# Expel Reviews **Vendor:** Expel **Category:** [Managed Detection and Response (MDR) Software](https://www.g2.com/categories/managed-detection-and-response-mdr) **Average Rating:** 4.6/5.0 **Total Reviews:** 74 ## About Expel Expel is the leading managed detection and response (MDR) provider trusted by some of the world’s most recognizable brands to expel their adversaries, minimize risk, and build security resilience. Expel’s 24x7x365 coverage spans the widest breadth of attack surfaces, including cloud, with 100% transparency. We combine world-class security practitioners and our AI-driven platform, Expel Workbench™, to ingest billions of events monthly and still achieve a 21-minute critical alert MTTR. Expel augments existing programs to help customers maximize their security investments and focus on building trust—with their customers, partners, and employees. Expel Managed Detection and Response delivers 24/7 decision support. We integrate with the tech you already have—across attack surfaces—to maximize your existing tech investments. Our platform automates analysis for your vendor alerts to filter out false positives. We’ll enrich the alerts that matter with context so we can resolve them with an average alert-to-fix of 21 minutes for critical alerts. Expel Threat Hunting provides peace of mind that your environment is secure and your defenses are optimized. Expel identifies attacks your automated detections missed, while providing insights that enable a stronger defensive strategy. You get clear guidance on how you can improve your defenses from a dedicated team of experts, without the strain on internal teams. Expel Vulnerability Prioritization accelerates your remediation process by letting you know exactly which vulnerabilities pose the greatest risk, with recommendations on next steps for immediate action. Expel Phishing takes complete ownership of your phishing inbox and provides remediation and guidance when threats enter via this critical attack vector. Unique data from your security technology helps Expel monitor and remove phishing emails from your inbox as well as protecting your entire environment from these attacks. ## Expel Pros & Cons **What users like:** - Users commend Expel for its **intuitive interface** , making security operations easy and enhancing overall team productivity. (9 reviews) - Users value the **easy integrations** of Expel, facilitating seamless connections with existing cloud tools and services. (5 reviews) - Users benefit from **high-fidelity detection** and transparent workflows in Expel, enhancing trust and decision-making efficiency. (5 reviews) - Threat Detection (5 reviews) - Users praise the **responsive and knowledgeable customer support** of Expel, aiding their success in security operations. (4 reviews) - Users appreciate the **automatic threat detection** of Expel, enabling fast decision-making and seamless integration with existing systems. (4 reviews) - Users commend the **reliability** of Expel, appreciating its seamless integration and consistent responsiveness in security operations. (4 reviews) - Integrations (3 reviews) - Onboarding (3 reviews) - SOC Services (3 reviews) **What users dislike:** - Users find **limited customization** options in Expel, affecting the adaptability of alerts and incident management processes. (4 reviews) - Users report **communication issues** with Expel, citing delays and lack of clarity in incident management and team responses. (3 reviews) - Users struggle with an **inefficient alert system** lacking customization, hindering effective prioritization and automation efforts. (3 reviews) - Users find the **limited integration** across tools hampers efficiency, requiring reversion to native consoles for validation. (3 reviews) - Users find Expel to be **expensive** , particularly when requiring additional report customization and manual adjustments for insights. (2 reviews) - Limited Flexibility (2 reviews) - Poor Customer Support (2 reviews) - Inadequate Detection (1 reviews) - Users find the **inadequate remediation** and lack of customization in alerts frustrating, complicating security management efforts. (1 reviews) - Integration Issues (1 reviews) ## Expel Reviews ### 1. Great MDR **Rating:** 5.0/5.0 stars **Reviewed by:** David T. | Mid-Market (51-1000 emp.) **Reviewed Date:** January 31, 2024 **What do you like best about Expel?** They are very responsive and professional **What do you dislike about Expel?** They need more automations. The automations are very helpful **What problems is Expel solving and how is that benefiting you?** They are augmenting my security force ### 2. Leveraging Expel MDR services **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Legal Services | Enterprise (> 1000 emp.) **Reviewed Date:** May 02, 2024 **What do you like best about Expel?** What I love most about Expel is the transparency that they provide around their processes and procedures. **What do you dislike about Expel?** The biggest challenge has been SIEM integration for us. They is something that should be streamlined in a more fluid way. **What problems is Expel solving and how is that benefiting you?** Expel solves our MTTR around security events and incidents. **Official Response from Ashlyn Warblow:** > Thank you for sharing your Expel experience! Your candid feedback is greatly appreciated—and we love to hear that Expel has been able to help reduce your MTTR for security events and incidents. We'd love to hear more about your experience with Expel's SIEM integrations. Feedback from our customers is critical to optimizing our MDR service. Please feel free to reach out to me directly at ashlyn.warblow@expel.com with any additional feedback and details. Thank you for being an Expel customer and look forward to connecting with you. ### 3. I love Expel **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** May 15, 2024 **What do you like best about Expel?