# Best Endpoint Detection & Response (EDR) Software Solutions - Page 2 *By [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)* Endpoint detection and response (EDR) software is the newest member of the endpoint security family. EDR tools combine elements of both [endpoint antivirus](https://www.g2.com/categories/endpoint-antivirus) and [endpoint management](https://www.g2.com/categories/endpoint-management) solutions to detect, investigate, and remove any malicious software that penetrates a network’s devices. EDR solutions give greater visibility of a system’s overall health including each specific device’s state. Companies use these tools to mitigate endpoint penetrations quickly and prevent data loss, theft, or system failures. They are typically used as a complement to larger security systems such as [security information and event management (SIEM)](https://www.g2.com/categories/security-information-and-event-management-siem), [vulnerability management](https://www.g2.com/categories/vulnerability-management), and [incident response](https://www.g2.com/categories/incident-response) tools. The [best EDR software solutions](https://learn.g2.com/best-edr-software) record and store system behaviors, employing various data analytics techniques to identify suspicious activities. They also provide contextual information, block malicious actions, and offer remediation suggestions to restore affected systems. To qualify for inclusion in the Endpoint Detection and Response (EDR) category, a product must: - Alert administrators when devices have been compromised - Search data and systems for the presence of malware - Possess analytics and anomaly detection features - Possess malware removal features ## Top Endpoint Detection & Response (EDR) Software at a Glance | # | Product | Rating | Best For | What Users Say | |---|---------|--------|----------|----------------| | 1 | [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) | 4.6/5.0 (412 reviews) | AI-driven endpoint threat detection and real-time response | "[Lightweight Deployment, Powerful Incident Response Visibility](https://www.g2.com/survey_responses/crowdstrike-falcon-endpoint-protection-platform-review-12952621)" | | 2 | [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) | 4.7/5.0 (791 reviews) | Ransomware rollback with synchronized endpoint-firewall detection | "[Excellent fleet visibility through Sophos Central, but watch the initial policy exceptions"](https://www.g2.com/survey_responses/sophos-endpoint-review-12955748)" | | 3 | [Acronis Cyber Protect Cloud](https://www.g2.com/products/acronis-cyber-protect-cloud/reviews) | 4.7/5.0 (1,358 reviews) | EDR with integrated ransomware rollback and backup | "[All-in-One Protection and Backup with Fast Recovery](https://www.g2.com/survey_responses/acronis-cyber-protect-cloud-review-13042962)" | | 4 | [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) | 4.8/5.0 (885 reviews) | Human-led threat hunting with 24/7 SOC remediation | "[A quality EDR that removes our stress](https://www.g2.com/survey_responses/huntress-managed-edr-review-10820504)" | | 5 | [ThreatDown](https://www.g2.com/products/threatdown/reviews) | 4.6/5.0 (1,044 reviews) | Lightweight EDR with centralized multi-endpoint remediation | "[Excellent tool for End point defence as part of our Cyber Defence](https://www.g2.com/survey_responses/threatdown-review-9947439)" | | 6 | [ESET PROTECT](https://www.g2.com/products/eset-protect/reviews) | 4.6/5.0 (930 reviews) | Centralized behavioral threat detection across distributed endpoints | "[Clear, Centralized Console for Managing All Endpoints](https://www.g2.com/survey_responses/eset-protect-review-12826797)" | | 7 | [Check Point Endpoint Security](https://www.g2.com/products/check-point-endpoint-security/reviews) | 4.5/5.0 (254 reviews) | Behavioral threat prevention with automated ransomware rollback | "[efficient, safe and friendly](https://www.g2.com/survey_responses/check-point-endpoint-security-review-7171717)" | | 8 | [Arctic Wolf](https://www.g2.com/products/arctic-wolf/reviews) | 4.7/5.0 (276 reviews) | Concierge-delivered SOC with 24/7 endpoint threat triage | "[Effortless Log Management and Monitoring with Built-In Parsers](https://www.g2.com/survey_responses/arctic-wolf-review-12190051)" | | 9 | [TrendAI Vision One](https://www.g2.com/products/trendai-vision-one/reviews) | 4.7/5.0 (246 reviews) | Cross-layer XDR threat correlation with unified console | "[Scalable Security with Easy Setup, Needs Better Training Support](https://www.g2.com/survey_responses/trendai-vision-one-review-12800247)" | | 10 | [Iru](https://www.g2.com/products/iru/reviews) | 4.7/5.0 (813 reviews) | Apple-native EDR with unified compliance enforcement | "[Mac management without the Jamf effort](https://www.g2.com/survey_responses/iru-review-12969987)" | --- ## What