# Best Endpoint Detection & Response (EDR) Software for Small Business - Page 3 ## How Many Endpoint Detection & Response (EDR) Software Products Does G2 Track? **Total Products under this Category:** 125 ### Category Stats (Aug 2026) - **Average Rating:** 4.43/5 The average rating of products in this category, based on all submitted ratings - **Top Trending Product:** Datto Endpoint Detection and Response (EDR) (+1.37%) - Among all products in this category, Datto Endpoint Detection and Response (EDR) recorded the largest rating increase compared to last month _Last updated: August 01, 2026_ ## How Does G2 Rank Endpoint Detection & Response (EDR) Software Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 12,600+ Authentic Reviews - 125+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. ## G2 Grid® for Endpoint Detection & Response (EDR) Software ![G2 Grid® for Endpoint Detection & Response (EDR) Software plotting products by satisfaction and market presence](https://www.g2.com/categories/endpoint-detection-response-edr/grids.png?focus%5B%5D=126474&focus%5B%5D=68442&focus%5B%5D=68606&focus%5B%5D=14988&focus%5B%5D=1436&focus%5B%5D=818&focus%5B%5D=1146&focus%5B%5D=14972) Highlighted products: Acronis Cyber Protect Cloud, Huntress Managed EDR, CrowdStrike Falcon Endpoint Protection Platform, ESET PROTECT, ThreatDown, Sophos Endpoint, IBM MaaS360, and Check Point Endpoint Security. Underlying data: [Grid® JSON](https://www.g2.com/categories/endpoint-detection-response-edr/grids.json?focus%5B%5D=acronis-cyber-protect-cloud&focus%5B%5D=huntress-managed-edr&focus%5B%5D=crowdstrike-falcon-endpoint-protection-platform&focus%5B%5D=eset-protect&focus%5B%5D=threatdown&focus%5B%5D=sophos-endpoint&focus%5B%5D=ibm-maas360&focus%5B%5D=check-point-endpoint-security&segment=small-business) **Sponsored** ### 401GO 401GO is a type of retirement plan solution designed to help businesses and their employees access affordable and efficient 401(k) plans. Recognizing the challenges that small businesses face in providing retirement benefits, 401GO aims to bridge the gap by offering a streamlined approach to setting up and managing retirement plans. The target audience for 401GO includes small business owners who may have previously felt excluded from the retirement plan market due to high costs and complex setups. Many of these businesses understand the importance of providing retirement options to their employees but lack the resources or knowledge to implement such plans effectively. Key features of 401GO include a quick setup process that can be completed in just minutes, as opposed to the weeks or months typically required by traditional providers. This efficiency is complemented by an economical pricing structure that allows small businesses to offer competitive retirement benefits without straining their budgets. Additionally, 401GO takes care of all the administrative details, freeing up business owners to focus on their core operations rather than getting bogged down in paperwork. The platform employs innovative automated technology to manage the complexities of retirement planning, ensuring that both employers and employees can easily navigate their options. This technology not only simplifies the enrollment process but also provides ongoing support and resources to help users make informed decisions about their retirement savings. By offering a practical and beneficial 401(k) plan, 401GO empowers small businesses to enhance employee satisfaction and retention while promoting financial security for their workforce. Overall, 401GO stands out in the retirement plan market by providing a tailored solution that meets the unique needs of small businesses. Its commitment to affordability, efficiency, and comprehensive support makes it a valuable resource for employers looking to provide their employees with essential retirement benefits. [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=1159&secure%5Bchosen_at%5D=2026-08-01T18%3A46%3A28Z&secure%5Bdisplayable_resource_id%5D=2507&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=retargeted_product&secure%5Bplacement_resource_ids%5D%5B%5D=124416&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=124416&secure%5Bresource_id%5D=1159&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fendpoint-detection-response-edr%2Fsmall-business%3Fpage%3D3&secure%5Btoken%5D=a885c1d0bc80dc0cb94a284b289219aefa7ead75b5818c67651d4b5e50ba82d3&secure%5Burl%5D=https%3A%2F%2F401go.com&secure%5Burl_type%5D=company_website) ### [Barracuda Managed XDR](https://www.g2.com/products/barracuda-managed-xdr/reviews) Barracuda Managed XDR is the comprehensive next-generation cybersecurity solution that protects organizations of all sizes against today’s ever-evolving threat landscape. Barracuda Managed XDR is a fully managed service instantly augmenting an organization’s IT staff, identifying signals amidst noise, and reducing TTR from days to seconds. The solution features advanced AI-driven threat protection, SIEM, SOAR, and enterprise-grade threat intelligence from 11+ billion IOCs and hundreds of ML-enriched detection rules aligned to the MITRE ATT&CK