** That the customers seem to love it! The AE's and SE's are all phenomonal and are available whenever! **What do you dislike about Expel?** The partner portal has a lot of good information but is hard to manuver. **What problems is Expel solving and how is that benefiting you?** Solving how my customers are managing their endpoints, ### 4. Expel **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Mid-Market (51-1000 emp.) **Reviewed Date:** August 25, 2022 **What do you like best about Expel?** Expel has reduced the time that our Security Operations team spends on alerts and investigations, and has reduced our time to respond to alerts by over 200% **What do you dislike about Expel?** Expel has satisfied all of our requirements. **What problems is Expel solving and how is that benefiting you?** Expel has reduced the time that our Security Operations team spends on alerts and investigations, and has reduced our time to respond to alerts by over 200% ### 5. Expel review **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** May 02, 2024 **What do you like best about Expel?** Support from the team and Slack integration makes it easy to respond. **What do you dislike about Expel?** Need more communication on product improvements and direction **What problems is Expel solving and how is that benefiting you?** Enterprise and SaaS sectors of our business ### 6. Expel SOC Service **Rating:** 4.5/5.0 stars **Reviewed by:** Triet N. | Small-Business (50 or fewer emp.) **Reviewed Date:** April 19, 2023 **What do you like best about Expel?** I recently had the opportunity to experience the Expel SOC services, and I wanted to provide feedback on my experience. Overall, I have been thoroughly impressed by the efficiency and effectiveness of the system.First and foremost, the incident triage process is incredibly precise. The system has demonstrated an ability to accurately identify and categorize incidents, ensuring a streamlined response process. This high level of accuracy has made it significantly easier for our team to address and resolve security issues in a timely manner.Moreover, the system generates minimal to no false positives. This is a significant advantage, as it reduces the time and resources wasted on chasing down non-existent issues. The lack of false positives also increases our team's trust in the system, knowing that any alerts received are genuine and warrant our attention.One of the standout features of Expel SOC is the auto-remediation process, which integrates seamlessly with our escalation flow through PagerDuty. The implementation of auto-remediation has expedited our response times and allowed our team to focus on more pressing issues. It has been a game-changer in terms of efficiency and productivity.Overall, I would like to commend the Expel team for developing such a robust and effective SOC service. The precise incident triage, minimal false positives, and effective auto-remediation have significantly improved our security posture and overall response process. I look forward to continued collaboration and the ongoing development of the Expel SOC platform. **What do you dislike about Expel?** We want more integrations, this is a good thing rather! **What problems is Expel solving and how is that benefiting you?** 24/7 threat detection, investigation, and response ### 7. Full MDR visibility with a fantastic team **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Airlines/Aviation | Enterprise (> 1000 emp.) **Reviewed Date:** April 26, 2023 **What do you like best about Expel?** The visibility Expel provides into how their team is working is second to none in my experience. They have a very skilled team that consistently go above and beyond. **What do you dislike about Expel?** We've not encountered any issues while being partnered with Expel. They're very open to new ideas and features and constantly check in to make sure we're getting the most out of the platform and service. **What problems is Expel solving and how is that benefiting you?** Expel is providing 24/7 MDR services that enable smaller teams to be able to focus on the high value maturity and security posture improvement work. They also allow the team to have a far greater nights rest! ### 8. Best MDR provider I've worked with **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Staffing and Recruiting | Small-Business (50 or fewer emp.) **Reviewed Date:** August 15, 2023 **What do you like best about Expel?** Their transparency of how they operate, across technology, automation, and human interaction. **What do you dislike about Expel?** would like to see automated reporting capabilities. **What problems is Expel solving and how is that benefiting you?** Expel helps my team work more efficiently; taking investigative tasks and compiling the info, giving my team a clear picture of what needs to be done. ### 9. I feel bad for all of my other suppliers, past, present and future. **Rating:** 5.0/5.0 stars **Reviewed by:** Gene D. | Information Security Officer, Small-Business (50 or fewer emp.) **Reviewed Date:** August 16, 2022 **What do you like best about Expel?