Overall Comment:"Critical Start has been great to work with since we signed up with them over three years ago. They have helped manage our alerts, tune out the vast majority of false positives, and added a 24/7 capability we would not be able to afford to have in-house. They keep adding functionality to their web platform and mobile application to make it easier to use and to provide more reporting information. We purchased our XDR product before selecting Critical Start as a service provider and they have never once tried to get us to change products."
Critical Start provides 24/7 SOC coverage at a fraction of the cost of providing this in-house. Their web platform and mobile application make it rather simple to work with their team and the alerts that automation have not been able to clear. For most alerts I receive an email and a notification from the mobile application that action is needed and for critical alerts I also get a phone call to ensure the alert is handled quickly.
Early on the automation in their platform would close alerts in my XDR system without notes. That has been resolved and I can find the reason the alert was cleared. I would like to be able to get my XDR system tuned so that fewer false positives would ever reach their system as I still receive those notifications.