# Best Enterprise Endpoint Detection & Response (EDR) Software *By [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)* Products classified in the overall Endpoint Detection & Response (EDR) category are similar in many regards and help companies of all sizes solve their business problems. However, enterprise business features, pricing, setup, and installation differ from businesses of other sizes, which is why we match buyers to the right Enterprise Business Endpoint Detection & Response (EDR) to fit their needs. Compare product ratings based on reviews from enterprise users or connect with one of G2's buying advisors to find the right solutions within the Enterprise Business Endpoint Detection & Response (EDR) category. In addition to qualifying for inclusion in the Endpoint Detection & Response (EDR) Software category, to qualify for inclusion in the Enterprise Business Endpoint Detection & Response (EDR) Software category, a product must have at least 10 reviews left by a reviewer from an enterprise business. ## Top Endpoint Detection & Response (EDR) Software at a Glance | # | Product | Rating | Best For | What Users Say | |---|---------|--------|----------|----------------| | 1 | [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) | 4.6/5.0 (417 reviews) | AI-driven endpoint threat detection and real-time response | "[Crowdstrike Falcon: Proactive Security, Steep Learning Curve](https://www.g2.com/survey_responses/crowdstrike-falcon-endpoint-protection-platform-review-12958852)" | | 2 | [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) | 4.7/5.0 (791 reviews) | Ransomware rollback with synchronized endpoint-firewall detection | "[Excellent fleet visibility through Sophos Central, but watch the initial policy exceptions"](https://www.g2.com/survey_responses/sophos-endpoint-review-12955748)" | | 3 | [Acronis Cyber Protect Cloud](https://www.g2.com/products/acronis-cyber-protect-cloud/reviews) | 4.7/5.0 (1,371 reviews) | EDR with integrated ransomware rollback and backup | "[Easy Deployment, Intuitive Management, and Great Value](https://www.g2.com/survey_responses/acronis-cyber-protect-cloud-review-13120536)" | | 4 | [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) | 4.8/5.0 (886 reviews) | Human-led threat hunting with 24/7 SOC remediation | "[My Time Using Huntress](https://www.g2.com/survey_responses/huntress-managed-edr-review-9860826)" | | 5 | [ESET PROTECT](https://www.g2.com/products/eset-protect/reviews) | 4.6/5.0 (962 reviews) | Centralized behavioral threat detection across distributed endpoints | "[Great product placing ESET at the top of the list](https://www.g2.com/survey_responses/eset-protect-review-10057911)" | | 6 | [ThreatDown](https://www.g2.com/products/threatdown/reviews) | 4.6/5.0 (1,045 reviews) | Lightweight EDR with centralized multi-endpoint remediation | "[Excellent tool for End point defence as part of our Cyber Defence](https://www.g2.com/survey_responses/threatdown-review-9947439)" | | 7 | [Check Point Endpoint Security](https://www.g2.com/products/check-point-endpoint-security/reviews) | 4.5/5.0 (254 reviews) | Behavioral threat prevention with automated ransomware rollback | "[efficient, safe and friendly](https://www.g2.com/survey_responses/check-point-endpoint-security-review-7171717)" | | 8 | [Arctic Wolf](https://www.g2.com/products/arctic-wolf/reviews) | 4.7/5.0 (276 reviews) | Concierge-delivered SOC with 24/7 endpoint threat triage | "[Effortless Log Management and Monitoring with Built-In Parsers](https://www.g2.com/survey_responses/arctic-wolf-review-12190051)" | | 9 | [TrendAI Vision One](https://www.g2.com/products/trendai-vision-one/reviews) | 4.7/5.0 (246 reviews) | Cross-layer XDR threat correlation with unified console | "[Scalable Security with Easy Setup, Needs Better Training Support](https://www.g2.com/survey_responses/trendai-vision-one-review-12800247)" | | 10 | [Iru](https://www.g2.com/products/iru/reviews) | 4.7/5.0 (819 reviews) | Apple-native EDR with unified compliance enforcement | "[Intuitive, Powerful Endpoint Management That Is Getting Better](https://www.g2.com/survey_responses/iru-review-13067999)" | --- ## What Are the Most Common Questions About Endpoint Detection & Response (EDR) Software? *AI-generated · Last updated: May 26, 2026* ### Which EDR platform integrates with SIEM tools? Based on G2 reviews, several Endpoint Detection & Response (EDR) software products are mentioned as fitting SIEM-related workflows, but CrowdStrike Falcon Endpoint Protection Platform appears most often in recent reviews for this use case. According to verified users, it helps centralize telemetry, supports faster investigations, and is used to correlate endpoint events with broader security operations. G2 reviewers also mention Elastic Security and Sophos Endpoint in SIEM-oriented environments, though comments there are more limited or note some logging gaps. For buyers evaluating Endpoint Detection & Response (EDR) software, recent G2 feedback points to demand for centralized visibility, faster triage, and easier incident analysis when integrating endpoint data into wider monitoring processes. CrowdStrike Falcon Endpoint Protection Platform is the most frequently referenced option in the recent review set for this use case. ### Which is the best EDR platform for threat detection? Based on G2 reviews, CrowdStrike Falcon Endpoint Protection Platform is the most frequently reviewed product in the recent data for threat detection use cases. According to verified users, it is often praised for behavior-based detection, strong visibility across endpoints, and fast identification of malware, ransomware, fileless attacks, and suspicious activity. G2 reviewers mention that it helps reduce blind spots, improves investigation speed, and supports organized response workflows. Buyers comparing Endpoint Detection & Response (EDR) software should note that reviewers also mention alert noise, pricing concerns, and a learning curve, but the strongest recurring theme is confidence in detection depth and real-time visibility. Within this review set, CrowdStrike Falcon Endpoint Protection Platform stands out as the most supported answer. ### Which EDR platform offers AI-powered threat hunting? Based on G2 reviews, AI-assisted investigation and threat hunting come up most clearly for CrowdStrike Falcon Endpoint Protection Platform, Sophos Endpoint, and TrendAI Vision One. According to verified users, CrowdStrike Falcon Endpoint Protection Platform is frequently associated with AI-driven detection, Charlotte AI support, and rapid investigation workflows. G2 reviewers mention Sophos Endpoint for AI scan, visibility, and earlier threat detection, while TrendAI Vision One is noted for AI-assisted reviews, correlation, and broader XDR-style visibility. Across the recent review set, buyers looking for Endpoint Detection & Response (EDR) software with AI-oriented threat hunting should focus on products where users specifically describe faster triage, clearer context, and reduced manual investigation effort rather than generic AI claims alone. ### What top EDR tools for protecting enterprise endpoints? Based on G2 reviews, enterprise buyers evaluating Endpoint Detection & Response (EDR) software consistently mention centralized visibility, lightweight agents, scalable deployment, and strong response workflows. According to verified users, CrowdStrike Falcon Endpoint Protection Platform is used for broad enterprise visibility and protecting large environments with cloud-based management. G2 reviewers mention Sophos Endpoint for centralized policies, ransomware protection, and support for large device estates. They also reference Huntress Managed EDR for managed monitoring and analyst support, especially where teams want enterprise-style coverage without building a large in-house operation. The common thread across recent reviews is the need to protect many endpoints while keeping investigations, containment, and administration practical for security teams. **Here are some of the top-rated products on G2:** - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) – used for large environments needing centralized visibility, lightweight protection, and faster threat response - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) – chosen for centralized policy management, ransomware defense, and broad endpoint coverage - [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) – favored for managed monitoring, human-led investigations, and support for lean internal teams ### Which EDR solution offers the best incident forensics? Based on G2 reviews, incident forensics is most strongly associated with products that provide clear attack timelines, endpoint visibility, and investigation context. According to verified users, SentinelOne Singularity Endpoint is frequently praised for its Storyline feature, which helps show how events unfolded on an endpoint and simplifies investigation steps. G2 reviewers also mention CrowdStrike Falcon Endpoint Protection Platform for detailed telemetry, process visibility, and threat hunting support, while Sophos Endpoint is recognized for visibility and structured threat cases. For buyers researching Endpoint Detection & Response (EDR) software, the strongest signals in recent reviews point to tools that reduce manual reconstruction effort and give analysts enough context to understand impact, trace attack paths, and respond quickly. ### What best software for detecting fileless malware attacks? Based on G2 reviews, buyers asking about Endpoint Detection & Response (EDR) software for fileless attacks should look for repeated mentions of behavior-based detection rather than signature-only protection. According to verified users, CrowdStrike Falcon Endpoint Protection Platform is repeatedly described as effective against fileless threats, malware-free attacks, and suspicious behavior that traditional antivirus can miss. G2 reviewers also mention Sophos Endpoint for exploit prevention and ransomware blocking, and Check Point Harmony Endpoint for stopping sophisticated threats through layered prevention. Across the recent review set, the clearest pattern is that users value products that monitor behavior in real time, provide endpoint visibility, and support quicker investigation when suspicious activity does not rely on known malicious files. **Here are some of the top-rated products on G2:** - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) – highlighted for behavior-based detection of fileless and malware-free attacks - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) – used for exploit prevention, ransomware blocking, and endpoint investigation workflows - [Check Point Harmony Endpoint](https://www.g2.com/products/check-point-harmony-endpoint/reviews) – noted for layered prevention against ransomware, phishing, and advanced threats ### What best tools for cloud-based endpoint security? Based on G2 reviews, cloud-based management is a recurring priority for teams choosing Endpoint Detection & Response (EDR) software. According to verified users, Sophos Endpoint is often praised for web-based management, a cloud console, straightforward deployment, and centralized policies. G2 reviewers also mention CrowdStrike Falcon Endpoint Protection Platform for its cloud-native approach, lightweight agent, and rapid updates without heavy local infrastructure. Microsoft Defender for Endpoint appears in the recent reviews as another option for organizations already operating in the broader Microsoft environment. Across the category, reviewers consistently highlight the value of centralized cloud consoles, easier remote administration, and improved visibility across distributed devices when evaluating cloud-based endpoint security tools. **Here are some of the top-rated products on G2:** - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) – favored for web-based management, cloud deployment, and centralized endpoint policy control - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) – selected for cloud-native management, lightweight operation, and strong real-time visibility - [Microsoft Defender for Endpoint](https://www.g2.com/products/microsoft-defender-for-endpoint/reviews) – used for integrated cloud-managed endpoint security within Microsoft-centric environments ### What top-rated EDR solutions for regulated industries? Based on G2 reviews, regulated-industry buyers consistently focus on compliance support, centralized control, and clear reporting when evaluating Endpoint Detection & Response (EDR) software. According to verified users, Huntress Managed EDR is valued where teams need documented investigations and audit-friendly response support. G2 reviewers mention CrowdStrike Falcon Endpoint Protection Platform for helping with compliance requirements, visibility, and enterprise-grade endpoint coverage. They also mention Sophos Endpoint for compliance-related protection, centralized management, and policy enforcement. In the recent reviews, the most relevant pattern for regulated industries is not a single sector-specific feature but a combination of continuous monitoring, strong visibility, manageable reporting, and confidence that endpoint events can be investigated and acted on quickly. **Here are some of the top-rated products on G2:** - [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) – useful for documented investigations, managed response, and audit-oriented security workflows - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) – used for compliance-focused endpoint visibility and enterprise-grade protection - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) – chosen for centralized controls, endpoint protection, and support for compliance-driven environments ### What best EDR software for real-time incident response? Based on G2 reviews, real-time incident response is a major buying theme across Endpoint Detection & Response (EDR) software. According to verified users, Sophos Endpoint is frequently mentioned for automated remediation, device isolation, and centralized response from a cloud console. G2 reviewers also highlight Huntress Managed EDR for fast human-led investigation and automated remediations, especially when teams need round-the-clock support. CrowdStrike Falcon Endpoint Protection Platform is another recurring option for fast detection and organized response workflows. Recent feedback shows that buyers value products that combine timely alerts, clear investigation paths, and immediate containment actions, because those capabilities help reduce manual effort and keep incidents from spreading across the environment. **Here are some of the top-rated products on G2:** - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) – recognized for automated remediation, isolation, and centralized response actions - [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) – valued for rapid managed investigations and automated remediation support - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) – noted for fast threat detection and streamlined response workflows ### What top EDR tools for remote work environments? Based on G2 reviews, remote and hybrid work protection is a frequent theme in Endpoint Detection & Response (EDR) software feedback. According to verified users, Sophos Endpoint is appreciated for cloud-based updates, centralized management, and support for protecting distributed devices. G2 reviewers mention CrowdStrike Falcon Endpoint Protection Platform for visibility across remote machines and lighter endpoint impact, while ESET PROTECT is recognized for managing remote endpoints from one dashboard and securing home-connected devices. Recent reviews suggest buyers should prioritize tools that make policy management, visibility, and threat response practical even when devices are outside the corporate network. The strongest signals center on centralized consoles, consistent protection for off-site users, and less dependency on manual intervention. **Here are some of the top-rated products on G2:** - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) – supports centralized cloud management and protection for distributed remote devices - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) – helps secure remote machines with lightweight monitoring and fast detection - [ESET PROTECT](https://www.g2.com/products/eset-protect/reviews) – useful for remote endpoint oversight, centralized monitoring, and protection across mixed locations ## G2 Grid® for Endpoint Detection & Response (EDR) Software ![G2 Grid® for Endpoint Detection & Response (EDR) Software plotting products by satisfaction and market presence](https://www.g2.com/categories/endpoint-detection-response-edr/grids.png?focus%5B%5D=68606&focus%5B%5D=130021&focus%5B%5D=818&focus%5B%5D=38011&focus%5B%5D=14972&focus%5B%5D=121850&focus%5B%5D=70840&focus%5B%5D=16881) Highlighted products: CrowdStrike Falcon Endpoint Protection Platform, TrendAI Vision One, Sophos Endpoint, Arctic Wolf, Check Point Endpoint Security, Microsoft Defender for Endpoint, Cynet, and SentinelOne Singularity Endpoint. Underlying data: [Grid® JSON](https://www.g2.com/categories/endpoint-detection-response-edr/grids.json?focus%5B%5D=crowdstrike-falcon-endpoint-protection-platform&focus%5B%5D=trendai-vision-one&focus%5B%5D=sophos-endpoint&focus%5B%5D=arctic-wolf&focus%5B%5D=check-point-endpoint-security&focus%5B%5D=microsoft-defender-for-endpoint&focus%5B%5D=cynet&focus%5B%5D=sentinelone-singularity-endpoint&segment=enterprise) ## How Many Endpoint Detection & Response (EDR) Software Products Does G2 Track? **Total Products under this Category:** 125 ### Category Stats (Jul 2026) - **Average Rating**: 4.43/5 The average rating of products in this category, based on all submitted ratings - **Top Trending Product**: Bitdefender GravityZone XDR (+0.75%) - Among all products in this category, Bitdefender GravityZone XDR recorded the largest rating increase compared to last month *Last updated: July 19, 2026* ## How Does G2 Rank Endpoint Detection & Response (EDR) Software Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 12,500+ Authentic Reviews - 125+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. --- **Sponsored** ### AssetSonar AssetSonar is a comprehensive IT asset and service management platform that provides organizations with real-time visibility into their entire digital infrastructure. This solution enables users to effectively track and optimize their hardware, software, licenses, tickets, and service management processes. By doing so, AssetSonar helps businesses reduce risks, control IT expenditures, improve service delivery, and enhance compliance with regulatory requirements. Targeted primarily at mid-market to enterprise-level IT teams and IT asset managers, AssetSonar addresses common challenges organizations face, such as SaaS sprawl, shadow IT, redundant software licenses, fragmented service workflows, and disconnected asset data. The platform's robust features, including software discovery, license tracking, software normalization, ITSM, and IT Graph context, empower businesses to gain a clearer understanding of their IT landscape. This clarity enables informed decision-making on software use, asset ownership, service impact, and licensing, ultimately leading to cost savings and improved operational efficiency. One of the standout features of AssetSonar is its risk-based patching capabilities. This functionality enables IT teams to identify vulnerabilities in their systems, prioritize them by severity, and take swift action to remediate them. By focusing on the most critical vulnerabilities, organizations can significantly reduce their exposure to security threats and ensure that their systems remain secure and compliant with industry standards. AssetSonar also offers native ITSM capabilities that connect incidents, service requests, approvals, SLAs, knowledge articles, self-service, and automation with live asset and software context. Its integrations with leading MDM, directory, security, and endpoint management tools such as Jamf, Intune, SCCM, and other IT systems help teams centralize operational data and maintain continuous visibility across the IT ecosystem. This not only enhances operational efficiency but also frees up valuable time for IT professionals to concentrate on strategic initiatives that drive business growth. By optimizing the IT asset and service lifecycle, AssetSonar equips organizations with the tools they need to boost team efficiency, resolve requests faster, manage onboarding and offboarding, and make smarter purchasing decisions. Its capabilities in IT asset management, IT service management, software governance, patch management, and automation help businesses maintain complete control over their digital assets as they navigate the complexities of modern IT environments. AssetSonar provides unlimited asset context with the ability to manage unlimited tickets with unlimited agents. [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=1159&secure%5Bchosen_at%5D=2026-07-19T15%3A57%3A19Z&secure%5Bdisplayable_resource_id%5D=1391&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=retargeted_product&secure%5Bplacement_resource_ids%5D%5B%5D=87855&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=87855&secure%5Bresource_id%5D=1159&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fendpoint-detection-response-edr%2Fenterprise%3Fpage%3D2&secure%5Btoken%5D=357f54248e6db53c7934fbfd6e53d5357b9c86d1e87084ead7a8ae0884bc123c&secure%5Burl%5D=https%3A%2F%2Fgo.ezo.io%2Fassetsonar%2Fit-asset-management-software_of%2F%3Futm_source%3Dpaid_advertising%26utm_medium%3Dg2%26utm_campaign%3Dg2-clicks&secure%5Burl_type%5D=custom_url) --- ## What Are the Top-Rated Endpoint Detection & Response (EDR) Software Products in 2026? ### 1. [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) Organizations today face a serious challenge: managing numerous security vendors and tools while confronting an ever-evolving threat landscape. Sophisticated adversaries are becoming smarter, faster, and more evasive, launching complex attacks that can strike in minutes or even seconds. Traditional security approaches struggle to keep pace, leaving businesses vulnerable. The CrowdStrike Falcon Platform addresses this by offering a unified, cloud-native solution. It consolidates previously siloed security solutions and incorporates third-party data into a single platform with one efficient and resource-conscious agent, leveraging advanced AI and real-time threat intelligence. This approach simplifies security operations, speeds analyst decision making, and enhances protection to stop the breach, allowing organizations to reduce risk with less complexity and lower costs. CrowdStrike's Falcon Platform includes: - Endpoint Security: Secure the endpoint, stop the breach - Identify Protection: Identity is the front line, defend it - Next-Gen SIEM: The future of SIEM, today - Data Protection: Real-time data protection from endpoint to cloud - Exposure Management: Understand risk to stop breaches - Charlotte AI: Powering the next evolution of the SOC **Average Rating:** 4.6/5.0 **Total Reviews:** 417 **How Do G2 Users Rate CrowdStrike Falcon Endpoint Protection Platform?** - **Ease of Admin:** 9.0/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 9.0/10) - **Quality of Support:** 8.9/10 (Category avg: 8.7/10) - **Ease of Use:** 9.0/10 (Category avg: 8.7/10) **Who Is the Company Behind CrowdStrike Falcon Endpoint Protection Platform?** - **Seller:** [CrowdStrike](https://www.g2.com/sellers/crowdstrike) - **Company Website:** https://www.crowdstrike.com - **Year Founded:** 2011 - **HQ Location:** Sunnyvale, CA - **Twitter:** @CrowdStrike (110,809 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/2497653/ (11,343 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Security Analyst, Cyber Security Analyst - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 43% Enterprise, 43% Mid-Market #### What Are CrowdStrike Falcon Endpoint Protection Platform's Pros and Cons? **Pros:** - Features (113 reviews) - Threat Detection (103 reviews) - Ease of Use (98 reviews) - Security (97 reviews) - Detection (90 reviews) **Cons:** - Expensive (54 reviews) - Complexity (39 reviews) - Learning Curve (35 reviews) - Limited Features (31 reviews) - Pricing Issues (29 reviews) ### What Do G2 Reviewers Say About CrowdStrike Falcon Endpoint Protection Platform? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **lightweight performance and powerful threat detection** of CrowdStrike Falcon, enhancing operational efficiency and security. - Users value the **effective threat detection** of CrowdStrike Falcon, ensuring robust security without compromising system performance. - Users appreciate the **ease of use** of CrowdStrike Falcon, benefiting from a lightweight and efficient security solution. - Users appreciate the **advanced real-time threat protection** of CrowdStrike Falcon, enhancing security with minimal system impact. - Users appreciate the **strong threat detection** of CrowdStrike Falcon, effectively catching both known and unknown threats seamlessly. **Cons:** - Users find the **cost of CrowdStrike Falcon** to be high, especially for smaller teams needing advanced features. - Users face **initial complexity and a steep learning curve** with CrowdStrike Falcon, making it challenging for non-technical personnel. - Users find the **initial learning curve** of CrowdStrike challenging, especially transitioning from other systems like Splunk. - Users find the **high cost and limited features** frustrating, particularly for smaller teams needing advanced capabilities. - Users express concern over **pricing issues** , especially for smaller organizations needing advanced features with additional licensing costs. #### What Are Recent G2 Reviews of CrowdStrike Falcon Endpoint Protection Platform? **"[Crowdstrike Falcon: Proactive Security, Steep Learning Curve](https://www.g2.com/survey_responses/crowdstrike-falcon-endpoint-protection-platform-review-12958852)"** **Rating:** 5.0/5.0 stars *— Ansh B.* [Read full review](https://www.g2.com/survey_responses/crowdstrike-falcon-endpoint-protection-platform-review-12958852) --- **"[Lightweight Deployment, Powerful Incident Response Visibility](https://www.g2.com/survey_responses/crowdstrike-falcon-endpoint-protection-platform-review-12952621)"** **Rating:** 5.0/5.0 stars *— Anup A.* [Read full review](https://www.g2.com/survey_responses/crowdstrike-falcon-endpoint-protection-platform-review-12952621) --- #### What Are G2 Users Discussing About CrowdStrike Falcon Endpoint Protection Platform? - [How does Falcon prevent work?](https://www.g2.com/discussions/how-does-falcon-prevent-work) - 1 comment - [Does CrowdStrike offer MFA?](https://www.g2.com/discussions/does-crowdstrike-offer-mfa) - 1 comment - [What is OverWatch in CrowdStrike?](https://www.g2.com/discussions/what-is-overwatch-in-crowdstrike) - 1 comment - [How much does CrowdStrike Falcon X cost?](https://www.g2.com/discussions/how-much-does-crowdstrike-falcon-x-cost) - [What is MDR detection?](https://www.g2.com/discussions/what-is-mdr-detection) ### 2. [TrendAI Vision One](https://www.g2.com/products/trendai-vision-one/reviews) TrendAI Vision One is a cloud-native security operations platform, serving cloud, hybrid, and on-premises environments. It combines ASM and XDR in a single console to effectively manage cyber risk across your organization. The platform provides powerful risk insights, earlier threat detection, and automated risk and threat response options. Utilize the platform’s predictive machine learning and advanced security analytics for a broader perspective and advanced context. TrendAI Vision One integrates with its own expansive protection platform portfolio and industry-leading global threat intelligence, in addition to a broad ecosystem of purpose-built and API-driven third-party integrations. **Average Rating:** 4.7/5.0 **Total Reviews:** 246 **How Do G2 Users Rate TrendAI Vision One?** - **Ease of Admin:** 8.7/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 9.0/10) - **Quality of Support:** 8.7/10 (Category avg: 8.7/10) - **Ease of Use:** 8.6/10 (Category avg: 8.7/10) **Who Is the Company Behind TrendAI Vision One?** - **Seller:** [TrendAI](https://www.g2.com/sellers/trendai) - **Company Website:** https://www.trendmicro.com/ - **Year Founded:** 1988 - **HQ Location:** Tokyo - **LinkedIn® Page:** https://www.linkedin.com/company/4312/ (8,040 employees on LinkedIn®) - **Ownership:** OTCMKTS:TMICY **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 52% Enterprise, 33% Mid-Market #### What Are TrendAI Vision One's Pros and Cons? **Pros:** - Visibility (37 reviews) - Security (33 reviews) - Ease of Use (31 reviews) - Features (31 reviews) - Threat Detection (27 reviews) **Cons:** - Complex Interface (12 reviews) - Integration Issues (12 reviews) - Learning Curve (11 reviews) - Expensive (10 reviews) - Limited Features (10 reviews) ### What Do G2 Reviewers Say About TrendAI Vision One? *AI-generated summary from verified user reviews* **Pros:** - Users value the **centralized visibility** of TrendAI Vision One, enhancing operations across diverse environments effortlessly. - Users value the **comprehensive security coverage** of TrendAI Vision One, praising its intuitive dashboard and automation features. - Users find TrendAI Vision One's **ease of use** invaluable, with intuitive dashboards and automated threat management enhancing security. - Users value the **centralized and user-friendly platform** of TrendAI Vision One, enhancing management across various geographies. - Users value the **effective threat detection** of TrendAI Vision One, enhancing visibility and reducing alert fatigue for security teams. **Cons:** - Users find the **interface complex** , with a steep learning curve that challenges effective usage during high-pressure situations. - Users note **integration issues** with third-party tools, making TrendAI Vision One less flexible and user-friendly than desired. - Users find the **learning curve steep** for TrendAI Vision One, making setup and feature utilization challenging. - Users note that the **pricing is on the higher side** , making it less accessible compared to competitors. - Users note the **limited features** of TrendAI Vision One, highlighting the need for improved reporting and DLP options. #### What Are Recent G2 Reviews of TrendAI Vision One? **"[Scalable Security with Easy Setup, Needs Better Training Support](https://www.g2.com/survey_responses/trendai-vision-one-review-12800247)"** **Rating:** 4.5/5.0 stars *— Andrew W.* [Read full review](https://www.g2.com/survey_responses/trendai-vision-one-review-12800247) --- **"[Unified XDR Platform Delivering Enhanced Visibility, Faster Detection, and Proactive Threat Response](https://www.g2.com/survey_responses/trendai-vision-one-review-12375604)"** **Rating:** 5.0/5.0 stars *— Nishant K.* [Read full review](https://www.g2.com/survey_responses/trendai-vision-one-review-12375604) --- #### What Are G2 Users Discussing About TrendAI Vision One? - [What is Trend Micro Vision One (XDR) used for?](https://www.g2.com/discussions/what-is-trend-micro-vision-one-xdr-used-for) - 1 comment, 2 upvotes - [How does XDR work?](https://www.g2.com/discussions/how-does-xdr-work) - 1 comment, 2 upvotes - [How can Trend Micro XDR solve your detection and response challenges?](https://www.g2.com/discussions/how-can-trend-micro-xdr-solve-your-detection-and-response-challenges) - 1 comment - [What is Trend Micro XDR?](https://www.g2.com/discussions/what-is-trend-micro-xdr) - [What does Trend Micro XDR allow you to do?](https://www.g2.com/discussions/what-does-trend-micro-xdr-allow-you-to-do) - 1 comment ### 3. [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) Sophos Endpoint is the world’s most comprehensive endpoint protection solution. Built to stop the widest range of attacks, Sophos Endpoint has been proven to prevent even the most advanced ransomware and malware by leveraging a unique combination of next-generation techniques. This includes the ability to detect never-before-seen malware with deep learning, stop ransomware with Sophos anti-ransomware technology, and deny attacker tools with signatureless exploit prevention. Sophos Endpoint also includes root cause analysis to provide insight into threats, and instant malware removal to ensure no attack remnants remain. **Average Rating:** 4.7/5.0 **Total Reviews:** 791 **How Do G2 Users Rate Sophos Endpoint?** - **Ease of Admin:** 9.3/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.3/10 (Category avg: 9.0/10) - **Quality of Support:** 9.0/10 (Category avg: 8.7/10) - **Ease of Use:** 9.3/10 (Category avg: 8.7/10) **Who Is the Company Behind Sophos Endpoint?** - **Seller:** [Sophos](https://www.g2.com/sellers/sophos) - **Company Website:** https://www.sophos.com/ - **Year Founded:** 1985 - **HQ Location:** Oxfordshire - **Twitter:** @Sophos (36,759 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/5053/ (5,500 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** IT Manager, System Administrator - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 60% Mid-Market, 17% Enterprise #### What Are Sophos Endpoint's Pros and Cons? **Pros:** - Ease of Use (191 reviews) - Protection (180 reviews) - Security (165 reviews) - Threat Detection (129 reviews) - Easy Management (124 reviews) **Cons:** - Slow Performance (73 reviews) - High Resource Usage (52 reviews) - Learning Curve (50 reviews) - Difficult Configuration (36 reviews) - High CPU Usage (34 reviews) ### What Do G2 Reviewers Say About Sophos Endpoint? *AI-generated summary from verified user reviews* **Pros:** - Users find Sophos Endpoint to be **easy to use** , benefiting from its intuitive interface and smooth deployment process. - Users praise the **excellent efficacy of protection** from Sophos Endpoint, highlighting its easy deployment and intuitive interface. - Users value the **excellent security protection** from Sophos Endpoint, especially against threats like cryptolocker viruses. - Users appreciate the **strong real-time threat detection** capabilities of Sophos Endpoint, ensuring quick response to potential threats. - Users value the **easy management** of Sophos Endpoint, benefiting from streamlined monitoring and centralized control. **Cons:** - Users experience **slow performance** with Sophos Endpoint, particularly during updates and scans on older machines. - Users express dissatisfaction with the **high resource usage** of Sophos Endpoint, leading to performance slowdowns and disruptions. - Users find the **learning curve steep** for Sophos Endpoint, particularly for new admins and smaller teams without IT support. - Users find the **difficult configuration** of Sophos Endpoint challenging, particularly for new administrators managing many endpoints. - Users find that Sophos Endpoint has **high CPU usage** , leading to significant slowdowns and decreased system responsiveness. #### What Are Recent G2 Reviews of Sophos Endpoint? **"[Powerful endpoint protection that rewards the effort you put in](https://www.g2.com/survey_responses/sophos-endpoint-review-12956073)"** **Rating:** 5.0/5.0 stars *— Ansh B.