Are the Most Common Questions About Endpoint Detection & Response (EDR) Software? *AI-generated · Last updated: May 26, 2026* ### Which EDR platform integrates with SIEM tools? Based on G2 reviews, several Endpoint Detection & Response (EDR) software products are mentioned as fitting SIEM-related workflows, but CrowdStrike Falcon Endpoint Protection Platform appears most often in recent reviews for this use case. According to verified users, it helps centralize telemetry, supports faster investigations, and is used to correlate endpoint events with broader security operations. G2 reviewers also mention Elastic Security and Sophos Endpoint in SIEM-oriented environments, though comments there are more limited or note some logging gaps. For buyers evaluating Endpoint Detection & Response (EDR) software, recent G2 feedback points to demand for centralized visibility, faster triage, and easier incident analysis when integrating endpoint data into wider monitoring processes. CrowdStrike Falcon Endpoint Protection Platform is the most frequently referenced option in the recent review set for this use case. ### Which is the best EDR platform for threat detection? Based on G2 reviews, CrowdStrike Falcon Endpoint Protection Platform is the most frequently reviewed product in the recent data for threat detection use cases. According to verified users, it is often praised for behavior-based detection, strong visibility across endpoints, and fast identification of malware, ransomware, fileless attacks, and suspicious activity. G2 reviewers mention that it helps reduce blind spots, improves investigation speed, and supports organized response workflows. Buyers comparing Endpoint Detection & Response (EDR) software should note that reviewers also mention alert noise, pricing concerns, and a learning curve, but the strongest recurring theme is confidence in detection depth and real-time visibility. Within this review set, CrowdStrike Falcon Endpoint Protection Platform stands out as the most supported answer. ### Which EDR platform offers AI-powered threat hunting? Based on G2 reviews, AI-assisted investigation and threat hunting come up most clearly for CrowdStrike Falcon Endpoint Protection Platform, Sophos Endpoint, and TrendAI Vision One. According to verified users, CrowdStrike Falcon Endpoint Protection Platform is frequently associated with AI-driven detection, Charlotte AI support, and rapid investigation workflows. G2 reviewers mention Sophos Endpoint for AI scan, visibility, and earlier threat detection, while TrendAI Vision One is noted for AI-assisted reviews, correlation, and broader XDR-style visibility. Across the recent review set, buyers looking for Endpoint Detection & Response (EDR) software with AI-oriented threat hunting should focus on products where users specifically describe faster triage, clearer context, and reduced manual investigation effort rather than generic AI claims alone. ### What top EDR tools for protecting enterprise endpoints? Based on G2 reviews, enterprise buyers evaluating Endpoint Detection & Response (EDR) software consistently mention centralized visibility, lightweight agents, scalable deployment, and strong response workflows. According to verified users, CrowdStrike Falcon Endpoint Protection Platform is used for broad enterprise visibility and protecting large environments with cloud-based management. G2 reviewers mention Sophos Endpoint for centralized policies, ransomware protection, and support for large device estates. They also reference Huntress Managed EDR for managed monitoring and analyst support, especially where teams want enterprise-style coverage without building a large in-house operation. The common thread across recent reviews is the need to protect many endpoints while keeping investigations, containment, and administration practical for security teams. **Here are some of the top-rated products on G2:** - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) – used for large environments needing centralized visibility, lightweight protection, and faster threat response - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) – chosen for centralized policy management, ransomware defense, and broad endpoint coverage - [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) – favored for managed monitoring, human-led investigations, and support for lean internal teams ### Which EDR solution offers the best incident forensics? Based on G2 reviews, incident forensics is most strongly associated with products that provide clear attack timelines, endpoint visibility, and investigation context. According to verified users, SentinelOne Singularity Endpoint is frequently praised for its Storyline feature, which helps show how events unfolded on an endpoint and simplifies investigation steps. G2 