framework. Ingesting trillions of events across endpoints, servers, identity, cloud, email, and firewalls, the cloud-native solution detects, responds to, and eliminates cyberthreats in real time across the attack lifecycle. An ‘open’ XDR solution, Barracuda Managed XDR integrates with an organization’s existing technology, ensuring a smooth deployment while enhancing security resilience and operational efficiency. Barracuda Managed XDR is powered by Barracuda’s 24/7/365 global SOC, featuring five specialized expert-level teams delivering best-in-class SLAs and proactive real-time threat detection and response. **Average Rating:** 4.6/5.0 **Total Reviews:** 34 #### How Do G2 Users Rate Barracuda Managed XDR? - **Ease of Admin:** 8.6/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.0/10) - **Quality of Support:** 9.4/10 (Category avg: 8.7/10) - **Ease of Use:** 9.4/10 (Category avg: 8.7/10) #### Who Is the Company Behind Barracuda Managed XDR? - **Seller:** [Barracuda](https://www.g2.com/sellers/barracuda) - **Company Website:** www.barracuda.com - **Year Founded:** 2002 - **HQ Location:** Campbell, CA - **Twitter:** @Barracuda 15,239 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=f781b15d43db259998c089a305a16438e46ef7f458b40ed200cb81a2a683bea5&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbarracuda-networks%2F&secure%5Burl_type%5D=linkedin_company_website) 2,248 employees on LinkedIn® #### Who Uses This Product? - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 44% Small, 35% Medium #### What Do G2 Reviewers Say About Barracuda Managed XDR? _AI-generated summary from verified user reviews_ ##### Pros - Users appreciate the **ease of use** of Barracuda Managed XDR, benefiting from quick setup and intuitive interface. - Users value the **24/7 monitoring and proactive security** of Barracuda Managed XDR, enhancing confidence and reducing workload. - Users value the **24/7 security and proactive protection** from Barracuda Managed XDR, enhancing confidence in their systems. - Users value the **24/7 comprehensive security** of Barracuda Managed XDR, enhancing confidence and protection against cyber threats. - Users value the **24/7 proactive alerts** of Barracuda Managed XDR, enhancing security and minimizing response times effectively. ##### Cons - Users find the **lack of customization** in Barracuda Managed XDR limits their reporting and management flexibility. - Users face a **steep learning curve** with Barracuda Managed XDR, making initial setup and navigation challenging. - Users find Barracuda Managed XDR **not user-friendly** , desiring more customization and self-management options, especially for reporting. - Users find the **portal issues** cumbersome, requiring frequent logins for program management across different dashboards. - Users find the **agent on the endpoint device limited** , requiring portal access for program management, which is inconvenient. #### What Are Recent G2 Reviews of Barracuda Managed XDR? **["Simplified Endpoint Security, Perfect Integration"](https://www.g2.com/survey_responses/barracuda-managed-xdr-review-12340161)** **Rating:** 5.0/5.0 stars _— Adrian C._ [Read full review](https://www.g2.com/survey_responses/barracuda-managed-xdr-review-12340161) **["Seamless Integration and Fast, Detailed Security Alerts with 24/7 Protection"](https://www.g2.com/survey_responses/barracuda-managed-xdr-review-11816588)** **Rating:** 4.0/5.0 stars _— Alain D._ [Read full review](https://www.g2.com/survey_responses/barracuda-managed-xdr-review-11816588) ### [CrowdSec](https://www.g2.com/products/crowdsec/reviews) CrowdSec is an open-source security stack that detects aggressive behaviors and prevents them from accessing your systems. Its user-friendly design and ease of integration into your current security infrastructure offer a low technical entry barrier and a high-security gain. Once an unwanted behavior is detected, it is automatically blocked. The aggressive IP, scenario triggered and the timestamp is sent for curation, to avoid poisoning & false positives. If verified, this IP is then redistributed to all CrowdSec users running the same scenario. By sharing the threat they faced, all users are protecting each other. **Average Rating:** 4.7/5.0 **Total Reviews:** 85 #### How Do G2 Users Rate CrowdSec? - **Ease of Admin:** 8.8/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 9.0/10) - **Quality of Support:** 8.9/10 (Category avg: 8.7/10) - **Ease of Use:** 8.8/10 (Category avg: 8.7/10) #### Who Is the Company Behind CrowdSec? - **Seller:** [CrowdSec](https://www.g2.com/sellers/crowdsec) - **Year Founded:** 2020 - **HQ Location:** Paris, FR - **Twitter:** @Crowd\_Security 19,491 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=238a2dc675f271083f55d292782de9a0fd0d3d7b188bf6de40ee7f4a3b264b37&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fcrowdsec%2F%3ForiginalSubdomain%3Dfr&secure%5Burl_type%5D=linkedin_company_website) 30 employees on LinkedIn® #### Who Uses This Product? - **Top Industries:** Computer & Network Security, Information Technology and Services - **Company Size:** 69% Small, 20% Medium #### What