* [Read full review](https://www.g2.com/survey_responses/sophos-endpoint-review-12956073) --- **"[Excellent fleet visibility through Sophos Central, but watch the initial policy exceptions"](https://www.g2.com/survey_responses/sophos-endpoint-review-12955748)"** **Rating:** 5.0/5.0 stars *— Anup A.* [Read full review](https://www.g2.com/survey_responses/sophos-endpoint-review-12955748) --- #### What Are G2 Users Discussing About Sophos Endpoint? - [What is Sophos Intercept X: Next-Gen Endpoint used for?](https://www.g2.com/discussions/what-is-sophos-intercept-x-next-gen-endpoint-used-for) - 1 comment - [What is Sophos endpoint?](https://www.g2.com/discussions/what-is-sophos-endpoint) - [What is Sophos intercept X Advanced?](https://www.g2.com/discussions/what-is-sophos-intercept-x-advanced) - [Is Sophos Endpoint an antivirus?](https://www.g2.com/discussions/is-sophos-endpoint-an-antivirus) - 3 comments - [Is Sophos intercept x any good?](https://www.g2.com/discussions/is-sophos-intercept-x-any-good) - 1 comment ### 4. [Arctic Wolf](https://www.g2.com/products/arctic-wolf/reviews) Arctic Wolf® is the market leader in security operations. Using the cloud-native Arctic Wolf® Platform, we help organizations end cyber risk by providing security operations as a concierge service. Arctic Wolf solutions include Arctic Wolf® Managed Detection and Response (MDR), Managed Risk, and Managed Security Awareness —each delivered by the industry’s original Concierge Security® Team. Highly-trained Concierge Security experts work as an extension of internal teams to provide 24x7 monitoring, detection, and response, as well as ongoing risk management to give organizations the protection, resilience and guidance they need to defend against cyber threats. Visit arcticwolf.com to get the latest industry resources and learn more about our solutions. **Average Rating:** 4.7/5.0 **Total Reviews:** 276 **How Do G2 Users Rate Arctic Wolf?** - **Ease of Admin:** 9.1/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 9.0/10) - **Quality of Support:** 9.4/10 (Category avg: 8.7/10) - **Ease of Use:** 9.2/10 (Category avg: 8.7/10) **Who Is the Company Behind Arctic Wolf?** - **Seller:** [Arctic Wolf Networks](https://www.g2.com/sellers/arctic-wolf-networks) - **Company Website:** https://www.arcticwolf.com - **Year Founded:** 2012 - **HQ Location:** Eden Prairie, MN - **Twitter:** @AWNetworks (4,520 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/2760138/ (3,286 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** IT Manager, IT Director - **Top Industries:** Hospital & Health Care, Information Technology and Services - **Company Size:** 71% Mid-Market, 20% Enterprise #### What Are Arctic Wolf's Pros and Cons? **Pros:** - Customer Support (58 reviews) - Threat Detection (47 reviews) - Cybersecurity (28 reviews) - Ease of Use (27 reviews) - Alerts (22 reviews) **Cons:** - Expensive (10 reviews) - False Positives (7 reviews) - Learning Curve (7 reviews) - Cybersecurity Risks (6 reviews) - Dashboard Issues (5 reviews) ### What Do G2 Reviewers Say About Arctic Wolf? *AI-generated summary from verified user reviews* **Pros:** - Users value the **responsive and helpful customer support** from Arctic Wolf, ensuring quick resolutions to any inquiries. - Users value Arctic Wolf for its **proactive threat detection** , ensuring swift response to potential security issues. - Users appreciate the **hands-on and proactive cybersecurity approach** of Arctic Wolf, feeling supported and secure in their operations. - Users value the **ease of use** of Arctic Wolf, enjoying its seamless integration and user-friendly interface. - Users value the **fast notification of events** , enabling quick response and engagement with professionals for effective triage. **Cons:** - Users find Arctic Wolf to be **quite pricey** , wishing the product was more affordable despite its excellent performance. - Users experience **false positives** with Arctic Wolf, which can lead to time-consuming investigations despite good alert tuning. - Users note a **steep learning curve** with Arctic Wolf, requiring time to adapt and some IT knowledge for troubleshooting. - Users note that the **cybersecurity risks can be overwhelming** , suggesting better consolidation and notification methods for clarity. - Users note **dashboard issues** with quirks and alert overload, though updates help address these challenges over time. #### What Are Recent G2 Reviews of Arctic Wolf? **"[Arctic Wolf: Amazing Team, Constant Innovation, and Peace of Mind 24x7](https://www.g2.com/survey_responses/arctic-wolf-review-12647394)"** **Rating:** 5.0/5.0 stars *— Kris I.* [Read full review](https://www.g2.com/survey_responses/arctic-wolf-review-12647394) --- **"[Effortless Log Management and Monitoring with Built-In Parsers](https://www.g2.com/survey_responses/arctic-wolf-review-12190051)"** **Rating:** 4.5/5.0 stars *— Jenine M.* [Read full review](https://www.g2.com/survey_responses/arctic-wolf-review-12190051) --- #### What Are G2 Users Discussing About Arctic Wolf? - [What is CylancePROTECT used for?](https://www.g2.com/discussions/what-is-cylanceprotect-used-for) - 1 comment - [What is CylanceOPTICS used for?](https://www.g2.com/discussions/what-is-cylanceoptics-used-for) - 1 comment - [How much does arctic wolf cost?](https://www.g2.com/discussions/arctic-wolf-how-much-does-arctic-wolf-cost) - 1 comment - [How much does arctic wolf cost?](https://www.g2.com/discussions/how-much-does-arctic-wolf-cost) - [Is Arctic wolf a SIEM?](https://www.g2.com/discussions/is-arctic-wolf-a-siem) - 1 comment ### 5. [Check Point Endpoint Security](https://www.g2.com/products/check-point-endpoint-security/reviews) Harmony Endpoint is a complete endpoint security solution offering a fleet of advanced endpoint threat prevention capabilities so you can safely navigate today’s menacing threat landscape. It provides a comprehensive system to proactively prevent, detect, and remediate evasive malware attacks. **Average Rating:** 4.5/5.0 **Total Reviews:** 254 **How Do G2 Users Rate Check Point Endpoint Security?** - **Ease of Admin:** 8.7/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.0/10) - **Quality of Support:** 8.7/10 (Category avg: 8.7/10) - **Ease of Use:** 8.9/10 (Category avg: 8.7/10) **Who Is the Company Behind Check Point Endpoint Security?** - **Seller:** [Check Point Software Technologies](https://www.g2.com/sellers/check-point-software-technologies) - **Year Founded:** 1993 - **HQ Location:** Redwood City, CA - **Twitter:** @CheckPointSW (70,955 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/check-point-software-technologies/ (8,554 employees on LinkedIn®) - **Ownership:** NASDAQ:CHKP **Who Uses This Product?** - **Who Uses This:** Network Engineer, Cyber Security Engineer - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 54% Mid-Market, 27% Enterprise #### What Are Check Point Endpoint Security's Pros and Cons? **Pros:** - Security (73 reviews) - Features (56 reviews) - Protection (50 reviews) - Threat Detection (50 reviews) - Ease of Use (46 reviews) **Cons:** - Slow Performance (27 reviews) - High Resource Usage (25 reviews) - Expensive (21 reviews) - Difficult Configuration (20 reviews) - Learning Curve (20 reviews) ### What Do G2 Reviewers Say About Check Point Endpoint Security? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **enhanced security control** provided by Check Point Endpoint Security, ensuring effective threat prevention and response. - Users appreciate the **simplified endpoint protection** of Check Point Harmony Endpoint, which effectively combines multiple security features. - Users value the **comprehensive security** features of Check Point Endpoint Security, ensuring safe collaboration and remote access. - Users value the **comprehensive multilayered threat prevention** of Check Point Endpoint Security, ensuring robust protection against various threats. - Users find Check Point Endpoint Security to be **easy to manage** , providing reliable protection without system slowdowns. **Cons:** - Users report that **slow performance** due to heavy resource usage can hinder efficiency, particularly on older devices. - Users experience **high resource usage** with Check Point Endpoint Security, which can slow down older devices and hinder efficiency. - Users find Check Point Endpoint Security to be **expensive** compared to other options, raising concerns about its value. - Users find the **difficult configuration** of Check Point Endpoint Security challenging, requiring expertise for effective setup and policy management. - Users report a **steep learning curve** for setup and policy tuning, especially for smaller teams lacking IT support. #### What Are Recent G2 Reviews of Check Point Endpoint Security? **"[efficient, safe and friendly](https://www.g2.com/survey_responses/check-point-endpoint-security-review-7171717)"** **Rating:** 5.0/5.0 stars *— William Adrian C.* [Read full review](https://www.g2.com/survey_responses/check-point-endpoint-security-review-7171717) --- **"[Harmony Endpoint is EDPR](https://www.g2.com/survey_responses/check-point-endpoint-security-review-7601429)"** **Rating:** 5.0/5.0 stars *— Baris guney y.* [Read full review](https://www.g2.com/survey_responses/check-point-endpoint-security-review-7601429) --- #### What Are G2 Users Discussing About Check Point Endpoint Security? - [What is Harmony Endpoint used for?](https://www.g2.com/discussions/what-is-harmony-endpoint-used-for) - [What is Check Point Endpoint Security?](https://www.g2.com/discussions/what-is-check-point-endpoint-security) - [What does Check Point Software Do?](https://www.g2.com/discussions/harmony-endpoint-what-does-check-point-software-do) - [How do I get rid of Checkpoint SandBlast agent?](https://www.g2.com/discussions/how-do-i-get-rid-of-checkpoint-sandblast-agent) - [What is Check Point SandBlast agent?](https://www.g2.com/discussions/what-is-check-point-sandblast-agent) ### 6. [Microsoft Defender for Endpoint](https://www.g2.com/products/microsoft-defender-for-endpoint/reviews) Microsoft Defender for Endpoint is a complete endpoint security solution that delivers preventative protection, post-breach detection, automated investigation, and response. With Defender for Endpoint, you have: Agentless, cloud powered - No additional deployment or infrastructure. No delays or update compatibility issues. Always up to date. Unparalleled optics - Built on the industry’s deepest insight into Windows threats and shared signals across devices, identities, and information. Automated security - Take your security to a new level by going from alert to remediation in minutes—at scale. **Average Rating:** 4.4/5.0 **Total Reviews:** 303 **How Do G2 Users Rate Microsoft Defender for Endpoint?** - **Ease of Admin:** 8.6/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 9.0/10) - **Quality of Support:** 8.5/10 (Category avg: 8.7/10) - **Ease of Use:** 8.6/10 (Category avg: 8.7/10) **Who Is the Company Behind Microsoft Defender for Endpoint?** - **Seller:** [Microsoft](https://www.g2.com/sellers/microsoft) - **Year Founded:** 1975 - **HQ Location:** Redmond, Washington - **Twitter:** @microsoft (13,091,739 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/microsoft/ (231,632 employees on LinkedIn®) - **Ownership:** MSFT **Who Uses This Product?** - **Who Uses This:** Software Engineer, Security Analyst - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 39% Enterprise, 35% Mid-Market #### What Are Microsoft Defender for Endpoint's Pros and Cons? **Pros:** - Ease of Use (20 reviews) - Threat Detection (18 reviews) - Security (17 reviews) - Protection (15 reviews) - Cybersecurity Protection (14 reviews) **Cons:** - Compatibility Issues (8 reviews) - Complexity (8 reviews) - Difficult Configuration (7 reviews) - Improvements Needed (7 reviews) - Lack of Clarity (7 reviews) ### What Do G2 Reviewers Say About Microsoft Defender for Endpoint? *AI-generated summary from verified user reviews* **Pros:** - Users find **Microsoft Defender for Endpoint very easy to use** , appreciating its seamless setup and deployment options. - Users value the **advanced threat detection** in Microsoft Defender for Endpoint, ensuring robust protection against evolving cyber threats. - Users appreciate the **comprehensive cybersecurity features** of Microsoft Defender for Endpoint, ensuring robust protection and innovation. - Users appreciate the **strong protection against malware and cyber threats** provided by Microsoft Defender for Endpoint. - Users appreciate the **strong protection against malware and cyber threats** provided by Microsoft Defender for Endpoint's advanced features. **Cons:** - Users face **compatibility issues** with third-party applications, complicating deployment and overall functionality in some cases. - Users find the **complex setup and licensing** of Microsoft Defender for Endpoint challenging, especially for newcomers. - Users struggle with **difficult configuration** , finding policy management and setup overly complex and confusing in Microsoft Defender for Endpoint. - Users find **configuration and navigation cumbersome** , struggling with policy management across multiple Microsoft portals. - Users face **lack of clarity** in navigating Microsoft Defender for Endpoint's multiple portals and customizing policies effectively. #### What Are Recent G2 Reviews of Microsoft Defender for Endpoint? **"[Reliable, low maintenance endpoint security that just works.](https://www.g2.com/survey_responses/microsoft-defender-for-endpoint-review-12625405)"** **Rating:** 4.5/5.0 stars *— Anas M.* [Read full review](https://www.g2.com/survey_responses/microsoft-defender-for-endpoint-review-12625405) --- **"[Deep Microsoft Ecosystem Integration with Powerful Automated Investigation](https://www.g2.com/survey_responses/microsoft-defender-for-endpoint-review-12982209)"** **Rating:** 4.5/5.0 stars *— Verified User in Manufacturing* [Read full review](https://www.g2.com/survey_responses/microsoft-defender-for-endpoint-review-12982209) --- #### What Are G2 Users Discussing About Microsoft Defender for Endpoint? - [What's included in Microsoft Defender?](https://www.g2.com/discussions/what-s-included-in-microsoft-defender) - [What is Endpoint Defender?](https://www.g2.com/discussions/what-is-endpoint-defender) - 1 comment - [How does Microsoft Defender for endpoint work?](https://www.g2.com/discussions/how-does-microsoft-defender-for-endpoint-work) - [Which feature in Microsoft Defender for endpoint?](https://www.g2.com/discussions/which-feature-in-microsoft-defender-for-endpoint) - 1 comment ### 7. [Cynet](https://www.g2.com/products/cynet/reviews) Cynet is the unified, AI-powered cybersecurity platform that delivers robust and comprehensive protection for security teams while maximizing operational efficiency for managed service providers (MSPs). This platform consolidates a wide array of security capabilities into a single, user-friendly interface, ensuring that organizations can effectively safeguard their digital assets without the complexity often associated with multi-solution environments. Cynet’s platform simplifies security management by integrating various functionalities, such as endpoint protection, threat detection, and incident response, into one cohesive system. This integration not only streamlines operations but also allows organizations to allocate their resources more effectively, ultimately enhancing their overall security posture. One of the standout features of Cynet’s platform is its remarkable performance in the MITRE ATT&CK Evaluations. Cynet delivered 100% visibility and 100% analytic coverage without requiring any configuration changes three years in a row. This capability ensures that organizations can monitor their environments comprehensively and respond to threats with precision. The platform’s built-in analytics and reporting tools provide actionable insights, enabling users to make informed decisions about their cybersecurity strategies. Additionally, Cynet offers 24/7 expert support, which is crucial for organizations that may not have in-house cybersecurity expertise. This round-the-clock assistance ensures that users can quickly address any security incidents or concerns, minimizing potential downtime and damage. The combination of advanced technology and dedicated support positions Cynet as a valuable partner for SMEs and service providers looking to enhance their cybersecurity measures. In summary, Cynet’s unified, AI-powered cybersecurity platform stands out in the crowded cybersecurity market by offering a unified solution tailored to the needs of MSPs. Its comprehensive features, exceptional performance in industry evaluations, and continuous expert support make it a compelling choice for organizations seeking to bolster their cybersecurity defenses while maintaining operational efficiency. **Average Rating:** 4.7/5.0 **Total Reviews:** 216 **How Do G2 Users Rate Cynet?