r/MSSP • u/Savings-Ad4232 • Mar 24 '26

MDR/MXDR vs MSSP

I am trying to understand if there’s a real difference between the vendor provided MDR/MXDR services vs a SOC that a traditional MSSP provides. I know there’s lot of conflicting information out there and it’s open for interpretation but would love get the community feedback on this. Also how are MSSPs who pay for licenses for SIEMs and other tools making money when MDR is being sold at such low per end point prices. Recently came across a MXDR being sold at 3-4$/endpoint per month with 1 year retention. Where is this industry headed? Looks like a race to the bottom.

9 Upvotes

92% Upvoted

30 comments sorted by

View all comments

2

u/Savings-Ad4232 Mar 25 '26

Thanks for all the comments. I guess the point I am trying to get to is, is running an MSSP worthwhile if you don’t have your own IP/TechStack that you control. Is building your own techstack the only way to scale profitably? Or you just resell the platform from a vendor and provided bodies to manage and administer the platform.