Who does what
Provider
- Investigate covered alerts around the clock
- Escalate verified incidents with evidence
- Recommend response actions
Your team
- Own containment beyond configured response workflows
- Maintain connected systems and asset coverage
- Approve playbooks and complete remediation
Coverage
- Endpoints
- Cloud Workloads
- Identity & Access
- Network
- SaaS Applications
- Containers & Kubernetes
- Code & Applications
Details
Service scope
Best for Cloud and hybrid teams needing analyst investigation and optional managed WAF
Response boundary
Analysts investigate and advise. Intelligent Response actions require configured customer tools and may need approval.
Tier and WAF
Essentials focuses on exposure. Professional adds threat management and Enterprise adds hunting. Managed WAF is an add-on.
LevelBlue ownership
Confirm support, SOC escalation, seller and renewal terms following the LevelBlue transition.
Full service analysis
Alert Logic is now part of LevelBlue. The service combines MDR subscriptions, Alert Logic console telemetry, vulnerability and exposure management, 24/7 analyst triage, Intelligent Response automation and Managed WAF add-ons for cloud, hybrid and on-prem environments.
- Your team owns
- Remediation and incident-response work unless an automated response workflow or partner service is explicitly configured
- Selecting the right MDR tier, protected assets, log sources and Managed WAF scope
- Maintaining the cloud, endpoint, identity, network and application systems that feed Alert Logic
- Approving response playbooks, WAF modes, exclusions and change windows
Ownership change
LevelBlue announced in January 2026 that it would acquire Fortra's Alert Logic managed MDR, XDR and Managed WAF services. The current Alert Logic site redirects to LevelBlue and says customers keep access to Alert Logic portals, support and documentation.
Response boundary
Professional MDR includes SOC triage, escalation and recommendations, while Intelligent Response automates actions through connected customer tools. Public docs support guided or customer-approved response, not blanket hands-on remediation by Alert Logic for every incident.
Tier boundary
Essentials focuses on asset visibility, vulnerability scanning, cloud configuration checks and support. Professional adds threat management, log collection, 24/7 threat management support and Intelligent Response. Enterprise adds a designated Enterprise Security Squad and active threat hunting.
WAF boundary
Managed WAF is an add-on that protects configured websites and can run in detect or protect mode. Buyers should verify whether WAF deployment, certificate handling, tuning, production cutover and false-positive handling are included in the quoted scope.
Pricing boundary
Current buying pages request a quote. The AWS Marketplace listing is sold by sga.com and offers custom pricing. Older public procurement price lists predate the LevelBlue transition, so a current quote should identify the tier, asset allowance, log volume and add-ons.
Pricing & contract
- Billing
- Per-asset, Tiered, Custom
Request a quote for the subscription tier, protected assets, log volume, retention and Managed WAF add-ons. The AWS listing is a reseller private offer, so confirm the seller and support allocation.
Tradeoffs & buying questions
Strengths
-
Separate exposure and threat-management tiers
Clear tiering lets buyers separate exposure management from full threat-management coverage
-
Cloud, hybrid and web-application coverage
Strong fit for AWS, Azure, GCP, hybrid data center and web-application use cases
-
Managed WAF option for public-facing applications
Managed WAF is a useful adjacent capability for buyers with internet-facing applications
Considerations
-
Confirm post-acquisition support and roadmap ownership
Buyers must verify support and roadmap ownership after the LevelBlue and Fortra transition
-
Response remains configured, approval-based or buyer-owned
Response actions remain customer-configured, approval-based or buyer-owned
-
Logs, WAF, retention and appliances affect quotes
Public pricing is quote-based, and log volume, WAF, retention and appliance requirements can change scope
-
Historical reviews describe reporting and support concerns that need checking with current references
Ask before buying
- Which assets receive Essentials, Professional or Enterprise coverage, and which need add-ons?
- Which response actions are automatic, approval-based or entirely our responsibility?
- Who owns support, renewals, SOC escalation and roadmap decisions after the LevelBlue acquisition?
Customer feedback
Customers value
-
Historical users value continuous monitoring and detailed alerts
-
Historical users describe helpful onboarding support
Reported concerns
-
Historical reviews describe search and reporting limitations
-
Older service feedback may not reflect current LevelBlue delivery
Integrations
Cloud
- AWS
- Azure
- GCP
Other integrations
- Alert Logic Managed WAF
- Intelligent Response
- Amazon GuardDuty
4 more integrations
- Microsoft Office 365 logs
- Azure Event Hubs
- Windows Event Log
- Syslog
Common questions
Is Alert Logic still part of Fortra?
Alert Logic managed MDR, XDR and Managed WAF services are now part of LevelBlue under a January 2026 strategic partnership with Fortra. Fortra remains a technology partner, so buyers should confirm seller of record, support path and renewal terms for the exact quote.
Does Alert Logic contain threats for the customer?
Not by default in the way a fully hands-on MDR provider does. Alert Logic analysts triage, escalate and recommend actions, while Intelligent Response can automate actions such as host isolation, user disablement or IP blocking through connected tools after the customer configures the workflow and approval model.
What is the difference between Alert Logic Essentials, Professional and Enterprise?
Essentials focuses on asset visibility, vulnerability scanning and cloud configuration checks. Professional adds threat visibility, log management, 24/7 threat management support and Intelligent Response. Enterprise adds a designated Enterprise Security Squad, bi-weekly reviews and active threat hunting.
Company details
- Founded
- 2002