ITC Secure vs Ontinue
ITC Secure and Ontinue are both Microsoft-ecosystems that work with your existing tools. ITC Secure targets Mid-market and Enterprise organizations, while Ontinue serves Mid-market and Enterprise. ITC Secure includes 3 attack surfaces in base pricing (Endpoint, SaaS, Identity), compared to 5 for Ontinue (Endpoint, Cloud, SaaS, Identity, Network).
Buyer brief
ITC Secure and Ontinue are both Microsoft-ecosystems that work with your existing tools. ITC Secure targets Mid-market and Enterprise organizations, while Ontinue serves Mid-market and Enterprise. ITC Secure includes 3 attack surfaces in base pricing (Endpoint, SaaS, Identity), compared to 5 for Ontinue (Endpoint, Cloud, SaaS, Identity, Network).
Ontinue offers broader coverage (5 surfaces vs. 3). ITC Secure may suit teams that need depth over breadth.
At a glance
| FIELD |  |  |
|---|---|---|
| Best fit | Microsoft-centered buyers that want a verified managed XDR provider rather than a pure-play MDR platform | Organizations heavily invested in Microsoft E5/Defender ecosystem |
| Price | Custom quote | Not published |
| Response authority | 0/6 actions · Configurable | 6/6 actions · Configurable |
| Stack | Works with existing stack | Works with existing stack |
| Data access | Dashboards | Full query access |
| Warranty | None listed | None listed |
- Best fit
- Microsoft-centered buyers that want a verified managed XDR provider rather than a pure-play MDR platform
- Price
- Custom quote
- Response authority
- 0/6 actions · Configurable
- Stack
- Works with existing stack
- Data access
- Dashboards
- Warranty
- None listed
- Best fit
- Organizations heavily invested in Microsoft E5/Defender ecosystem
- Price
- Not published
- Response authority
- 6/6 actions · Configurable
- Stack
- Works with existing stack
- Data access
- Full query access
- Warranty
- None listed
Detailed comparison
| FIELD | ITC SecureTECH-AGNOSTIC | OntinueTECH-AGNOSTIC |
|---|---|---|
| Fit | ||
| Target size | Mid-market, Enterprise | Mid-market, Enterprise |
| Sentiment | Mixed | Very Positive |
| Your stack | ||
| Approach | Works with your tools | Works with your tools |
| EDR integrations | Microsoft Defender | Microsoft Defender for EndpointMicrosoft Defender 365 XDR |
| SIEM integrations | Microsoft Sentinel | Microsoft Sentinel |
| Coverage | EPEndpoint: CoveredCloudCloud: LimitedIDIdentity: CoveredSaaSSaaS: CoveredNetNetwork: LimitedOTOT/IoT: Limited | EPEndpoint: CoveredCloudCloud: CoveredIDIdentity: CoveredSaaSSaaS: CoveredNetNetwork: CoveredOTOT/IoT: Optional add-on |
| Response | ||
| Response type | Active Remediation | Active Remediation |
| Approval policy | Configurable | Configurable |
| Response actions | Alert and notify only | IsolateKill processContainDisable accountsQuarantineCustom playbooks |
| IR included | Separate | ✓ Included |
| Cost | ||
| Price range | Not published | Not published |
| Minimum seats | None | None |
| Breach warranty | – | – |
| More details | ||
| Requires own agent | No | No |
| Endpoints | ✓ Included | ✓ Included |
| Cloud workloads | ~ Limited | ✓ Included |
| Identity | ✓ Included | ✓ Included |
| SaaS apps | ✓ Included | ✓ Included |
| Network | ~ Limited | ✓ Included |
| OT/ICS | ~ Limited | + Optional |
| Threat hunting | ✓ Included | ✓ Included |
| Response SLA | Not disclosed | Not disclosed |
| 24/7 coverage | ✓ | ✓ |
| Pricing model | Custom quote. ITC Secure does not publish MXDR powered by Pulse package pricing. | Per-user or per-asset subscription |
| Hidden cost warnings | Public pages do not publish MXDR pricing, contract minimums or service-credit language.. The service is Microsoft-centric, so Microsoft licensing, tenant readiness and log ingestion should be priced before comparison.. ITC Secure publishes broad MXDR components, including endpoint, identity, Office 365, cloud apps, storage, vulnerability management and OT. Buyers should confirm which components are included in their quote.. Public pages do not define default response authority, so containment permissions and approval rules should be written into the contract.. Incident response is listed as a separate service, so buyers should confirm what is included in MXDR versus a separate incident-response engagement. | Requires Microsoft E5 or Defender licenses as prerequisite. Microsoft Sentinel consumption costs are separate and usage-based. Add-on services (vulnerability mitigation, IoT, phishing) increase total cost |
