Choose NCC Group or Secureworks
Choose NCC Group if
- European enterprise and government organizations running Microsoft Sentinel or Splunk as their SIEM
- Buyers wanting MDR from a provider with deep incident response and consulting capability in one firm
- UK and Benelux organizations wanting a locally operated SOC with Dutch government security heritage
Choose Secureworks if
- Enterprise organizations wanting open XDR with existing CrowdStrike, Defender, SentinelOne, or Carbon Black EDR
- Organizations valuing deep threat intelligence from CTU (now Sophos X-Ops)
- Companies needing OT/ICS MDR coverage alongside IT MDR
What’s actually different
Buyer brief
Fit. NCC Group and Secureworks are both Services firms that work with your existing tools. NCC Group targets Mid-market and Enterprise organizations, while Secureworks serves Mid-market and Enterprise.
FAQ
What is the main difference between NCC Group and Secureworks?
NCC Group is a Services firm that is technology-agnostic (works with your existing tools). Secureworks is a Services firm that is technology-agnostic (works with your existing tools). SLA commitments differ: NCC Group offers Not disclosed, Secureworks offers ≤1 hour.
How do NCC Group and Secureworks differ in response capabilities?
NCC Group supports 5 autonomous actions (endpoint isolation, process termination, network containment, file quarantine, custom playbooks) and approval is configurable. Secureworks supports 4 autonomous actions (endpoint isolation, network containment, account disable, custom playbooks) and approval is configurable.
How does NCC Group pricing compare to Secureworks?
NCC Group pricing: Not published. Custom quotes only. Secureworks pricing: No vendor list price is published. AWS Marketplace shows real dimensions: Taegis XDR at $43,000/yr for 1,000 endpoints (XDR, not full MDR) and a Taegis MDR Combo at $550,055/yr for 10,001-25,000 endpoints. A public K-12 procurement record (Feb 2024, pre-acquisition) shows Managed XDR for up to 500 endpoints quoted at $61,975 through CDW-G, about $124 per endpoint. Blended third-party buyer data (Vendr) reports a $91,350/yr median across the Secureworks suite with a $15,200 to $421,751/yr range. Buyer-reported per-endpoint figures span roughly $70-$170 (pre-acquisition). Watch for with NCC Group: MXDR for Microsoft and MXDR for Splunk are separate offerings. Customers using both Sentinel and Splunk may face separate engagements.; Only Microsoft Defender and CrowdStrike EDR integrations are confirmed. Other EDR platforms may not be supported.. Watch for with Secureworks: Taegis Endpoint Agent reaches end of support on 2027-07-31 (Japan 2028-07-31); all customers must migrate to Sophos Endpoint. The license is included, but the fleet-wide agent swap is a migration project to budget before that date.; Sophos acquisition closed Feb 2025; secureworks.com/services/mdr now redirects to the Sophos MDR page and Sophos Fusion (GA reported 2026-08-15) points toward long-term platform consolidation. Confirm Taegis roadmap continuity before multi-year commitments..