SOC pricing for 2026.
A register of MDR and SOC-as-a-Service pricing for the buyer who has already taken the vendor call and now needs the document that lets them push back. Fourteen vendors, sourced entries, an RFP normaliser stapled to the front, a procurement annex at the back.
One of the 14 MDR vendors on this register publishes a list price on its own site: Huntress, at an MSRP of $8.99 per endpoint per month for Managed EDR (huntress.com/pricing, checked 7 November 2026). CrowdStrike publishes prices for its self-serve Falcon bundles but lists Falcon Complete, its managed service, as "Contact sales". Arctic Wolf, eSentire, Expel, ReliaQuest and the other majors are quote-only, so MDR cost for your environment comes from the quote. Put quotes on the same $/endpoint/mo basis with the RFP normaliser below.
Each row links to the vendor's own pricing or product page, with the date it was last checked on its vendor entry. See /ledger-notes for sourcing and the source-mark legend.
RFP Normaliser
Enter the parameters of an incoming quote. The normaliser returns an apples-to-apples $/endpoint/mo, an itemised annual total, and a band-check against the published ledger.
Band check
Your quote sits WITHIN the published $/endpoint/mo ledger band of $ 5 to $ 35.
Math exposed line by line; no black box. Verified worked example also rendered statically on /annex/in-house-tco-model.
Three spokes and an annex.
The register has three spokes (vendors, head-to-head compares, tier bands) and a procurement annex for the artifacts the buyer wishes their procurement team had handed them.
Notes to the ledger.
Vendors who do not publish a list price are shown as quote-only, with a link to their own page; notes to the ledger explains why they carry no band. The source-marks [V] [G] [I] [R] ride on the same row as every number; hover or click for the underlying URL.
Compiled by Oliver Wakefield-Smith. Last revised 7 November 2026.