** The technology is clearly superior in an otherwise commoditized space. But what sets Expel apart from its competitors in MDR space, even accross all IT service providers, is that they understand what us customers require even better than we do. They are leading us down a path we know is right, but for plenty of reasons, we would not take all these steps alone. **What do you dislike about Expel?** To be honest, I have not found anything I dislike. I do worry if the customer and product obsession will survive the inevitably massive gains in revenue and market share. **What problems is Expel solving and how is that benefiting you?** They are helping to reduce complexity accross a wide range of Information Security operational processes. Most importantly they are managing our threat detection and response. They are doing that really well, but they continue to be thought leaders in threat intelligence. Their alerts are relevant, researched, and actionable. ### 10. Expel as a 3rd party SOC. **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.) **Reviewed Date:** December 08, 2022 **What do you like best about Expel?** The rapid onboarding process and thorough review of security signals were incredibly valuable. Expel was hired to replace another vendor, and the transition was highly effective and quick. They have been trusted partners and continuously work to improve offerings and services to meet the business's needs. **What do you dislike about Expel?** The downsides are similar to competitors; you are trusting a third party with a critical function. Vendors in this area are notoriously expensive; Expel is reasonable in this service stack in my opinion. **What problems is Expel solving and how is that benefiting you?** Expel allows me to build deeper in-house talent for my Security Operations function. They are my 24x7 support that allows my team to action escalated issues. This saves me from having to build my own Security Operations Center. ### 11. Expel is a great partner and definitely one of the strongest players in the market **Rating:** 4.5/5.0 stars **Reviewed by:** Danilo N. | Director - Security Compliance, Enterprise (> 1000 emp.) **Reviewed Date:** August 25, 2022 **What do you like best about Expel?** Expel workbench platform is a very comprehensive and easy-to-integrate platform, with most of the integrations natively built, requiring us to only provide credentials. On top of it, the content and correlation for the alerts is extremely rich and easy to consume by SOC engineers. **What do you dislike about Expel?** Price. Expel is not the cheapest platform, and its pricing model is heavily based on resources (cloud), endpoints, etc... I think the biggest opportunity Excel has is to re-evaluate its pricing model, to serve small and medium-sized companies **What problems is Expel solving and how is that benefiting you?** Expel is amazingly covering our L1/L2 SOC needs and they are extremely responsive. The biggest benefit we get from them is the "removal" of the burden on our Sec Engineers. Our team is only engaged after a thorough triage which reduces a lot the noise and burden **Official Response from Kaitlin Ricketts:** > Danilo, Thank you for your feedback! Everyone at Expel is appreciative when a customer writes a recommendation — especially when it’s a great one. We also appreciate your candid feedback on our pricing and would welcome a conversation with you to learn more about your experience with our pricing model. We're always looking to learn and grow, and feedback from our customers is key to that journey. - On behalf of the Expel team ### 12. Brilliant service, and superb support team! **Rating:** 5.0/5.0 stars **Reviewed by:** Laura B. | Senior Security Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** May 25, 2022 **What do you like best about Expel?** Super responsive 24x7 SOC; event triage allows team to focus on the key incidents. When major threats occur, Expel shares great threat intel for awareness. Easy to use platform, good coverage of major security vendors. Really like the Slack channel setup to reach out to the team direct, and validate activity. The team at Expel are great to work with, super helpful and responsive! **What do you dislike about Expel?** I wish there were more direct integrations to their platform for full coverage. **Recommendations to others considering Expel:** Review the integrations available and identify which ones can be integrated quickly. **What problems is Expel solving and how is that benefiting you?** 24x7 SOC coverage, initial event triage to see the incidents amongst the noise. Gained resources back for the security team with Expel's help. ### 13. Expel, the best sleep aid for security conscious companies **Rating:** 5.0/5.0 stars **Reviewed by:** Ben U. | Global Cybersecurity and Compliance Manager, Enterprise (> 1000 emp.) **Reviewed Date:** May 25, 2022 **What do you like best about Expel?** The AI used to triage all alerts helps eliminate many of the false positives and gives me confidence in the results provided. **What do you dislike about Expel?** l have not found anything over the last year since we started using Expel that I didn't like. **Recommendations to others considering Expel:** The cost difference is well worth the investment. **What problems is Expel solving and how is that benefiting you?