Secureworks (a Sophos company)

Long-established MDR and XDR provider built around the Taegis platform, now operating as part of Sophos.

CompanyManaged Security Service ProvidersCloud

Pricing: Custom (contact sales)

Updated June 2026.

What is Secureworks (a Sophos company)?

Secureworks pioneered the modern MSSP model and was majority-owned by Dell before its acquisition by Sophos in an $859M deal that closed February 2025. The Taegis platform (MDR, XDR, NDR, VDR, embedded SIEM) continues as a standalone, vendor-open product line within Sophos with native Sophos Endpoint integration. The Counter Threat Unit (CTU) remains a key differentiator.

Best for: Mid-to-large enterprises wanting a vendor-open MDR with strong threat intel and an embedded SIEM, especially in regulated verticals
Pros
  • Counter Threat Unit is one of the longest-running in-house threat research teams
  • Taegis remains vendor-open / BYO-EDR even post-Sophos
  • Embedded SIEM removes the need for a separate Splunk-class deployment for many customers
  • Deep history with regulated industries and global SOC footprint
Cons
  • Ongoing integration risk following the Sophos acquisition
  • Heritage SIEM/MSSP roots can mean a heavier deployment than newer cloud-native MDRs
  • Limited public list pricing

Key Features

Taegis Managed Detection and Response (MDR)
Taegis XDR (analyst-led extended detection and response)
Taegis NDR (network detection and response)
Taegis VDR (vulnerability detection and response)
Embedded next-gen SIEM with long data retention
24/7 SOC monitoring and threat hunting
Incident response retainers and emergency IR
Counter Threat Unit (CTU) threat intelligence research

What People Are Saying

Real discussions and resources from the community.