reviewers also mention CrowdStrike Falcon Endpoint Protection Platform for detailed telemetry, process visibility, and threat hunting support, while Sophos Endpoint is recognized for visibility and structured threat cases. For buyers researching Endpoint Detection & Response (EDR) software, the strongest signals in recent reviews point to tools that reduce manual reconstruction effort and give analysts enough context to understand impact, trace attack paths, and respond quickly. ### What best software for detecting fileless malware attacks? Based on G2 reviews, buyers asking about Endpoint Detection & Response (EDR) software for fileless attacks should look for repeated mentions of behavior-based detection rather than signature-only protection. According to verified users, CrowdStrike Falcon Endpoint Protection Platform is repeatedly described as effective against fileless threats, malware-free attacks, and suspicious behavior that traditional antivirus can miss. G2 reviewers also mention Sophos Endpoint for exploit prevention and ransomware blocking, and Check Point Harmony Endpoint for stopping sophisticated threats through layered prevention. Across the recent review set, the clearest pattern is that users value products that monitor behavior in real time, provide endpoint visibility, and support quicker investigation when suspicious activity does not rely on known malicious files. **Here are some of the top-rated products on G2:** - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) – highlighted for behavior-based detection of fileless and malware-free attacks - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) – used for exploit prevention, ransomware blocking, and endpoint investigation workflows - [Check Point Harmony Endpoint](https://www.g2.com/products/check-point-harmony-endpoint/reviews) – noted for layered prevention against ransomware, phishing, and advanced threats ### What best tools for cloud-based endpoint security? Based on G2 reviews, cloud-based management is a recurring priority for teams choosing Endpoint Detection & Response (EDR) software. According to verified users, Sophos Endpoint is often praised for web-based management, a cloud console, straightforward deployment, and centralized policies. G2 reviewers also mention CrowdStrike Falcon Endpoint Protection Platform for its cloud-native approach, lightweight agent, and rapid updates without heavy local infrastructure. Microsoft Defender for Endpoint appears in the recent reviews as another option for organizations already operating in the broader Microsoft environment. Across the category, reviewers consistently highlight the value of centralized cloud consoles, easier remote administration, and improved visibility across distributed devices when evaluating cloud-based endpoint security tools. **Here are some of the top-rated products on G2:** - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) – favored for web-based management, cloud deployment, and centralized endpoint policy control - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) – selected for cloud-native management, lightweight operation, and strong real-time visibility - [Microsoft Defender for Endpoint](https://www.g2.com/products/microsoft-defender-for-endpoint/reviews) – used for integrated cloud-managed endpoint security within Microsoft-centric environments ### What top-rated EDR solutions for regulated industries? Based on G2 reviews, regulated-industry buyers consistently focus on compliance support, centralized control, and clear reporting when evaluating Endpoint Detection & Response (EDR) software. According to verified users, Huntress Managed EDR is valued where teams need documented investigations and audit-friendly response support. G2 reviewers mention CrowdStrike Falcon Endpoint Protection Platform for helping with compliance requirements, visibility, and enterprise-grade endpoint coverage. They also mention Sophos Endpoint for compliance-related protection, centralized management, and policy enforcement. In the recent reviews, the most relevant pattern for regulated industries is not a single sector-specific feature but a combination of continuous monitoring, strong visibility, manageable reporting, and confidence that endpoint events can be investigated and acted on quickly. **Here are some of the top-rated products on G2:** - [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) – useful for documented investigations, managed response, and audit-oriented security workflows - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) – used for compliance-focused endpoint visibility and enterprise-grade protection - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) – chosen for centralized controls, endpoint protection, and support for compliance-driven environments ### What best EDR