What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Secureworks announced Taegis ManagedXDR Plus on July 16, 2024 as a managed detection and response (MDR) option for mid-market organizations with limited security budgets or staff. The service is now documented as Taegis MDR Plus, a service level within Taegis MDR. Its current description includes 24×7 monitoring and investigations, threat hunting, custom use-case development, analyst access, a technical account manager and defined professional-services units. The 2024 launch differentiators—customer-tailored AI use cases, additional AI-assisted hunting, named expert support and proactive security services—describe Secureworks’ positioning, not independently verified customer outcomes.

What Secureworks launched in 2024

The July 16, 2024 announcement introduced three Taegis ManagedXDR tiers: ManagedXDR, ManagedXDR Plus and ManagedXDR Enhanced. Secureworks presented Plus as the middle option for mid-market customers that needed more tailoring and guidance than the base service without adopting the most extensive tier.

Kyle Falkenhagen, then Secureworks’ chief product officer, described the offer this way: “Taegis ManagedXDR Plus enables mid-market customers to take full advantage of the Taegis platform and our in-house experts to up-level their security to an enterprise level without breaking their budget.” That is an executive description of the commercial offer, not a measured guarantee of enterprise-equivalent results.

The risk figure used in the announcement

Secureworks attributed the statement that 30% of mid-market companies experienced at least one ransomware attack in 2023 to the RSM US Middle Market Business Index Special Report: Cybersecurity, 2024. The announcement does not provide the report’s sample size, field dates or definition of “mid-market,” so the figure should not be generalized to all companies or all ransomware incidents.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Why the name is different now

Current Sophos Taegis release notes dated June 8, 2026 record a terminology change from Managed XDR to Taegis MDR. Current service material therefore calls the product Taegis MDR Plus and describes it as a level of Taegis MDR. The change is a product and naming evolution, not evidence that the 2024 service announcement was a separate technology.

A 2025 company tiers datasheet lists Taegis MDR, MDR Plus and MDR Enhanced. It also says availability varies by region, so buyers should confirm that the Plus level can be contracted in their location.

What Taegis MDR Plus includes today

The current service description is more useful for evaluating the offering than the original launch language. It identifies these components:

  • 24×7 security monitoring and investigations on the Taegis XDR platform.
  • Threat detections, case handling and threat-response actions.
  • 24×7 access to security analysts.
  • Threat hunting and custom use-case development.
  • A technical account manager.
  • Professional-services engagements.
  • Four service units during each 12-month service term for proactive services or specified emergency incident response, with additional units available for purchase.

The service description also sets conditions for onboarding completion and assigns deployment responsibilities to the customer. Those contractual details matter: a subscription is not operational simply because it has been ordered.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What Secureworks said Plus added over the base level

Customer-specific detection logic

The launch positioned Plus around AI-enriched use cases that could be configured for a customer’s environment. In practice, a buyer should ask which data sources, business processes, compliance requirements and industry-specific behaviors can be reflected in those use cases, who approves changes and how the resulting detections are reported.

More hunting and custom requests

Secureworks said Plus included more AI-assisted threat hunts than its then-existing ManagedXDR level and allowed custom hunt requests. Current documentation confirms threat hunting as a service component, but prospective customers should obtain the cadence, request process, deliverables and escalation path in writing.

Named expert support

The announcement described premium support with named experts and one-to-one guidance. Current material identifies 24×7 analyst access and a technical account manager. Ask whether the named contact is available continuously or during agreed business hours, which channels are supported, and who has authority to contain systems or take other response actions.

Proactive security work

The launch offered a choice of proactive services intended to find security-posture gaps and improve resilience. The current four-unit allowance gives this promise a practical boundary: clarify which engagements consume units, how much work each unit represents, what emergency response qualifies and what extra units cost.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How the tiers should be compared

The public material names the tiers but does not publish a complete entitlement matrix. The following is the documented structure; unspecified cells require a current quote or agreement.

Tier What is publicly established What to verify
Taegis MDR Base Taegis MDR service level; current MDR material covers monitoring, investigations and response. Hunting cadence, customization, service units, support model and response authority.
Taegis MDR Plus 24×7 monitoring and investigations, analyst access, threat hunting, custom use-case development, technical account manager and four service units per 12-month term. Regional availability, onboarding threshold, hunt cadence, included response scope and price for additional units.
Taegis MDR Enhanced Named as a higher Taegis MDR tier in the company’s tier materials. All entitlements, staffing, proactive work, response authority and commercial terms.

The 2024 announcement also promoted transparent inclusive pricing, direct access to security experts within 90 seconds, one year of log retention and hundreds of integrations across all tiers. These are announcement claims, not independently tested service-level guarantees. Confirm the current service-level agreement, retention terms and integration list before relying on them.

Questions to answer before signing

Telemetry and integrations

Confirm support for the endpoint, cloud, identity and network sources that matter to your environment, and identify who deploys and maintains each connector. Taegis guidance recommends the Sophos Endpoint Agent while listing other supported agents. It cautions against integrating two endpoint agents into XDR because duplicate telemetry or detections and performance problems may result.

Onboarding and operational readiness

  • Which endpoints and data sources must be connected before onboarding is considered complete?
  • What configuration, credentials and testing must the customer provide?
  • When does 24×7 monitoring begin, and what happens if coverage is incomplete?
  • How are false positives, tuning requests and new use cases handled?

Hunting and response

  • How many hunts are included, and over what period?
  • Can the customer submit custom hunt requests, and what qualifies as one request?
  • Are containment, isolation, blocking or remediation actions automatic, analyst-approved or customer-approved?
  • What evidence and executive reporting accompany a case or hunt?

Commercial terms

Request a current quote rather than assuming the 2024 “transparent pricing” wording means a public price list. Confirm the contract term, service-unit accounting, additional-unit rates, log-retention period, termination provisions and regional availability.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Who is a sensible fit?

MDR Plus is most relevant to a mid-market organization that needs continuous monitoring and investigation but does not have enough internal staff to run a full security operations center. The named account-management, hunting and proactive-service elements may also suit a team that can operate security controls but needs outside expertise for investigations and improvement planning.

It may be a poor fit if the organization cannot provide the required telemetry, wants unrestricted incident-response work without unit limits, requires a guarantee of a particular response time, or operates in a region where the tier is unavailable. Those are contracting and implementation questions, not conclusions that can be drawn from the launch announcement alone.

Frequently Asked Questions

Is Taegis ManagedXDR Plus still the product’s current name?

Current Sophos Taegis materials call it Taegis MDR Plus, a service-level option within Taegis MDR. The ManagedXDR name refers to the July 2024 launch terminology.

Does MDR Plus include incident response?

Current service material provides four service units per 12-month term for proactive services or specified emergency incident response. The exact scope and the price of additional units must be confirmed in the agreement.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Is Taegis MDR Plus available everywhere?

No universal availability is established. Secureworks’ tier materials state that availability varies by region; request confirmation for your location.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.