# What is MDR, and do we need it?

MDR (managed detection and response) is a service in which an outside team watches your security alerts around the clock and responds for you; you need it if nobody in your company can react to an alert at night or at weekends. It is a service, not a tool: the provider still relies on sensors such as EDR (endpoint detection and response) on your computers, and sometimes on network data. Before signing, check what the provider actually does at 03:00. Do they isolate a machine, or only send you an e-mail? Which sensors are included, and who owns the data if you leave? How fast do they respond, in writing? Many small companies combine automated detection with an on-call arrangement with their IT provider instead. NetSenX is software, not an MDR: it detects and explains alerts at any hour, and the alerts go to your team or your IT provider, who decide what to do.

FAQ: [NDR, EDR, SIEM, XDR, MDR](https://netsenx.com/en/faq/tools) · https://netsenx.com/en/faq/what-is-mdr-and-do-we-need-it

## Read next

- https://netsenx.com/en/what-is-ndr
- https://netsenx.com/en/blog/2026-09-24_ndr-vs-edr-vs-siem

## Related questions

- [What is the difference between MDR and EDR?](https://netsenx.com/en/faq/what-is-the-difference-between-mdr-and-edr)
- [How do I choose an MDR provider for a small company?](https://netsenx.com/en/faq/how-to-choose-an-mdr-provider-for-a-small-company)
- [Should we outsource the SOC or build one?](https://netsenx.com/en/faq/should-we-outsource-the-soc-or-build-one)
- [Do we need a SOC if we have only one IT administrator?](https://netsenx.com/en/faq/do-we-need-a-soc-with-only-one-it-administrator)
- [Can a small IT team run network detection without a SOC?](https://netsenx.com/en/faq/can-a-small-it-team-run-network-detection-without-a-soc)