Expel MDR
The facts below are what the maker publishes about Expel MDR, checked and dated. Our editors have not written about it yet.
Plans and prices
From Expel MDR's own pricing page, checked 11 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Premium | — | Seat-count sized · includes Select · unlimited technology integrations · Workbench API access · dedicated engagement manager · Annual subscription; contact Expel for pricing |
| Select | — | Seat-count sized · includes Starter · cloud control plane and SaaS app coverage · multi-surface auto-remediation · Annual subscription; contact Expel for pricing |
| Starter | — | Seat-count sized · cloud, identity, network, and endpoint coverage · endpoint auto-remediation · Workbench · Annual subscription; contact Expel for pricing |
The facts
Each one read from Expel MDR's own pages, with the date it was checked.
What it does
- AI and analysts
- Ruxie enriches and triages alerts and proposes a disposition with evidence, while an Expel analyst makes the decision.checked 11 Oct 2026
- Coverage
- Expel says it monitors ten attack surfaces, including AI, cloud infrastructure, email, endpoint, identity, network, SaaS, Kubernetes, logs and SIEM, and operational technology.checked 11 Oct 2026
- Data handling
- Expel says customer telemetry is stored in U.S. infrastructure, encrypted with TLS 1.2 or higher in transit and AES-256 at rest, and alert data is retained for up to 15 months, configurable by contract.checked 11 Oct 2026
- Integrations
- Expel lists 160+ coverage options, including CrowdStrike, Okta, AWS, Microsoft, Google Cloud, Splunk, and Wiz; most connect directly by API.checked 11 Oct 2026
- Limits
- Expel says pricing is not published and the three MDR packages are annual subscriptions sized by seat count; phishing and threat hunting are offered as add-ons.checked 11 Oct 2026
- Onboarding
- Expel says most customers reach full operational coverage in two to four weeks and individual tool connections take minutes through API integrations.checked 11 Oct 2026
- Package inclusions
- All MDR packages include 24×7 SOC coverage, Workbench access, threat investigation and response, auto-remediation capabilities, and transparent reporting; analyst time and incident escalations have no additional fees.checked 11 Oct 2026
- Response time
- Expel reports a 14-minute mean time to remediate high and critical incidents when remediation is fully automated.checked 11 Oct 2026
- Security certifications
- Expel lists ISO/IEC 27001:2022, ISO/IEC 27701:2019, SOC 2 Type II Security, PCI DSS SAQ-D, CSA STAR Level 1, and NIST SP 800-171 Rev. 2 among its active certifications and attestations.checked 11 Oct 2026
- Service
- Expel MDR monitors customers’ existing security tools around the clock, investigates alerts, and remediates confirmed threats.checked 11 Oct 2026
- Support
- Expel says its service includes 24×7 coverage, support from onboarding through everyday questions, and direct access to SOC experts.checked 11 Oct 2026
- Workbench
- Workbench connects to customer security tools, displays alerts and investigations handled by Expel, and records the actions Expel takes; it does not replace a SIEM.checked 11 Oct 2026
The company
- Founded
- 2016checked 28 Sep 2026
- Headquarters
- Herndon, Virginia, United Stateschecked 28 Sep 2026
Alternatives to Expel MDR
- 1
Blumira
Free planAndroidiOSWebAPI8.2Free plan - 2
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 3
Acronis Cyber Disaster Recovery Cloud
AndroidiOSWebLinux6.8 - 4
eSentire MDR
AndroidiOSWebAPI6.6From $17 a month - 5
Google Cloud Secret Manager
Free planWeb6.5From $0.02 a month - 6
Huntress Managed Detection and Response
WebAPILinuxmacOS6.5From $7.99 a month