# What is the difference between MDR and EDR?

EDR is software, MDR is a service run by people. EDR (endpoint detection and response) is installed on your computers and servers; it watches processes and files, raises alerts and lets an administrator isolate a machine. Someone still has to read those alerts and decide. MDR (managed detection and response) is a provider whose analysts read the alerts for you, around the clock, and respond within an agreed time. Most MDR services bring or require their own EDR, and some also take network or cloud data. So the real question is not EDR or MDR, but who reads the alerts at night. If you have staff or an IT provider on call, EDR plus network detection may be enough. If nobody can react outside office hours, a managed service fills that gap. NetSenX is detection software, not an MDR: it explains each alert so that your team or provider can act on it.

FAQ: [NDR, EDR, SIEM, XDR, MDR](https://netsenx.com/en/faq/tools) · https://netsenx.com/en/faq/what-is-the-difference-between-mdr-and-edr

## Read next

- https://netsenx.com/en/what-is-ndr
- https://netsenx.com/en/blog/2026-09-24_ndr-vs-edr-vs-siem

## Related questions

- [How do I choose an MDR provider for a small company?](https://netsenx.com/en/faq/how-to-choose-an-mdr-provider-for-a-small-company)
- [Should we outsource the SOC or build one?](https://netsenx.com/en/faq/should-we-outsource-the-soc-or-build-one)
- [Do we need a SOC if we have only one IT administrator?](https://netsenx.com/en/faq/do-we-need-a-soc-with-only-one-it-administrator)
- [Can a small IT team run network detection without a SOC?](https://netsenx.com/en/faq/can-a-small-it-team-run-network-detection-without-a-soc)
- [Why do companies use a SIEM?](https://netsenx.com/en/faq/why-do-companies-use-a-siem)