software for real-time incident response? Based on G2 reviews, real-time incident response is a major buying theme across Endpoint Detection & Response (EDR) software. According to verified users, Sophos Endpoint is frequently mentioned for automated remediation, device isolation, and centralized response from a cloud console. G2 reviewers also highlight Huntress Managed EDR for fast human-led investigation and automated remediations, especially when teams need round-the-clock support. CrowdStrike Falcon Endpoint Protection Platform is another recurring option for fast detection and organized response workflows. Recent feedback shows that buyers value products that combine timely alerts, clear investigation paths, and immediate containment actions, because those capabilities help reduce manual effort and keep incidents from spreading across the environment. **Here are some of the top-rated products on G2:** - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) – recognized for automated remediation, isolation, and centralized response actions - [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) – valued for rapid managed investigations and automated remediation support - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) – noted for fast threat detection and streamlined response workflows ### What top EDR tools for remote work environments? Based on G2 reviews, remote and hybrid work protection is a frequent theme in Endpoint Detection & Response (EDR) software feedback. According to verified users, Sophos Endpoint is appreciated for cloud-based updates, centralized management, and support for protecting distributed devices. G2 reviewers mention CrowdStrike Falcon Endpoint Protection Platform for visibility across remote machines and lighter endpoint impact, while ESET PROTECT is recognized for managing remote endpoints from one dashboard and securing home-connected devices. Recent reviews suggest buyers should prioritize tools that make policy management, visibility, and threat response practical even when devices are outside the corporate network. The strongest signals center on centralized consoles, consistent protection for off-site users, and less dependency on manual intervention. **Here are some of the top-rated products on G2:** - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) – supports centralized cloud management and protection for distributed remote devices - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) – helps secure remote machines with lightweight monitoring and fast detection - [ESET PROTECT](https://www.g2.com/products/eset-protect/reviews) – useful for remote endpoint oversight, centralized monitoring, and protection across mixed locations ## How Many Endpoint Detection & Response (EDR) Software Products Does G2 Track? **Total Products under this Category:** 124 ### Category Stats (Jul 2026) - **Average Rating**: 4.43/5 The average rating of products in this category, based on all submitted ratings - **Top Trending Product**: Bitdefender GravityZone XDR (+1.8%) - Among all products in this category, Bitdefender GravityZone XDR recorded the largest rating increase compared to last month *Last updated: July 05, 2026* ## How Does G2 Rank Endpoint Detection & Response (EDR) Software Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 12,500+ Authentic Reviews - 124+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. ## Which Endpoint Detection & Response (EDR) Software Is Best for Your Use Case? - **Leader:** [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - **Highest Performer:** [Guardz](https://www.g2.com/products/guardz/reviews) - **Easiest to Use:** [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) - **Top Trending:** [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - **Best Free Software:** [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) --- **Sponsored** ### NetWatch OPS Netwatch OPS, Secure OPS, and AI Ops are three flagship products from netwatch.ai, designed to provide a unified and intelligent platform for managing and securing your entire IT environment. Each product serves a specific purpose, collectively enhancing the efficiency and security of IT operations. Netwatch OPS is a comprehensive monitoring solution that focuses on server, network, and application performance. It delivers real-time insights into hardware performance, network traffic, and application load, consolidating data across your infrastructure. This level of visibility ensures that systems operate at peak efficiency, allowing IT teams to identify and address issues before they escalate into significant problems. The tool is particularly beneficial for organizations that rely on complex IT infrastructures, enabling them to maintain optimal performance and minimize downtime. Secure OPS builds upon the foundational