** - **Ease of Admin:** 9.2/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 9.0/10) - **Quality of Support:** 9.3/10 (Category avg: 8.7/10) - **Ease of Use:** 9.1/10 (Category avg: 8.7/10) **Who Is the Company Behind Cynet?** - **Seller:** [Cynet](https://www.g2.com/sellers/cynet) - **Company Website:** https://www.cynet.com/ - **Year Founded:** 2014 - **HQ Location:** Boston, MA - **LinkedIn® Page:** https://www.linkedin.com/company/cynet-security/ (332 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** SOC Analyst, Technical Engineer - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 58% Mid-Market, 30% Small-Business #### What Are Cynet's Pros and Cons? **Pros:** - Ease of Use (48 reviews) - Features (36 reviews) - Threat Detection (34 reviews) - Customer Support (32 reviews) - Security (31 reviews) **Cons:** - Limited Customization (11 reviews) - Feature Limitations (10 reviews) - Lack of Customization (10 reviews) - Limited Features (10 reviews) - Missing Features (10 reviews) ### What Do G2 Reviewers Say About Cynet? *AI-generated summary from verified user reviews* **Pros:** - Users value the **ease of use** of Cynet, enjoying its simplicity and comprehensive features in one dashboard. - Users value the **unified platform** of Cynet for its ease of use and comprehensive security features. - Users value Cynet for its **effective threat detection** and seamless integration, ensuring robust cybersecurity for their business. - Users appreciate the **exceptional customer support** of Cynet, facilitating smooth deployment and effective threat management. - Users commend Cynet for its **flawless threat monitoring and response** , enhancing overall security with effective detection capabilities. **Cons:** - Users express concern over **limited customization** options in reports and third-party integrations, impacting their experience. - Users note the **feature limitations** of Cynet, especially in report customization and external tool integrations. - Users express concern over the **lack of customization** , particularly in reporting and dashboard options for better usability. - Users find Cynet has **limited features** like integrations and customization, which may restrict advanced functionality. - Users note the **missing features** in Cynet, particularly the lack of web filtering and a firewall option. #### What Are Recent G2 Reviews of Cynet? **"[Cynet delivers a standout XDR at a reasonable price.](https://www.g2.com/survey_responses/cynet-review-13072458)"** **Rating:** 5.0/5.0 stars *— Verified User in Computer & Network Security* [Read full review](https://www.g2.com/survey_responses/cynet-review-13072458) --- **"[Great MDR/XDR Platform](https://www.g2.com/survey_responses/cynet-review-9481539)"** **Rating:** 4.5/5.0 stars *— JEROME J.* [Read full review](https://www.g2.com/survey_responses/cynet-review-9481539) --- #### What Are G2 Users Discussing About Cynet? - [What is Cynet 360 AutoXDR™ used for?](https://www.g2.com/discussions/what-is-cynet-360-autoxdr-used-for) - [What is cynet XDR?](https://www.g2.com/discussions/what-is-cynet-xdr) - 1 comment - [What is cynet used for?](https://www.g2.com/discussions/what-is-cynet-used-for) - 1 comment - [Is cynet 360 good?](https://www.g2.com/discussions/is-cynet-360-good) - 3 comments - [How much does cynet cost?](https://www.g2.com/discussions/how-much-does-cynet-cost) - 1 comment ### 8. [SentinelOne Singularity Endpoint](https://www.g2.com/products/sentinelone-singularity-endpoint/reviews) SentinelOne Singularity Endpoint is a software designed to protect endpoints by autonomously detecting, preventing, and responding to threats across devices within an organization. The software leverages machine learning and behavioral AI to identify and mitigate a wide range of cyber threats, including malware, ransomware, and fileless attacks. It provides continuous monitoring and automated remediation capabilities to help reduce manual intervention and response time during security incidents. SentinelOne Singularity Endpoint integrates with existing IT security and management workflows, offering visibility into endpoint activities and assisting organizations in maintaining compliance by ensuring devices meet security standards. The software is engineered to address business challenges related to endpoint protection, threat management, and operational efficiency in cybersecurity environments. **Average Rating:** 4.7/5.0 **Total Reviews:** 195 **How Do G2 Users Rate SentinelOne Singularity Endpoint?** - **Ease of Admin:** 8.9/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.3/10 (Category avg: 9.0/10) - **Quality of Support:** 8.9/10 (Category avg: 8.7/10) - **Ease of Use:** 8.9/10 (Category avg: 8.7/10) **Who Is the Company Behind SentinelOne Singularity Endpoint?** - **Seller:** [SentinelOne](https://www.g2.com/sellers/sentinelone) - **Company Website:** https://www.sentinelone.com - **Year Founded:** 2013 - **HQ Location:** Mountain View, CA - **Twitter:** @SentinelOne (57,863 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/2886771/ (3,174 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 46% Mid-Market, 36% Enterprise #### What Are SentinelOne Singularity Endpoint's Pros and Cons? **Pros:** - Ease of Use (61 reviews) - Tool Efficiency (18 reviews) - Setup Ease (17 reviews) - Malware Protection (13 reviews) - Useful (13 reviews) **Cons:** - Update Issues (13 reviews) - Difficult Learning (8 reviews) - Frequent Updates (7 reviews) - Agent Removal Issues (6 reviews) - Ineffective Alerts (6 reviews) ### What Do G2 Reviewers Say About SentinelOne Singularity Endpoint? *AI-generated summary from verified user reviews* **Pros:** - Users find SentinelOne Singularity Endpoint to be **easy to deploy and manage** , enhancing overall security efficiency. - Users value the **tool efficiency** of SentinelOne, noting its user-friendly interface and effective threat detection capabilities. - Users value the **setup ease** of SentinelOne Singularity, appreciating its simple deployment and swift implementation process. - Users commend SentinelOne for its **exceptional malware protection** , effectively defending against various threats and attacks. - Users find the **incident notification system** of SentinelOne very effective, enhancing their ability to respond quickly. **Cons:** - Users face **update issues** with SentinelOne, including frequent login problems and difficulties with self-updating agents. - Users find the **difficult learning curve** challenging, especially for beginners navigating the complex interface. - Users face challenges with **frequent updates** that complicate login processes and require constant adjustments to policies. - Users experience frequent **agent removal issues** that disrupt functionality and complicate application performance. - Users report **ineffective alerts** that complicate troubleshooting and hinder application compatibility during migration between EDR providers. #### What Are Recent G2 Reviews of SentinelOne Singularity Endpoint? **"[The Endpoint Security Platform That Actually Responds, Not Just Alerts.](https://www.g2.com/survey_responses/sentinelone-singularity-endpoint-review-13094863)"** **Rating:** 5.0/5.0 stars *— Ansh B.* [Read full review](https://www.g2.com/survey_responses/sentinelone-singularity-endpoint-review-13094863) --- **"[Autonomous Protection, Robust Security for Energy-Critical Systems](https://www.g2.com/survey_responses/sentinelone-singularity-endpoint-review-12707750)"** **Rating:** 5.0/5.0 stars *— Viral S.* [Read full review](https://www.g2.com/survey_responses/sentinelone-singularity-endpoint-review-12707750) --- #### What Are G2 Users Discussing About SentinelOne Singularity Endpoint? - [How does Sentinel one work?](https://www.g2.com/discussions/sentinelone-singularity-how-does-sentinel-one-work) - [How does Sentinel one work?](https://www.g2.com/discussions/how-does-sentinel-one-work) - [Is SentinelOne an antivirus?](https://www.g2.com/discussions/sentinelone-singularity-is-sentinelone-an-antivirus) - [Is SentinelOne an antivirus?](https://www.g2.com/discussions/is-sentinelone-an-antivirus) - 2 comments - [What is SentinelOne used for?](https://www.g2.com/discussions/sentinelone-singularity-what-is-sentinelone-used-for) ### 9. [Cortex XDR](https://www.g2.com/products/palo-alto-networks-cortex-xdr/reviews) Cortex XDR is the industry’s first extended detection and response platform that stops modern attacks by integrating data from any source. With Cortex XDR, you can harness the power of AI, analytics and rich data to detect stealthy threats. Your SOC team can cut through the noise and focus on what matters most with intelligent alert grouping and incident scoring. Cross-data insights accelerate investigations, so you can streamline incident response and recovery. Cortex XDR delivers peace of mind with best-in-class endpoint protection that achieved the highest combined protection and detection scores in the MITRE ATT&CK® round 3 evaluation. The Cortex XDR platform collects and analyzes all data, so you can gain complete visibility and holistic protection to secure what’s next. **Average Rating:** 4.5/5.0 **Total Reviews:** 58 **How Do G2 Users Rate Cortex XDR?** - **Ease of Admin:** 8.7/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.0/10) - **Quality of Support:** 8.9/10 (Category avg: 8.7/10) - **Ease of Use:** 8.8/10 (Category avg: 8.7/10) **Who Is the Company Behind Cortex XDR?** - **Seller:** [Palo Alto Networks](https://www.g2.com/sellers/palo-alto-networks) - **Company Website:** https://www.paloaltonetworks.com - **Year Founded:** 2005 - **HQ Location:** Santa Clara, CA - **Twitter:** @PaloAltoNtwks (128,951 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/30086/ (22,313 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 42% Enterprise, 39% Mid-Market #### What Are Cortex XDR's Pros and Cons? **Pros:** - Alert Notifications (2 reviews) - Ease of Use (2 reviews) - Features (2 reviews) - Threat Detection (2 reviews) - XDR Capabilities (2 reviews) **Cons:** - Limited Features (2 reviews) - Agent Issues (1 reviews) - Compatibility Issues (1 reviews) - Complexity (1 reviews) - Complex Management (1 reviews) ### What Do G2 Reviewers Say About Cortex XDR? *AI-generated summary from verified user reviews* **Pros:** - Users value the **important alert notifications** from Cortex XDR, which enhance security without overwhelming them. - Users appreciate the **simplicity and manageability** of Cortex XDR, finding it easy to navigate and utilize effectively. - Users love the **unique features** of Cortex XDR, especially its effective threat detection without compromising system speed. - Users praise the **unified detection and response capability** of Cortex XDR, enhancing threat investigation efficiency and accuracy. - Users value the **unified detection and response capability** of Cortex XDR for swift and precise threat investigations. **Cons:** - Users find **limited features** in Cortex XDR, with restrictions affecting core OS functionalities and usability issues on lower-end systems. - Users experience a **noticeable performance impact** on lower-end systems with the Cortex XDR agent installed. - Users face **compatibility issues** with Cortex XDR, restricting core functionalities and software installations on their machines. - Users find the **system complexity** challenging, often struggling with management and a steep learning curve. - Users find the **complex management** of Cortex XDR challenging due to its steep learning curve and customization difficulties. #### What Are Recent G2 Reviews of Cortex XDR? **"[Outstanding Visibility and Threat Detection with Cortex XDR](https://www.g2.com/survey_responses/cortex-xdr-review-13057405)"** **Rating:** 5.0/5.0 stars *— Daniel Q.* [Read full review](https://www.g2.com/survey_responses/cortex-xdr-review-13057405) --- **"[Cortex XDR: High-Quality Threat Detection and Fast, Centralized Investigations](https://www.g2.com/survey_responses/cortex-xdr-review-13123263)"** **Rating:** 5.0/5.0 stars *— A K M Abdullah A.* [Read full review](https://www.g2.com/survey_responses/cortex-xdr-review-13123263) --- #### What Are G2 Users Discussing About Cortex XDR? - [What is an advantage of Cortex XDR cloud based analysis?](https://www.g2.com/discussions/what-is-an-advantage-of-cortex-xdr-cloud-based-analysis) - [How does cortex XDR use machine learning?](https://www.g2.com/discussions/how-does-cortex-xdr-use-machine-learning) - [What is Cortex XDR?](https://www.g2.com/discussions/what-is-cortex-xdr) - 1 comment ### 10. [IBM MaaS360](https://www.g2.com/products/ibm-maas360/reviews) IBM MaaS360 is an easy to use, unified endpoint management (UEM) solution that transforms the way that organizations support users, apps, content, and data across essentially every type of device. Its open, cloud-based platform integrates with preferred security and productivity tools. You can protect your workforce with evolved Threat Management, Mobile Security, Device management features and your analytics will be powered by watsonx AI capabilities, helping you to set up a good security posture. IBM MaaS360 is available for purchase on ibm.com and AWS Marketplace. **Average Rating:** 4.2/5.0 **Total Reviews:** 193 **How Do G2 Users Rate IBM MaaS360?** - **Ease of Admin:** 8.0/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.0/10 (Category avg: 9.0/10) - **Quality of Support:** 8.1/10 (Category avg: 8.7/10) - **Ease of Use:** 8.2/10 (Category avg: 8.7/10) **Who Is the Company Behind IBM MaaS360?** - **Seller:** [IBM](https://www.g2.com/sellers/ibm) - **Company Website:** https://www.ibm.com - **Year Founded:** 1911 - **HQ Location:** Armonk, New York, United States - **Twitter:** @IBMSecurity (74,660 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/1009/ (328,202 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** IT Manager, Software Engineer - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 44% Mid-Market, 33% Enterprise #### What Are IBM MaaS360's Pros and Cons? **Pros:** - Features (48 reviews) - Security (46 reviews) - Device Management (38 reviews) - Ease of Use (37 reviews) - Protection (24 reviews) **Cons:** - Learning Curve (24 reviews) - Poor Interface Design (17 reviews) - Poor UI (17 reviews) - Slow Performance (17 reviews) - Outdated Interface (13 reviews) ### What Do G2 Reviewers Say About IBM MaaS360? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **comprehensive control and user-friendly features** of IBM MaaS360 for managing diverse devices effectively. - Users value the **strong security features** of IBM MaaS360, ensuring comprehensive protection across various devices and platforms. - Users value the **comprehensive control** that IBM MaaS360 offers for managing diverse devices and ensuring compliance. - Users appreciate the **ease of use** of IBM MaaS360, highlighting its intuitive platform and seamless integration. - Users value the **robust protection** offered by IBM MaaS360, enhancing security and management across multiple devices. **Cons:** - Users find the **learning curve challenging** , particularly for newcomers navigating IBM MaaS360's advanced features and interface. - Users feel that the **poor interface design** of IBM MaaS360 hinders usability and complicates user experience. - Users find the **poor UI** of IBM MaaS360 frustrating, especially for clients struggling to navigate the system. - Users notice **slow performance** in IBM MaaS360, which can hinder productivity and frustrate those seeking efficiency. - Users find the **outdated interface** of IBM MaaS360 cumbersome, hindering their ability to navigate efficiently. #### What Are Recent G2 Reviews of IBM MaaS360? **"[Efficient and Secure Management for Remote Teams](https://www.g2.com/survey_responses/ibm-maas360-review-12996280)"** **Rating:** 5.0/5.0 stars *— Juen Hui C.* [Read full review](https://www.g2.com/survey_responses/ibm-maas360-review-12996280) --- **"[Seamless Security and Device Management with IBM MaaS360](https://www.g2.com/survey_responses/ibm-maas360-review-12998220)"** **Rating:** 4.0/5.0 stars *— Soumyadip H.