** The biggest problem to solve was the need for eyes on our environment 24x7x365. Having a small security team makes it difficult to always be on top of issues as they arive. Having Expel watching our environment without adding alot of overhead to our environment has been paramount to our success in monitoring and catching any security events before they become a full incident. ### 14. Expel = PoMSaaS :: Peace of Mind Security as a Service **Rating:** 5.0/5.0 stars **Reviewed by:** Bob G. | Vice President, Information Security and Technology, Mid-Market (51-1000 emp.) **Reviewed Date:** July 12, 2022 **What do you like best about Expel?** The engagement from top to bottom is best in class, open communication at all levels of the company, maturity in security knowledge and offering, having a knowledgeable resource available 24x7 to assist in any pressing security matter that requires investigation **What do you dislike about Expel?** They are pricier than the competition/market **What problems is Expel solving and how is that benefiting you?** Security Operations, Security Data about behaviors and where there are problem areas to be addressed with People/Process/Tools, 24X7 security coverage of all core and ancillary systems, input on new tools to implement that improve our security posture. ### 15. Strong technical architecture, growing set of integrations. **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Non-Profit Organization Management | Mid-Market (51-1000 emp.) **Reviewed Date:** October 19, 2022 **What do you like best about Expel?** The automations for filtering alerts from a variety of different services are excellent. The ability to submit an issue for investigation (based on user, device, etc.) and quickly see high volumes of information from multiple systems pulled together in one place speeds responsiveness tremendously. **What do you dislike about Expel?** Staying on top of the growing integration set is still a little cumbersome. The onboarding didn't include an alert type-by-alert type discovery effort to determine how we wanted to handle each alert type. **What problems is Expel solving and how is that benefiting you?** Assessing high volumes of alert information from various systems/solutions/technologies without having to have lots of highly skilled man hours to address. **Official Response from Kaitlin Ricketts:** > Thank you for sharing your experience with Expel! That’s a great call out on what our bot Ruxie™ is able to add to the investigation to speed up decision making. Our SOC analysts love that feature too! Your candid feedback is appreciated. We'd love to have a conversation with you on handling alerts and our onboarding process. Feedback from our customers is critical to optimizing the Expel Workbench™ product experience. You can connect with me at kaitlin.ricketts@expel.com and we’ll find a mutually convenient time to meet. Thank you for being an Expel customer and look forward to connecting with you. ### 16. Expel is truly an extension of my team **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Banking | Enterprise (> 1000 emp.) **Reviewed Date:** June 03, 2022 **What do you like best about Expel?** TTheya re very responsive to the needs of my organization. When I have a question about an alert, if they have launched an investigation or if it's one that we've launched ourselves they are willing and able to assist with resolution. **What do you dislike about Expel?** Since we are not a Teams or a Slack shop, I don't get the full experience of realtime interaction with them via chat. They are responsive to emails and notify me of things that are going on still though. **Recommendations to others considering Expel:** Expel monitors more than just alerts coming out of your EDR. **What problems is Expel solving and how is that benefiting you?** Expel solves the problem of me not having the staff to run a 24/7 SOC. They also are creating SOAR solutions for me via Ruxie that I am not staffed or resourced to do on my own. ### 17. Expel is a good partner **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Financial Services | Small-Business (50 or fewer emp.) **Reviewed Date:** May 10, 2022 **What do you like best about Expel?** Great integration into the security stack, great communications through the use of Slack with their team and the use of a bot for alerts and Pager Duty for emergencies. **What do you dislike about Expel?** For integrations with technologies that they didnt already have in their portfolio, it took some organizing between the different vendors to get the API connection built and we have one instance where we had a connection down for a couple of days before they realized it was on their side and they fixed it. **Recommendations to others considering Expel:** Ease of use for your team, integrations into your security stack, integrations with your SIEM. **What problems is Expel solving and how is that benefiting you?** Small security team so we needed a partner to help provide 24/7 coverage after-hours monitoring the stack. ### 18. Unique MDR that delivers above most **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.) **Reviewed Date:** August 06, 2022 **What do you like best about Expel?** Allows you to use all your existing technology stack, leverages public cloud native security features and staffs with elite industry grade cybersecurity analysts. **What do you dislike about Expel?** You pay for what you get and the services are priced at platinum grade security levels. :) **What problems is Expel solving and how is that benefiting you?** Provides surge staffing, public cloud security expertise, and 24x7x365 security operations center services to assist your organization with cybersecurity detection and response activities. ### 19. Customer focused and talented engineers. **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.) **Reviewed Date:** August 17, 2022 **What do you like best about Expel?