Updated July 2026 · Refreshed quarterly. This is a living pricing index. Every figure below is copied from a cited vendor pricing page and carries its own "as of" date, so you can see exactly how current each number is. We re-check the numbers each quarter and re-stamp the dates when a vendor changes list pricing.
Managed detection and response (MDR) and endpoint detection and response (EDR) products span a wide price range in 2026: from $8.99 per endpoint per month for Huntress Managed EDR with a 24/7 SOC included, to $15 to $25 per endpoint per month for CrowdStrike Falcon Pro, with several vendors (Sophos, Arctic Wolf, Rapid7) publishing no list price at all and quoting per environment. This index aggregates the published per-endpoint figures already verified on our comparison pages into one reference table, each with its source and date. It does not rank the vendors or pick a winner. For a head-to-head verdict, follow the links to the individual comparisons; for a buyer's shortlist, see our best EDR solutions for small business guide.
Quick Answer: What MDR and EDR Cost Per Endpoint
Managed detection and response typically runs $9 to $75 per endpoint or user per month depending on scope, while raw EDR tooling alone runs about $3 to $10 per endpoint per month. On the transparent end, Huntress Managed EDR lists at $8.99 per endpoint per month with a 24/7 human SOC included, and Microsoft Defender for Business is $3.00 per user per month standalone (or bundled into Microsoft 365 Business Premium at $22.00 per user per month). CrowdStrike Falcon Pro is $15 to $25 per endpoint per month, and SentinelOne Singularity Core is $5 to $7 per endpoint per month. Sophos MDR, Arctic Wolf, and Rapid7 MDR are quote-only.
How to Read This Index
This is a data index, not a buyer's guide. The table lists each vendor's published per-endpoint list price where one exists, and marks the rest as quote-only. It is intentionally sorted alphabetically by vendor and is not a ranking. A few things to keep in mind when comparing the numbers:
- SOC included vs SOC extra. A low per-endpoint price does not always include a 24/7 human SOC. Some vendors bundle the analysts; others sell that coverage as a separate SKU, which changes the real cost of comparable protection.
- Per endpoint vs per employee vs per asset. Most vendors price per endpoint, but Blumira prices per employee and Rapid7 prices per asset. Those units are not interchangeable when you model a fleet.
- List price vs quote. Quote-only vendors do not publish per-endpoint dollar figures; their row records that fact and its source rather than an invented number.
- The "as of" date is the point. Security pricing moves. Each row shows the date the figure was last verified against the vendor's own page.
For the definitions behind these categories, see EDR vs MDR vs XDR: which endpoint security do you need?
MDR & EDR Per-Endpoint Pricing Table
Published list pricing and quote-only status for the MDR and EDR vendors covered across our comparison pages. Click any column header to sort. Prices are per endpoint per month unless the row notes otherwise.
| Vendor | Product / SKU | Published price | 24/7 SOC | Pricing model | As of | Source |
|---|---|---|---|---|---|---|
| Arctic Wolf | Aurora Managed Detection and Response | Quote-only (multi-year terms) | Included (Concierge) | Quote-only, scoped per environment | 2026-07-10 | arcticwolf.com |
| Blumira | Detect / Respond / Automate | $12 / $16 / $21 per employee/mo | Expert backup on Respond and above | Per-employee SIEM + XDR; unlimited ingestion, 1-yr retention | 2026-07-01 | blumira.com |
| CrowdStrike | Falcon Pro (+ Falcon Complete) | $15 to $25; Complete adds a 2 to 4x surcharge | Add-on (Falcon Complete) | Per-endpoint, tiered | 2026-05-08 | crowdstrike.com |
| Huntress | Managed EDR | $8.99 (12-mo term, no setup fees; tiers start at the 50-99 band) | Included | Transparent per-endpoint | 2026-07-01 | huntress.com |
| Microsoft | Defender for Business | $3.00 per user/mo standalone; bundled in M365 Business Premium ($22.00 per user/mo) | None (tooling only; no staffed SOC) | Bundled or standalone, up to 300 users | 2026-07-01 | microsoft.com |
| Rapid7 | Rapid7 MDR | Per-asset, quote-based (no public per-asset figure) | Included (24/7 SOC) | Asset-based, SIEM-backed (InsightIDR) | 2026-07-01 | rapid7.com |
| SentinelOne | Singularity (Core / Control / Complete / Commercial) | $5 to $7 (Core, monthly); annual list: Core $69.99, Control $79.99, Complete $179.99, Commercial $229.99 per endpoint/yr | Add-on (Vigilance Respond MDR) | Per-endpoint, tiered | 2026-06-16 | sentinelone.com |
| Sophos | Sophos MDR (Standard / Advanced / Complete) | Quote-only | Included (active response gated to Complete tier) | Per-endpoint, tiered, quote-only | 2026-07-10 | sophos.com |
The single biggest driver of a real apples-to-apples comparison is whether a 24/7 human SOC is included in the per-endpoint price or sold as a separate SKU. Huntress, Arctic Wolf, Sophos MDR (at the Complete tier), and Rapid7 MDR include analyst-driven response; CrowdStrike (via Falcon Complete) and SentinelOne (via Vigilance Respond MDR) sell that coverage on top of the platform license; and Microsoft Defender for Business is endpoint tooling with no staffed human response at all.
