An MSP commenter reports switching away from Arctic Wolf after a poor experience, planning a return to ESET.

{
  "signal_id": "a17480ea-6bb4-5b31-ae19-1376c09f9aa4",
  "signal_type": "reddit-company",
  "signal_subtype": "customerFeedback",
  "detected_at": "2026-10-19T18:19:55+00:00",
  "company": {
    "name": "Arctic Wolf Networks",
    "domain": "arcticwolf.com"
  },
  "data": {
    "nsfw": false,
    "stage": "switched",
    "awards": 0,
    "timing": "completed",
    "topics": [
      "mdr",
      "migration",
      "soc"
    ],
    "post_id": "1xa4ll3",
    "summary": "An MSP commenter reports switching away from Arctic Wolf after a poor experience, planning a return to ESET.",
    "category": "general",
    "comments": [
      {
        "url": "https://www.reddit.com/r/msp/comments/1xa4ll3/comment/phsabx1/",
        "depth": 0,
        "score": 9,
        "author": "carrots32",
        "excerpt": "Not trying to stir the pot here, but genuinely curious about needing an MDR vendor to meet this requirement to protect your data when the data lives in M365 / Entra ID. Unless I’m misunderstanding, Microsoft themselves came out a while back basically saying that they can’t guarantee data sovereignty in this situation, so while reducing your exposure is a great step, I’m interested to know your tho",
        "posted_at": "2026-10-19T22:13:01.000Z",
        "author_url": "https://www.reddit.com/user/carrots32/"
      },
      {
        "url": "https://www.reddit.com/r/msp/comments/1xa4ll3/comment/phrl2gm/",
        "depth": 0,
        "score": 8,
        "author": "Jayjayuk85",
        "excerpt": "Maybe look at inforcer for ITDR?? Think they may be on pax8",
        "posted_at": "2026-10-19T20:15:32.000Z",
        "author_url": "https://www.reddit.com/user/Jayjayuk85/"
      },
      {
        "url": "https://www.reddit.com/r/msp/comments/1xa4ll3/comment/phr04sl/",
        "depth": 0,
        "score": 7,
        "author": "andrew-huntress",
        "excerpt": "u/Jualize Fully understand working on trying to understand this dynamic and it’s something we’ve been kicking around internally for a while now (with some changes actively underway).\n\n Does all data need to stay in-region, or is it acceptable for a small, threat-relevant subset to leave the region?",
        "posted_at": "2026-10-19T18:49:00.000Z",
        "author_url": "https://www.reddit.com/user/andrew-huntress/"
      },
      {
        "url": "https://www.reddit.com/r/msp/comments/1xa4ll3/comment/19rfphtxza476/",
        "depth": 0,
        "score": 5,
        "author": "WraySchultz",
        "excerpt": "Hey!\n\n Full disclosure, I work with Bitdefender, but since you want a European vendor with a real EU footprint, Bitdefender GravityZone is worth a look. See below the details and feel free to ask any questions!\n\n Here’s how it lines up with your criteria:\n\n 1. EU Data & Legal Sovereignty\n\n EU-Headquartered: Bitdefender is HQ’d in Bucharest, Romania.\n\n EU / EMEA Only Hosted GravityZone Servers for",
        "posted_at": "2026-10-21T13:26:48.000Z",
        "author_url": "https://www.reddit.com/user/WraySchultz/"
      },
      {
        "url": "https://www.reddit.com/r/msp/comments/1xa4ll3/comment/phqxfz4/",
        "depth": 0,
        "score": 5,
        "author": "bertie40",
        "excerpt": "Hi. I'm in a similar boat. Circa 120 endpoints. I really like Huntress but the pricing is becoming prohibitive due to my small customer base so I'm looking at alternatives.\n\n Good luck out there 👍",
        "posted_at": "2026-10-19T18:37:58.000Z",
        "author_url": "https://www.reddit.com/user/bertie40/"
      },
      {
        "url": "https://www.reddit.com/r/msp/comments/1xa4ll3/comment/phqtdke/",
        "depth": 0,
        "score": 4,
        "author": "burningbridges1234",
        "excerpt": "Have you looked at Attic Security?",
        "posted_at": "2026-10-19T18:21:29.000Z",
