Expel MDR

Plans and prices

Every plan, in full

On the record

AI and analysts

Ruxie enriches and triages alerts and proposes a disposition with evidence, while an Expel analyst makes the decision.expel.com · read 11 Oct 2026

Coverage

Expel says it monitors ten attack surfaces, including AI, cloud infrastructure, email, endpoint, identity, network, SaaS, Kubernetes, logs and SIEM, and operational technology.expel.com · read 11 Oct 2026

Data handling

Expel says customer telemetry is stored in U.S. infrastructure, encrypted with TLS 1.2 or higher in transit and AES-256 at rest, and alert data is retained for up to 15 months, configurable by contract.expel.com · read 11 Oct 2026

Integrations

Expel lists 160+ coverage options, including CrowdStrike, Okta, AWS, Microsoft, Google Cloud, Splunk, and Wiz; most connect directly by API.expel.com · read 11 Oct 2026

Limits

Expel says pricing is not published and the three MDR packages are annual subscriptions sized by seat count; phishing and threat hunting are offered as add-ons.expel.com · read 11 Oct 2026

Onboarding

Expel says most customers reach full operational coverage in two to four weeks and individual tool connections take minutes through API integrations.expel.com · read 11 Oct 2026

Package inclusions

All MDR packages include 24×7 SOC coverage, Workbench access, threat investigation and response, auto-remediation capabilities, and transparent reporting; analyst time and incident escalations have no additional fees.expel.com · read 11 Oct 2026

Response time

Expel reports a 14-minute mean time to remediate high and critical incidents when remediation is fully automated.expel.com · read 11 Oct 2026

Security certifications

Expel lists ISO/IEC 27001:2022, ISO/IEC 27701:2019, SOC 2 Type II Security, PCI DSS SAQ-D, CSA STAR Level 1, and NIST SP 800-171 Rev. 2 among its active certifications and attestations.expel.com · read 11 Oct 2026

Service

Expel MDR monitors customers’ existing security tools around the clock, investigates alerts, and remediates confirmed threats.expel.com · read 11 Oct 2026

Support

Expel says its service includes 24×7 coverage, support from onboarding through everyday questions, and direct access to SOC experts.expel.com · read 11 Oct 2026

Workbench

Workbench connects to customer security tools, displays alerts and investigations handled by Expel, and records the actions Expel takes; it does not replace a SIEM.expel.com · read 11 Oct 2026

Alternatives to Expel MDR

B BlumiraAndroidiPhone & iPad+6 MD Microsoft Defender for BusinessAndroidiPhone & iPad+3 EM eSentire MDRAndroidiPhone & iPad+2 AC Acronis Cyber Disaster Recovery CloudAndroidiPhone & iPad+5 HM Huntress Managed Detection and ResponseWebWindows+3 27 24-7 SOC MDR BD Binary Defense MDRWebWindows+2 LM LevelBlue MDRAndroidiPhone & iPad+1

Every alternative, ranked