Are Recent G2 Reviews of CrowdSec? **["It's a real life-saver in terms of hosting stuff"](https://www.g2.com/survey_responses/crowdsec-review-8191423)** **Rating:** 5.0/5.0 stars _— Rei B._ [Read full review](https://www.g2.com/survey_responses/crowdsec-review-8191423) **["Crowdsec best endpoint in SMB"](https://www.g2.com/survey_responses/crowdsec-review-11691179)** **Rating:** 5.0/5.0 stars _— Pramod s._ [Read full review](https://www.g2.com/survey_responses/crowdsec-review-11691179) #### What Are G2 Users Discussing About CrowdSec? - [What are the benefits and drawbacks of using CrowdSec for cybersecurity, and what do you recommend for improvement?](https://www.g2.com/discussions/what-are-the-benefits-and-drawbacks-of-using-crowdsec-for-cybersecurity-and-what-do-you-recommend-for-improvement) - [What is CrowdSec used for?](https://www.g2.com/discussions/what-is-crowdsec-used-for) - 1 comment ### [Acronis Cyber Protect](https://www.g2.com/products/acronis-acronis-cyber-protect/reviews) Acronis Cyber Protect delivers robust protection against cyberthreats, unparalleled backup and recovery capabilities and simplified management and visibility through a single pane of glass, for the entire environment. Key features of Acronis Cyber Protect include: · Cyberthreat protection: Using artificial intelligence (AI) and machine learning (ML), proactively secures data, applications and systems, from advanced cyberattacks, including ransomware and other forms of malware. · Rapid Recovery: Reduced dependency on central IT support empowers users to initiate one-click recovery of distributed endpoints, including bare-metal recovery of physical workloads. · Reduced TCO: Broad, multigenerational OS support, enables vendor consolidation while ensuring comprehensive protection. · Simplified management: Centralized management includes local autonomy and seamless integration with existing third-party tools to provide a unified view of backup and recovery operations along with broad, multigenerational OS support. · Data sovereignty: With the use of Acronis’ extensive network of global data centers, users can ensure compliance and master regional data sovereignty laws, offering peace of mind and regulatory compliance. Acronis is majority-owned by EQT. **Average Rating:** 4.3/5.0 **Total Reviews:** 657 #### How Do G2 Users Rate Acronis Cyber Protect? - **Ease of Admin:** 8.4/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.4/10 (Category avg: 9.0/10) - **Quality of Support:** 8.3/10 (Category avg: 8.7/10) - **Ease of Use:** 8.6/10 (Category avg: 8.7/10) #### Who Is the Company Behind Acronis Cyber Protect? - **Seller:** [Acronis](https://www.g2.com/sellers/acronis) - **Year Founded:** 2003 - **HQ Location:** Schaffhausen - **Twitter:** @acronis 94,498 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=dfed911f15c75b6702b83ad383200829a52b1edbacc27b958946b137ca4df95d&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F13179%2F&secure%5Burl_type%5D=linkedin_company_website) 1,965 employees on LinkedIn® - **Ownership:** Acronis is majority-owned by EQT #### Who Uses This Product? - **Who Uses This:** Support Analyst, IT Manager - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 45% Small, 40% Medium #### What Do G2 Reviewers Say About Acronis Cyber Protect? _AI-generated summary from verified user reviews_ ##### Pros - Users value the **all-in-one backup and cybersecurity** solution of Acronis Cyber Protect for seamless management and quick recovery. - Users find Acronis Cyber Protect to have an **intuitive interface** , making backup and cybersecurity management seamless and efficient. - Users appreciate the **all-in-one solution** of Acronis Cyber Protect, seamlessly integrating backup and cybersecurity features. - Users appreciate the **quick and efficient data recovery** offered by Acronis Cyber Protect, enhancing business continuity. - Users appreciate the **all-in-one security and backup solution** of Acronis Cyber Protect, streamlining data management effectively. ##### Cons - Users find Acronis Cyber Protect to be **expensive** , making it less accessible for smaller businesses and budgets. - Users find the **complexity** of Acronis Cyber Protect challenging, particularly during initial setup and configuration. - Users find the **difficult learning curve** of Acronis Cyber Protect to be frustrating, especially for those unfamiliar with IT tools. - Users express frustration over **poor customer support** , highlighting delays and lack of accountability from the Acronis team. - Users often experience **slow performance** with Acronis Cyber Protect, particularly affecting older machines and user onboarding. #### What Are Recent G2 Reviews of Acronis Cyber Protect? **["Effortless Backup and Disaster Recovery"](https://www.g2.com/survey_responses/acronis-cyber-protect-review-12712384)** **Rating:** 4.5/5.0 stars _— VIVEK KUMAR D._ [Read full review](https://www.g2.com/survey_responses/acronis-cyber-protect-review-12712384) **["Comprehensive Protection with Single pane of glass Management"](https://www.g2.com/survey_responses/acronis-cyber-protect-review-12711723)** **Rating:** 