EDR (Endpoint Detection & Response)
EDR, or Endpoint Detection & Response, is about watching endpoints for threats and responding fast. These tools continuously monitor endpoints like workstations and servers, collecting data on processes, file activity, and network connections to spot suspicious patterns. They spot malicious activity traditional antivirus might miss.
When choosing an EDR solution, look at how it handles threat detection and response. Some products, like N-able's Endpoint Detection and Response, Powered by SentinalOne, use AI to analyze threats and automate responses. Tools that stop unapproved software from running at all, such as ThreatLocker Allowlisting and Ringfencing, are listed under Application Control and Allowlisting.
Most EDR solutions in this catalog, which includes 85 products, integrate with common PSA tools. You'll find support for ConnectWise PSA, Autotask PSA, and Halo PSA for ticketing and client management. Few explicitly list Microsoft 365 integration, so plan on manual data export there.
Consider 11:11 Managed EDR for its public API. Huntress offers a focused approach. BLOKWORX Co-Managed Endpoint Security is available if you prefer shared responsibility. Sophos Central Intercept X Advanced provides AI-driven endpoint protection with a public API.
Products
85WithSecure's cloud security platform for exposure management, endpoint detection and response, sold through MSPs.
SonicWall endpoint protection powered by SentinelOne, with behavior-based malware detection, threat hunting, vulnerability management and ransomware rollback.
Cloud-based endpoint protection from OpenText that uses real-time machine learning and threat intelligence to block malware, ransomware and phishing.
Managed endpoint security for MSPs with real-time detection, automated response and ransomware prevention for laptops, desktops and remote workers.
Unified endpoint security detects hidden threats, blocks unauthorized apps and devices, with forensics and file integrity monitoring.
EDR solution that monitors threats, alerts to anomalies, and takes automated action, with a Detect Dashboard for threats and impacted assets.
Endpoint detection and response platform with patented Auto-Containment that isolates unknown threats and automates incident response.
Endpoint protection and detection with next-gen antivirus, EDR, device and application control, and 24x7 Aurora Agentic SOC monitoring.
Endpoint detection and response that pairs a lightweight agent with a 24/7 AI-centric, human-led SOC for Windows, macOS, and Linux.
Managed endpoint security that blocks threats at execution using deep learning AI and a 24/7 US-based SOC.
AI-powered Endpoint Detection and Response (EDR) solution providing threat detection, prevention, and response capabilities for endpoints.
Cloud-native endpoint security from Microsoft that detects and responds to cyberthreats across Windows, macOS, Linux, Android, iOS and IoT devices.
Endpoint security that combines enterprise EDR and NGAV in a single agent for MSPs, with behavioral detection and automated threat containment.
Heimdal endpoint detection and response with prevention, threat hunting and incident response.
Endpoint detection and response for desktops, laptops and servers using lightweight clients and real-time plus historical detections.
Endpoint security and EDR modules for Windows, macOS and Linux that scan for malware, block suspicious processes and manage mobile devices.
Acronis Cyber Protect is a cybersecurity and data protection solution.
Endpoint detection and response for workstations and servers, managed from one console, with ransomware rollback up to seven days after an attack.
Endpoint detection and response built on SentinelOne, with real-time monitoring, AI-driven threat response and quick rollback after ransomware.
Business security suite for Windows PCs, Macs and Windows servers that combines next-gen antivirus, patch management and a built-in VPN.
Entry-level Judy cybersecurity package for small businesses, run as a virtual cybersecurity service.
ConnectWise Cybersecurity offers a suite of security solutions designed to protect MSPs and their clients from cyber threats, including threat detection, vulnerability management, and security awareness training.
Mobile security platform that protects iOS and Android devices, AI usage, and apps, and defends users from social engineering threats.
Endpoint detection and response that monitors and remediates threats across Windows, macOS, Linux, Android, and Chromebook from one console.
- Cyberleaf Managed Cybersecurity Cyberleaf
- Cynet Cynet Security
- Judy EDR Judy
- Singularity Control SentinelOne
- Datto EDR Kaseya
- Canauri Portal Canauri Ransomware Protection
- Cyberboxx Assist Cyberboxx (BOXX Insurance)
- Data Sentinel NeuShield
- Kaseya 365 User Kaseya
- Cyber Vault 11:11 Systems
- Trend Micro TrendAI
- Endpoint Security Deep Instinct
- Huntress Huntress
- Todyl Todyl
- ThreatRemediate Vijilan Security
- EDR / XDR Lumifi
- ThreatAware ThreatAware
- Elastic Security Elastic
- ESET Endpoint Security ESET
- Ransomware Encryption Prevention (REP) Heimdal Security
- Hexnode XDR Hexnode
- Kaseya 365 Endpoint Kaseya
- Endpoint Detection and Response (EDR), Powered by SentinalOne N-able
- Endpoint Security Prime WatchGuard
- Sophos Endpoint (Intercept X Advanced) Sophos
- Managed Endpoint Protection BLOKWORX
- Fully Managed Endpoint Security BLOKWORX
- ASSET Package VigilAigent
- ThreatLocker® Protect ThreatLocker
- Acronis Cyber Protect Cloud Acronis
- DNS Security Endpoint Heimdal Security
- SOCSoter Endpoint Protection SOCSoter
- Halcyon DXP Halcyon
- WithSecure Elements Endpoint Protection WithSecure
- Network Access Control ThreatLocker
- Malwarebytes Malwarebytes
- Vijilan Managed SOC & MDR Vijilan Security
- Endpoint Security: Protection, Threat Hunting, Detection & Response Vault America
- Endpoint Security Foresite
- Tanium Core Tanium
- Ransomware Prevention & Recovery (EDR) Vertek
- EDR (Endpoint Detection & Response) OpenText Cybersecurity
- Symantec Endpoint Security Enterprise Symantec
- FortiEndpoint EDR Fortinet
- Carbon Black Carbon Black
- End User Protection Firewalls.com
- Carbon Black Threat Detection and Response Carbon Black
- Emsisoft Enterprise Security + EDR Emsisoft
- Cerulean Agent AgileBlue
- SonicWall Endpoint Security SonicWall
- Endpoint Security Exclusive Networks
- Halcyon Halcyon
- Trellix ePolicy Orchestrator (ePO) Trellix (formerly FireEye)
- Carbon Black Threat Prevention Carbon Black
- Autonomous Endpoint Control Idemeum
- FirmGuard Phoenix Technologies
- Modern Threat Protection ConnectWise
- Singularity Platform SentinelOne
- Trellix Endpoint Security Trellix (formerly FireEye)
- OpenText Cybersecurity OpenText Cybersecurity
- Syxsense Enterprise Syxsense, An Absolute Security Company