Endpoint and managed detection

EDR / MDR

Products MSPs name when they ask what can sit beside, or instead of, the EDR or MDR they run today.

Public pages, not a ranking

Alphabetical inside each group. Positioning is a paraphrase of the linked page, checked 2026-10-15, unless the cell says a claim was not extracted. Dollar amounts appear only in the price column, with a source.
VendorGroupWhat the public page supportsPrice signal
CrowdStrikeNamed in a public threadOn this board because a 1 October 2026 r/msp thread names CrowdStrike in a distributor-path discussion with NinjaOne. Product claims were not taken from the homepage for this edition.Omitted. No dollar amount on the page we checked.
HuntressNamed in a public threadHomepage describes a managed security platform with a 24/7 SOC, including Managed EDR, for organizations of all sizes and the MSPs that support them. Homepage checked 2026-10-15. No dollar amount on that page.Omitted. No dollar amount on the page we checked.
SentinelOneNamed in a public threadHomepage describes an AI-native platform covering endpoint, identity, AI, and cloud, and states that Gartner named SentinelOne a Leader in the 2026 Magic Quadrant for Endpoint Protection Platforms. Homepage checked 2026-10-15. No dollar amount on that page.Omitted. No dollar amount on the page we checked.
Blackpoint CyberSeeded alternativeHomepage describes an MDR platform with a 24/7 SOC and a partner-oriented pitch. Homepage checked 2026-10-15. No dollar amount on that page.Omitted. No dollar amount on the page we checked.
TodylSeeded alternativeHomepage describes a channel-only platform for MSPs that includes SASE, endpoint security, SIEM, MXDR, GRC, and an email security product. Homepage checked 2026-10-15. No dollar amount on that page.Omitted. No dollar amount on the page we checked.

Switch triggers

The general triggers this desk watches are a price change, a sour account-management relationship, and distributor or marketplace fees. Those are themes from public MSP discussions. A theme is attached to a named product only when a linked thread title supports it.

2026-10-01 · Editorial summary

Buying CrowdStrike through NinjaOne

Editorial summary of a public r/msp thread arguing against buying CrowdStrike through NinjaOne. Recorded at 97 points and 64 comments on 15 October 2026. The theme is the distributor path. We do not adopt comment claims about fees as our own numbers.

r/msp thread · No usernames or comment quotes.

2026-09-29 · Editorial summary

Public ask for Huntress alternatives

Editorial summary of a public r/msp thread asking for Huntress alternatives. Recorded at 83 points and 205 comments on 15 October 2026. The title does not state a price change or an account-management incident, so this desk does not assign one.

r/msp thread · No usernames or comment quotes.

2026-09-18 · Editorial summary

Starting a process to replace SentinelOne

Editorial summary of a public r/msp thread about starting a process to replace SentinelOne. Recorded at 43 points and 74 comments on 15 October 2026. The title does not name a trigger, so we do not invent one.

r/msp thread · No usernames or comment quotes.

Migration checklist stub

A starting list, not a vendor runbook. Confirm each step against your contract and the vendor’s own documentation.

  • Export the client list, site list, and the count of agents or collectors you actually bill.
  • Read the current agreement for notice, auto-renewal, and what you can export when you leave.
  • Write down the alerts, scripts, and integrations that have to exist on day one.
  • Pilot on one non-critical client before a fleet cutover.
  • Leave the old agent or collector in place until the new one is reporting.
  • Note whether you buy direct or through a distributor, and who owns that login.
  • Confirm who is allowed to isolate an endpoint today: your techs, or the vendor’s SOC.
  • List identity coverage you rely on (Microsoft 365, Google Workspace) before you pick a replacement.

Back to the full board