Buyer fit
Good fit when
- ✓MSPs wanting to consolidate EDR, SASE, SIEM, MDR, and GRC into one platform
- ✓SMBs with lean security teams wanting a dedicated DRAM at an accessible price
- ✓Greenfield deployments with no existing EDR/SIEM/SASE investments to preserve
Watch out when
- ×Organizations with existing EDR/SIEM/SASE investments (requires full Todyl stack adoption)
- ×Enterprises needing formal SLAs with financial penalties or published detection metrics
- ×Buyers who need extensive independent validation (limited public reviews)
Coverage
5 of 6 attack surfaces in the base price; the rest are separately priced.
Platform
Additional capabilities
Incident response
Pricing
Three-tier packaging (Essentials, Advanced, Complete) launched September 2025.
Checked Jun 2026
How pricing works+−
Platform subscription starting at $250/month. Per-tier pricing not published.
Starting at $250/month (platform base). Per-tier and per-module pricing not published.
Cost caveats
- –Platform-native lock-in, must adopt full Todyl stack, cannot BYO EDR/SIEM/SASE
- –$250/month starting price is the base, unclear what modules are included at that tier
- –EDR is Elastic-based, not Todyl proprietary, custom rules layer on top of Elastic
What costs extra (2)+−
- –Higher tiers (Advanced, Complete) include more features and longer data retention
- –IR/DFIR beyond DRAM coordination requires external engagement
Warranty conditions+−
No direct breach warranty. SPECTRA partnership (April 2025) offers warranty-backed cyber insurance to MSP clients via a certification program, backed by Lloyd's of London syndicates.
Figures from named sources only (vendor pages, marketplaces, resellers, public procurement records, buyer reports), each dated. Nothing here is our estimate.
Team and access
Reputation
G2 4.6/5 (93 reviews). Software Finder 4.9/5 (14 reviews). PeerSpot listed but minimal reviews. MSP press is positive about tool consolidation. Limited independent buyer validation compared to established MDR vendors.
What customers praise
- ✓Genuine tool consolidation, one agent replaces 5+ products
- ✓Dedicated DRAM per customer with real SOC experience
- ✓Accessible starting price ($250/month) for a unified platform
Common complaints
- ×Full platform lock-in, cannot BYO EDR, SIEM, or SASE
- ×No formal SLA, no published detection metrics
- ×North America SOC only, no follow-the-sun
Questions to ask
- 1.
What is the total monthly cost for our environment under each tier (Essentials, Advanced, Complete)?
- 2.
What is the DRAM-to-customer ratio, and how many customers does each DRAM support?
- 3.
The EDR is Elastic-based. What custom rules and detection engineering does Todyl add on top?
- 4.
What data export options exist if we decide to leave the platform?
Evidence
Sources reviewed
Public-data caveats
- –No public contractual response-time SLA is recorded for this profile.
- –No public fixed price is recorded; compare only after a scoped quote.
- –No public breach warranty is recorded.
- –Response authority may depend on pre-approval and contract scope.
Also consider
Further reading
Independent research. Verify details directly with the provider before making decisions.