Todyl Security Platform

The security team's response times are phenomenal. They clearly know the product thoroughly and are eager to assist at every stage—from deployment to ongoing operations. Honestly, I haven't found anything to dislike. It's a one-stop shop for our entire security stack, making it easy to sell, simple to maintain, and easy to justify to our clients. We can sleep soundly knowing we have an entire US-based team keeping watch over us and our clients.

The cases generated in Todyl provide a clear event timeline with detailed, easy-to-read logs. Key details like file paths, providers, and networking info are highlighted, speeding up investigations and helping identify root causes. Also, the Todyl agent is easy to deploy and maintain, working reliably across different systems. Virus detection exclusions need improvement. Unless a case is triggered by an action, there's little room to preempt issues. Only high-level file path exclusions are available before problems occur. Custom reporting and dashboard gauges are very limited. Being able to adjust reports to get the best security view for our customers would be valuable. As an MSP, a centralized portal is excellent for supporting customers. The integrated MXDR team is a great addition to our internal staff, and modular licensing allows for flexible onboarding.

Todyl has proven to be an excellent security platform for our MSP. Deployment is straightforward, support is quick to respond, and the MXDR team is top-notch. Recently, we onboarded a new client, and within minutes of deploying Todyl, their MXDR team spotted a Trojan keylogger that had gone undetected before. The immediate detection and response showed the platform's value right away. There are so many features and modules that we're probably not using everything it offers, but that's more about us than the platform. Todyl provides a unified security stack, enabling us to consolidate multiple vendors into one platform. It simplifies management, improves visibility, and makes it easier for our team to support and secure our clients.

It acts as an all-in-one cybersecurity solution designed mainly for Managed Service Providers (MSPs) and internal IT teams to deliver comprehensive network, endpoint, and data protection. It requires extensive training to comfortably navigate the complex configurations across its unified network, SIEM, and endpoint modules. Todyl addresses the critical cybersecurity skills gap by providing a 24/7 MXDR team to handle threat hunting and incident response. For teams where MXDR is essential, this removes the need to build, fund, and staff an expensive internal SOC.

Todyl excels at collaborating with partners to integrate their best-of-breed solution with our team and existing systems, creating a comprehensive service that keeps our clients safe. We ran four thorough pilots with several industry leaders, and Todyl was the only solution that prevented our ethical hacking team from breaching the lab environments we built for the pilots. We've never encountered an issue that Todyl couldn't help us resolve; their team is consistently committed to providing an excellent customer experience. They offer an integrated solution that allows us to offer Security as a Service without making significant investments in our own SOC.

I find the MXDR alerting in Todyl Security Platform to be one of its best features. Its integration with the 24/7 SOC is excellent, enabling my team to quickly handle potential threats like business email compromises and malware attempts, ensuring device protection. I value having just one primary security solution, which reduces the complexity of dealing with multiple vendors. The platform's setup and deployment are relatively easy, with options ranging from simple setups to complex configurations involving LandZero Trust and advanced orchestration. The platform is also more partner-centric, sharing leads and not selling directly, which suits us as an MSP. An improvement could be faster access to support or additional channels like a direct phone number for immediate assistance. Currently, opening a ticket works, and they're responsive, but sometimes a phone call is preferable. Todyl Security Platform safeguards all endpoints with EDR and antivirus, offers full-stack MXDR, and provides 24/7 threat hunting. It stops and alerts on potential threats, allowing my team to quickly remediate, solving multi-vendor challenges with a single solution.

I appreciate how Todyl Security Platform brings together all the security tools we'd otherwise need to buy from different vendors into a single solution. It offers vertical integration and addresses the need for a fully managed security operations center. The 24/7 SOC is extremely valuable because we can't staff that internally. We liked the concept of managing everything from one toolset, having a single account manager, and forming a strong partnership instead of juggling multiple vendors. At the recent summit, we discussed GRC and how we can interact with it within the portal, along with the tools available for managing GRC from a client-facing perspective. I know some updates are in the works, and we're excited about those. I use Todyl Security Platform to consolidate all our security tools, solving vendor management issues, and it also runs a 24/7 SOC for us, which is great since we can't staff that ourselves.

Todyl has become a crucial part of our security offerings. Having a single platform that can replace multiple tools, integrate with others, and ingest data from various sources helps us maintain centralization. SOAR has been vital for protecting before analysts can respond to alerts, and their MXDR team is outstanding. Customer support is superb, assisting with everything from onboarding to handling connectivity issues in client environments and responding to alerts. The addition of Janus (AI) has been very helpful in interpreting cases and refining SIEM searches, which was previously a challenge. Account executives work with us to tailor our packages and pricing; overall, Todyl is among the best products we've integrated. Query performance on large data sets is something I'd like to see improve as the platform scales, which they are actively addressing through Janus. For time-sensitive tasks, it works well. One of the most important aspects is response times; the integration with O365 and automated response actions is critical, enabling us to act before responding, which is essential in account compromise situations (we've seen many recently), followed by the MXDR team quickly addressing issues and reaching out if manual remediation is needed.

Todyl has enabled us to streamline our security architecture while giving our SMB clients enterprise-level protection. At its price point, Todyl is easily the top choice. We can connect its SIEM with all our firewalls and Microsoft/Google tenants, along with other systems. Their team also guided us through the migration from S1 and helped us get our clients onboard with Todyl in under a month. Currently, there's nothing about the platform that I dislike. One key problem Todyl addresses is visibility. With a SIEM spanning all clients, we can monitor every security event in real time and take proactive measures. Their MXDR team uses the SIEM to handle issues. Another aspect we appreciate is how their MXDR team genuinely feels like part of our round-the-clock SOC. They aren't stuck behind a ticketing system. We interact with them via a Teams channel and can communicate as if they were in-house. Our clients are satisfied with Todyl's performance, and our engineers find it easy to use. It's a win-win situation.

I'm quite fond of the cost of Todyl Security Platform, which made it straightforward for us to move into the SIEM space. It offers a contemporary SIEM with proactive monitoring and detection rules, giving us exceptional visibility into our clients' environments. This assists in securing their devices and MS365 tenant. The SOAR Playbook has been transformative, especially as more clients shift to MS365 and away from on-prem servers. It lets us keep tabs on all our clients and get instant alerts on security incidents. I also value how it streamlines the process of securing compromised accounts, simplifying things significantly. Setting up and deploying the Todyl Agent is remarkably easy, allowing us to bring a new client onboard in under five minutes. Additionally, the wide range of integrations, from SentinelOne to DUO, provides comprehensive oversight of our clients' networks, which we value highly. While the alerting and case creation are top-notch, there's currently no efficient way to view all Agents/Devices across every client in the Todyl Portal to monitor Agent Health. We've requested this feature for a long time and hope it gets implemented soon. The visibility into Integration Health, especially concerning local Syslog Utility Agent integrations, is also lacking. SonicWalls can stop sending logs to Todyl without any notification unless you manually inspect each tenant. This becomes even more problematic if you have multiple SonicWalls directing logs to a single Syslog Utility Agent. Additionally, there's no support for ARM processors, another request we've made repeatedly that keeps being postponed. While the platform has improved, Feature Requests are adopted slowly, and updates on their status are also infrequent. Agent Health Monitoring is another concern. Todyl hasn't developed a solid method for MSPs to track agent health through our RMM tools or a simple way within the platform to push Agent updates. Overall, Todyl Security Platform offers visibility and logging for security events, makes entering SIEM easier with its pricing, and includes a SOAR Playbook for better client management and easier compromised account handling.