Updated September 2026 · Refreshed quarterly. This is a living pricing index. Every figure below is copied from a cited vendor pricing page and carries its own "as of" date, so you can see exactly how current each number is. We re-check the numbers each quarter and re-stamp the dates when a vendor changes list pricing.
Managed detection and response (MDR) and endpoint detection and response (EDR) products span a wide price range in 2026: from $8.99 per endpoint per month for Huntress Managed EDR with a 24/7 SOC included, to $7.99 to $19.99 per device per month across CrowdStrike's self-service Falcon Go through Falcon Enterprise tiers, with several vendors (Sophos, Arctic Wolf, Rapid7) publishing no list price at all and quoting per environment. This index aggregates the published per-endpoint figures already verified on our comparison pages into one reference table, each with its source and date. It does not rank the vendors or pick a winner. For a head-to-head verdict, follow the links to the individual comparisons; for a buyer's shortlist, see our best EDR solutions for small business guide.
Quick Answer: What MDR and EDR Cost Per Endpoint
Managed detection and response typically runs $9 to $75 per endpoint or user per month depending on scope, while raw EDR tooling alone runs about $3 to $20 per endpoint per month. On the transparent end, Huntress Managed EDR lists at $8.99 per endpoint per month with a 24/7 human SOC included, and Microsoft Defender for Business is $3.00 per user per month standalone (or bundled into Microsoft 365 Business Premium at $22.00 per user per month). CrowdStrike's self-service tiers run $7.99 per device per month (Falcon Go, capped at 100 devices) up to $19.99 per device per month (Falcon Enterprise), and SentinelOne Singularity Complete is $179.99 per endpoint per year (about $15 per month). The self-service Bitdefender GravityZone tiers are $384.99 and $879.99 per year for 10 devices ($38.50 and $88.00 per endpoint per year), though neither lists EDR among its included modules. Sophos MDR, Arctic Wolf, and Rapid7 MDR are quote-only.
How to Read This Index
This is a data index, not a buyer's guide. The table lists each vendor's published per-endpoint list price where one exists, and marks the rest as quote-only. It is intentionally sorted alphabetically by vendor and is not a ranking. A few things to keep in mind when comparing the numbers:
- SOC included vs SOC extra. A low per-endpoint price does not always include a 24/7 human SOC. Some vendors bundle the analysts; others sell that coverage as a separate SKU, which changes the real cost of comparable protection.
- Per endpoint vs per employee vs per asset. Most vendors price per endpoint, but Blumira prices per employee and Rapid7 prices per asset. Those units are not interchangeable when you model a fleet.
- List price vs quote. Quote-only vendors do not publish per-endpoint dollar figures; their row records that fact and its source rather than an invented number.
- The "as of" date is the point. Security pricing moves. Each row shows the date the figure was last verified against the vendor's own page.
For the definitions behind these categories, see EDR vs MDR vs XDR: which endpoint security do you need?
MDR & EDR Per-Endpoint Pricing Table
Published list pricing and quote-only status for the MDR and EDR vendors covered across our comparison pages. Click any column header to sort. Prices are per endpoint per month unless the row notes otherwise.
| Vendor | Product / SKU | Published price | 24/7 SOC | Pricing model | As of | Source |
|---|---|---|---|---|---|---|
| Arctic Wolf | Aurora Managed Detection and Response | Quote-only (multi-year terms) | Included (Concierge) | Quote-only, scoped per environment | 2026-07-10 | arcticwolf.com |
| Bitdefender | GravityZone Business Security / Business Security Premium | Business Security $384.99/yr list ($269.49 promotional); Business Security Premium $879.99/yr list ($615.99 promotional). At the 10-device default that is $38.50 and $88.00 per endpoint per year at list | Not included in either self-service tier | Per-device self-service, 1 to 100 devices, 1 to 3 year terms; neither tier lists EDR among its included modules | 2026-09-05 | bitdefender.com |
| Blumira | Detect / Respond / Automate | $12 / $16 / $21 per employee/mo | Expert backup on Respond and above | Per-employee SIEM + XDR; unlimited ingestion, 1-yr retention | 2026-07-01 | blumira.com |
| CrowdStrike | Falcon Go / Falcon Pro / Falcon Enterprise (+ Falcon Complete) | Go $7.99/mo ($59.99/yr, capped at 100 devices); Pro $14.99/mo ($99.99/yr, no cap); Enterprise $19.99/mo ($184.99/yr); Falcon Complete is contact sales | Add-on (Falcon Complete, contact sales) | Per-device, tiered, self-service through Enterprise | 2026-09-04 | crowdstrike.com |
| Huntress | Managed EDR | $8.99 (12-mo term, no setup fees; tiers start at the 50-99 band) | Included | Transparent per-endpoint | 2026-07-01 | huntress.com |
| Microsoft | Defender for Business | $3.00 per user/mo standalone; bundled in M365 Business Premium ($22.00 per user/mo) | None (tooling only; no staffed SOC) | Bundled or standalone, up to 300 users | 2026-07-01 | microsoft.com |
| Rapid7 | Rapid7 MDR | Per-asset, quote-based (no public per-asset figure) | Included (24/7 SOC) | Asset-based, SIEM-backed (InsightIDR) | 2026-07-01 | rapid7.com |
| SentinelOne | Singularity Complete / Commercial (Core and Control no longer publicly priced) | Complete $179.99 per endpoint/yr (about $15/mo); Commercial $229.99 per endpoint/yr; Enterprise is contact sales | Add-on on Complete and Commercial; included on Enterprise | Per-endpoint, tiered | 2026-09-04 | sentinelone.com |
| Sophos | Sophos MDR (Standard / Advanced / Complete) | Quote-only | Included (active response gated to Complete tier) | Per-endpoint, tiered, quote-only | 2026-07-10 | sophos.com |
The single biggest driver of a real apples-to-apples comparison is whether a 24/7 human SOC is included in the per-endpoint price or sold as a separate SKU. Huntress, Arctic Wolf, Sophos MDR (at the Complete tier), and Rapid7 MDR include analyst-driven response; CrowdStrike (via Falcon Complete) and SentinelOne (via its MDR add-on on Complete and Commercial) sell that coverage on top of the platform license; and Microsoft Defender for Business is endpoint tooling with no staffed human response at all.