4.5/5.0 stars _— Dave P._ [Read full review](https://www.g2.com/survey_responses/acronis-cyber-protect-review-12711723) #### What Are G2 Users Discussing About Acronis Cyber Protect? - [Is Acronis free software?](https://www.g2.com/discussions/is-acronis-free-software) - [What is the best backup solution for enterprise?](https://www.g2.com/discussions/what-is-the-best-backup-solution-for-enterprise) - 1 comment - [What is Acronis software?](https://www.g2.com/discussions/what-is-acronis-software) - [Does Acronis do incremental backup?](https://www.g2.com/discussions/does-acronis-do-incremental-backup) - 1 comment - [Is Acronis cyber protect an antivirus?](https://www.g2.com/discussions/is-acronis-cyber-protect-an-antivirus) ### [VIPRE Endpoint Security Cloud](https://www.g2.com/products/vipre-endpoint-security-cloud/reviews) VIPRE Endpoint Security Cloud is a next-generation antivirus (NGAV) platform, a.k.a. Endpoint Protection Platform (EPP), that detects and blocks malicious activity on your Microsoft Windows and Apple MacOS desktops, laptops, and servers. Consistently ranked at the top of independent testing agencies' lists, VIPRE combines excellent detection with low false positives, minimal system impact, and an easy to use mobile-ready administrative console. Packed with other goodies such as integrated vulnerability and patch management, web access control, and DNS protection, VIPRE will keep you safe against even the most sophisticated threats. **Average Rating:** 4.3/5.0 **Total Reviews:** 56 #### How Do G2 Users Rate VIPRE Endpoint Security Cloud? - **Ease of Admin:** 8.5/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.0/10) - **Quality of Support:** 8.5/10 (Category avg: 8.7/10) - **Ease of Use:** 8.4/10 (Category avg: 8.7/10) #### Who Is the Company Behind VIPRE Endpoint Security Cloud? - **Seller:** [VIPRE Security](https://www.g2.com/sellers/vipre-security) - **Year Founded:** 1994 - **HQ Location:** Clearwater, FL - **Twitter:** @VIPRESecurity 8,293 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=53e2a68445313f9c2a4873b7be54a0c91ed9e1a6b4d9b42761561274f7e66251&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F11052300%2F&secure%5Burl_type%5D=linkedin_company_website) 233 employees on LinkedIn® #### Who Uses This Product? - **Top Industries:** Information Technology and Services - **Company Size:** 48% Small, 43% Medium #### What Do G2 Reviewers Say About VIPRE Endpoint Security Cloud? _AI-generated summary from verified user reviews_ ##### Pros - Users appreciate the **ease of use** of VIPRE Endpoint Security Cloud, finding its management console very efficient. - Users value the **alert notifications** from VIPRE Endpoint Security Cloud, enhancing their awareness and response to potential threats. - Users find Vipre Endpoint Security Cloud to be **easy to install** and efficient, providing reliable protection without hassle. - Users appreciate the **central management console** of VIPRE Endpoint Security Cloud, simplifying network management significantly. - Users value the **centralized management console** of VIPRE Endpoint Security Cloud for simplifying network management effectively. ##### Cons - Users note that **backup issues** persist, particularly regarding the restoration of removed email links. - Users note a **lack of important features** , particularly regarding link restoration in emails that need enhancements. - Users note that the **link restoration feature** in VIPRE Endpoint Security Cloud requires improvement for better usability. #### What Are Recent G2 Reviews of VIPRE Endpoint Security Cloud? **["Love the Ease of Use"](https://www.g2.com/survey_responses/vipre-endpoint-security-cloud-review-5257779)** **Rating:** 4.0/5.0 stars _— Verified User in Marketing and Advertising_ [Read full review](https://www.g2.com/survey_responses/vipre-endpoint-security-cloud-review-5257779) **["Great AV software for business environments"](https://www.g2.com/survey_responses/vipre-endpoint-security-cloud-review-9096169)** **Rating:** 4.0/5.0 stars _— Brian B._ [Read full review](https://www.g2.com/survey_responses/vipre-endpoint-security-cloud-review-9096169) #### What Are G2 Users Discussing About VIPRE Endpoint Security Cloud? - [How good is Vipre Antivirus?](https://www.g2.com/discussions/how-good-is-vipre-antivirus) - [What is endpoint security used for?](https://www.g2.com/discussions/what-is-endpoint-security-used-for) - [How do I upgrade Vipre endpoint security?](https://www.g2.com/discussions/how-do-i-upgrade-vipre-endpoint-security) - [What is Vipre endpoint security?](https://www.g2.com/discussions/what-is-vipre-endpoint-security) ### [IBM QRadar EDR](https://www.g2.com/products/ibm-qradar-edr/reviews) IBM Security QRadar EDR (formerly ReaQta) combines automation and dashboards to minimize analyst workloads, detect anomalous endpoint behavior and remediate threats in near real time. IBM Security QRadar EDR is available on AWS Marketplace. With visibility across endpoints, it combines expected features, like MITRE ATT&CK mapping and attack visualizations, with dual-engine AI and automation. For teams that need extended