monitoring capabilities of Netwatch OPS by integrating advanced security features. This product continuously analyzes the IT environment for vulnerabilities, threats, and anomalies, providing proactive security insights. By identifying potential breaches before they occur, Secure OPS helps organizations safeguard their sensitive data and maintain compliance with industry regulations. This is especially crucial for businesses operating in sectors where data security is paramount, such as finance and healthcare. AI Ops leverages artificial intelligence and machine learning to automate the detection, analysis, and response to complex cybersecurity incidents. By synthesizing data from multiple sources, AI Ops prioritizes alerts based on severity and predicts potential issues, enabling rapid and effective responses. This automation not only reduces the burden on IT teams but also enhances the overall security posture of the organization. AI Ops is particularly useful for organizations facing a high volume of alerts, as it helps streamline incident management and ensures that critical threats are addressed promptly. The platform also features multi-channel alerting, delivering notifications via email, SMS, or integrations with collaboration tools like Slack and Microsoft Teams. Alerts are categorized by severity—Critical, Warning, or Information—allowing teams to prioritize their responses effectively. Additionally, incident escalation policies are embedded within the system, automating escalation procedures to ensure that critical issues receive prompt attention from the appropriate stakeholders. Together, Netwatch OPS, Secure OPS, and AI Ops form a comprehensive ecosystem that not only monitors and manages IT systems but also enhances security through intelligent automation and real-time analytics. This integrated approach positions netwatch.ai as a leader in innovative cybersecurity and IT operations management, providing organizations with the tools they need to navigate the complexities of modern IT environments. [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=1159&secure%5Bchosen_at%5D=2026-07-05T16%3A02%3A09Z&secure%5Bdisplayable_resource_id%5D=1159&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=1159&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=1424823&secure%5Bresource_id%5D=1159&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fendpoint-detection-response-edr%3Fpage%3D2&secure%5Btoken%5D=8650527ac7cb4c09291e282bb20c6a12b2a55736a138330a30ff5e348c47de32&secure%5Burl%5D=https%3A%2F%2Fnetwatch.ai%2Fcontact&secure%5Burl_type%5D=book_demo) --- ## What Are the Top-Rated Endpoint Detection & Response (EDR) Software Products in 2026? ### 1. [Trellix Endpoint Security](https://www.g2.com/products/trellix-endpoint-security/reviews) The Trellix Endpoint Security Suite is a comprehensive and unified set of solutions that protects devices and endpoints across your hybrid network, empowering your organization to address complex, distributed security issues thoroughly, efficiently, and quickly. It uses analytics and machine learning to achieve industry-leading threat protection, all while offering the flexibility to connect to products from other vendors. The solution helps you unify your data and threat defenses from device to cloud, for integrated security. **Average Rating:** 4.3/5.0 **Total Reviews:** 320 **How Do G2 Users Rate Trellix Endpoint Security?** - **Ease of Admin:** 8.2/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.1/10 (Category avg: 9.0/10) - **Quality of Support:** 8.5/10 (Category avg: 8.7/10) - **Ease of Use:** 8.6/10 (Category avg: 8.7/10) **Who Is the Company Behind Trellix Endpoint Security?** - **Seller:** [Skyhigh Security](https://www.g2.com/sellers/skyhigh-security-2026-07-02) - **Year Founded:** 2004 - **HQ Location:** Plano, TX - **Twitter:** @Trellix (241,168 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/skyhighsecurity/posts/?feedView=all (751 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Senior Software Engineer, Software Developer - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 42% Mid-Market, 41% Enterprise #### What Are Trellix Endpoint Security's Pros and Cons? **Pros:** - Ease of Use (6 reviews) - Features (4 reviews) - Threat Detection (4 reviews) - Customer Support (3 reviews) - Protection (3 reviews) **Cons:** - Difficult Configuration (2 reviews) - Expensive (2 reviews) - Agent Issues (1 reviews) - Complex Installation (1 reviews) - Complex Interface (1 reviews) ### What Do G2 Reviewers Say About Trellix Endpoint Security? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **user-friendly interface** of Trellix Endpoint Security, making threat detection simple and efficient. - Users appreciate the **robust multi-layered protection** of Trellix Endpoint Security against various sophisticated threats and attacks. - Users value the **advanced threat detection** of Trellix Endpoint Security, effectively catching sophisticated attacks before damage occurs. - Users commend the **responsive customer support** of Trellix Endpoint Security, enhancing their overall experience and satisfaction. - Users commend the **robust, multi-layered protection** of Trellix Endpoint Security against various sophisticated cyber threats. **Cons:** - Users find the **difficult configuration** of Trellix Endpoint Security can be overwhelming, requiring significant expertise for setup. - Users find Trellix Endpoint Security **expensive** , noting other products provide more features at a lower cost. - Users frequently experience **agent issues** , reporting high CPU usage at startup that requires advanced configuration to manage effectively. - Users find the **complex installation** of Trellix Endpoint Security challenging, particularly for those unfamiliar with enterprise systems. - Users find the **interface complex** , making it challenging for newcomers and slowing down initial setup and navigation. #### What Are Recent G2 Reviews of Trellix Endpoint Security? **"[Seamless Orchestration and Robust Protection Across All Endpoints](https://www.g2.com/survey_responses/trellix-endpoint-security-review-11979182)"** **Rating:** 5.0/5.0 stars *— Jose M.* [Read full review](https://www.g2.com/survey_responses/trellix-endpoint-security-review-11979182) --- **"[Reliable Security with Easy Deployment](https://www.g2.com/survey_responses/trellix-endpoint-security-review-12706673)"** **Rating:** 4.0/5.0 stars *— Philip B.* [Read full review](https://www.g2.com/survey_responses/trellix-endpoint-security-review-12706673) --- #### What Are G2 Users Discussing About Trellix Endpoint Security? - [What is MVISION Endpoint Security Platform used for?](https://www.g2.com/discussions/what-is-mvision-endpoint-security-platform-used-for) - [What is MVISION Endpoint Security used for?](https://www.g2.com/discussions/what-is-mvision-endpoint-security-used-for) - 1 comment - [What is McAfee AntiVirus Plus used for?](https://www.g2.com/discussions/what-is-mcafee-antivirus-plus-used-for) - [What is FireEye Security Suite used for?](https://www.g2.com/discussions/what-is-fireeye-security-suite-used-for) - [What is McAfee Application Control used for?](https://www.g2.com/discussions/what-is-mcafee-application-control-used-for) ### 2. [WithSecure Elements Extended Detection and Response (XDR)](https://www.g2.com/products/withsecure-elements-extended-detection-and-response-xdr/reviews) WithSecure Elements Extended Detection and Response (XDR) is a unified solution, designed to protect modern IT estates. It minimizes the impact of attacks by using automated and advanced preventative controls that keep incident volumes and lower-level attacks at bay. AI-powered tooling enables fast detection, investigation, and response to threats. Luminen GenAI assistant is automatically included with Elements XDR, further empowering your analyst. Secure your digital environment: - Endpoints (laptops and workstations, mobiles, servers) - Digital identities and their user credentials (Microsoft Entra ID) - Cloud resources (Microsoft Azure) - Emails and cloud-based collaboration services (Microsoft 365 including Exchange, SharePoint sites, OneDrive, and Microsoft Teams) **Average Rating:** 4.4/5.0 **Total Reviews:** 117 **How Do G2 Users Rate WithSecure Elements Extended Detection and Response (XDR)?** - **Ease of Admin:** 8.5/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.0/10) - **Quality of Support:** 8.8/10 (Category avg: 8.7/10) - **Ease of Use:** 9.1/10 (Category avg: 8.7/10) **Who Is the Company Behind WithSecure Elements Extended Detection and Response (XDR)?** - **Seller:** [WithSecure](https://www.g2.com/sellers/withsecure) - **Year Founded:** 1988 - **HQ Location:** Helsinki, Finland - **Twitter:** @WithSecure (66,501 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/6219/ (1,783 employees on LinkedIn®) - **Ownership:** FSOYF **Who Uses This Product?** - **Company Size:** 45% Mid-Market, 40% Small-Business #### What Are WithSecure Elements Extended Detection and Response (XDR)'s Pros and Cons? **Pros:** - Ease of Use (2 reviews) - Efficiency (2 reviews) - Alerting (1 reviews) - Cloud Management (1 reviews) - Easy Management (1 reviews) **Cons:** - Not User-Friendly (2 reviews) - Alert Issues (1 reviews) - Console Issues (1 reviews) - Delay Issues (1 reviews) - False Positives (1 reviews) ### What Do G2 Reviewers Say About WithSecure Elements Extended Detection and Response (XDR)? *AI-generated summary from verified user reviews* **Pros:** - Users find WithSecure Elements XDR to be **intuitive and efficient** , greatly simplifying management and enhancing performance. - Users