CISO Tribune

Vendor comparison · 2 companies

Tenfold Security vs UnderDefense

Tenfold Security provides Active Penetration Testing, Real-Time Risk Assessment, Managed SIEM and CrowdStrike services. UnderDefense sells UnderDefense MAXI, a security and compliance automation platform, and an MDR service in which security experts monitor, detect and respond to incidents. CISO Tribune files both under MDR and managed SOC and Penetration testing and red team services. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Tenfold Security
  • UnderDefense
Tenfold Security vs UnderDefense: Products, Customers and Funding Compared
Tenfold SecurityTenfold Security provides Active Penetration Testing, Real-Time Risk Assessment, Managed SIEM and CrowdStrike services.tenfoldsecurity.comUnderDefenseUnderDefense sells UnderDefense MAXI, a security and compliance automation platform, and an MDR service in which security experts monitor, detect and respond to incidents.underdefense.com
What it sells
  • Real-Time Risk Assessment[3]Automates compliance with standards such as HIPAA, PCI and SOX.
  • UnderDefense MAXI[1][2][3][5][6]A security and compliance automation platform. UnderDefense MAXI integrates with SIEMs, firewalls and endpoint protection solutions.
  • UnderDefense Agentic AI SOC[4]AI agents investigate each alert. Analysts on shift 24/7 decide what happens next.
  • MDR[1][2][6]Security experts monitor, detect and respond to incidents.
  • Cloud-based SIEM[2]A cloud-based SIEM that collects, analyzes and responds to security events.
  • CIS AWS Benchmark assessment[8]A self-service assessment of AWS security.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[10]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetUnderDefense MAXI integrates with a customer's security infrastructure, including SIEMs, firewalls and endpoint protection solutions. UnderDefense offers compliance templates to organizations working toward standards such as SOC2 and ISO 27001. UnderDefense MAXI provides executive-level reports for C-level readers.
Last verified
October 21, 2026October 26, 2026

Where they overlap

  • MDR and managed SOC is the primary category of both Tenfold Security and UnderDefense; both are also filed under Penetration testing and red team services.

Where they differ, field by field

  • Tenfold Security is also filed under SIEM and Security consulting and advisory. UnderDefense is also filed under Compliance automation and SOAR and security automation.
  • Tenfold Security lists Real-Time Risk Assessment. UnderDefense lists UnderDefense MAXI, UnderDefense Agentic AI SOC, MDR, Cloud-based SIEM and CIS AWS Benchmark assessment.

How they differ

CISO Tribune files both Tenfold Security and UnderDefense under MDR and managed SOC as the primary category, and both also appear under penetration testing and red team services. Tenfold Security provides Active Penetration Testing, Real-Time Risk Assessment, Managed SIEM and CrowdStrike services. Its Managed SIEM is cloud-native and includes two years of secure log storage. Its Real-Time Risk Assessment automates compliance with standards such as HIPAA, PCI and SOX.

UnderDefense sells UnderDefense MAXI, a security and compliance automation platform, along with an MDR service in which security experts monitor, detect and respond to incidents. UnderDefense MAXI integrates with SIEMs, firewalls and endpoint protection solutions, and provides pre-built compliance templates for standards such as SOC2 and ISO 27001. UnderDefense also sells an Agentic AI SOC, in which AI agents investigate each alert and analysts on shift 24/7 decide what happens next. It also sells a cloud-based SIEM and a self-service CIS AWS Benchmark assessment. Both companies sell a SIEM offering, while the compliance standards named for Tenfold Security (HIPAA, PCI and SOX) differ from those named for UnderDefense (SOC2 and ISO 27001).

On customers, UnderDefense says it serves organizations across five continents in multiple industries. It has also taken part in Incident Response cases with the Computer Emergency Response Team of Ukraine (CERT-UA). Tenfold Security describes a Midwest public university as a client, where it was engaged on the day of a full network failure. In that case Tenfold Security deployed Sentinel One and Velociraptor across all university devices, and five days after engagement all devices were clean and the network was fully restored.

What it sells: Tenfold Security

What Real-Time Risk Assessment does[3]
Tenfold Security's Real-Time Risk Assessment automates compliance with standards such as HIPAA, PCI and SOX. Continuous monitoring provides instant updates and alerts.

What it sells: UnderDefense

What UnderDefense MAXI does[1][2][3][5][6]
UnderDefense MAXI natively monitors endpoints, networks, users and decoy beacons. UnderDefense MAXI provides ready-to-use playbooks, AI-powered alert enrichment and notifications through Slack, Jira or a preferred tool. UnderDefense MAXI provides pre-built compliance templates for standards such as SOC2 and ISO 27001.
What UnderDefense Agentic AI SOC does[4]
UnderDefense Agentic AI SOC uses AI agents that investigate each alert. Analysts on shift 24/7 decide what happens next.
What CIS AWS Benchmark assessment does[8]
UnderDefense offers a self-service CIS AWS Benchmark assessment. The assessment covers evaluating the maturity of cloud security controls, identifying misconfigurations, providing detailed mitigation instructions and giving a summary table with a final CVSS v3.0 score.

Questions about Tenfold Security and UnderDefense

What do Tenfold Security and UnderDefense sell?
Tenfold Security sells Real-Time Risk Assessment. UnderDefense sells UnderDefense MAXI, UnderDefense Agentic AI SOC, MDR, Cloud-based SIEM and CIS AWS Benchmark assessment.
Are Tenfold Security and UnderDefense in the same category?
Yes. MDR and managed SOC is the primary category of both on CISO Tribune.
Who are Tenfold Security and UnderDefense sold to?
UnderDefense MAXI integrates with a customer's security infrastructure, including SIEMs, firewalls and endpoint protection solutions.