support, managed detection and response (MDR) services offers 24/7 monitoring and response to help keep users protected. IBM Security QRadar EDR (formerly ReaQta) can be deployed as SaaS, on-premises and in air-gapped environments. For more information, visit https://www.ibm.com/products/qradar-edr **Average Rating:** 4.2/5.0 **Total Reviews:** 45 #### How Do G2 Users Rate IBM QRadar EDR? - **Ease of Admin:** 8.3/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.0/10) - **Quality of Support:** 8.2/10 (Category avg: 8.7/10) - **Ease of Use:** 8.5/10 (Category avg: 8.7/10) #### Who Is the Company Behind IBM QRadar EDR? - **Seller:** [IBM](https://www.g2.com/sellers/ibm) - **Year Founded:** 1911 - **HQ Location:** Armonk, New York, United States - **Twitter:** @IBMSecurity 74,660 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=14b544adaece4fdbc987f1d7f7028048c22259946811200cc751263825586af9&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F1009%2F&secure%5Burl_type%5D=linkedin_company_website) 328,202 employees on LinkedIn® - **Ownership:** SWX:IBM #### Who Uses This Product? - **Top Industries:** Computer & Network Security - **Company Size:** 45% Small, 40% Medium #### What Do G2 Reviewers Say About IBM QRadar EDR? _AI-generated summary from verified user reviews_ ##### Pros - Users commend the **advanced threat detection** capabilities of IBM QRadar EDR for ensuring robust security against various threats. - Users appreciate the **ease of use** of IBM QRadar EDR, noting its simple installation and intuitive interface. - Users value the **advanced threat detection and endpoint protection** provided by IBM QRadar EDR, enhancing overall security. - Users praise IBM QRadar EDR for its **excellent detection efficiency** , effectively identifying and responding to advanced threats. - Users appreciate the **robust threat protection** of IBM QRadar EDR, enhanced by continuous updates and AI efficiency. ##### Cons - Users find IBM QRadar EDR to be **expensive** , which can be a barrier for mid-range and small businesses. - Users find the **difficult learning curve** for IBM QRadar EDR hampers effective usage and adds to overall complexity. - Users highlight the **resource-intensive nature** of IBM QRadar EDR, impacting costs and workflow during implementation. - Users report **many false positives** in IBM QRadar EDR, complicating the investigation process and affecting efficiency. - Users note a **high resource usage** in IBM QRadar EDR, making it challenging without sufficient hardware specifications. #### What Are Recent G2 Reviews of IBM QRadar EDR? **["One of the best Security tool for Blue team with a capability of intercepting the bad guys."](https://www.g2.com/survey_responses/ibm-qradar-edr-review-8011831)** **Rating:** 5.0/5.0 stars _— Mark Julius M._ [Read full review](https://www.g2.com/survey_responses/ibm-qradar-edr-review-8011831) **["One of the best EDR"](https://www.g2.com/survey_responses/ibm-qradar-edr-review-9506318)** **Rating:** 4.5/5.0 stars _— sibil b._ [Read full review](https://www.g2.com/survey_responses/ibm-qradar-edr-review-9506318) ### [Intezer](https://www.g2.com/products/intezer-intezer/reviews) Intezer automates the entire alert triage process, like an extension of your team handling Tier 1 SOC tasks for every alert at machine-speed. Intezer monitors incoming incidents from endpoint, reported phishing pipelines, or SIEM tools, then autonomously collects evidence, investigates, makes triage decisions, and escalates only the serious threats to your team for human intervention. Power your SOC with artificial intelligence that makes sure every alert is deeply analyzed (including every single artifact like files, URLs, endpoint memory, etc.), detecting malicious code in memory and other evasive threats. Fast set up and integrations with your SOC team's workflows (EDR, SOAR, SIEM, etc.) means Intezer's AI can immediately start filtering out false positives, giving you detailed analysis about every threat, and speeding up your incident response time. With Intezer: • Reduce Tier 1 escalation, sending only 4% of alerts on average to your team for immediate action. • Identify up to 97% of false positive alerts without taking any time from your analysts. • Reduce average triage time to 5 minutes or less, while giving your analysts deep context about every alert to prioritize critical treats and respond faster. **Average Rating:** 4.5/5.0 **Total Reviews:** 187 #### How Do G2 Users Rate Intezer? - **Ease of Admin:** 8.8/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 9.0/10) - **Quality of Support:** 8.6/10 (Category avg: 8.7/10) - **Ease of Use:** 9.1/10 (Category avg: 8.7/10) #### Who Is the Company Behind Intezer? - **Seller:** [Intezer](https://www.g2.com/sellers/intezer) - **Year Founded:** 2015 - **HQ Location:** New York - **Twitter:** @IntezerLabs 10,170 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=2bb3f434ddd03b2eadc1dca940a470eceb4074073fc162fe6fda3c58b709625e&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10656303%2F&secure%5Burl_type%5D=linkedin_company_website) 88 employees on LinkedIn® #### Who Uses This Product? - **Who