Kudelski Security
Pure-play MDR from the cybersecurity arm of Swiss-listed Kudelski Group. Technology-agnostic, with four MDR variants (Resolute flagship, plus CrowdStrike, Microsoft, and OT-specific options) so buyers pick the wrapper that fits their existing stack. One of the few MDR providers with a dedicated OT/ICS offering and a Counter Adversary Unit doing original threat research.
Buyer fit
Good fit when
- ✓Mid-market and enterprise teams with existing EDR/SIEM who want a technology-agnostic MDR layer, not a rip-and-replace
- ✓Critical infrastructure operators or manufacturers who need dedicated OT/ICS MDR coverage
- ✓European organizations that want a Swiss-headquartered provider with multi-language support and EU presence
Watch out when
- ×SMBs or budget-conscious buyers. No public pricing and enterprise positioning signals premium cost.
- ×Buyers who weight peer reviews heavily. Near-zero presence on G2, PeerSpot, and Reddit.
- ×Teams that want MITRE-validated detection metrics. Kudelski's numbers are vendor-published only.
Coverage
EDR
SIEM
Cloud
Additional capabilities
Incident response
Pricing
What costs extra
- –DFIR services (separate engagement)
- –MDR for OT (specialized offering, may be separate pricing)
- –Specific pricing varies by MDR variant (Resolute vs CrowdStrike vs Microsoft vs OT)
Cost caveats
- –Four MDR variants (Resolute, CrowdStrike, Microsoft, OT) with different pricing. Clarify which product fits before quoting.
- –DFIR beyond containment is a separate paid engagement, not included in base MDR
- –OT/ICS coverage requires the dedicated MDR for OT variant, priced separately
- –No public pricing at all. Enterprise positioning suggests premium cost.
Pricing compiled from public sources. Verify directly with the provider.
Team and access
Certifications
Reputation
Well-recognized by analysts (Gartner 8 years running, Forrester Strong Performer, Bloor Champion) but almost invisible in community channels. Zero meaningful reviews on G2 or PeerSpot, no Reddit discussion. Enterprise and critical infrastructure buyers don't post much, which leaves a validation gap.
What customers praise
- ✓8 consecutive years in Gartner MDR Market Guide, plus Forrester and Bloor recognition
- ✓Dedicated OT/ICS MDR offering, a rare capability among MDR providers
- ✓Publicly traded parent (Kudelski Group, SIX Swiss Exchange) adds financial stability
Common complaints
- ×Near-zero customer reviews on G2, PeerSpot, or Gartner Peer Insights
- ×No Reddit practitioner discussion found, limiting real-world validation
- ×No public pricing, forcing buyers into a sales process to even qualify
No practitioner discussion found on r/msp, r/cybersecurity, or r/sysadmin. Their enterprise and critical infrastructure customer base likely doesn't post on these forums, but it means community validation is essentially absent.
Questions to ask
- 1.
Which MDR variant (Resolute, CrowdStrike, Microsoft, OT) fits our environment, and what is the pricing difference between them?
- 2.
You have near-zero public reviews on G2, PeerSpot, or Reddit. Can you provide direct customer references in our industry and region?
- 3.
What is the data export process if we leave? In what format can we get our 12 months of hot data out of FusionDetect?
- 4.
How many analysts staff the three Cyber Fusion Centers, and what is the analyst-to-customer ratio?
- 5.
For MDR for OT, what specific protocols and industrial systems are supported beyond Claroty and Armis?
- 6.
What does the Counter Adversary Unit actually deliver to MDR customers day-to-day, beyond what a standard threat intel feed provides?
- 7.
Your MTTR and noise reduction figures are vendor-published. Have any third parties or customers independently validated these numbers?
Evidence
Sources reviewed
Public-data caveats
- –No public contractual response-time SLA is recorded for this profile.
- –No public breach warranty is recorded.
- –Response authority may depend on pre-approval and contract scope.
- –MDR analyst headcount or analyst-to-customer ratio is not public.
Also consider
Information compiled from public sources. Verify details directly with the provider before making decisions.