* [Read full review](https://www.g2.com/survey_responses/ibm-maas360-review-12998220) --- #### What Are G2 Users Discussing About IBM MaaS360? - [What is IBM Security MaaS360 with Watson used for?](https://www.g2.com/discussions/what-is-ibm-security-maas360-with-watson-used-for) - [Can MaaS360 read text messages?](https://www.g2.com/discussions/can-maas360-read-text-messages) - [Can IBM MaaS360 track your location?](https://www.g2.com/discussions/can-ibm-maas360-track-your-location) - [What does IBM MaaS360 do?](https://www.g2.com/discussions/what-does-ibm-maas360-do) - [What is IBM MaaS360 with Watson?](https://www.g2.com/discussions/what-is-ibm-maas360-with-watson) - 2 comments ### 11. [ESET PROTECT](https://www.g2.com/products/eset-protect/reviews) Stay one step ahead of known and emerging cyber threats with our AI-native, prevention-first approach. ESET combines the power of AI and human expertise to make protection easy and effective. Experience best-in-class protection thanks to our in-house global cyber threat intelligence, compiled and examined for over 30 years, which drives our extensive R&D network led by industry-acclaimed researchers. ESET PROTECT, our cloud-first XDR cybersecurity platform combines next-gen prevention, detection, and proactive threat hunting capabilities. ESET's highly customizable solutions include local support and have minimal impact on performance, identify and neutralize known and emerging threats before they can be executed, support business continuity, and reduce the cost of implementation and management. HOW YOUR ORGANIZATION WILL BENEFIT - Improved protection against ransomware and zero-day threats via cloud-based sandboxing technology. - Helps comply with data regulations thanks to full disk encryption capabilities on Windows and macOS. - Easily accessible ESET PROTECT console improves TCO of security management. - Single-pane-of-glass remote management for visibility of threats, users, and quarantined items. - Company endpoints and mobiles are protected via advanced multilayered technology, now with brute-force attack protection. **Average Rating:** 4.6/5.0 **Total Reviews:** 962 **How Do G2 Users Rate ESET PROTECT?** - **Ease of Admin:** 8.5/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.9/10 (Category avg: 9.0/10) - **Quality of Support:** 8.9/10 (Category avg: 8.7/10) - **Ease of Use:** 8.9/10 (Category avg: 8.7/10) **Who Is the Company Behind ESET PROTECT?** - **Seller:** [ESET](https://www.g2.com/sellers/eset) - **Company Website:** https://www.eset.com - **Year Founded:** 1992 - **HQ Location:** Bratislava, Slovak Republic - **Twitter:** @ESET (275,702 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/28967/ (1,983 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** IT Manager, Network Administrator - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 48% Mid-Market, 45% Small-Business #### What Are ESET PROTECT's Pros and Cons? **Pros:** - Ease of Use (94 reviews) - Protection (78 reviews) - Reliability (71 reviews) - Security (63 reviews) - Centralized Management (58 reviews) **Cons:** - Learning Curve (32 reviews) - Difficult Configuration (31 reviews) - Not User-Friendly (25 reviews) - Lack of Clarity (23 reviews) - Difficult Navigation (20 reviews) ### What Do G2 Reviewers Say About ESET PROTECT? *AI-generated summary from verified user reviews* **Pros:** - Users value the **straightforward installation and setup** of ESET PROTECT, making it accessible for everyone. - Users highly value the **robust ransomware protection** offered by ESET PROTECT for all endpoint devices. - Users commend the **robust protection against ransomware** provided by ESET PROTECT across diverse platforms. - Users value the **great security** of ESET PROTECT, which effectively protects systems without compromising performance. - Users appreciate the **centralized management** of ESET PROTECT, enhancing convenience and effectiveness in monitoring all devices. **Cons:** - Users find ESET PROTECT has a significant **learning curve** , slowing down the onboarding and usage process. - Users find the **difficult configuration** of ESET PROTECT frustrating, as it complicates setup and maintenance processes. - Users find ESET PROTECT **not user-friendly** , citing excessive clicks required to access necessary data and customize dashboards. - Users report a **lack of clarity** in ESET PROTECT’s policy management, hindering effective security monitoring and implementation. - Users find the **difficult navigation** of ESET PROTECT frustrating, hindering efficient implementation and increasing delays. #### What Are Recent G2 Reviews of ESET PROTECT? **"[Great product placing ESET at the top of the list](https://www.g2.com/survey_responses/eset-protect-review-10057911)"** **Rating:** 4.0/5.0 stars *— Jonathan B.* [Read full review](https://www.g2.com/survey_responses/eset-protect-review-10057911) --- **"[Centralized and Efficient Security Administration](https://www.g2.com/survey_responses/eset-protect-review-12627499)"** **Rating:** 5.0/5.0 stars *— Oscar Humberto G.* [Read full review](https://www.g2.com/survey_responses/eset-protect-review-12627499) --- #### What Are G2 Users Discussing About ESET PROTECT? - [What is ESET PROTECT Platform used for?](https://www.g2.com/discussions/what-is-eset-protect-platform-used-for) - [What is ESET PROTECT Advanced used for?](https://www.g2.com/discussions/what-is-eset-protect-advanced-used-for) - [How does ESET encryption work?](https://www.g2.com/discussions/eset-secure-authentication-how-does-eset-encryption-work) - [Is ESET better than Sophos?](https://www.g2.com/discussions/is-eset-better-than-sophos) - [Is ESET an antivirus?](https://www.g2.com/discussions/is-eset-an-antivirus) - 1 comment ### 12. [ThreatDown](https://www.g2.com/products/threatdown/reviews) ThreatDown is an all-in-one cybersecurity platform that delivers enterprise-grade protection without the complexity. Built to make advanced cybersecurity accessible without adding headcount. ThreatDown MDR monitors your environment around the clock, investigates alerts on your behalf, and takes action to contain threats before they spread— delivering the protection of an in-house SOC without the cost. One lightweight agent. One cloud-based console. ThreatDown brings endpoint and identity security together with patch management, vulnerability assessment, DNS filtering, and email security—eliminating tool sprawl and reducing operational overhead. Native EDR and ITDR telemetry connects user activity with endpoint behavior, giving teams the full attack story so they can detect and respond faster. Backed by nearly two decades of Malwarebytes expertise, ThreatDown pairs award-winning detection with a patented remediation engine that removes every trace of malware to prevent reinfection. It stops ransomware, credential theft, zero-day exploits, phishing, and human-operated attacks—and goes further with built-in ransomware rollback to help organizations recover quickly. Deploy in minutes. See value fast. Recognized as an MRG Effitas Product of the Year and a G2 Leader, ThreatDown is consistently rated for ease of use, rapid deployment, and high-quality support. ThreatDown Solutions ThreatDown MDR (Managed Detection and Response) delivers 24/7/365 human-led threat monitoring, investigation, and remediation powered by Malwarebytes detection and AI-driven engines—closing the security resource gap and reducing risk from unknown threats. ThreatDown EDR (Endpoint Detection and Response) protects against ransomware, zero-day exploits, phishing, and human-operated attacks that bypass prevention layers, with the tools to detect, investigate, and contain threats. ThreatDown ITDR (Identity Threat Detection and Response) stops identity-based attacks by continuously monitoring credential, privilege, and access behavior across Active Directory, Microsoft Entra ID, and Okta. Native correlation with EDR delivers unified endpoint-to-identity visibility and response—closing the post-authentication gap that IAM and MFA leave open. For Partners Our multi-tenant ThreatDown OneView platform enables MSPs and IT admins to streamline operations with centralized management of customer endpoints, license subscriptions, reporting, and global policies. With products and services like Endpoint Detection and Response (EDR), Managed Detection and Response (MDR) and the rest of our technologies in our portfolio, partners can offer the right product or service to each customer, tailored to their specific needs. Find out more about our partner program at https://www.threatdown.com/partner-program. **Average Rating:** 4.6/5.0 **Total Reviews:** 1,045 **How Do G2 Users Rate ThreatDown?** - **Ease of Admin:** 9.1/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 9.0/10) - **Quality of Support:** 8.8/10 (Category avg: 8.7/10) - **Ease of Use:** 9.2/10 (Category avg: 8.7/10) **Who Is the Company Behind ThreatDown?** - **Seller:** [Malwarebytes](https://www.g2.com/sellers/malwarebytes) - **Company Website:** https://www.malwarebytes.com - **Year Founded:** 2008 - **HQ Location:** Santa Clara, CA - **Twitter:** @Malwarebytes (88,536 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/malwarebytes/ (592 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** IT Manager, Owner - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 48% Small-Business, 42% Mid-Market #### What Are ThreatDown's Pros and Cons? **Pros:** - Ease of Use (99 reviews) - Features (68 reviews) - Security (59 reviews) - Threat Detection (56 reviews) - Customer Support (54 reviews) **Cons:** - Poor Customer Support (23 reviews) - Lack of Clarity (22 reviews) - Missing Features (20 reviews) - False Positives (18 reviews) - Communication Issues (16 reviews) ### What Do G2 Reviewers Say About ThreatDown? *AI-generated summary from verified user reviews* **Pros:** - Users find ThreatDown's **ease of use** facilitates quick deployment and seamless integration for clients. - Users praise the **user-friendly interface** and seamless integration of ThreatDown, enhancing proactive security management effortlessly. - Users value the **robust security features** of ThreatDown, effectively detecting and eliminating various threats for comprehensive protection. - Users appreciate the **effective threat detection** of ThreatDown, ensuring a secure and worry-free online experience. - Users commend the **responsive and attentive customer support** of ThreatDown, enhancing their overall experience with the product. **Cons:** - Users face challenges with **poor customer support** , citing difficulties in troubleshooting and navigating the system effectively. - Users note a **lack of clarity** in security scoring, which complicates understanding and using the ThreatDown features effectively. - Users indicate that **missing features** like flexible module selection and firewall improvements hinder the ThreatDown experience. - Users experience **frequent false positives** with ThreatDown, urging for improvements to enhance accuracy and reduce noise. - Users frequently experience **communication issues** with ThreatDown, mainly due to inconsistent customer service and lack of chat support. #### What Are Recent G2 Reviews of ThreatDown? **"[Excellent tool for End point defence as part of our Cyber Defence](https://www.g2.com/survey_responses/threatdown-review-9947439)"** **Rating:** 5.0/5.0 stars *— Jeremy N.* [Read full review](https://www.g2.com/survey_responses/threatdown-review-9947439) --- **"[Effortless Endpoint Protection with Seamless Patching](https://www.g2.com/survey_responses/threatdown-review-11031188)"** **Rating:** 5.0/5.0 stars *— Tom F.* [Read full review](https://www.g2.com/survey_responses/threatdown-review-11031188) --- #### What Are G2 Users Discussing About ThreatDown? - [What is Malwarebytes for Business used for?](https://www.g2.com/discussions/what-is-malwarebytes-for-business-used-for) - [What is Malwarebytes team?](https://www.g2.com/discussions/what-is-malwarebytes-team) - [What is Malwarebytes endpoint protection?](https://www.g2.com/discussions/what-is-malwarebytes-endpoint-protection) - 1 comment - [Does Malwarebytes work on servers?](https://www.g2.com/discussions/does-malwarebytes-work-on-servers) - 1 comment, 2 upvotes - [Is Malwarebytes free for business use?](https://www.g2.com/discussions/is-malwarebytes-free-for-business-use) - 1 comment, 1 upvote ### 13. [Trellix Endpoint Security](https://www.g2.com/products/trellix-endpoint-security/reviews) The Trellix Endpoint Security Suite is a comprehensive and unified set of solutions that protects devices and endpoints across your hybrid network, empowering your organization to address complex, distributed security issues thoroughly, efficiently, and quickly. It uses analytics and machine learning to achieve industry-leading threat protection, all while offering the flexibility to connect to products from other vendors. The solution helps you unify your data and threat defenses from device to cloud, for integrated security. **Average Rating:** 4.3/5.0 **Total Reviews:** 320 **How Do G2 Users Rate Trellix Endpoint Security?** - **Ease of Admin:** 8.2/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.1/10 (Category avg: 9.0/10) - **Quality of Support:** 8.5/10 (Category avg: 8.7/10) - **Ease of Use:** 8.6/10 (Category avg: 8.7/10) **Who Is the Company Behind Trellix Endpoint Security?** - **Seller:** [Skyhigh Security](https://www.g2.com/sellers/skyhigh-security-2026-07-02) - **Year Founded:** 2004 - **HQ Location:** Plano, TX - **Twitter:** @Trellix (241,168 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/skyhighsecurity/posts/?feedView=all (751 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Software Developer, Senior Software Engineer - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 42% Mid-Market, 41% Enterprise #### What Are Trellix Endpoint Security's Pros and Cons? **Pros:** - Ease of Use (6 reviews) - Features (4 reviews) - Threat Detection (4 reviews) - Customer Support (3 reviews) - Protection (3 reviews) **Cons:** - Difficult Configuration (2 reviews) - Expensive (2 reviews) - Agent Issues (1 reviews) - Complex Installation (1 reviews) - Complex Interface (1 reviews) ### What Do G2 Reviewers Say About Trellix Endpoint Security? *AI-generated summary from verified user reviews* **Pros:** - Users highlight the **ease of use** of Trellix Endpoint Security, making implementation and management straightforward. - Users value the **robust, multi-layered protection** of Trellix Endpoint Security against various cyber threats and exploits. - Users praise the **advanced threat detection** of Trellix Endpoint Security for its proactive protection against sophisticated attacks. - Users highlight the **responsive customer support** of Trellix Endpoint Security, enhancing their overall user experience. - Users praise Trellix Endpoint Security for its **robust multi-layered protection** against diverse threats and advanced detection methods. **Cons:** - Users find the **difficult configuration** of Trellix Endpoint Security to be complex, especially for newcomers or small teams. - Users find the **high cost** of Trellix Endpoint Security unappealing compared to competitors offering better value. - Users report **agent issues** with high CPU and memory usage during startup, requiring advanced configuration skills. - Users find the **complex installation** process of Trellix Endpoint Security challenging, especially for those new to enterprise tools. - Users find the **interface complex** , making navigation and initial setup challenging for new or smaller teams. #### What Are Recent G2 Reviews of Trellix Endpoint Security? **"[Seamless Orchestration and Robust Protection Across All Endpoints](https://www.g2.com/survey_responses/trellix-endpoint-security-review-11979182)"** **Rating:** 5.0/5.0 stars *— Jose M.* [Read full review](https://www.g2.com/survey_responses/trellix-endpoint-security-review-11979182) --- **"[Reliable Security with Easy Deployment](https://www.g2.com/survey_responses/trellix-endpoint-security-review-12706673)"** **Rating:** 4.0/5.0 stars *— Philip B.* [Read full review](https://www.g2.com/survey_responses/trellix-endpoint-security-review-12706673) --- #### What Are G2 Users Discussing About Trellix Endpoint Security? - [What is MVISION Endpoint Security Platform used for?](https://www.g2.com/discussions/what-is-mvision-endpoint-security-platform-used-for) - [What is MVISION Endpoint Security used for?](https://www.g2.com/discussions/what-is-mvision-endpoint-security-used-for) - 1 comment - [What is McAfee AntiVirus Plus used for?](https://www.g2.com/discussions/what-is-mcafee-antivirus-plus-used-for) - [What is FireEye Security Suite used for?](https://www.g2.com/discussions/what-is-fireeye-security-suite-used-for) - [What is McAfee Application Control used for?](https://www.g2.com/discussions/what-is-mcafee-application-control-used-for) ### 14. [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) At Huntress, we believe that enterprise-grade endpoint security shouldn’t just be for big security teams with the most resources. When basic defenses don't cut it, Huntress Managed EDR levels the cybersecurity playing field with a solution for ALL businesses. Our comprehensive platform combines fully-owned technology with expert oversight, including 24/7 monitoring by a team of expert hunters specializing in wrecking hackers day in and day out. Our focus is on hitting hackers when and where it matters most, so we filter out the noise of false positives and only alert you on real threats. And if hackers breach your defenses, we isolate and eliminate those threats for you with speed and precision. With Huntress, you’re not just keeping pace—you’re leveling up to world-class endpoint security. Huntress gives organizations of all sizes a top EDR solution with the ease of use security teams actually need so they can sleep at night knowing they're protected. **Average Rating:** 4.8/5.0 **Total Reviews:** 886 **How Do G2 Users Rate Huntress Managed EDR?