Expel is a leading managed detection and response (MDR) provider in the cybersecurity industry, specializing in 24/7 SOC monitoring, AI-powered threat detection, incident response, and security optimization across endpoints, cloud, Kubernetes, SaaS, networks, and more.[1][2][3] It serves security teams at organizations facing sophisticated threats, solving the challenges of alert fatigue, false positives, and resource constraints by delivering rapid response—boasting a 17-minute mean time to remediate (MTTR) on high/critical incidents—and holistic coverage via over 130 integrations without requiring new agents or tool swaps.[2][3] Expel's human-led, AI-supported approach has driven strong growth, with 99% customer trust ratings, significant time savings (up to 90% in incident containment), and annual cost reductions exceeding $1M for clients, positioning it as a force multiplier for understaffed SecOps teams.[3]
Expel was founded in 2016 in Herndon, Virginia, originally as "The Concern," by Dave Merkel (co-founder and CEO) and others, evolving into a top-tier MDR specialist.[2][4] Merkel's nearly 30-year career in cybersecurity shaped the company's DNA: he began as a special agent in the Air Force Office of Special Investigations, conducting digital forensics in the floppy-disk era, then led AOL's incident response and security infrastructure, followed by roles as CTO and VP of products at Mandiant (acquired by FireEye), and global CTO at FireEye.[4] The idea emerged from Merkel's practitioner experience, addressing the gap where even elite security teams struggle against escalating threats amid budget pressures—leading to Expel's focus on partnering with existing tools for proactive, resilient SecOps.[2][3][4]
Expel's edge in the crowded MDR market stems from its operator-first design, blending human expertise with AI for unmatched performance:
Expel rides the explosive growth of the MDR market, fueled by AI-enabled threats surging in volume and sophistication, alongside tighter SecOps budgets and cloud/SaaS complexity.[1][2] Its timing is ideal amid 2025's generative AI-driven attacks and multi-cloud sprawl, where traditional tools falter—Expel counters by maximizing ROI on existing stacks, enabling mid-market firms to match enterprise-grade defense.[2][3] It influences the ecosystem by setting benchmarks for transparent, flexible MDR (e.g., Forrester leadership), empowering "unsung hero" security teams as force multipliers, and pushing AI-human synergy, which helps organizations prioritize high-fidelity risks over alert overload in a landscape where threats evolve daily.[1][3][4]
Expel is primed to dominate as MDR demand accelerates with AI threats and regulatory pressures, potentially expanding into predictive analytics and zero-trust integrations while scaling its 130+ tech stack.[1][2][3] Trends like edge computing and quantum risks will test its adaptability, but its operator heritage and telemetry flywheel position it to evolve influence—shifting from responder to strategic SecOps architect for resilient enterprises.[3][4] As Dave Merkel envisioned, Expel remains the partner that elevates security teams against tomorrow's battles, keeping tools sharp and sanity intact.[2][4]
Expel has raised $289.0M in total across 6 funding rounds.
Expel's investors include Alkeon Capital, Andreessen Horowitz, Blu Venture Investors, CapitalG, Cisco Investments, Costanoa Ventures, Equal Ventures, Index Ventures, March Capital, Glenn Solomon, Oren Yunger, Paladin Capital Group.
Expel has raised $289.0M across 6 funding rounds. Most recently, it raised $31.0M Series E in October 2022.
