Mean Time To Respond (MTTR) Calculator
Reviewed by Hamza Gujjar, Algorithm Architect & Software Developer
Last updated: July 27, 2026Mean Time To Respond (MTTR) Calculator
Once a threat has been detected, how fast is it actually contained and resolved? MTTR measures exactly that - a fast detection followed by a slow response can still result in serious damage, which is why this is tracked as a distinct metric from Mean Time To Detect.
MTTR = Resolution Time - Detection Time
Example
Detected at hour 72, resolved at hour 96:
MTTR = 96 - 72 = 24 hours (1.0 day)
MTTD + MTTR Together
These two metrics together describe an organization's full incident response speed - a low MTTD paired with a low MTTR represents the gold standard: threats are found fast and shut down fast. A common security operations center (SOC) maturity goal is progressively reducing both figures year over year through better tooling, clearer playbooks, and well-rehearsed incident response procedures. See the companion Mean Time To Detect Calculator for the detection half of this picture.