** Ease of use of the tool and extensibility. The Slack integration is great. **What do you dislike about Expel?** Lack of unified interaction over UI, Slack, Teams etc. This is in the works though from my understanding and I am looking forward to the feature! **What problems is Expel solving and how is that benefiting you?** SOC as a service. ### 20. These are the folks you want running your SOC **Rating:** 5.0/5.0 stars **Reviewed by:** Greg N. | Contributor, Mid-Market (51-1000 emp.) **Reviewed Date:** March 04, 2022 **What do you like best about Expel?** Overall quality of service, the feedback for continuous improvement of our security program from the product, quality of the data synthesis from the investigations, engaging with their SOC. **What do you dislike about Expel?** nothing I can think of. their vision is complete and their execution is very good. **What problems is Expel solving and how is that benefiting you?** They are ultimately solving the cybersecurity talent shortage problem for us with their software. They make sense of the huge amount of telemetry data generated by our security tools and synthesize actionable responses for our shared team to resolve. ### 21. Expel is a great partner and they are the most responsive security vendor I've ever worked with **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Legal Services | Enterprise (> 1000 emp.) **Reviewed Date:** August 25, 2022 **What do you like best about Expel?** Their responsiveness and expertise in supporting our security operations center. **What do you dislike about Expel?** There are none. Expel is the best vendor I've ever worked with. **What problems is Expel solving and how is that benefiting you?** Expel helps us prioritize and focus on the most critical security threats we face. ### 22. handles our needs but room for improvement **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Entertainment | Enterprise (> 1000 emp.) **Reviewed Date:** September 06, 2022 **What do you like best about Expel?** customer service and our rep always being available for us **What do you dislike about Expel?** ruxie takes longer than expected for detections, could be quicker **What problems is Expel solving and how is that benefiting you?** handles alerts and monitor parts our environment that we can't **Official Response from Kaitlin Ricketts:** > Thank you for your review and your candid feedback on our bot, Ruxie. We'd love to have a conversation with you to learn more about your experience. We're always looking to learn and grow, and feedback from our customers is key to that journey. You can connect with me at kaitlin.ricketts@expel.com and we’ll find a mutually convenient time to meet. Thank you for being an Expel customer and look forward to connecting with you. ### 23. Expel = Best MSSP **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Entertainment | Mid-Market (51-1000 emp.) **Reviewed Date:** March 16, 2022 **What do you like best about Expel?** I appreciate how Expel values their customers' feedback and opinions. **What do you dislike about Expel?** There can be some bumps when Expel starts onboarding your security tools. **What problems is Expel solving and how is that benefiting you?** Triaging, CSF mapping ### 24. Expel Review **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Legal Services | Enterprise (> 1000 emp.) **Reviewed Date:** April 05, 2022 **What do you like best about Expel?** Vendor agnostic, expanding offerings, great leadership. **What do you dislike about Expel?** Some growing pains in expanding offerings. **What problems is Expel solving and how is that benefiting you?** 24/7 SOC services. ## Expel Discussions - [What is Expel used for?](https://www.g2.com/discussions/what-is-expel-used-for) - [View Expel pricing details and edition comparison](https://www.g2.com/products/expel/reviews?page=2§ion=pricing&secure%5Bexpires_at%5D=2026-05-30+12%3A18%3A11+-0500&secure%5Bsession_id%5D=7ac604fe-5092-4428-be84-e4eb2bfd025a&secure%5Btoken%5D=9f3a2005c8af927676bf95f0c7d14acdcb0b4d01692341728d223ccae94cdf6f&format=llm_user) ## Expel Integrations - [Amazon GuardDuty](https://www.g2.com/products/amazon-guardduty/reviews) - [AWS CloudTrail](https://www.g2.com/products/aws-cloudtrail/reviews) - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - [Google Cloud Storage](https://www.g2.com/products/google-cloud-storage/reviews) - [Google Workspace](https://www.g2.com/products/google-workspace/reviews) - [Microsoft 365](https://www.g2.com/products/microsoft365/reviews) - [Microsoft Defender for Endpoint](https://www.g2.com/products/microsoft-defender-for-endpoint/reviews) - [SentinelOne Singularity XDR](https://www.g2.com/products/sentinelone-singularity-xdr/reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) ## Expel Features **Platform Features** - 24/7 support - Proactive report alerts - Application control - Proactive threat hunting - Rapid response time - Customizeable reports - Managed Services **Agentic AI - AWS Marketplace** - Autonomous Task Execution - Multi-step Planning - Cross-system Integration **Automation Capabilities** - Automated remediation - Automated investigation - AI Agents ## Top Expel Alternatives - [Arctic Wolf](https://www.g2.com/products/arctic-wolf/reviews) - 4.7/5.0 (275 reviews) - [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) - 4.9/5.0 (880 reviews) - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - 4.6/5.0 (395 reviews)