Security operations

MDR and managed SOC

Services in which a provider's analysts monitor a customer's environment around the clock and respond to threats.

17 vendors · alphabetical, never ranked

• Arctic WolfArctic Wolf sells managed detection and response along with exposure management, incident response, security awareness training and threat intelligence services.Ownership not established · primary category
• Barracuda NetworksBarracuda Networks sells the BarracudaONE cybersecurity platform, covering email protection, application protection, network security and data protection, along with a managed XDR service.Owned by KKR since 2022
• BitdefenderBitdefender sells GravityZone, a platform that consolidates endpoint protection, EDR, XDR and managed detection and response for organizations with lean IT and security teams.Ownership not established
• Critical StartCritical Start sells the CORR platform, a managed detection and response offering that gives customers visibility into every alert, investigation and response action, combining AI-assisted triage with human-validated verdicts.Ownership not established · primary category
• CyderesCyderes sells managed detection and response, identity and access management, and exposure management services, unified through its Meridian platform.Ownership not established
• DeepwatchDeepwatch sells the Guardian MDR Platform, which combines a detection engine, threat intelligence and AI-powered operations with analyst oversight.Ownership not established · primary category
• eSentireeSentire sells managed detection and response along with digital forensics and incident response, and a service that continuously tests attack paths for exposures.Ownership not established · primary category
• ExpelExpel sells a managed detection and response service delivered through its Workbench platform, which connects to a customer's existing security tools and correlates signals with threat intelligence.Ownership not established · primary category
• KyndrylKyndryl sells cyber resilience services, including zero trust services, security operations and response, and incident recovery services.Public (NYSE: KD) · primary category
• MalwarebytesMalwarebytes sells ThreatDown, a platform that combines endpoint detection and response, identity threat detection and response, vulnerability and patch management, and email security with managed detection and response.Ownership not established
• Orange CyberdefenseOrange Cyberdefense sells consulting, managed security and threat detection and response services, backed by in-house threat intelligence research and a CERT.Ownership not established
• Red CanaryRed Canary sells a managed detection and response service covering endpoints, identities and cloud, backed by a 24x7 analyst team.Owned by Zscaler since 2025 · primary category
• SonicWallSonicWall sells next-generation firewalls, a cloud secure edge product, endpoint security and managed detection and response services.Owned by Francisco Partners and Elliott Management since 2016
• SophosSophos sells endpoint protection, a firewall product, and managed detection and response services.Owned by Thoma Bravo since 2020
• Stellar CyberStellar Cyber sells a SecOps platform that unifies SIEM, network detection and response, identity threat detection and response, and user and entity behavior analytics with AI-driven detection, investigation and response.Privately held
• TrustwaveTrustwave sold managed detection and response and other managed security services.Owned by LevelBlue since 2025 · primary category
• UltraViolet CyberUltraViolet Cyber sells a managed SOC service, application penetration testing and managed detection and response, formed in 2023 by combining four security firms.Ownership not established · primary category

No vendor pays to be listed or to change what we write. Descriptions are ours, drawn from each company's own site and filings. Corrections: /corrections.