SOC Providers.com Security Operations Center providers
Last reviewed: 1 Jun 2026

Orange Cyberdefense Managed Threat Detection and Response

MDR · XDR · MSSP

Orange Cyberdefense Managed Threat Detection and Response is an MDR/XDR service that runs 24/7 detection, investigation and response through Orange Cyberdefense CyberSOCs, Core Fusion and supported EDR, NDR, SIEM, cloud and OT telemetry. After an alert, Orange analysts triage and investigate, then can take contracted containment actions such as isolating endpoints or destroying malicious files, while the buyer still owns source onboarding, response approvals, tool licensing and remediation outside the agreed playbooks.

What they do
Contain threats
Works with
Either
Built for
Mid-Market / Enterprise
Price
Quote-based, private-offer signals
Best for
European and global enterprises that want managed detection and response from a large regional CyberSOC provider

They cover

  • Endpoints
  • Cloud Workloads
  • Identity & Access
  • Email
  • Network
  • SaaS Applications
  • OT/ICS

Your team still owns

  • Connecting and maintaining agreed endpoint, network, cloud, identity, SIEM and OT telemetry sources
  • Defining which containment actions Orange Cyberdefense may take and which require approval
  • Handling remediation, recovery, business decisions and IT changes outside agreed playbooks
  • Separating the MTDR service from Orange Cyberdefense consulting, incident response and broader managed security add-ons

Pricing

Line Figure
Published price Quote-based, private-offer signals
Billing model Custom
Contract Not published
Onboarding Not published

Tradeoffs

Works well

  • Fits buyers that want a large European managed-security provider with global CyberSOC coverage
  • Public material explains monitoring, investigation and active response in operational terms
  • Can integrate with existing infrastructure instead of forcing a single replacement platform
  • Useful fit for industrial or OT-aware buyers when OT telemetry is included in scope

Watch out for

  • Public pricing does not expose a numeric list price
  • Response authority, log sources, retention and tool licensing must be explicit in the quote
  • Exact customer review evidence for MTDR is limited compared with broader Orange Cyberdefense services
  • Buyers seeking a fully outsourced SOC need to validate daily operational ownership beyond MDR/XDR response

What buyers say

Alert noise

Not assessed

Transparency

Not assessed

Customers like

  • Review and practitioner sources point to mature managed-security delivery for larger environments
  • Reddit practitioner discussion describes Orange Cyberdefense as a good supplier when budget allows
  • Public sources support CyberSOC process, reporting and managed-service roles beyond basic alert forwarding

Watch out for

  • Review volume for the exact MTDR offer is limited
  • Practitioner discussion raises cost and occasional ticket-quality concerns
  • Trustpilot evidence is sparse and not specific enough to describe MTDR service quality

Reputation reads from public reviews, not vendor-published numbers.

Sources
Gartner Peer InsightsReddit MSSP discussionTrustpilot

Ask before buying

  1. Which telemetry sources are included in the base MTDR scope, and which require a separate managed service or project?
  2. Which containment actions can Orange Cyberdefense take without approval in our EDR, NDR, SIEM or cloud tools?
  3. Does the quote include Core Fusion access, tool licensing, log retention, incident response hours and regional CyberSOC coverage?

Integrations

Customer SIEMMicrosoft SentinelOrange Cyberdefense Core FusionPalo Alto Networks Cortex XDRMicrosoft DefenderCustomer EDRAWSMicrosoft AzureMicrosoft 365Network detection and response sensorsOT and industrial telemetrySecurity orchestration and response workflows

Editorial notes

Why contain threats

Official MTDR and XDR material supports analyst investigation plus active response actions, including endpoint isolation and malicious-file removal. That is more than investigation advice, but the public offer still reads as contracted MDR/XDR scope rather than Orange Cyberdefense running the buyer's entire SOC.

Platform boundary

Orange Cyberdefense can work around existing infrastructure and named technology partners, but buyers should not assume every SIEM, EDR, cloud, OT or identity source is included. The quote should separate Core Fusion, tool licensing, source onboarding, retention and any separate managed security services.

Review boundary

Public customer evidence for the exact MTDR offer is thinner than Orange Cyberdefense's market presence. Gartner and practitioner threads give useful signals about CyberSOC coverage and enterprise delivery, but buyers should ask for references that match their region, telemetry mix and response authority.

Questions

Does Orange Cyberdefense only notify the customer after an alert?
No. This profile classifies Managed Threat Detection and Response as Contain threats because public MTDR and XDR material supports analyst investigation plus active response actions where the customer's tools and rules of engagement allow them.
Is Orange Cyberdefense MTDR a full managed SOC?
Not by default. Orange Cyberdefense has broad managed security and CyberSOC capabilities, but this profile covers the MTDR/XDR offer. Buyers should verify whether SIEM operation, tuning, response playbooks, incident response hours and broader SOC tasks are included in the contract.
Is Orange Cyberdefense pricing public?
No numeric public list price was found. AWS Marketplace uses private-offer signals, so buyers need a scoped quote that separates service fees, tool licensing, telemetry volume, retention and response coverage.