** - **Ease of Admin:** 9.6/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.7/10 (Category avg: 9.0/10) - **Quality of Support:** 9.7/10 (Category avg: 8.7/10) - **Ease of Use:** 9.5/10 (Category avg: 8.7/10) **Who Is the Company Behind Huntress Managed EDR?** - **Seller:** [Huntress Labs](https://www.g2.com/sellers/huntress-labs) - **Company Website:** https://huntress.com - **Year Founded:** 2015 - **HQ Location:** Ellicott City, US - **Twitter:** @HuntressLabs (40,338 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/10172550/ (916 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Owner, President - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 78% Small-Business, 17% Mid-Market #### What Are Huntress Managed EDR's Pros and Cons? **Pros:** - Customer Support (158 reviews) - Ease of Use (125 reviews) - Threat Detection (92 reviews) - Protection (75 reviews) - Continuous Monitoring (70 reviews) **Cons:** - Improvements Needed (20 reviews) - Lack of Customization (17 reviews) - Poor Reporting (17 reviews) - Alert Issues (15 reviews) - Integration Issues (15 reviews) ### What Do G2 Reviewers Say About Huntress Managed EDR? *AI-generated summary from verified user reviews* **Pros:** - Users commend Huntress for their **exceptional customer support** , praising clear communication and rapid response to issues. - Users find Huntress Managed EDR to be **exceptionally easy to use and deploy** , enhancing their cybersecurity experience efficiently. - Users value the **real-time threat detection** of Huntress Managed EDR, enhancing their security and response efficiency. - Users commend Huntress Managed EDR for its **real-time protection and detection** , enhancing security against potential threats efficiently. - Users value the **continuous monitoring** of Huntress Managed EDR, ensuring swift threat identification and proactive endpoint protection. **Cons:** - Users suggest improvements for **exception management and AV scan reviews** to enhance the overall functionality of Huntress Managed EDR. - Users find the **lack of customization** for alerts and reporting limits their ability to tailor experiences effectively. - Users notice **poor reporting** in Huntress, seeking more detailed insights beyond just confirmed threats. - Users experience **alert issues** with Huntress Managed EDR, leading to confusion and disruptions in workflow during updates. - Users face **integration issues** with Huntress Managed EDR, especially regarding compatibility with various AV platforms. #### What Are Recent G2 Reviews of Huntress Managed EDR? **"[GREAT TEAM, ALWAYS THERE!!!](https://www.g2.com/survey_responses/huntress-managed-edr-review-9365299)"** **Rating:** 5.0/5.0 stars *— Ryan C.* [Read full review](https://www.g2.com/survey_responses/huntress-managed-edr-review-9365299) --- **"[My Time Using Huntress](https://www.g2.com/survey_responses/huntress-managed-edr-review-9860826)"** **Rating:** 5.0/5.0 stars *— Jacob S.* [Read full review](https://www.g2.com/survey_responses/huntress-managed-edr-review-9860826) --- #### What Are G2 Users Discussing About Huntress Managed EDR? - [What is Huntress cyber security?](https://www.g2.com/discussions/what-is-huntress-cyber-security) - [Is Huntress an antivirus?](https://www.g2.com/discussions/is-huntress-an-antivirus) - 2 comments - [How does a huntress work?](https://www.g2.com/discussions/how-does-a-huntress-work) - 1 comment - [What is Huntress program?](https://www.g2.com/discussions/what-is-huntress-program) - 1 comment ### 15. [Acronis Cyber Protect](https://www.g2.com/products/acronis-acronis-cyber-protect/reviews) Acronis Cyber Protect delivers robust protection against cyberthreats, unparalleled backup and recovery capabilities and simplified management and visibility through a single pane of glass, for the entire environment. Key features of Acronis Cyber Protect include: · Cyberthreat protection: Using artificial intelligence (AI) and machine learning (ML), proactively secures data, applications and systems, from advanced cyberattacks, including ransomware and other forms of malware. · Rapid Recovery: Reduced dependency on central IT support empowers users to initiate one-click recovery of distributed endpoints, including bare-metal recovery of physical workloads. · Reduced TCO: Broad, multigenerational OS support, enables vendor consolidation while ensuring comprehensive protection. · Simplified management: Centralized management includes local autonomy and seamless integration with existing third-party tools to provide a unified view of backup and recovery operations along with broad, multigenerational OS support. · Data sovereignty: With the use of Acronis’ extensive network of global data centers, users can ensure compliance and master regional data sovereignty laws, offering peace of mind and regulatory compliance. Acronis is majority-owned by EQT. **Average Rating:** 4.3/5.0 **Total Reviews:** 657 **How Do G2 Users Rate Acronis Cyber Protect?** - **Ease of Admin:** 8.4/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.4/10 (Category avg: 9.0/10) - **Quality of Support:** 8.3/10 (Category avg: 8.7/10) - **Ease of Use:** 8.6/10 (Category avg: 8.7/10) **Who Is the Company Behind Acronis Cyber Protect?** - **Seller:** [Acronis](https://www.g2.com/sellers/acronis) - **Year Founded:** 2003 - **HQ Location:** Schaffhausen - **Twitter:** @acronis (94,498 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/13179/ (1,965 employees on LinkedIn®) - **Ownership:** Acronis is majority-owned by EQT **Who Uses This Product?** - **Who Uses This:** Support Analyst, IT Manager - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 45% Small-Business, 40% Mid-Market #### What Are Acronis Cyber Protect's Pros and Cons? **Pros:** - Backup Solutions (10 reviews) - Ease of Use (8 reviews) - Features (8 reviews) - Data Recovery (5 reviews) - Security (5 reviews) **Cons:** - Expensive (6 reviews) - Complexity (4 reviews) - Difficult Learning (4 reviews) - Poor Customer Support (4 reviews) - Slow Performance (4 reviews) ### What Do G2 Reviewers Say About Acronis Cyber Protect? *AI-generated summary from verified user reviews* **Pros:** - Users value the **all-in-one backup and cybersecurity** solution of Acronis Cyber Protect for seamless management and quick recovery. - Users find Acronis Cyber Protect to have an **intuitive interface** , making backup and cybersecurity management seamless and efficient. - Users appreciate the **all-in-one solution** of Acronis Cyber Protect, seamlessly integrating backup and cybersecurity features. - Users appreciate the **quick and efficient data recovery** offered by Acronis Cyber Protect, enhancing business continuity. - Users appreciate the **all-in-one security and backup solution** of Acronis Cyber Protect, streamlining data management effectively. **Cons:** - Users find Acronis Cyber Protect to be **expensive** , making it less accessible for smaller businesses and budgets. - Users find the **complexity** of Acronis Cyber Protect challenging, particularly during initial setup and configuration. - Users find the **difficult learning curve** of Acronis Cyber Protect to be frustrating, especially for those unfamiliar with IT tools. - Users express frustration over **poor customer support** , highlighting delays and lack of accountability from the Acronis team. - Users often experience **slow performance** with Acronis Cyber Protect, particularly affecting older machines and user onboarding. #### What Are Recent G2 Reviews of Acronis Cyber Protect? **"[Effortless Backup and Disaster Recovery](https://www.g2.com/survey_responses/acronis-cyber-protect-review-12712384)"** **Rating:** 4.5/5.0 stars *— VIVEK KUMAR D.* [Read full review](https://www.g2.com/survey_responses/acronis-cyber-protect-review-12712384) --- **"[Comprehensive Protection with Single pane of glass Management](https://www.g2.com/survey_responses/acronis-cyber-protect-review-12711723)"** **Rating:** 4.5/5.0 stars *— Dave P.* [Read full review](https://www.g2.com/survey_responses/acronis-cyber-protect-review-12711723) --- #### What Are G2 Users Discussing About Acronis Cyber Protect? - [Is Acronis free software?](https://www.g2.com/discussions/is-acronis-free-software) - [What is the best backup solution for enterprise?](https://www.g2.com/discussions/what-is-the-best-backup-solution-for-enterprise) - 1 comment - [What is Acronis software?](https://www.g2.com/discussions/what-is-acronis-software) - [Does Acronis do incremental backup?](https://www.g2.com/discussions/does-acronis-do-incremental-backup) - 1 comment - [Is Acronis cyber protect an antivirus?](https://www.g2.com/discussions/is-acronis-cyber-protect-an-antivirus) ### 16. [Iru](https://www.g2.com/products/iru/reviews) Iru is an AI-powered IT and security platform designed to help organizations secure their users, applications, and devices in an increasingly complex digital landscape. Tailored for the AI era, Iru integrates identity and access management, endpoint security, and compliance automation into a single cohesive solution. This unification streamlines operations, allowing IT and security teams to regain control and allocate their time more effectively. Targeted at fast-growing companies, Iru addresses the challenges faced by IT and security professionals who often juggle multiple tools and systems. The platform is particularly beneficial for organizations that require robust security measures while maintaining agility and efficiency. Use cases include managing user access across various applications, ensuring device security, and automating compliance processes, all of which are critical in today’s fast-paced business environment. At the heart of Iru is the Iru Context Model, which provides a dynamic overview of the organization’s environment by continuously monitoring users, devices, and applications in real-time. Complementing this model is Iru AI, an intelligent layer that transforms live data signals into actionable insights, orchestrates necessary actions, and maintains a comprehensive audit trail. This integration enhances policy enforcement, automates response mechanisms, and simplifies compliance, making it easier for organizations to adhere to regulatory requirements. One of Iru's standout features is its single endpoint agent, which manages and secures every device within an organization’s fleet. By implementing passwordless access through device-bound passkeys linked to device posture, Iru creates a trust fabric that strengthens security between users and devices. Additionally, compliance is continuously monitored with customized controls and an Adaptive Evidence Map that updates automatically, reducing the burden on IT teams and minimizing the risk of oversight. Iru aims to bring clarity and control back to overwhelmed IT and security teams by consolidating disparate tools into one unified platform. This shift allows teams to transition from reactive firefighting to proactive strategic initiatives that drive business success. The result is a more robust security posture, simplified workflows, and outcomes that align with organizational goals, ultimately fostering a safer and more efficient operational environment. **Average Rating:** 4.7/5.0 **Total Reviews:** 819 **How Do G2 Users Rate Iru?** - **Ease of Admin:** 9.4/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.4/10 (Category avg: 9.0/10) - **Quality of Support:** 9.5/10 (Category avg: 8.7/10) - **Ease of Use:** 9.4/10 (Category avg: 8.7/10) **Who Is the Company Behind Iru?** - **Seller:** [Iru](https://www.g2.com/sellers/iru) - **Year Founded:** 2018 - **HQ Location:** Miami, FL - **Twitter:** @officiallyiru (2,021 Twitter followers) - **LinkedIn® Page:** https://linkedin.com/company/officiallyiru (379 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** IT Manager, CTO - **Top Industries:** Computer Software, Information Technology and Services - **Company Size:** 71% Mid-Market, 23% Small-Business #### What Are Iru's Pros and Cons? **Pros:** - Ease of Use (339 reviews) - Customer Support (251 reviews) - Device Management (173 reviews) - Easy Setup (150 reviews) - Apple Device Management (148 reviews) **Cons:** - Missing Features (71 reviews) - Lacking Features (55 reviews) - Device Management (53 reviews) - Limited Compatibility (51 reviews) - Expensive (46 reviews) ### What Do G2 Reviewers Say About Iru? *AI-generated summary from verified user reviews* **Pros:** - Users find Kandji's **ease of use** exceptional, appreciating its friendly UI and efficient device management. - Users highlight the **top-notch customer support** of Iru, appreciating the dedicated assistance and custom solutions offered. - Users love the **user-friendly device management** of Iru, which simplifies managing Apple devices for all employees. - Users praise the **easy setup** of Iru, enhanced by blueprints and supportive customer assistance throughout the process. - Users value the **reliable platform** of Iru for effortless Apple device management and excellent support responsiveness. **Cons:** - Users desire **missing features** like advanced EDR capabilities and better reporting options for improved functionality. - Users identify **lacking features** in Iru, finding design limitations and missing integrations that hinder their experience. - Users face **device management limitations** with Kandji, particularly for non-Apple devices and offboarding challenges. - Users express frustration over **limited compatibility** with Iru, particularly regarding support for non-Mac OS devices. - Users find the **pricing steep** for smaller teams, making budgeting and cost management challenging. #### What Are Recent G2 Reviews of Iru? **"[Mac management without the Jamf effort](https://www.g2.com/survey_responses/iru-review-12969987)"** **Rating:** 5.0/5.0 stars *— Kay N.* [Read full review](https://www.g2.com/survey_responses/iru-review-12969987) --- **"[Intuitive, Powerful Endpoint Management That Is Getting Better](https://www.g2.com/survey_responses/iru-review-13067999)"** **Rating:** 4.0/5.0 stars *— Eli M.* [Read full review](https://www.g2.com/survey_responses/iru-review-13067999) --- #### What Are G2 Users Discussing About Iru? - [How much does Addigy cost?](https://www.g2.com/discussions/how-much-does-addigy-cost) - [What is Macos MDM?](https://www.g2.com/discussions/what-is-macos-mdm) - 2 comments, 1 upvote - [Why Kandji?](https://www.g2.com/discussions/why-kandji) - 4 comments, 1 upvote - [Is kandji a SaaS?](https://www.g2.com/discussions/is-kandji-a-saas) - 6 comments, 1 upvote ### 17. [Acronis Cyber Protect Cloud](https://www.g2.com/products/acronis-cyber-protect-cloud/reviews) Acronis delivers the world’s most complete cyber resilience platform, combining backup, disaster recovery, cybersecurity, RMM, and business operations tools into a single, natively integrated solution. Built specifically for Managed Service Providers (MSPs) and IT teams, Acronis simplifies operations with one agent, one console, and one license model. Automation, AI-driven insights, and multi-tenant management ensure that fewer technicians can manage more clients at lower cost. With predictable pricing and transparent billing, Acronis enables partners and IT teams to scale efficiently, comply with regulations, and deliver unmatched resilience. No other vendor delivers this level of integration, efficiency, and MSP alignment. Acronis Cyber Protect Cloud unites backup and next-generation, AI-based anti-malware, antivirus, and endpoint protection management in one solution. Integration and automation provide unmatched ease for service providers — reducing complexity while increasing productivity and decreasing operating costs. Acronis Cyber Protect Cloud is the single service provider solution that combines backup, anti-malware (including anti-virus, anti-ransomware, and anti-cryptojacking) and security and management capabilities such as vulnerability assessments, patch management, URL filtering and more. Now, service providers can eliminate complexity and make security a centerpiece of their offerings while increasing SLAs, decreasing churn, and generating more recurring revenue. Get upgraded security with integrated AI-based defenses that protect clients from modern threats, make smarter use of resources so your team can focus on clients, and earn new recurring revenue and higher margins that strengthen your business. Enriched with next-gen, full-stack anti-malware protection and comprehensive yet simple management tools, built on top of our industry-leading backup and data recovery solution, Acronis Cyber Protect Cloud simplifies onboarding, daily operations, and reporting, and combats advanced attacks with new use cases enabled by integration. Acronis Cyber Protect Cloud makes it easy to deliver the modern cyber protection your clients seek. Acronis is majority-owned by EQT. **Average Rating:** 4.7/5.0 **Total Reviews:** 1,371 **How Do G2 Users Rate Acronis Cyber Protect Cloud?** - **Ease of Admin:** 9.1/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 9.0/10) - **Quality of Support:** 8.8/10 (Category avg: 8.7/10) - **Ease of Use:** 9.1/10 (Category avg: 8.7/10) **Who Is the Company Behind Acronis Cyber Protect Cloud?