Hey everyone, new here 👋 Been lurking for a bit while we plan our EDR project.
We're a team of five handling everything security, but we don't have a dedicated SOC. Most of our experience is in procurement and managing vendors, not deep hands-on detection engineering. I'm worried about buying something that's too complex to run or that would lock us into a massive MDR contract right away.
Looking for something that's effective out-of-the-box, with good automation and clear alerting. Strong ROI and clear SaaS pricing are huge for me. Also, how do you handle after-hours coverage without a 24/7 team?
Would love to hear from teams of a similar size. What's working for you, and what was the learning curve like? Any vendors we should avoid for our situation?
Cheers
Still learning.