MAXI integrates with a customer's security infrastructure, including SIEMs, firewalls and endpoint protection solutions. UnderDefense offers compliance templates to organizations working toward standards such as SOC2 and ISO 27001. UnderDefense MAXI provides executive-level reports for C-level readers. |
| Last verified | ||
| Last verified | October 12, 2026 | October 26, 2026 |
CISO Tribune files both Leonardo and UnderDefense under MDR and managed SOC as the primary category. Leonardo sells SOC Managed Services, described as round-the-clock detection and monitoring for national and international customers, along with incident handling and response services and Threat Intelligence that monitors the open web and dark web. Leonardo also sells cyber professional services for strategy and governance, Investigation Support Systems for government and law enforcement agencies, and Secure Analytics platforms for industrial and government organizations. Its registered head office is in Rome, Italy.
UnderDefense sells UnderDefense MAXI, a security and compliance automation platform that integrates with SIEMs, firewalls and endpoint protection solutions. It also sells an MDR service in which security experts monitor, detect and respond to incidents, and an Agentic AI SOC in which AI agents investigate each alert while analysts on shift 24/7 decide what happens next. UnderDefense further lists a cloud-based SIEM and a self-service CIS AWS Benchmark assessment. CISO Tribune files UnderDefense under compliance automation as well, and UnderDefense MAXI includes pre-built compliance templates for standards such as SOC2 and ISO 27001. UnderDefense serves organizations across five continents.
The two overlap in managed monitoring and response, but Leonardo's listed offerings add investigation systems for government and law enforcement agencies and analytics for industrial customers, while UnderDefense's add compliance automation and penetration testing and red team services in CISO Tribune's filing. On August 4, 2026, Leonardo US Cyber & Security Solutions introduced SignalTrace as the new name for its electronic signature detection solution, previously called EOC Plus. On March 12, 2026, Leonardo presented an update to its Industrial Plan to 2030 to the financial community.
Leonardo provides cyber security and digital resilience offerings including managed SOC services, incident response, threat intelligence, investigation support systems and secure analytics platforms for governments, critical infrastructure operators and enterprises. Its registered head office is in Rome, Italy.[1][2]
Leonardo on the recordUnderDefense sells UnderDefense MAXI, a security and compliance automation platform, and an MDR service in which security experts monitor, detect and respond to incidents. UnderDefense MAXI integrates with a customer's security infrastructure, including SIEMs, firewalls and endpoint protection solutions. UnderDefense MAXI natively monitors endpoints, networks, users and decoy beacons. UnderDefense serves organizations across five continents that represent multiple industries.[1][2]
UnderDefense MAXI provides ready-to-use playbooks, AI-powered alert enrichment and notifications through Slack, Jira or a preferred tool. UnderDefense MAXI uses automated actions with ready-to-use playbooks to isolate infected devices from the network. UnderDefense MAXI escalates notifications to employees through Slack or Teams to verify the authenticity of alerts. UnderDefense MAXI reports a customer's security status on any device via Slack or Teams. UnderDefense MAXI stores security data in a centralized repository with reporting on alerts, incidents and remediation actions.
UnderDefense Agentic AI SOC uses AI agents that investigate each alert, and analysts on shift 24/7 decide what happens next. UnderDefense MAXI gives access to on-demand security services, compliance support, threat intelligence and hunting. UnderDefense MAXI monitors the external attack surface, checks for compromised credentials and Dark Web mentions, and identifies at-risk users. UnderDefense MAXI identifies at-risk users for personalized security awareness training. UnderDefense MAXI scans the public-facing perimeter for threats.[4]
UnderDefense MAXI provides pre-built compliance templates for standards such as SOC2 and ISO 27001. UnderDefense MAXI provides pre-built policy templates, compliance automation and vCISO support. UnderDefense MAXI lets users select a specific framework, invite team members and share documents with auditors. UnderDefense experts guide customers through every step of the audit. UnderDefense represents the customer's company and communicates directly with the customer's auditor. UnderDefense can refer customers to a company that conducts audits. UnderDefense prepares the necessary documents and processes and educates customer staff on compliance. UnderDefense acts as an inner CISO that oversees documentation, employee training and processes. UnderDefense identifies potential risks and vulnerabilities and provides proactive measures to mitigate them. UnderDefense offers a Starter package option that starts at $499 per month. UnderDefense defines an asset in its pricing model as any host running a workstation or server operating system that has had data attributed to it within the last 30 days.[1][2][6]
UnderDefense offers a cloud-based SIEM that collects, analyzes and responds to security events across cloud environments. UnderDefense provides 24/7 monitoring and containment across endpoint, SaaS, identity and cloud. UnderDefense offers a self-service CIS AWS Benchmark assessment. UnderDefense, in cooperation with the Computer Emergency Response Team of Ukraine (CERT-UA), participated in a series of Incident Response cases.[1][2][5][7][8][9]
UnderDefense on the recordSpot a factual error? Request a correction.