Fazlur Rahman
Quick Answer
Secureworks Taegis pricing in 2026 is per-endpoint with three tiers: Taegis XDR self-managed at $38 to $78 per endpoint per year, Taegis ManagedXDR at $85 to $195 per endpoint per year (2.0 to 2.8x multiple on XDR base), and Taegis MDR with monthly CTU hunting at $120 to $220 per host per year. Median Taegis deal is approximately $91,350 per year per Vendr; median Fortune 1000 ManagedXDR contract is approximately $485,000 per year (vendorbenchmark.com + mdrproviders.io, 2026).
The Sophos acquisition in early 2025 reshaped the platform's strategic context. Buyers should ask about multi-year roadmap commitment and any migration credits available to existing customers.
Last verified: Sep 15, 2026.
At a glance
- Taegis XDR (self-managed) $38 to $78 per endpoint per year
- Taegis ManagedXDR $85 to $195 per endpoint per year (2.0 to 2.8x XDR base)
- Taegis MDR with CTU hunting $120 to $220 per host per year
- Median $91,350 per year per Vendr (range $15,200 to $421,751)
- Median Fortune 1000 ManagedXDR $485,000 per year on 5,000-endpoint scope
- AWS Marketplace: 1,000 endpoints $43,000/yr; 10,001 to 25,000 endpoints MDR Combo $550,055/yr
Taegis tiers and per-host pricing breakdown
Secureworks sells three primary product lines on a per-endpoint or per-host basis. The financial decision is which tier the buyer's security operations maturity justifies, because each tier adds operational depth rather than incremental features at the same price. Taegis XDR is the self-managed detection and response platform delivering detection, investigation, and response capabilities for customer-operated SOCs. Taegis ManagedXDR is the fully managed MDR service with 24/7 Secureworks counter threat unit SOC. Taegis VDR and Taegis NDR are incremental add-ons (vendorbenchmark.com, 2026).
| Product | Per host per year | Service level | Best fit |
|---|---|---|---|
| Taegis XDR (platform only) | $25 to $40 | Self-managed, customer-operated SOC | Mid-market with mature in-house SOC |
| Taegis ManagedXDR | $80 to $140 | Above plus Secureworks SOC 24/7 operations | Mid-market without 24/7 SOC |
| Taegis MDR | $120 to $220 | Above plus monthly CTU threat hunting | Mid-market and enterprise with full-service needs |
Taegis XDR is typically 18 to 32 percent below CrowdStrike Falcon Insight XDR on equivalent endpoint scope, reflecting CrowdStrike's dominant market position. A typical deal at 5,000-endpoint scope on Taegis XDR runs $225,000 to $390,000 annually at negotiated pricing. The same scope on Taegis ManagedXDR runs $485,000 to $785,000 annually, with the bundled managed service adding the 2.0 to 2.8x multiple (vendorbenchmark.com, 2026).
Worked cost examples at common scales
Taegis contracts scale linearly with endpoint count and service tier. The table below shows typical annual spend at three common scales, based on vendorbenchmark data and AWS Marketplace listings (vendorbenchmark.com + AWS Marketplace, 2026).
| Deployment profile | Endpoints | Primary product | Annual estimate | With leverage |
|---|---|---|---|---|
| Mid Taegis XDR | 1,500 | Taegis XDR self-managed | $95,000 to $165,000 | $70,000 to $125,000 |
| Large Taegis XDR | 7,500 | Taegis XDR self-managed | $325,000 to $545,000 | $245,000 to $415,000 |
| Mid Taegis ManagedXDR | 2,500 | Taegis ManagedXDR MDR | $285,000 to $485,000 | $215,000 to $375,000 |
| Large Taegis ManagedXDR | 10,000 | Taegis ManagedXDR MDR | $885,000 to $1.6M | $675,000 to $1.25M |
| Enterprise Taegis ManagedXDR | 25,000+ | Taegis ManagedXDR MDR | $1.8M to $3.2M | $1.4M to $2.5M |
The Median Fortune 1000 Secureworks Taegis ManagedXDR subscription is approximately $485,000 annually on a 5,000-endpoint scope. The broader median across all Taegis deals is approximately $91,350 per year per Vendr. The observed range runs from $15,200 at the low end to $421,751 at the high end (vendorbenchmark.com + mdrproviders.io, 2026).
Add-on modules: VDR, NDR, IR retainer
Three add-on modules are standard for Taegis deployments with full enterprise needs. Taegis VDR (vulnerability detection and response) is priced as an incremental add-on at $12 to $28 per endpoint, with negotiation leverage down to $9 to $22. Taegis NDR (network detection and response) is priced per sensor or network segment at $28,000 to $85,000 per segment. The IR retainer hours add-on runs $385 to $525 per hour and is often bundled within ManagedXDR (vendorbenchmark.com, 2026).
Adversarial Group Briefings are a premium CTU intelligence subscription at $25,000 to $80,000 per year. This is the highest-margin add-on in the Secureworks portfolio and is targeted at executive security teams that want direct threat-actor intelligence briefings. Buyers should evaluate whether the briefing cadence and content depth justify the premium versus standard CTU intelligence feeds included in the base MDR tier (vendorbenchmark.com, 2026).
Post-Sophos acquisition context
Sophos acquired Secureworks in early 2025, which reshaped the platform's strategic context. The Sophos-Secureworks integration is migrating some customer workloads to Sophos MDR while preserving Taegis as the enterprise XDR platform. Buyers evaluating Taegis should ask about the multi-year roadmap commitment and any migration credits available to existing customers. The acquisition has not yet changed per-endpoint pricing materially but has reduced the competitive discount leverage against standalone XDR competitors (mdrproviders.io, 2026).
The practical implication for procurement is that negotiation leverage against Secureworks is somewhat reduced because the standalone competitive threat is weaker than it was pre-acquisition. Buyers should anchor on the broader competitive set (CrowdStrike, SentinelOne, Palo Alto Cortex XDR, Microsoft Defender XDR) rather than expecting Secureworks to compete against itself on Taegis pricing. The five-year TCO is also a critical evaluation lens because the integration roadmap could change the platform's value proposition over the contract life (vendorbenchmark.com, 2026).