Related Managed-Security List Prices (Per Unit)
Beyond per-endpoint EDR, Huntress is one of the few vendors that publishes per-unit list pricing for the adjacent managed modules many buyers bundle. These are useful reference points when you scope a full managed-security program rather than endpoint coverage alone.
| Module | Published price | Unit | As of | Source |
|---|---|---|---|---|
| Huntress Managed ITDR | $4.80 | Per licensed identity / mo | 2026-07-01 | huntress.com |
| Huntress Managed SIEM | $4.00 | Per data source / mo | 2026-07-01 | huntress.com |
| Huntress Managed SAT | $2.08 | Per learner / mo (50-99 band) | 2026-07-01 | huntress.com |
Where the Numbers Come From
Every figure in this index is copied from an existing Unió Digital comparison page, where it was verified against the vendor's own pricing page before publication. Nothing here is estimated or modeled. To see the full context behind any single number, including what each price does and does not include, read the head-to-head comparison it comes from:
- Huntress vs CrowdStrike and Microsoft Defender vs Huntress
- Huntress vs SentinelOne and Microsoft Defender vs SentinelOne
- Huntress vs Sophos MDR and Huntress vs Arctic Wolf
- Huntress vs Blumira and Huntress vs Rapid7 MDR
- MDR vs SIEM for the broader per-unit cost model
Because it aggregates prices, this index deliberately does not tell you which product to buy. That decision depends on your endpoint count, whether you have an in-house security team, and which modules you need. Our best EDR solutions for small business buyer's guide works through that selection, and our managed cybersecurity team can scope any of these platforms for your environment.
Frequently Asked Questions
How much does MDR cost per endpoint in 2026?
Managed detection and response typically runs $9 to $75 per endpoint or user per month depending on scope. On the transparent end, Huntress Managed EDR with a 24/7 SOC lists at $8.99 per endpoint per month. A fuller managed program that adds identity and email coverage runs $30 to $75 per user per month. Vendors like Sophos MDR, Arctic Wolf, and Rapid7 MDR are quote-only and publish no per-endpoint figure.
What is the cheapest MDR or EDR for a small business?
Microsoft Defender for Business is the lowest sticker price at $3.00 per user per month standalone, or bundled free into Microsoft 365 Business Premium, but it is endpoint tooling with no staffed human response. For a 24/7 human SOC included in the price, Huntress Managed EDR at $8.99 per endpoint per month is the most transparent low-cost option. Which is right depends on whether you need analysts working your alerts around the clock.
Why do Sophos, Arctic Wolf, and Rapid7 not publish prices?
Those vendors scope pricing per environment through a demo or quote request rather than a public per-endpoint rate. Sophos MDR is quote-only across three tiers, Arctic Wolf is quote-only and typically sold on multi-year terms, and Rapid7 prices MDR per asset protected without publishing per-asset dollar figures. This index records the quote-only status and its source rather than inventing a number.
Is a 24/7 SOC included in these per-endpoint prices?
Not always, and that is the most important variable. Huntress, Arctic Wolf, Sophos MDR (Complete tier), and Rapid7 MDR include analyst-driven response. CrowdStrike (Falcon Complete) and SentinelOne (Vigilance Respond MDR) sell managed SOC coverage as a separate SKU on top of the platform license. Microsoft Defender for Business has no staffed human response. Compare the "included" total, not the base tool price.
How current are these MDR and EDR prices?
Each row carries its own "as of" date showing when the figure was last verified against the vendor's pricing page, ranging from May to July 2026 in this edition. The index is refreshed quarterly, and dates are re-stamped whenever a vendor changes list pricing, so you can always see how fresh each number is rather than trusting a single blanket publish date.
Sources & References
- Huntress Managed EDR, ITDR, SIEM, SAT pricing: Huntress Pricing
- CrowdStrike Falcon pricing: CrowdStrike Pricing
- SentinelOne Singularity packages: SentinelOne Platform Packages
- Microsoft Defender for Business: Microsoft Defender for Business
- Sophos MDR pricing: Sophos MDR Get Pricing
- Arctic Wolf Aurora MDR: Arctic Wolf Request a Demo
- Blumira editions: Blumira Pricing
- Rapid7 MDR: Rapid7 Managed Detection and Response
Want These Platforms Priced for Your Fleet?
We license, deploy, and manage MDR and EDR across all of these vendors. Get a real per-endpoint number for your environment from a partner who runs the consoles.
Get a Cybersecurity Quote
