Mandiant Managed Defense vs. SentinelOne Vigilance

Managed Defense is a must-have for any organization with limited cybersecurity resources and staff. In Managed Defense you have some of the best threat analyst and incident responders in the world to augment your security capabilities 24/7. It is hard to quantify the value of that piece of mind for a small/medium business.

Incentivized

Excellent value for a team without dedicated EDR personnel or low staff. [SentinelOne] Vigilance does not integrate as well with internal staff and needs a better way to a round-robin or assign issues/follow up to numerous internal staff. Would benefit from more workflow to look at multiple issues.

Incentivized

• Integration & Protection-Mandiant provide highest degree of integration with Endpoints, Networks ,email & Cloud and Identity solutions an organization already using
• Strong Protection- Mandiant has best threat landscape technology which provide holistic view of security & Protection.

Incentivized

• AI/ML based detection engine has not missed a single known threat since installed
• [SentinelOne] Vigilance makes clear notes and does a great job at weeding out false positives
• Easy to use online console works on any connection
• Integration with out Okta SSO MFA and Identity cloud

Incentivized

• Very little opportunities for improvement. Perhaps support for more alert types. Currently, not all alerts reviewed by the in-house CSOC team are in-scope for Managed Defense.

• [SentinelOne] Vigilance notes are captured in each event which is near impossible to review with low staff. Better reporting on activities would help demonstrate better the activity ongoing
• Ability to extract notes and incidents to our SIEM would be great
• A customer success manager would be a nice addition

Incentivized

There is a learning curve to understand and analyse detections, but that is to be expected for a versatile endpoint detection and response tool.

Incentivized

We are a quiet shop with few incidents, however, MD's response to questions and access to our assigned MD consultant is excellent.

Incentivized

Mandiant MDR includes authorized hands on keyboard response , The defendor experts for Hunting services does not include managed response, only hunting detection and alerting. Unlike Mandiant ,\Microsoft will not offer detection and response based on third party product data. Nor does Microsoft have the capability to add Network detection & response for analyzing both clear and encrypted network traffic.

Incentivized

SentinelOne Vigilance was as good or better than each of the products we also have used in this product range. We chose SentinelOne Vigilance for many of our clients based on the supported integrations with our other toolsets.

Incentivized

• 24/7 coverage has been huge - that ROI has allowed the company to refrain from additional internal staffing of CSOC resources.
• There is a significant improvement in time to remediate and recover from incidents.
• Managed Defense has the ability to perform threat hunt exercises and perform enterprise-wide forensics beyond the capabilities of in-house CSOC resources.

• Client satisfaction with standard of monitoring and response has increased
• No breach has occurred for any client with this correctly deployed

Incentivized