Shortlist fit
European and global enterprises that want managed detection and response from a large regional CyberSOC provider
Provider handles
Service can take or orchestrate containment actions within the approved scope.Check before buying
Connecting and maintaining agreed endpoint, network, cloud, identity, SIEM and OT telemetry sourcesAlso fits
- Buyers that need MDR/XDR across endpoint, network, cloud and industrial environments
- Teams that want a provider able to integrate with existing security infrastructure instead of replacing every tool
- Regulated buyers that care about documented SOC operations, certifications and regional delivery
Can replace
- Some 24/7 alert monitoring and analyst investigation work across covered telemetry
- Manual first response for containment actions approved in the service scope
- Some detection engineering, escalation management and incident handling coordination
Coverage
Provider covers
- 24/7 CyberSOC monitoring, triage, investigation and response workflow
- Core Fusion portal for incident visibility, reporting and service collaboration
- Managed XDR support across endpoint, network, cloud and OT telemetry where scoped
Your team still owns
- Defining which containment actions Orange Cyberdefense may take and which require approval
- Handling remediation, recovery, business decisions and IT changes outside agreed playbooks
- Separating the MTDR service from Orange Cyberdefense consulting, incident response and broader managed security add-ons
Tradeoffs
Works well
- Fits buyers that want a large European managed-security provider with global CyberSOC coverage
- Public material explains monitoring, investigation and active response in operational terms
- Can integrate with existing infrastructure instead of forcing a single replacement platform
Watch out for
- Public pricing does not expose a numeric list price
- Response authority, log sources, retention and tool licensing must be explicit in the quote
- Exact customer review evidence for MTDR is limited compared with broader Orange Cyberdefense services
Reviews
Review synthesis
Public customer evidence is useful but not broad. Gartner reviews for Orange Cyberdefense security services point to managed security and CyberSOC delivery, while practitioner discussion tends to describe Orange Cyberdefense as a capable but costly enterprise supplier. The main buying check is reference depth for the exact country, tooling and response scope.Customers like
- Review and practitioner sources point to mature managed-security delivery for larger environments
- Reddit practitioner discussion describes Orange Cyberdefense as a good supplier when budget allows
- Public sources support CyberSOC process, reporting and managed-service roles beyond basic alert forwarding
Watch out for
- Review volume for the exact MTDR offer is limited
- Practitioner discussion raises cost and occasional ticket-quality concerns
- Trustpilot evidence is sparse and not specific enough to describe MTDR service quality
Pricing
- Price
- Quote-based, private-offer signals
- Billing
- Custom
Questions to ask
- Which telemetry sources are included in the base MTDR scope, and which require a separate managed service or project?
- Which containment actions can Orange Cyberdefense take without approval in our EDR, NDR, SIEM or cloud tools?
- Does the quote include Core Fusion access, tool licensing, log retention, incident response hours and regional CyberSOC coverage?
Integrations
- SIEM
- Customer SIEM
- Microsoft Sentinel
- Orange Cyberdefense Core Fusion
- EDR / Endpoint
- Palo Alto Networks Cortex XDR
- Microsoft Defender
- Customer EDR
- Cloud
- Microsoft Azure
- Microsoft 365
- Other
- Orange Cyberdefense Core Fusion
- Palo Alto Networks Cortex XDR
- Microsoft Sentinel
- Network detection and response sensors
- OT and industrial telemetry
- Security orchestration and response workflows
Editorial notes
Why contain threats
Official MTDR and XDR material supports analyst investigation plus active response actions, including endpoint isolation and malicious-file removal. That is more than investigation advice, but the public offer still reads as contracted MDR/XDR scope rather than Orange Cyberdefense running the buyer's entire SOC.
Platform boundary
Orange Cyberdefense can work around existing infrastructure and named technology partners, but buyers should not assume every SIEM, EDR, cloud, OT or identity source is included. The quote should separate Core Fusion, tool licensing, source onboarding, retention and any separate managed security services.
Review boundary
Public customer evidence for the exact MTDR offer is thinner than Orange Cyberdefense's market presence. Gartner and practitioner threads give useful signals about CyberSOC coverage and enterprise delivery, but buyers should ask for references that match their region, telemetry mix and response authority.
Questions
Does Orange Cyberdefense only notify the customer after an alert?
No. This profile classifies Managed Threat Detection and Response as Contain threats because public MTDR and XDR material supports analyst investigation plus active response actions where the customer's tools and rules of engagement allow them.
Is Orange Cyberdefense MTDR a full managed SOC?
Not by default. Orange Cyberdefense has broad managed security and CyberSOC capabilities, but this profile covers the MTDR/XDR offer. Buyers should verify whether SIEM operation, tuning, response playbooks, incident response hours and broader SOC tasks are included in the contract.
Is Orange Cyberdefense pricing public?
No numeric public list price was found. AWS Marketplace uses private-offer signals, so buyers need a scoped quote that separates service fees, tool licensing, telemetry volume, retention and response coverage.