        "author_url": "https://www.reddit.com/user/burningbridges1234/"
      },
      {
        "url": "https://www.reddit.com/r/msp/comments/1xa4ll3/comment/phqzp2i/",
        "depth": 0,
        "score": 4,
        "author": "delcaek",
        "excerpt": "We're using WithSecure as our EDR. They're from Helsinki.",
        "posted_at": "2026-10-19T18:47:14.000Z",
        "author_url": "https://www.reddit.com/user/delcaek/"
      },
      {
        "url": "https://www.reddit.com/r/msp/comments/1xa4ll3/comment/phtur6m/",
        "depth": 0,
        "score": 4,
        "author": "octaviuspie",
        "excerpt": "Heimdal are genuinely an EU based company and hosted product based in Denmark. Great company and a very good product set that I can highly recommend.",
        "posted_at": "2026-10-20T03:43:51.000Z",
        "author_url": "https://www.reddit.com/user/octaviuspie/"
      }
    ],
    "evidence": [
      "[comment u/archiekane] We're going back to ESET next month after going to Darktrace, then to Arctic Wolf (never again!).",
      "[comment u/archiekane] I'll do an update post with how ESET holds up as I'm doing their PoC for November."
    ],
    "virality": "high",
    "post_date": "2026-10-19T18:19:55.000Z",
    "post_kind": "text",
    "post_text": "We’re a growing MSP in the Netherlands, currently on Huntress for EDR and ITDR. It works well and we have no complaints about the product. But more and more of our customers want their security tooling outside the reach of the US Cloud Act.\n\nWe know that as long as they’re on Microsoft 365 they can’t fully avoid it, but for the security layer they want to keep it outside US jurisdiction.\n\nWhat we’re looking for:\n\nEDR for ~150 endpoints and ITDR for ~150 M365 identities, and growing\n\nA European vendor with no US parent company, so outside the reach of the US Cloud Act\n\nITDR for Microsoft 365 / Entra ID\n\nManaged SOC preferred. We don’t want to write detections ourselves, but we’re happy to follow up on alerts.\n\nAn API or integration for pushing alerts into our ticketing system\n\nWorks alongside Defender, or replaces it if their AV is solid\n\nGood visibility into the data, similar to what Huntress offers with its SIEM module\n\nWhat we’ve tried:We’re currently trialing Heimdal, but it isn’t a good fit for us. It’s a full suite (AV, patching and much more), while we only need EDR and ITDR, and as far as we can tell you can’t get ITDR without their EDR. After two demos we still find the UX confusing, and it’s hard to query and view the underlying data.\n\nWe also talked to a few other vendors, but they mainly focus on enterprise customers and weren’t interested in an MSP our size.\n\nWe’re...",
    "sentiment": "negative",
    "subreddit": "msp",
    "event_date": "2026-10",
    "post_title": "EU MSP (~150 endpoints) looking for a European EDR + ITDR to replace Huntress",
    "prominence": "aside",
    "source_url": "https://www.reddit.com/r/msp/comments/1xa4ll3/eu_msp_150_endpoints_looking_for_a_european_edr/",
    "entity_role": "vendor",
    "post_author": "Jualize",
    "upvote_ratio": 0.8163265306122449,
    "mention_count": 1,
    "mention_surge": false,
    "subreddit_url": "https://www.reddit.com/r/msp/",
    "total_upvotes": 31,
    "comments_total": 90,
    "total_comments": 90,
    "event_date_text": "next month",
    "other_companies": [
      {
        "name": "ESET",
        "role": "switching_to",
        "domain": "eset.com"
      },
      {
        "name": "Darktrace",
        "role": "replaced",
        "domain": "darktrace.com"
      }
    ],
    "post_author_url": "https://www.reddit.com/user/Jualize/",
    "signal_category": "feedback",
    "comments_included": 16
  }
}

curl https://signals.autobound.ai/v1/signals/a17480ea-6bb4-5b31-ae19-1376c09f9aa4 \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"arcticwolf.com","limit":20}'