** - **Seller:** [Acronis](https://www.g2.com/sellers/acronis) - **Company Website:** https://www.acronis.com/ - **Year Founded:** 2003 - **HQ Location:** Schaffhausen - **Twitter:** @acronis (94,498 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/13179/ (1,965 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Director, CEO - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 68% Small-Business, 28% Mid-Market #### What Are Acronis Cyber Protect Cloud's Pros and Cons? **Pros:** - Ease of Use (365 reviews) - Backup Solutions (319 reviews) - Backup Ease (235 reviews) - Protection (233 reviews) - Reliability (219 reviews) **Cons:** - Slow Performance (97 reviews) - Expensive (91 reviews) - Poor Customer Support (73 reviews) - Complexity (70 reviews) - Backup Issues (69 reviews) ### What Do G2 Reviewers Say About Acronis Cyber Protect Cloud? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use** of Acronis Cyber Protect Cloud, enjoying streamlined management from a single console. - Users appreciate the **quick and efficient backup solutions** of Acronis Cyber Protect Cloud, enhancing overall management. - Users value the **ease of backup management** with Acronis, benefiting from a unified platform for all their needs. - Users appreciate the **all-in-one protection** Acronis Cyber Protect Cloud offers for backup and cybersecurity needs. - Users appreciate the **reliability** of Acronis Cyber Protect Cloud, noting its seamless backup and recovery capabilities. **Cons:** - Users experience **slow performance** with Acronis Cyber Protect Cloud, particularly during backups and software interactions. - Users find Acronis Cyber Protect Cloud **expensive** compared to competitors, with unclear pricing complicating decision-making. - Users express concern over **poor customer support** , particularly with slow response times and lack of weekend availability. - Users find the **complexity** of Acronis Cyber Protect Cloud's interface and pricing difficult to navigate initially. - Users face **backup issues** with Acronis Cyber Protect Cloud, particularly with multiple large .pst files and limited weekend support. #### What Are Recent G2 Reviews of Acronis Cyber Protect Cloud? **"[All-in-One Backup and Cybersecurity Platform That Streamlines MSP Operations](https://www.g2.com/survey_responses/acronis-cyber-protect-cloud-review-13071003)"** **Rating:** 5.0/5.0 stars *— Hatem A.* [Read full review](https://www.g2.com/survey_responses/acronis-cyber-protect-cloud-review-13071003) --- **"[Easy Deployment, Intuitive Management, and Great Value](https://www.g2.com/survey_responses/acronis-cyber-protect-cloud-review-13120536)"** **Rating:** 5.0/5.0 stars *— Jony d.* [Read full review](https://www.g2.com/survey_responses/acronis-cyber-protect-cloud-review-13120536) --- #### What Are G2 Users Discussing About Acronis Cyber Protect Cloud? - [What is Acronis Cyber Protect Cloud used for?](https://www.g2.com/discussions/what-is-acronis-cyber-protect-cloud-used-for) - 2 comments ### 18. [Palo Alto Cortex XSIAM](https://www.g2.com/products/palo-alto-cortex-xsiam/reviews) Product Description: Palo Alto Networks' Cortex XSIAM is an AI-driven security operations platform designed to transform traditional Security Operations Centers by integrating and automating key functions such as data centralization, threat detection, and incident response. By leveraging machine learning and automation, it enables organizations to detect and respond to threats more efficiently, reducing manual workloads and improving overall security posture. Key Features and Functionality: - Data Centralization: Aggregates data from various sources into a unified platform, providing comprehensive visibility across the enterprise. - AI-Powered Threat Detection: Utilizes machine learning algorithms to identify anomalies and potential threats in real-time. - Automated Incident Response: Streamlines response processes through automation, enabling rapid mitigation of security incidents. - Integrated SOC Capabilities: Combines functions such as Extended Detection and Response , Security Orchestration, Automation, and Response , Attack Surface Management , and Security Information and Event Management into a cohesive platform, eliminating the need for multiple disparate tools. - Scalability: Designed to handle large volumes of data and adapt to the evolving needs of modern enterprises. Primary Value and Problem Solved: Cortex XSIAM addresses the challenges of disjointed data, weak threat defense, and heavy reliance on manual work in traditional SOCs. By centralizing data and automating security operations, it simplifies processes, enhances threat detection accuracy, and accelerates incident response times. This transformation enables organizations to proactively outpace threats, reduce operational costs, and achieve a more robust security posture. **Average Rating:** 4.3/5.0 **Total Reviews:** 70 **How Do G2 Users Rate Palo Alto Cortex XSIAM?** - **Ease of Admin:** 7.9/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 9.0/10) - **Quality of Support:** 8.2/10 (Category avg: 8.7/10) - **Ease of Use:** 8.3/10 (Category avg: 8.7/10) **Who Is the Company Behind Palo Alto Cortex XSIAM?** - **Seller:** [Palo Alto Networks](https://www.g2.com/sellers/palo-alto-networks) - **Company Website:** https://www.paloaltonetworks.com - **Year Founded:** 2005 - **HQ Location:** Santa Clara, CA - **Twitter:** @PaloAltoNtwks (128,951 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/30086/ (22,313 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 48% Enterprise, 32% Mid-Market #### What Are Palo Alto Cortex XSIAM's Pros and Cons? **Pros:** - Log Management (13 reviews) - Dashboard Design (11 reviews) - Real-time Monitoring (11 reviews) - Simple (11 reviews) - Dashboard Customization (9 reviews) **Cons:** - Resource Intensive (9 reviews) - Complex Setup (8 reviews) - Cost (7 reviews) - Dashboard Issues (7 reviews) - Difficult Setup (7 reviews) ### What Do G2 Reviewers Say About Palo Alto Cortex XSIAM? *AI-generated summary from verified user reviews* **Pros:** - Users highlight **best-in-class log management** and effective alerting features, enhancing the overall usability and integration. - Users appreciate the **user-friendly dashboards** of Palo Alto Cortex XSIAM, highlighting ease of understanding alerts and metrics. - Users value the **real-time monitoring** capabilities of Palo Alto Cortex XSIAM, enhancing threat detection and response efficiency. - Users appreciate the **user-friendly interface** of Palo Alto Cortex XSIAM, making monitoring and deployment seamless and efficient. - Users appreciate the **good dashboard customization** in Palo Alto Cortex XSIAM, citing ease of use and integration. **Cons:** - Users find the solution **resource intensive** , increasing costs and complicating implementation due to high hardware requirements. - Users find the **complex implementation** of Palo Alto Cortex XSIAM time-consuming and resource-intensive, requiring significant technical expertise. - Users find the **cost** of Palo Alto Cortex XSIAM to be higher than competitors, impacting affordability for smaller companies. - Users report **dashboard issues** that hinder monitoring and create a messy interface, impacting usability and visibility. - Users struggle with the **difficult setup** of Palo Alto Cortex XSIAM, finding it complex and time-consuming for implementation. #### What Are Recent G2 Reviews of Palo Alto Cortex XSIAM? **"[Cortex XSIAM helps us cut through noise and focus on real threats](https://www.g2.com/survey_responses/palo-alto-cortex-xsiam-review-13117053)"** **Rating:** 4.0/5.0 stars *— Verified User in Financial Services* [Read full review](https://www.g2.com/survey_responses/palo-alto-cortex-xsiam-review-13117053) --- **"[Streamlines Security Operations with Automation](https://www.g2.com/survey_responses/palo-alto-cortex-xsiam-review-13067964)"** **Rating:** 4.0/5.0 stars *— Ronald D.* [Read full review](https://www.g2.com/survey_responses/palo-alto-cortex-xsiam-review-13067964) --- #### What Are G2 Users Discussing About Palo Alto Cortex XSIAM? - [What is IBM Security ReaQta used for?](https://www.g2.com/discussions/what-is-ibm-security-reaqta-used-for) - [What does QRadar stand for?](https://www.g2.com/discussions/what-does-qradar-stand-for) - 1 comment, 1 upvote - [How do I use IBM QRadar?](https://www.g2.com/discussions/how-do-i-use-ibm-qradar) - 1 comment - [What are the key component of IBM QRadar?](https://www.g2.com/discussions/what-are-the-key-component-of-ibm-qradar) - 1 comment - [What is IBM QRadar Siem?](https://www.g2.com/discussions/what-is-ibm-qradar-siem) - 1 comment ### 19. [Carbon Black EDR](https://www.g2.com/products/carbon-black-edr/reviews) Carbon Black EDR is a market-leading incident response and threat hunting solution designed to provide responders with the most information possible, accompanied by expert threat analysis and armed with real-time response capabilities to stop attacks, minimize damage and close security gaps. Carbon Black EDR makes these teams more efficient, reducing investigations from days to hours, and more effective, enabling them to discover threats before attacks can exploit them. Carbon Black EDR also allows teams to connect to and isolate infected machines to prevent lateral movement and remediate devices without costly IT involvement. Continuous and Centralized Recording Centralized access to continuously recorded endpoint data means that security professionals have the information they need to hunt threats in real time as well as conduct in-depth investigations after a breach has occurred. Live Response for Remote Remediation With Live Response, incident responders can create a secure connection to infected hosts to pull or push files, kill processes, perform memory dumps and quickly remediate from anywhere in the world. Attack Chain Visualization and Search Carbon Black EDR provides intuitive attack chain visualization to make identifying root cause fast and easy. Analysts can quickly jump through each stage of an attack to gain insight into the attacker’s behavior, close security gaps and learn from every new attack technique to avoid falling victim to the same attack twice. Automation via Integrations and Open APIs Carbon Black boasts a robust partner ecosystem and open platform that allows security teams to integrate products like Carbon Black EDR into their existing security stack. **Average Rating:** 4.4/5.0 **Total Reviews:** 82 **How Do G2 Users Rate Carbon Black EDR?** - **Ease of Admin:** 7.9/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 9.0/10) - **Quality of Support:** 8.6/10 (Category avg: 8.7/10) - **Ease of Use:** 8.4/10 (Category avg: 8.7/10) **Who Is the Company Behind Carbon Black EDR?** - **Seller:** [Broadcom](https://www.g2.com/sellers/broadcom-ab3091cd-4724-46a8-ac89-219d6bc8e166) - **Year Founded:** 1991 - **HQ Location:** San Jose, CA - **Twitter:** @broadcom (63,909 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/broadcom/ (55,094 employees on LinkedIn®) - **Ownership:** NASDAQ: CA **Who Uses This Product?** - **Who Uses This:** IT Manager - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 64% Mid-Market, 41% Enterprise #### What Are Carbon Black EDR's Pros and Cons? **Pros:** - Protection (5 reviews) - Incident Response (2 reviews) - AI (1 reviews) - Antivirus Protection (1 reviews) - Artificial Intelligence (1 reviews) **Cons:** - Expensive (2 reviews) - High Resource Usage (2 reviews) - Alert Issues (1 reviews) - False Positives (1 reviews) - Inefficient Search Functionality (1 reviews) ### What Do G2 Reviewers Say About Carbon Black EDR? *AI-generated summary from verified user reviews* **Pros:** - Users value the **real-time threat detection** of Carbon Black EDR, enhancing security through continuous monitoring and advanced analysis. - Users value the **rapid incident response** capabilities of Carbon Black EDR, enhancing their cybersecurity effectiveness significantly. - Users value the **real-time threat detection** capabilities of Carbon Black EDR, enhancing security through continuous monitoring and proactive strategies. - Users rave about the **next-gen antivirus and behavior analysis** of Carbon Black EDR, ensuring robust protection against all threats. - Users praise the **AI-powered behavior analysis** of Carbon Black EDR, enhancing security against various cyber threats. **Cons:** - Users find the **pricing to be steep** , making it less accessible for some despite its great features. - Users report **high resource usage** with Carbon Black EDR, which can impact performance on lower-spec machines. - Users face **overwhelming alert issues** that can hinder usability and impact resource management significantly. - Users often face **false positives** with Carbon Black EDR, requiring careful tuning to prevent alert fatigue. - Users find the **inefficient search functionality** of Carbon Black EDR challenging, complicating their ability to quickly locate information. #### What Are Recent G2 Reviews of Carbon Black EDR? **"[Robust EDR with excellent Incident Response Capabilities](https://www.g2.com/survey_responses/carbon-black-edr-review-10383644)"** **Rating:** 4.5/5.0 stars *— Prajwal V.* [Read full review](https://www.g2.com/survey_responses/carbon-black-edr-review-10383644) --- **"[Easy to Use, Powerful Automation and Integrations](https://www.g2.com/survey_responses/carbon-black-edr-review-12262822)"** **Rating:** 5.0/5.0 stars *— Ernesto M.* [Read full review](https://www.g2.com/survey_responses/carbon-black-edr-review-12262822) --- #### What Are G2 Users Discussing About Carbon Black EDR? - [What is VMware EDR?](https://www.g2.com/discussions/what-is-vmware-edr) - [What are the benefits of VMware carbon black to organizations?](https://www.g2.com/discussions/vmware-carbon-black-edr-what-are-the-benefits-of-vmware-carbon-black-to-organizations) - [What does carbon black software do?](https://www.g2.com/discussions/what-does-carbon-black-software-do) - 1 comment - [What does VMware carbon black EDR do?](https://www.g2.com/discussions/what-does-vmware-carbon-black-edr-do) ### 20. [Carbon Black Cloud](https://www.g2.com/products/carbon-black-cloud/reviews) The Carbon Black Cloud security platform helps you strengthen and unify security tools to see more and stop more. Carbon Black unifies visibility across your endpoints, networks, and containers to enable you to stop threats targeting your organization with speed and confidence. Carbon Black protects against the full spectrum of modern cyber-attacks, including emerging threats and ransomware. Top SOC teams, IR firms and MSSPs have adopted Carbon Black as a core component of their prevention, detection, and response capability stack. Carbon Black is available via MSSP or directly. **Average Rating:** 4.1/5.0 **Total Reviews:** 38 **How Do G2 Users Rate Carbon Black Cloud?** - **Ease of Admin:** 8.1/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 9.0/10) - **Quality of Support:** 8.4/10 (Category avg: 8.7/10) - **Ease of Use:** 8.2/10 (Category avg: 8.7/10) **Who Is the Company Behind Carbon Black Cloud?** - **Seller:** [Broadcom](https://www.g2.com/sellers/broadcom-ab3091cd-4724-46a8-ac89-219d6bc8e166) - **Year Founded:** 1991 - **HQ Location:** San Jose, CA - **Twitter:** @broadcom (63,909 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/broadcom/ (55,094 employees on LinkedIn®) - **Ownership:** NASDAQ: CA **Who Uses This Product?** - **Top Industries:** Financial Services - **Company Size:** 56% Mid-Market, 33% Enterprise #### What Are Carbon Black Cloud's Pros and Cons? **Pros:** - Ease of Use (2 reviews) - Protection (2 reviews) - Security (2 reviews) - Antivirus Protection (1 reviews) - Artificial Intelligence (1 reviews) **Cons:** - Agent Removal Issues (1 reviews) - Compatibility Issues (1 reviews) - Complex Implementation (1 reviews) - Complex Installation (1 reviews) - Configuration Issues (1 reviews) ### What Do G2 Reviewers Say About Carbon Black Cloud? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use** of Carbon Black Cloud, praising its intuitive interface and user-friendly features. - Users appreciate the **easy installation and robust protection** offered by Carbon Black Cloud for their digital infrastructure. - Users value the **robust security features** of Carbon Black Cloud, ensuring comprehensive protection for their digital infrastructure. - Users value the **advanced Antivirus protection** of Carbon Black Cloud, ensuring 24/7 security against various threats. - Users appreciate the **advanced AI-powered security features** of Carbon Black Cloud, ensuring robust protection and usability. **Cons:** - Users face **agent removal issues** with VMware Carbon Black Cloud, hindering tasks like proctored exams due to software interference. - Users find significant **compatibility issues** with Carbon Black Cloud, particularly struggling with Microsoft operating systems. - Users find the **complex implementation** of global blocks challenging, requiring individual policy updates for effectiveness. - Users report **complex installation** processes with VMware Carbon Black Cloud, leading to interruptions and the need for reinstallation. - Users struggle with **configuration issues** in Carbon Black Cloud, finding global changes cumbersome and policy updates tedious. #### What Are Recent G2 Reviews of Carbon Black Cloud? **"[Powerful Tool for Endpoint and Detection Response](https://www.g2.com/survey_responses/carbon-black-cloud-review-8274401)"** **Rating:** 4.5/5.0 stars *— Mithun C.