highlight the **efficient operation** of WithSecure Elements XDR, ensuring seamless performance without slowing down devices. - Users value the **effective alerting** of WithSecure XDR, enabling easy identification of network vulnerabilities and weaknesses. - Users value the **user-friendly cloud console** of WithSecure Elements XDR for easy management and efficient performance. - Users commend the **easy management** of WithSecure Elements XDR, facilitated by a user-friendly cloud console for monitoring. **Cons:** - Users experience **navigation confusion** and slow sync issues, making WithSecure Elements XDR less user-friendly overall. - Users experience **frequent and repetitive alerts** , which can be annoying and hinder the overall user experience. - Users experience **console issues** with slow updates and frequent alerts, along with a need for a modern interface. - Users often face **delay issues** with updates syncing, along with frequent, repetitive alerts that hinder productivity. - Users report that **false positives** remain a challenge, making it difficult for the system to learn appropriately. #### What Are Recent G2 Reviews of WithSecure Elements Extended Detection and Response (XDR)? **"[Extends protection to a next level](https://www.g2.com/survey_responses/withsecure-elements-extended-detection-and-response-xdr-review-10785922)"** **Rating:** 4.5/5.0 stars *— Verified User in Logistics and Supply Chain* [Read full review](https://www.g2.com/survey_responses/withsecure-elements-extended-detection-and-response-xdr-review-10785922) --- **"[WithSecure Elements Endpoint Protection: Security and Efficiency in Endpoint Protection](https://www.g2.com/survey_responses/withsecure-elements-extended-detection-and-response-xdr-review-11242743)"** **Rating:** 5.0/5.0 stars *— Claudio F.* [Read full review](https://www.g2.com/survey_responses/withsecure-elements-extended-detection-and-response-xdr-review-11242743) --- #### What Are G2 Users Discussing About WithSecure Elements Extended Detection and Response (XDR)? - [What are the benefits and drawbacks of using WithSecure Elements for endpoint protection?](https://www.g2.com/discussions/what-are-the-benefits-and-drawbacks-of-using-withsecure-elements-for-endpoint-protection) - [What is WithSecure Elements Endpoint Protection used for?](https://www.g2.com/discussions/what-is-withsecure-elements-endpoint-protection-used-for) - [What is WithSecure Elements for Microsoft 365 used for?](https://www.g2.com/discussions/what-is-withsecure-elements-for-microsoft-365-used-for) - [What is WithSecure Elements Endpoint Detection and Response used for?](https://www.g2.com/discussions/what-is-withsecure-elements-endpoint-detection-and-response-used-for) - [What does F Secure protect?](https://www.g2.com/discussions/what-does-f-secure-protect) - 1 comment ### 3. [FortiEDR](https://www.g2.com/products/fortiedr/reviews) FortiEDR identifies and stops breaches in real time automatically and efficiently with a lightweight agent. Part of the Fortinet Security Operations platform, it proactively shrinks the attack surface, prevents malware infection, detects and defuses potential threats immediately, and automates response and remediation procedures with customizable playbooks across legacy and current operating systems. **Average Rating:** 4.5/5.0 **Total Reviews:** 12 **How Do G2 Users Rate FortiEDR?** - **Ease of Admin:** 8.6/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.1/10 (Category avg: 9.0/10) - **Quality of Support:** 8.3/10 (Category avg: 8.7/10) - **Ease of Use:** 8.7/10 (Category avg: 8.7/10) **Who Is the Company Behind FortiEDR?** - **Seller:** [Fortinet](https://www.g2.com/sellers/fortinet) - **Year Founded:** 2000 - **HQ Location:** Sunnyvale, CA - **Twitter:** @Fortinet (151,422 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/6460/ (16,279 employees on LinkedIn®) - **Ownership:** NASDAQ: FTNT **Who Uses This Product?** - **Company Size:** 50% Mid-Market, 33% Enterprise #### What Are Recent G2 Reviews of FortiEDR? **"[The best defense against cyber attacks and threats](https://www.g2.com/survey_responses/fortiedr-review-8305682)"** **Rating:** 4.5/5.0 stars *— Marina B.* [Read full review](https://www.g2.com/survey_responses/fortiedr-review-8305682) --- **"[FortiEDR Another Great Endpoint Solution from Fortinet](https://www.g2.com/survey_responses/fortiedr-review-8405780)"** **Rating:** 4.5/5.0 stars *— Pravin I.