About Tenfold Security

Tenfold Security provides Active Penetration Testing, Real-Time Risk Assessment, Managed SIEM and CrowdStrike services. Tenfold Security works with organizations on cybersecurity challenges that range from ransomware attacks and security gaps to ongoing risk management. The Tenfold team is made up of security professionals and security-minded business professionals who want to provide a service that protects the vulnerable, in business and community.[1][3][4][5]

Aaron Weissenfluh is passionate about securing SMBs with practical security solutions. Aaron Weissenfluh, COO of Tenfold Security, has served as a CISO for a major stock exchange.[6]

Tenfold Security's Active Penetration Testing Services simulate real-world attacks to test a customer's detection and response capabilities. Tenfold Security's Active Penetration Testing identifies and rates vulnerabilities and provides real-time mitigation. Tenfold Security's Active Penetration Testing includes continuous monitoring and analyses.[3]

Tenfold Security's Real-Time Risk Assessment automates compliance with standards such as HIPAA, PCI and SOX.[3]

Tenfold Security's Managed SIEM gives 24/7 visibility into what is happening across a customer's systems and applications. Tenfold Security's Managed SIEM collects and monitors security logs in real time and alerts the Tenfold Security team to suspicious activity before it becomes a business-impacting incident. Tenfold Security's Managed SIEM is a cloud-native solution that integrates with existing tools. Tenfold Security's Managed SIEM supports compliance requirements and includes two years of secure log storage.[3]

Tenfold Security's CrowdStrike services deliver cloud-native endpoint protection, AI-powered detection and continuous monitoring. Tenfold Security's CrowdStrike services include a dedicated SOC that provides around-the-clock visibility. Tenfold Security's CrowdStrike services include access to the full CrowdStrike product suite.[1][3]

A mid-size public university in the Midwest, serving thousands of students across multiple campuses, was a Tenfold Security client. Tenfold Security was engaged on the day of the university's full network failure. The response to the university's ransomware attack used a parallel workstream model in which different response teams worked simultaneously on network analysis, device triage, forensics and communication. Tenfold Security deployed Sentinel One and Velociraptor across all university devices. Tenfold Security used Sentinel One for real-time endpoint detection and response and Velociraptor for rapid forensic collection and hunting for persistence mechanisms. Tenfold Security's response included identifying and closing the open RDP port and auditing all vendor access paths. Tenfold Security's response included disabling compromised accounts and resetting all credentials with enforced MFA. Tenfold Security's response included assessing which data was recoverable and which was lost through the vendor breach. Tenfold Security's response included coordinating with cyber insurance to document the incident and manage communications. Tenfold Security's response included establishing an internal communication protocol to stop the spread of misinformation. Tenfold Security built the response around the university's infrastructure, vendor relationships and operational priorities. Five days after engagement, all devices were clean and the network was fully restored.

The university now operates with continuous managed detection and response, vendor management and tested incident response procedures.

Tenfold Security on the record

Sources

Tenfold Security full record

  1. [1]Empowering Businesses with Enterprise-Grade Cybersecurity | About Tenfold SecurityTenfold Security · undated page, accessed October 21, 2026 · Tier A
  2. [2]tenfoldsecurity.comTenfold Security · tenfoldsecurity.com · undated page, accessed October 21, 2026 · Tier A
  3. [3]Our Services | Tenfold SecurityTenfold Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]Case StudyTenfold Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]Enterprise-Grade Security Solutions for Small & Midsize Businesses | Tenfold SecurityTenfold Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]The CEO of Cybersecurity (And Why Most Companies Still Get It Wrong)Tenfold Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]Case Study: University Recovery in 5 Days | Tenfold SecurityTenfold Security · published July 23, 2026 · Tier A

UnderDefense full record

  1. [1]underdefense.comUnderDefense · underdefense.com · undated page, accessed October 26, 2026 · Tier A
  2. [2]Compliance PricingUnderDefense · undated page, accessed November 10, 2026 · Tier A
  3. [3]Agentic AI SOC & Compliance Automation Platform | UnderDefenseUnderDefense · undated page, accessed November 10, 2026 · Tier A
  4. [4]Elastic Cloud Pricing 2026: Serverless, Hosted, and SIEMUnderDefense · undated page, accessed November 10, 2026 · Tier A
  5. [5]Cloudflare Pricing 2026: WAF, Zero Trust, and EnterpriseUnderDefense · undated page, accessed November 10, 2026 · Tier A
  6. [6]Palo Alto Networks Pricing 2026: Firewalls, SASE, and XDRUnderDefense · undated page, accessed November 10, 2026 · Tier A
  7. [7]2025 MXDR Pricing Guide: Choosing the Right MXDR providerUnderDefense · undated page, accessed November 10, 2026 · Tier A
  8. [8]Episode 4: Cyber Resilience 201 — AWS Cloud Security - UnderDefenseUnderDefense · undated page, accessed November 10, 2026 · Tier A
  9. [9]E-Mail Under Attack - UnderDefenseUnderDefense · undated page, accessed November 10, 2026 · Tier A
  10. [10]UnderDefense MAXI Reviews & Product DetailsG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.