* [Read full review](https://www.g2.com/survey_responses/carbon-black-cloud-review-8274401) --- **"[The product is good at stopping malicious software/behavior.](https://www.g2.com/survey_responses/carbon-black-cloud-review-10240572)"** **Rating:** 4.0/5.0 stars *— Verified User in Retail* [Read full review](https://www.g2.com/survey_responses/carbon-black-cloud-review-10240572) --- #### What Are G2 Users Discussing About Carbon Black Cloud? - [What is VMware Carbon Black Cloud used for?](https://www.g2.com/discussions/what-is-vmware-carbon-black-cloud-used-for) - [What are the benefits of VMware carbon black to organizations?](https://www.g2.com/discussions/vmware-carbon-black-cloud-what-are-the-benefits-of-vmware-carbon-black-to-organizations) - [What does carbon black software do?](https://www.g2.com/discussions/vmware-carbon-black-cloud-what-does-carbon-black-software-do) - [What is VMware carbon black cloud endpoint?](https://www.g2.com/discussions/what-is-vmware-carbon-black-cloud-endpoint) - [Which of the following are features of VMware carbon black cloud?](https://www.g2.com/discussions/which-of-the-following-are-features-of-vmware-carbon-black-cloud) ### 21. [Intezer](https://www.g2.com/products/intezer-intezer/reviews) Intezer automates the entire alert triage process, like an extension of your team handling Tier 1 SOC tasks for every alert at machine-speed. Intezer monitors incoming incidents from endpoint, reported phishing pipelines, or SIEM tools, then autonomously collects evidence, investigates, makes triage decisions, and escalates only the serious threats to your team for human intervention. Power your SOC with artificial intelligence that makes sure every alert is deeply analyzed (including every single artifact like files, URLs, endpoint memory, etc.), detecting malicious code in memory and other evasive threats. Fast set up and integrations with your SOC team's workflows (EDR, SOAR, SIEM, etc.) means Intezer's AI can immediately start filtering out false positives, giving you detailed analysis about every threat, and speeding up your incident response time. With Intezer: • Reduce Tier 1 escalation, sending only 4% of alerts on average to your team for immediate action. • Identify up to 97% of false positive alerts without taking any time from your analysts. • Reduce average triage time to 5 minutes or less, while giving your analysts deep context about every alert to prioritize critical treats and respond faster. **Average Rating:** 4.5/5.0 **Total Reviews:** 187 **How Do G2 Users Rate Intezer?** - **Ease of Admin:** 8.8/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 9.0/10) - **Quality of Support:** 8.6/10 (Category avg: 8.7/10) - **Ease of Use:** 9.1/10 (Category avg: 8.7/10) **Who Is the Company Behind Intezer?** - **Seller:** [Intezer](https://www.g2.com/sellers/intezer) - **Year Founded:** 2015 - **HQ Location:** New York - **Twitter:** @IntezerLabs (10,170 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/10656303/ (88 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Software Engineer, Student - **Top Industries:** Computer & Network Security, Information Technology and Services - **Company Size:** 54% Small-Business, 23% Mid-Market #### What Are Intezer's Pros and Cons? **Pros:** - Security (3 reviews) - Security Protection (3 reviews) - Cybersecurity (2 reviews) - Detection Accuracy (2 reviews) - Ease of Use (2 reviews) **Cons:** - Access Control (1 reviews) - Complex Interface (1 reviews) - Data Privacy (1 reviews) - Difficult Navigation (1 reviews) - Expensive (1 reviews) ### What Do G2 Reviewers Say About Intezer? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **strong security features** of Intezer, ensuring timely detection and blocking of malware. - Users value Intezer for its **effective malware detection and security features** that enhance overall system protection. - Users value the **ease of malware detection and blocking** with Intezer, enhancing overall cybersecurity effectiveness. - Users value the **high detection accuracy** of Intezer, ensuring timely malware detection and enhanced system security. - Users appreciate the **ease of use** of Intezer, making malware detection and security integration straightforward and efficient. **Cons:** - Users find the **lack of access control** to file visibility a downside, though it facilitates peer review benefits. - Users express frustration with the **complex interface** of Intezer, finding it difficult to navigate and use effectively. - Users find the **lack of control over file visibility** a downside, despite potential benefits for peer review. - Users find the **difficult navigation** in Intezer frustrating due to a poorly designed UI and small text size. - Users find the **expensive pricing** of Intezer limiting, particularly due to the capping of the free tier. #### What Are Recent G2 Reviews of Intezer? **"[CTI coordinator](https://www.g2.com/survey_responses/intezer-review-5353729)"** **Rating:** 4.0/5.0 stars *— Verified User in Banking* [Read full review](https://www.g2.com/survey_responses/intezer-review-5353729) --- **"[Effortless Malware Detection and Robust Endpoint Security With Intezer](https://www.g2.com/survey_responses/intezer-review-12060113)"** **Rating:** 4.5/5.0 stars *— Franck P.* [Read full review](https://www.g2.com/survey_responses/intezer-review-12060113) --- #### What Are G2 Users Discussing About Intezer? - [What is genetic malware analysis?](https://www.g2.com/discussions/what-is-genetic-malware-analysis) - 1 comment - [Is Intezer good?](https://www.g2.com/discussions/is-intezer-good) - 1 comment - [What does Intezer do?](https://www.g2.com/discussions/what-does-intezer-do) - 1 comment - [What is Intezer analyze?](https://www.g2.com/discussions/what-is-intezer-analyze) - 2 comments ## What Is Endpoint Detection & Response (EDR) Software? [Endpoint Protection Software](https://www.g2.com/categories/endpoint-protection) ## What Software Categories Are Similar to Endpoint Detection & Response (EDR) Software? - [Antivirus Software](https://www.g2.com/categories/antivirus) - [Endpoint Protection Platforms](https://www.g2.com/categories/endpoint-protection-platforms) - [Managed Detection and Response (MDR) Software](https://www.g2.com/categories/managed-detection-and-response-mdr) --- ## How Do You Choose the Right Endpoint Detection & Response (EDR) Software? ### What You Should Know About Endpoint Detection & Response (EDR) Software ### What is endpoint detection and response (EDR) software? EDR software is used to help companies identify and remediate threats related to network-connected endpoints. EDR solutions inform security professionals of vulnerable or infected endpoints and guide them through the remediation process. After incidents have been resolved, EDR tools help teams investigate issues and the vulnerable components that allow an endpoint to become compromised. Continuous monitoring is one of the core capabilities of endpoint detection technologies. These monitoring features provide complete and continuous visibility across a company’s network-connected endpoints. Individuals can monitor behaviors, vulnerabilities, and activity for abnormalities. When abnormalities are identified, the detection portion of EDR technology transitions to the response portion. Endpoint response begins with alerting and containment. Security professionals are alerted of threats present to their systems and isolate potentially compromised endpoints from further network access; this helps prevent one infected endpoint from becoming hundreds. Once systems are properly organized to contain malware and threat actors, security teams can work to remove malware and prevent future access from actors to endpoint devices. EDR platforms store threat data related to security incidents, improving a team's ability to defend against threats in the future by helping them identify root causes and threat actors. Additionally, zero-day exploits may be identified, and other vulnerabilities may be remediated as a result. This will help prevent third-party privilege escalation, malware injection, and unapproved endpoint control from occurring in the future. Some EDR products provide machine learning capabilities to analyze events, improve threat hunting, and reduce false positives by automating protection and remediation processes. ### Key benefits of EDR software - Monitor endpoints and detect issues or security incidents - Remediate present threats to endpoints - Investigate incidents to identify causes - Contain threats and restrict access to other endpoints or networks ### Why use endpoint detection and response solutions? Endpoints are some of the most vulnerable components of a business' network structure. One vulnerable endpoint could cause a company’s entire network, databases, and sensitive information to become exposed or stolen. EDR systems will help secure individual endpoints, detect issues as they arise, and contain threats that make their way beyond traditional security structures. Endpoint protection is even more relevant considering the growing popularity of bring-your-own-device (BYOD) policies. When employees are in complete control over downloads, applications, and updates, security must be a priority. Every day professionals are not the most security-savvy individuals and may unintentionally compromise their devices or put business information at risk. **Zero-day threats—** While traditional prevention tools such as antivirus software or firewall technology are helpful as the first line of defense, zero-day threats are bound to occur. The nature of these threats means they have yet to be discovered and, therefore, cannot be defended against. EDR solutions will help identify new threats as they arise and remediate them before damage occurs. **Visibility and control—** Continuous monitoring and endpoint visibility help defend against traditional malware and sophisticated threats. Monitoring can help identify known threats as they arise and detect minute details that indicate the presence of advanced threats. Hackers are always developing new ways to enter networks undetected through fileless malware or malicious code injection. Monitoring capabilities will improve a team’s ability to detect anomalies caused by outside actors and threats. **Analysis and deterrence —** EDR software improves a security organization’s ability to review the data associated with security events, data breaches, and network attacks. The data collected from these events can be reviewed back to the initial onset and used to identify the vulnerability or exploit used. Once identified, security teams and software developers can work collectively to resolve flaws and prevent similar attacks from occurring in the future. ### What are the common features of EDR products? **Detection—** Detection capabilities result from monitoring practices. Monitoring collects information about properly functioning systems and can be applied to identify abnormal behavior or functionality. Once identified, IT and security professionals are alerted and directed through the review and resolution processes. **Containment —** Once threats are present within an endpoint device, access must be restricted from the greater network and additional endpoints. Often referred to as quarantine features, these capabilities can help protect a network when a threat is detected. **Remediation—** As threats are discovered, they must be dealt with. EDR software allows individuals and security teams to track incidents back to their onset and identify suspicious actors or malware. **Investigation—** After incidents occur, EDR tools collect large amounts of data associated with the endpoint device and provide a historical record of activities. This information can be used to quickly identify the cause of an incident and prevent its reoccurrence in the future. #### Additional EDR features **Behavioral analysis—** Behavior analysis capabilities allow administrators to gain valuable insights into end-user behavior. This data can be used as a reference for monitoring features to compare against and detect anomalies. **Real-time monitoring —** Real-time and continuous monitoring capabilities allow security professionals to constantly monitor systems and detect anomalies in real time. **Threat data documentation—** Event data recording capabilities automate the collection and curation of incident data. This information can alert security teams of the performance and health of a company's endpoint-enabled devices. **Data exploration —** Data exploration features allow security teams to review data associated with security incidents. These data points can be cross-referenced and analyzed to provide insights on better protecting endpoints in the future. ### Potential issues with EDR solutions **Endpoint variety—** Endpoints come in many shapes and sizes, from laptops and servers to tablets and smartphones. A business should ensure that all types of endpoints connected to its network are compatible with a chosen EDR solution. This is especially important for businesses with a large number of BYOD devices that run different operating systems and applications. **Scalability —** Scale refers to the size and scope of your network of connected endpoints. It’s a major consideration because some EDR tools may only facilitate monitoring on a specific number of devices or limit the number of concurrent investigations or remediations. Companies with large pools of endpoints should be sure the solutions they consider can handle the number of endpoints and provide adequate monitoring for the scale of their business and projected growth. **Efficacy —** Efficacy refers to the actual functional benefit of using a software solution. Companies may be wasting their time if security teams are inundated with false positives or conflicting results. This is a key identifier in user reviews and third-party evaluations that buyers should consider when evaluating a product. **Administration and Management —** Companies adopting EDR for the first time should be sure they have sufficient staff equipped with skills relevant to using EDR software. Smaller, growing businesses may not be best suited for adopting complex security systems and may be better served using managed services until the need for security matches their ability to deliver. ### Software and services related to EDR software EDR software is one member of the endpoint protection and security family. These tools provide the remediation component of the endpoint protection process but not all of the prevention and management components in other endpoint security software. [**Endpoint protection suites**](https://www.g2crowd.com/categories/endpoint-protection-suites? __hstc=171774463.81494f0ac47c15794fea57ed705405f2.1607315526284.1610948873867.1611035647295.58&__ hssc=171774463.13.1611035647295&__hsfp=669407890) **—** Endpoint protection suites are sophisticated platforms containing capabilities across all segments of the endpoint security technology world. They include virus and malware protection as well as the administration and management of endpoint devices. [**Endpoint antivirus software**](https://www.g2.com/categories/antivirus) **—** Antivirus technologies are some of the oldest solutions for endpoint security. These tools help prevent malware, computer viruses, and other threats from compromising an endpoint device. These capabilities are present in many security technologies, but antivirus software is specifically dedicated to this kind of protection. [**Endpoint management software**](https://www.g2.com/categories/endpoint-management) **—** Endpoint management software documents, monitors, and manages endpoints connected to a network. These tools ensure that only approved devices access a company’s network and require connected devices to pass specific security requirements before gaining access. This may mean implementing software updates, security scans, or user authentication processes. [**Endpoint security services**](https://www.g2.com/categories/endpoint-security-services) **—** Endpoint security services are a form of managed security services that are often the go-to for organizations without dedicated security staff. These solution providers deliver services surrounding the entire endpoint security stack to reduce a business’s need to manage day-to-day tasks and resolve issues directly. These services will not provide the same level of customization or control but will provide a business with peace of mind until they are capable of handling security issues in-house. **Incident response software—** Incident response software is a term for general security incident management and threat remediation tools. These products are designed to facilitate incident investigation and solve them at the point of attack. These tools may provide some similar forensic analysis capabilities but often do not provide the same endpoint monitoring and control functionality.