Uses This:** Software Engineer, Student - **Top Industries:** Computer & Network Security, Information Technology and Services - **Company Size:** 54% Small, 23% Medium #### What Do G2 Reviewers Say About Intezer? _AI-generated summary from verified user reviews_ ##### Pros - Users appreciate the **strong security features** of Intezer, ensuring timely detection and blocking of malware. - Users value Intezer for its **effective malware detection and security features** that enhance overall system protection. - Users value the **ease of malware detection and blocking** with Intezer, enhancing overall cybersecurity effectiveness. - Users value the **high detection accuracy** of Intezer, ensuring timely malware detection and enhanced system security. - Users appreciate the **ease of use** of Intezer, making malware detection and security integration straightforward and efficient. ##### Cons - Users find the **lack of access control** to file visibility a downside, though it facilitates peer review benefits. - Users express frustration with the **complex interface** of Intezer, finding it difficult to navigate and use effectively. - Users find the **lack of control over file visibility** a downside, despite potential benefits for peer review. - Users find the **difficult navigation** in Intezer frustrating due to a poorly designed UI and small text size. - Users find the **expensive pricing** of Intezer limiting, particularly due to the capping of the free tier. #### What Are Recent G2 Reviews of Intezer? **["CTI coordinator"](https://www.g2.com/survey_responses/intezer-review-5353729)** **Rating:** 4.0/5.0 stars _— Verified User in Banking_ [Read full review](https://www.g2.com/survey_responses/intezer-review-5353729) **["Effortless Malware Detection and Robust Endpoint Security With Intezer"](https://www.g2.com/survey_responses/intezer-review-12060113)** **Rating:** 4.5/5.0 stars _— Franck P._ [Read full review](https://www.g2.com/survey_responses/intezer-review-12060113) #### What Are G2 Users Discussing About Intezer? - [What is genetic malware analysis?](https://www.g2.com/discussions/what-is-genetic-malware-analysis) - 1 comment - [Is Intezer good?](https://www.g2.com/discussions/is-intezer-good) - 1 comment - [What does Intezer do?](https://www.g2.com/discussions/what-does-intezer-do) - 1 comment - [What is Intezer analyze?](https://www.g2.com/discussions/what-is-intezer-analyze) - 2 comments - [‹ Prev‹ Prev](/categories/endpoint-detection-response-edr/small-business?order=g2_score&page=2#product-list) - [1](/categories/endpoint-detection-response-edr/small-business?order=g2_score#product-list) - [2](/categories/endpoint-detection-response-edr/small-business?order=g2_score&page=2#product-list) - 3 - Next ›Next › Spotlight Categories [Marketing Analytics Tools](https://www.g2.com/categories/marketing-analytics) [Contact Center Workforce Software](https://www.g2.com/categories/contact-center-workforce) [Operational Risk Management Software](https://www.g2.com/categories/operational-risk-management) [Social Media Listening Tools](https://www.g2.com/categories/social-media-listening-tools) [Application Performance Monitoring (APM) Tools](https://www.g2.com/categories/application-performance-monitoring-apm) Similar Categories - [Antivirus](/categories/antivirus) - [Autonomous Endpoint Management (AEM)](/categories/autonomous-endpoint-management-aem) - [Endpoint Management](/categories/endpoint-management) - [Endpoint Protection Platforms](/categories/endpoint-protection-platforms) [Browse Endpoint Detection & Response (EDR) Themes](/categories/endpoint-detection-response-edr/themes) ![Brandon Summers-Miller](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Brandon Summers-Miller") BS Researched and written by [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller) Updated Products classified in the overall Endpoint Detection & Response (EDR) category are similar in many regards and help companies of all sizes solve their business problems. However, small business features, pricing, setup, and installation differ from businesses of other sizes, which is why we match buyers to the right Small Business Endpoint Detection & Response (EDR) to fit their needs. Compare product ratings based on reviews from enterprise users or connect with one of G2's buying advisors to find the right solutions within the Small Business Endpoint Detection & Response (EDR) category. In addition to qualifying for inclusion in the Endpoint Detection & Response (EDR) Software category, to qualify for inclusion in the Small Business Endpoint Detection & Response (EDR) Software category, a product must have at least 10 reviews left by a reviewer from a small business. Show More * * * ## How Do You Choose the Right Endpoint Detection & Response (EDR) Software? ### What You Should Know About Endpoint Detection & Response (EDR) Software ### What is endpoint detection and response (EDR) software? EDR software is used to help companies identify and remediate threats related to network-connected endpoints. EDR solutions inform security professionals of vulnerable or infected endpoints and