The Forrester Wave™: Managed Detection And Response Services In Europe, Q4 2023
European organizations from finance to manufacturing have shown increased interest in purchasing managed detection and response (MDR) services, with security and risk professionals demonstrating willingness to allow vendors to take more unsupervised/automated response actions. Leading providers evaluate alerts and incidents holistically rather than as isolated events, use analytics to form hypotheses and inform threat hunts supported by automation, and have implemented technical controls and service delivery capabilities across Europe to satisfy local data privacy and sovereignty requirements. The evaluation assessed eight significant MDR providers in Europe using 22 criteria.
No common features specified.
Vendors must, among other requirements:
A: This research covers a comprehensive evaluation of eight major MDR service providers operating in Europe, assessed across 22 criteria including investigative capabilities, threat hunting, response capabilities, case management, analytics, pricing, innovation, and global delivery strategy. The evaluation focuses specifically on providers serving the EU member states, EEA, UK, and Switzerland markets.
A: Security and risk professionals in Europe should use this research when selecting an MDR service provider. It helps identify providers that can mature security programs, demonstrate offensive security and threat hunting capabilities, and contribute meaningfully to the cybersecurity ecosystem. The research is particularly valuable for organizations looking to understand vendor strengths and weaknesses across detection, response, and investigation capabilities.
A: Vendors must have EDR (Endpoint Detection and Response), threat hunting capabilities, and any two additional capabilities from core business scenarios as defined in the MDR Services Landscape report. Additionally, providers offering insider threat management must have analytics and threat detection as a core focus. All vendors must have at least $20 million in annual MDR services revenue in Europe and demonstrate sufficient Forrester mindshare.
A:
A:
A:
A: Current Offering evaluates each vendor's position on the vertical axis and indicates the strength of their current service capabilities including time to value, threat hunting, threat intelligence, case management, analyst experience, analytics, XDR, managed detection/investigations/response, dashboards, scripting, security, and platform capabilities. Strategy evaluates placement on the horizontal axis and indicates the strength of vendors' strategic direction including their vision, innovation, partner ecosystem, pricing flexibility and transparency, talent strategy, and global delivery strategy.