Thoughts on Self-Hosted vs. Vendor-Hosted Products?

Hello!

Wondering what y'all think about managing a vendor's product on-prem, or in your own cloud instance, vs. the vendor handling it all themselves.

Looking at network detection & response tool (NDR) deployment options.

Option 1) self-hosted & self-managed on-prem deployment.

Option 2) self-hosted & self-managed cloud processing for an NDR.

What is your experience/preference between the two? I know some of your organizations can't use the cloud... :)

amp cloud cybersecurity deployment detection handling hello instance managed ndr network network detection on-prem options own product products response thoughts tool vendor what is