| Data portability | Partial | Full |
| Contract terms | Custom, MXDR powered by Pulse, Managed services, Incident Response | Annual, Multi-year |
| Channels | PortalEmailPhone | TeamsEmailPortalPhone |
| Data access | Dashboards | Full query access |
| Dedicated analyst | – | ✓ |
| SOC regions | North AmericaEuropeAsia-Pacific | |
| Onboarding | Not published. ITC Secure publishes security engineering and SOC onboarding as a build-and-deploy service, but no standard MXDR implementation duration was found. | 1-5 days for 24/7 coverage, 10 days fully operational |
| Industry focus | Not published | Financial ServicesHealthcareManufacturingTechnologyProfessional Services |
| MTTD | Not published | Not published |
| MTTR | Not published | Up to 50% reduction in mean time to investigate via Autonomous Investigator (vendor-published) |
| Community view | No meaningful MDR-specific buyer-review signal was found in major English-language review communities during this pass. The public buyer case rests on ITC Secure's Microsoft focus, Microsoft Verified Managed XDR status, Pulse portal, long managed-service history and broad MXDR service components. Buyers should validate pricing, response authority, SOC operating model and exact component inclusion directly. | Gartner Peer Insights 4.8/5 (22 eligible reviews, 65 total ratings) with 97% willingness to recommend. Gartner Strong Performer in VoC for MDR 2024. Praised for Microsoft expertise and Teams-based collaboration. |
| Compliance | ISO 27001Cyber Essentials PlusISO/IEC 20000-1 | ISO 27001ISO 27017ISO 27018 |
| Certifications | Microsoft Verified Managed XDRMicrosoft Solutions Partner in SecurityMicrosoft Solutions Partner in Modern WorkMicrosoft Solutions Partner in Infrastructure AzureMicrosoft Intelligent Security AssociationCyber Essentials PlusISO/IEC 20000-1ISO/IEC 27001Great Place to Work Certification | Microsoft Cloud Security Advanced Specialization (one of ~50 Microsoft partners worldwide)Microsoft Threat Protection CertificationMicrosoft-verified MXDR Service ProviderISO 27001ISO 27017ISO 27018 |
| Founded | – | 2023 |
| Data retention | Not published. ITC Secure says Pulse provides visibility into customer security posture, activities, incident trends, Microsoft license consumption and service metrics. No standard public MXDR log-retention period or data-residency term was found. | Not publicly disclosed. Data resides in customer's own Sentinel instance. |
| API available | – | ✓ |
| Website | Visit → | Visit → |
FAQ
What is the main difference between ITC Secure and Ontinue?
ITC Secure is a Microsoft-ecosystem that is technology-agnostic (works with your existing tools). Ontinue is a Microsoft-ecosystem that is technology-agnostic (works with your existing tools). ITC Secure covers 3 attack surfaces in base pricing vs. 5 for Ontinue.
How do ITC Secure and Ontinue differ in response capabilities?
ITC Secure supports 0 autonomous actions (none) and approval is configurable. Ontinue supports 6 autonomous actions (account disable, custom playbooks, endpoint isolation, file quarantine, network containment, process termination) and approval is configurable. Incident response is not included with ITC Secure and included with Ontinue.
How does ITC Secure pricing compare to Ontinue?
ITC Secure pricing: Not published. Ontinue pricing: Custom-quoted pricing. Watch for with ITC Secure: Public pages do not publish MXDR pricing, contract minimums or service-credit language.; The service is Microsoft-centric, so Microsoft licensing, tenant readiness and log ingestion should be priced before comparison.. Watch for with Ontinue: Requires Microsoft E5 or Defender licenses as prerequisite; Microsoft Sentinel consumption costs are separate and usage-based.
Should I choose ITC Secure or Ontinue?
Choose ITC Secure if: microsoft-centered buyers that want a verified managed XDR provider rather than a pure-play MDR platform. Choose Ontinue if: organizations heavily invested in Microsoft E5/Defender ecosystem. ITC Secure is not ideal for buyers that need public MDR pricing before sales. Ontinue is not ideal for organizations using non-Microsoft EDR (CrowdStrike, SentinelOne, etc.).
Daylight Security
AI-native MDR for buyers comparing active remediation across endpoint, cloud, identity, and SaaS. Daylight works with existing EDR/SIEM stacks and uses ChatOps-native collaboration, so it can be a useful third reference point in this comparison.