Expel
Expel runs human-led managed detection and response services across a company's existing security tools.
On the record
Checkpoint: Deadline implied by watch item: new priced funding round or acquisition signal expected
The call
Expel still leads independent MDR on breadth and trust, but platform bundlers and AI-native rivals are squeezing it from both sides while funding has stalled since 2022.
Expel provides 24/7 security monitoring and response for companies, connecting to over 60 different security tools so customers do not have to pick one vendor. The company is getting squeezed from two sides: big names like CrowdStrike and Microsoft are building their own security monitoring services and bundling them cheaper, while new AI-powered competitors like Daylight Security are automating the human analyst work that Expel's entire business depends on. The key question is whether Expel's recent shift to sell entirely through partners instead of direct will spark revenue growth by 2027, or whether the company ends up getting bought by a larger player.
Why
01
AI pressure: Daylight Security and other agentic MDR entrants. Agentic MDR tools aim to replace the analyst queue Expel sells, undercutting its labor based pricing model. Could AI do the core job? Only partly.
02
Bigger players: CrowdStrike (Falcon Complete) and Microsoft (Defender Experts for XDR). Both bundle their own MDR into platforms customers already buy, squeezing the case for a separate vendor-agnostic layer. Could a giant copy it? Probably.
03
What protects it. Vendor-agnostic coverage across 60+ security tools plus years of proprietary alert data and human accountability for response actions.
What would change this call
Expel closes a new priced funding round within 6 months. Would show investors still back its independent, vendor-agnostic model at flat or higher valuation.
Expel is acquired or announces a merger before end of 2026. Would confirm the standalone MDR model could not sustain growth without a platform parent.
Revenue growth rate reported for 2026 versus 2025 after the 100% channel pivot. Would show whether the GTM shift to MSSP/MSP partners reaccelerated or slowed sales.
Expel is acquired or announces a merger before end of 2026. Would confirm the standalone MDR model could not sustain growth without a platform parent.
Revenue growth rate reported for 2026 versus 2025 after the 100% channel pivot. Would show whether the GTM shift to MSSP/MSP partners reaccelerated or slowed sales.
Key numbers
- No priced round since October 2022
- Est. valuation ~$640M, down from $1B+ peak
- ~479 employees after two rounds of cuts
Named risks
- No new priced funding round since October 2022, valuation status unconfirmed.
- Two workforce reductions reported in 2023 and June 2025.
- Direct independent peers Secureworks and Red Canary already absorbed into larger platforms.
- Platform giants CrowdStrike and Microsoft bundling MDR into core products, pressuring pricing.
- AI-native entrants like Daylight Security commoditizing analyst-labor-based pricing model.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| CrowdStrike | gaining on | Falcon Complete bundled MDR competes directly, cited in June 2026 alternatives comparisons |
| Microsoft | gaining on | Defender Experts for XDR bundles MDR into core platform, named as threat as of 2026-06-22 |
| SentinelOne | contesting | Vigilance MDR offering named among platform-bundled rivals as of 2026-06-22 |
| Sophos (via Secureworks acquisition) | losing to | Independent peer Secureworks absorbed into Sophos platform, noted in 2026-06-24 buyer's guide |
| Zscaler (via Red Canary acquisition) | losing to | Independent peer Red Canary absorbed into Zscaler, noted in 2026-06-24 buyer's guide |
| Daylight Security | gaining on | Markets agentic MDR with no analyst queue as direct Expel alternative, as of 2026-06-22 |
Questions people ask
- Is Expel profitable in 2026?
- Expel has not disclosed profitability. It reported 338% revenue growth for the 2024 Deloitte Technology Fast 500 (ranked #343) and 511% growth for the 2023 edition, per its own announcements, but no net income or profitability figures have been published as of mid-2026.
- Has Expel had layoffs?
- Yes. Third-party commentary references workforce reductions at Expel in 2023 and again in June 2025, described alongside a shift toward a 'scale-with-efficiency' model rather than continued headcount growth, as reported April 2026.
- Who owns Expel?
- Expel is privately held and venture-backed, founded May 5, 2016 by Dave Merkel, Yanek Korff, and Justin Bajko. Investors include CapitalG (Alphabet's growth fund) and Paladin Capital Group, which co-led its 2021 Series E round.
- Could AI replace Expel's security analysts?
- Expel's own 'Ruxie' AI now automates alert triage, enrichment, investigation, detection-rule generation, and reporting across the full threat lifecycle, per a June 23, 2026 company announcement. Expel still frames human analysts as retaining response authority and liability, but AI-native rivals like Daylight Security market 'no analyst queue' MDR.
- Who is Expel's biggest competitor?
- Expel names CrowdStrike (Falcon Complete), Microsoft (Defender Experts for XDR), and SentinelOne (Vigilance) as platform giants bundling rival MDR, while independent peers Secureworks and Red Canary have already been acquired into Sophos and Zscaler respectively, per industry buyer guides from June 2026.
- Is Expel still worth $1 billion?
- Expel's 2021 Series E, co-led by CapitalG and Paladin Capital Group, pushed its valuation past $1 billion, per FintechFutures. No priced round has been reported since an October 2022 Series E extension brought total funding to $288.8 million, leaving current valuation unconfirmed by any new financing.
Timeline
- 2026-06-23Expel extends Ruxie AI to cover entire threat lifecycle in production across MDR customers
- 2026-05-04Expel publishes Trust vs Impact AI framework and ships new Ruxie AI power-ups
- 2026-03-22Expel launches Managed SIEM service for Microsoft Sentinel and Splunk at RSAC 2026
- 2025-10-28Expel announces MDR integration with Google SecOps for Google Cloud customers
- 2025-03Expel expands MDR coverage to Oracle Cloud Infrastructure
- 2025Expel shifts to a 100 percent channel sales model routed through MSSP or MSP partners
- 2024-10-01Mandiant founder Kevin Mandia joins Expel's board of directors
- 2022-10Expel extends Series E by $31M, bringing cumulative funding to $288.8M
- 2021Expel closes $140.3M Series E co-led by CapitalG and Paladin, valuation tops $1 billion
- 2016-05-05Expel founded by Dave Merkel, Yanek Korff, and Justin Bajko
Revision history
21 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- Company (2026-05-15)
- Expel Revenue, Valuation & Funding History (2025) (2025-05-31)
- Cybersecurity Company Expel Announces $50 Million in Series D Financing (2025-11-03)
- $140m Series E funding takes Expel valuation to over $1bn (2025-02-10)
- Expel Investors Fuel Rapid Growth with Additional Series E Investment (2024-01-19)
- Expel - $268M Raised - Reviews & Alternatives (2026-07-01)
- Expel Company Growth, Stability & Outlook 2026 (2026-04-03)
- Expel Ranked as a Fastest-Growing Company in North America on the 2023 Deloitte Technology Fast 500 (2024-05-09)
- Expel Celebrates Fourth Consecutive Ranking on the Deloitte Technology Fast 500 (2025-03-06)
- Expel Meeting Summary (2025-05-30)
- Expel Employee Directory, Headcount & Staff
- Expel 2026 Company Profile: Valuation, Funding & Investors