guide them through the remediation process. After incidents have been resolved, EDR tools help teams investigate issues and the vulnerable components that allow an endpoint to become compromised. Continuous monitoring is one of the core capabilities of endpoint detection technologies. These monitoring features provide complete and continuous visibility across a company’s network-connected endpoints. Individuals can monitor behaviors, vulnerabilities, and activity for abnormalities. When abnormalities are identified, the detection portion of EDR technology transitions to the response portion. Endpoint response begins with alerting and containment. Security professionals are alerted of threats present to their systems and isolate potentially compromised endpoints from further network access; this helps prevent one infected endpoint from becoming hundreds. Once systems are properly organized to contain malware and threat actors, security teams can work to remove malware and prevent future access from actors to endpoint devices. EDR platforms store threat data related to security incidents, improving a team's ability to defend against threats in the future by helping them identify root causes and threat actors. Additionally, zero-day exploits may be identified, and other vulnerabilities may be remediated as a result. This will help prevent third-party privilege escalation, malware injection, and unapproved endpoint control from occurring in the future. Some EDR products provide machine learning capabilities to analyze events, improve threat hunting, and reduce false positives by automating protection and remediation processes. ### Key benefits of EDR software - Monitor endpoints and detect issues or security incidents - Remediate present threats to endpoints - Investigate incidents to identify causes - Contain threats and restrict access to other endpoints or networks ### Why use endpoint detection and response solutions? Endpoints are some of the most vulnerable components of a business' network structure. One vulnerable endpoint could cause a company’s entire network, databases, and sensitive information to become exposed or stolen. EDR systems will help secure individual endpoints, detect issues as they arise, and contain threats that make their way beyond traditional security structures. Endpoint protection is even more relevant considering the growing popularity of bring-your-own-device (BYOD) policies. When employees are in complete control over downloads, applications, and updates, security must be a priority. Every day professionals are not the most security-savvy individuals and may unintentionally compromise their devices or put business information at risk. **Zero-day threats—** While traditional prevention tools such as antivirus software or firewall technology are helpful as the first line of defense, zero-day threats are bound to occur. The nature of these threats means they have yet to be discovered and, therefore, cannot be defended against. EDR solutions will help identify new threats as they arise and remediate them before damage occurs. **Visibility and control—** Continuous monitoring and endpoint visibility help defend against traditional malware and sophisticated threats. Monitoring can help identify known threats as they arise and detect minute details that indicate the presence of advanced threats. Hackers are always developing new ways to enter networks undetected through fileless malware or malicious code injection. Monitoring capabilities will improve a team’s ability to detect anomalies caused by outside actors and threats. **Analysis and deterrence —** EDR software improves a security organization’s ability to review the data associated with security events, data breaches, and network attacks. The data collected from these events can be reviewed back to the initial onset and used to identify the vulnerability or exploit used. Once identified, security teams and software developers can work collectively to resolve flaws and prevent similar attacks from occurring in the future. ### What are the common features of EDR products? **Detection—** Detection capabilities result from monitoring practices. Monitoring collects information about properly functioning systems and can be applied to identify abnormal behavior or functionality. Once identified, IT and security professionals are alerted and directed through the review and resolution processes. **Containment —** Once threats are present within an endpoint device, access must be restricted from the greater network and additional endpoints. Often referred to as quarantine features, these capabilities can help protect a network when a threat is detected. **Remediation—** As threats are discovered, they must be dealt with. EDR software allows individuals and security teams to track incidents back to their onset and identify suspicious actors or malware. **Investigation—** After incidents occur, EDR tools collect large amounts of data associated with the endpoint device and provide a historical record of activities. This information can be used to quickly identify the cause of an incident and prevent its