Related Managed-Security List Prices (Per Unit)
Beyond per-endpoint EDR, Huntress is one of the few vendors that publishes per-unit list pricing for the adjacent managed modules many buyers bundle. These are useful reference points when you scope a full managed-security program rather than endpoint coverage alone.
| Module | Published price | Unit | As of | Source |
|---|---|---|---|---|
| Huntress Managed ITDR | $4.80 | Per licensed identity / mo | 2026-07-01 | huntress.com |
| Huntress Managed SIEM | $4.00 | Per data source / mo | 2026-07-01 | huntress.com |
| Huntress Managed SAT | $2.08 | Per learner / mo (50-99 band) | 2026-07-01 | huntress.com |
Where the Numbers Come From
Every figure in this index is copied from an existing Unió Digital comparison page, where it was verified against the vendor's own pricing page before publication. Nothing here is estimated or modeled. To see the full context behind any single number, including what each price does and does not include, read the head-to-head comparison it comes from:
- Huntress vs CrowdStrike and Microsoft Defender vs Huntress
- Huntress vs SentinelOne and Microsoft Defender vs SentinelOne
- Huntress vs Sophos MDR and Huntress vs Arctic Wolf
- Huntress vs Blumira and Huntress vs Rapid7 MDR
- MDR vs SIEM for the broader per-unit cost model
Because it aggregates prices, this index deliberately does not tell you which product to buy. That decision depends on your endpoint count, whether you have an in-house security team, and which modules you need. Our best EDR solutions for small business buyer's guide works through that selection, and our managed cybersecurity team can scope any of these platforms for your environment.
Frequently Asked Questions
How much does MDR cost per endpoint in 2026?
Managed detection and response typically runs $9 to $75 per endpoint or user per month depending on scope. On the transparent end, Huntress Managed EDR with a 24/7 SOC lists at $8.99 per endpoint per month. A fuller managed program that adds identity and email coverage runs $30 to $75 per user per month. Vendors like Sophos MDR, Arctic Wolf, and Rapid7 MDR are quote-only and publish no per-endpoint figure.
What is the cheapest MDR or EDR for a small business?
Microsoft Defender for Business is the lowest sticker price at $3.00 per user per month standalone, or bundled free into Microsoft 365 Business Premium, but it is endpoint tooling with no staffed human response. For a 24/7 human SOC included in the price, Huntress Managed EDR at $8.99 per endpoint per month is the most transparent low-cost option. Which is right depends on whether you need analysts working your alerts around the clock.
Why do Sophos, Arctic Wolf, and Rapid7 not publish prices?
Those vendors scope pricing per environment through a demo or quote request rather than a public per-endpoint rate. Sophos MDR is quote-only across three tiers, Arctic Wolf is quote-only and typically sold on multi-year terms, and Rapid7 prices MDR per asset protected without publishing per-asset dollar figures. This index records the quote-only status and its source rather than inventing a number.
Is a 24/7 SOC included in these per-endpoint prices?
Not always, and that is the most important variable. Huntress, Arctic Wolf, Sophos MDR (Complete tier), and Rapid7 MDR include analyst-driven response. CrowdStrike (Falcon Complete) and SentinelOne (its MDR add-on on Complete and Commercial) sell managed SOC coverage as a separate SKU on top of the platform license. Microsoft Defender for Business has no staffed human response. Compare the "included" total, not the base tool price.
How current are these MDR and EDR prices?
Each row carries its own "as of" date showing when the figure was last verified against the vendor's pricing page, ranging from July to September 2026 in this edition. The index is refreshed quarterly, and dates are re-stamped whenever a vendor changes list pricing, so you can always see how fresh each number is rather than trusting a single blanket publish date.
Sources & References
- Huntress Managed EDR, ITDR, SIEM, SAT pricing: Huntress Pricing
- CrowdStrike Falcon pricing: CrowdStrike Pricing
- SentinelOne Singularity packages: SentinelOne Platform Packages
- Microsoft Defender for Business: Microsoft Defender for Business
- Sophos MDR pricing: Sophos MDR Get Pricing
- Arctic Wolf Aurora MDR: Arctic Wolf Request a Demo
- Blumira editions: Blumira Pricing
- Rapid7 MDR: Rapid7 Managed Detection and Response
Want These Platforms Priced for Your Fleet?
We license, deploy, and manage MDR and EDR across all of these vendors. Get a real per-endpoint number for your environment from a partner who runs the consoles.
Get a Cybersecurity Quote
