Kroll: New York MSSP

Q: What industries does Kroll serve?

Financial Services, Legal, Healthcare, Technology, Retail & E-Commerce

Last reviewed August 6, 2026How we evaluate providers

Review scores by source

Trustpilot2.2 on a 1 to 5 scaleBased on 11 public reviews

Each score above is published by the source named next to it. MSSPProviders.io reports these figures as published and does not calculate a rating of its own.

Visit Website

Provider Snapshot

Core services: Managed Detection & Response (MDR), Incident Response, Threat Intelligence +3 more
Platforms: CrowdStrike, SentinelOne, Microsoft Defender +1 more
Client focus: Mid-Market (201-1000), Enterprise (1000+)
Response SLA: Not disclosed
Website: kroll.com

Kroll, headquartered in New York, NY, combines Managed Detection & Response (MDR) and Incident Response with Threat Intelligence, Penetration Testing, Vulnerability Management and Compliance Management. It serves mid-market and enterprise organizations, including Financial Services, Legal, Healthcare, Technology and Retail & E-Commerce teams, running detection on CrowdStrike, SentinelOne, Microsoft Defender and Splunk while supporting SOC 2, HIPAA, PCI DSS, GDPR and ISO 27001 obligations.

Company Details

Headquarters: New York, NY
Founded: 1972
Employees: 1000+
Response SLA: Not disclosed

Pricing

Pricing Model: Custom
Starting Price: Custom quote

About Kroll

Kroll is a global risk and financial advisory firm with a substantial cyber risk practice including MDR, digital forensics, incident response, and threat intelligence. Their Kroll Responder MDR service provides 24/7 monitoring enriched by threat intelligence from their extensive incident response casework. Kroll's acquisition of Redscan expanded their managed security capabilities in Europe. The company is strong in financial services, legal, and regulated industries where cyber risk and business risk intersect.

Manage or promote this profile

Represent this provider? Claim the profile to verify your affiliation and request updates, get Featured placement, or become a Top Provider. All three start on the For Providers page.

Get started on For Providers

Services Offered

Kroll offers 6 security services. Click any service to see other providers that offer it.

Managed Detection & Response (MDR)Incident Response Threat Intelligence Penetration Testing Vulnerability Management Compliance Management

Industries Served

Kroll has experience serving 5 industries, including the regulatory requirements and security challenges unique to each.

Financial Services Legal Healthcare Technology Retail & E-Commerce

Supported Platforms

Kroll supports 4 security platforms. MSSPs with hands-on experience in your tools can onboard faster and tune detections more accurately.

CrowdStrike Falcon SentinelOne Microsoft Defender Splunk

Client Company Sizes

Kroll serves Mid-Market (201-1000), Enterprise (1000+) organizations. Providers focused on your company size tend to offer pricing and service levels that match your budget and team capacity.

Mid-Market (201-1000)Enterprise (1000+)

Compliance Frameworks Supported

Kroll provides compliance support for 5 frameworks. Compliance support typically includes control mapping, evidence collection, audit preparation, and ongoing monitoring to keep you audit-ready year-round.

SOC 2HIPAAPCI DSSGDPRISO 27001

Kroll Categories and Capabilities

These comparisons and profile attributes are based only on listed services, customer fit, technology support, and verified research data.

Listed in and relevant comparisons

Healthcare MSSPsListed healthcare experience MDR ProvidersVerified MDR capability or listed MDR service

What Should You Ask When Evaluating Kroll?

Before engaging any MSSP, use these questions to assess whether the provider is the right fit for your organization. These apply to Kroll and any other provider on your shortlist.

What is included in the base service vs. what costs extra? Clarify whether incident response, compliance reporting, and additional log source onboarding are included or billed separately.
What response actions does the provider take directly? Some MSSPs only send alerts for your team to act on. Others take containment actions like host isolation or account lockout on your behalf.
What does the onboarding process look like? Ask about typical onboarding timelines, how much work your team needs to put in, and when full monitoring coverage goes live.
Can you provide references from similar organizations? Ask for references from companies in your industry and size segment. The experience of similar organizations is the best predictor of how the MSSP will perform for you.
What happens if we need to switch providers? Understand data portability, contract termination terms, and transition support. A transparent exit process is a sign of a provider that prioritizes long-term trust over lock-in.