reoccurrence in the future. #### Additional EDR features **Behavioral analysis—** Behavior analysis capabilities allow administrators to gain valuable insights into end-user behavior. This data can be used as a reference for monitoring features to compare against and detect anomalies. **Real-time monitoring —** Real-time and continuous monitoring capabilities allow security professionals to constantly monitor systems and detect anomalies in real time. **Threat data documentation—** Event data recording capabilities automate the collection and curation of incident data. This information can alert security teams of the performance and health of a company's endpoint-enabled devices. **Data exploration —** Data exploration features allow security teams to review data associated with security incidents. These data points can be cross-referenced and analyzed to provide insights on better protecting endpoints in the future. ### Potential issues with EDR solutions **Endpoint variety—** Endpoints come in many shapes and sizes, from laptops and servers to tablets and smartphones. A business should ensure that all types of endpoints connected to its network are compatible with a chosen EDR solution. This is especially important for businesses with a large number of BYOD devices that run different operating systems and applications. **Scalability —** Scale refers to the size and scope of your network of connected endpoints. It’s a major consideration because some EDR tools may only facilitate monitoring on a specific number of devices or limit the number of concurrent investigations or remediations. Companies with large pools of endpoints should be sure the solutions they consider can handle the number of endpoints and provide adequate monitoring for the scale of their business and projected growth. **Efficacy —** Efficacy refers to the actual functional benefit of using a software solution. Companies may be wasting their time if security teams are inundated with false positives or conflicting results. This is a key identifier in user reviews and third-party evaluations that buyers should consider when evaluating a product. **Administration and Management —** Companies adopting EDR for the first time should be sure they have sufficient staff equipped with skills relevant to using EDR software. Smaller, growing businesses may not be best suited for adopting complex security systems and may be better served using managed services until the need for security matches their ability to deliver. ### Software and services related to EDR software EDR software is one member of the endpoint protection and security family. These tools provide the remediation component of the endpoint protection process but not all of the prevention and management components in other endpoint security software. [**Endpoint protection suites**](https://www.g2crowd.com/categories/endpoint-protection-suites? __hstc=171774463.81494f0ac47c15794fea57ed705405f2.1607315526284.1610948873867.1611035647295.58&__ hssc=171774463.13.1611035647295&__hsfp=669407890) **—** Endpoint protection suites are sophisticated platforms containing capabilities across all segments of the endpoint security technology world. They include virus and malware protection as well as the administration and management of endpoint devices. [**Endpoint antivirus software**](https://www.g2.com/categories/antivirus) **—** Antivirus technologies are some of the oldest solutions for endpoint security. These tools help prevent malware, computer viruses, and other threats from compromising an endpoint device. These capabilities are present in many security technologies, but antivirus software is specifically dedicated to this kind of protection. [**Endpoint management software**](https://www.g2.com/categories/endpoint-management) **—** Endpoint management software documents, monitors, and manages endpoints connected to a network. These tools ensure that only approved devices access a company’s network and require connected devices to pass specific security requirements before gaining access. This may mean implementing software updates, security scans, or user authentication processes. [**Endpoint security services**](https://www.g2.com/categories/endpoint-security-services) **—** Endpoint security services are a form of managed security services that are often the go-to for organizations without dedicated security staff. These solution providers deliver services surrounding the entire endpoint security stack to reduce a business’s need to manage day-to-day tasks and resolve issues directly. These services will not provide the same level of customization or control but will provide a business with peace of mind until they are capable of handling security issues in-house. **Incident response software—** Incident response software is a term for general security incident management and threat remediation tools. These products are designed to facilitate incident investigation and solve them at the point of attack. These tools may provide some similar forensic analysis capabilities but often do not provide the same endpoint monitoring and control functionality.