* [Read full review](https://www.g2.com/survey_responses/fortiedr-review-8405780) --- #### What Are G2 Users Discussing About FortiEDR? - [What is FortiEDR collector service?](https://www.g2.com/discussions/fortiedr-what-is-fortiedr-collector-service) - [What is FortiEDR collector service?](https://www.g2.com/discussions/what-is-fortiedr-collector-service) - [How good is FortiEDR?](https://www.g2.com/discussions/fortiedr-how-good-is-fortiedr) - [How good is FortiEDR?](https://www.g2.com/discussions/how-good-is-fortiedr) - [What is FortiEDR?](https://www.g2.com/discussions/fortiedr-what-is-fortiedr) ### 4. [Bitdefender GravityZone XDR](https://www.g2.com/products/bitdefender-gravityzone-xdr/reviews) Bitdefender Business Solutions Group is the business cybersecurity division of Bitdefender, delivering GravityZone — a unified platform that consolidates endpoint protection (EPP), endpoint detection and response (EDR), extended detection and response (XDR), and managed detection and response (MDR) into a single agent and console. Bitdefender GravityZone serves mid-market organizations with lean IT and security teams, protecting endpoints, identities, email, network, and cloud workloads. Effortless Security. Unmatched Protection For more information, visit https://www.bitdefender.com/en-us/business/. **Average Rating:** 4.1/5.0 **Total Reviews:** 99 **How Do G2 Users Rate Bitdefender GravityZone XDR?** - **Ease of Admin:** 7.8/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.1/10 (Category avg: 9.0/10) - **Quality of Support:** 8.2/10 (Category avg: 8.7/10) - **Ease of Use:** 8.1/10 (Category avg: 8.7/10) **Who Is the Company Behind Bitdefender GravityZone XDR?** - **Seller:** [Bitdefender](https://www.g2.com/sellers/bitdefender) - **Company Website:** https://www.bitdefender.com/?cid=soc%7Cc%7clkdn%7CLkdnAbout - **Year Founded:** 2001 - **HQ Location:** Bucuresti, Romania - **Twitter:** @Bitdefender (114,121 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/6825/ (2,304 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 53% Small-Business, 37% Mid-Market #### What Are Bitdefender GravityZone XDR's Pros and Cons? **Pros:** - Features (11 reviews) - Ease of Use (10 reviews) - Customer Support (8 reviews) - Efficiency (8 reviews) - Security (8 reviews) **Cons:** - Not User-Friendly (5 reviews) - Complex Interface (4 reviews) - Complexity (4 reviews) - Configuration Issues (4 reviews) - Difficult Configuration (4 reviews) ### What Do G2 Reviewers Say About Bitdefender GravityZone XDR? *AI-generated summary from verified user reviews* **Pros:** - Users value the **strong protection and ease of management** offered by Bitdefender GravityZone, ideal for small teams. - Users appreciate the **ease of use** of Bitdefender GravityZone, noting simple setup and efficient deployment methods. - Users commend the **excellent customer support** of Bitdefender GravityZone XDR, enhancing their overall experience and satisfaction. - Users appreciate the **efficient installation and management** of Bitdefender GravityZone XDR, enjoying seamless protection without system slowdown. - Users commend the **robust security and reliable threat detection** of Bitdefender GravityZone XDR, ensuring comprehensive protection. **Cons:** - Users find Bitdefender GravityZone XDR to be **not user-friendly** , with confusing navigation and a complex setup process. - Users find the **complex interface** of Bitdefender GravityZone XDR frustrating, complicating navigation and accessibility of features. - Users find the **setup and configuration complex** , particularly challenging for non-technical users and disruptive during work. - Users experience **configuration issues** with Bitdefender GravityZone XDR, complicating management and support for business needs. - Users often face **difficult configuration** challenges, particularly during initial setup and policy adjustments for optimal performance. #### What Are Recent G2 Reviews of Bitdefender GravityZone XDR? **"[“Powerful XDR Solution with Strong Threat Detection and Centralized Visibility”](https://www.g2.com/survey_responses/bitdefender-gravityzone-xdr-review-12784993)"** **Rating:** 5.0/5.0 stars *— Naincy G.* [Read full review](https://www.g2.com/survey_responses/bitdefender-gravityzone-xdr-review-12784993) --- **"[Clear, Easy-to-Understand GUI with Flexible Rules and Fast MDR Response](https://www.g2.com/survey_responses/bitdefender-gravityzone-xdr-review-12672312)"** **Rating:** 5.0/5.0 stars *— Michael H.* [Read full review](https://www.g2.com/survey_responses/bitdefender-gravityzone-xdr-review-12672312) --- #### What Are G2 Users Discussing About Bitdefender GravityZone XDR? - [What is Bitdefender GravityZone used for?](https://www.g2.com/discussions/what-is-bitdefender-gravityzone-used-for) - 1 comment - [How good is Bitdefender?](https://www.g2.com/discussions/how-good-is-bitdefender) - 1 comment - [Can Bitdefender detect ransomware?](https://www.g2.com/discussions/can-bitdefender-detect-ransomware) - [What is Bitdefender endpoint security tools?](https://www.g2.com/discussions/what-is-bitdefender-endpoint-security-tools) - [What is Bitdefender GravityZone business security?](https://www.g2.com/discussions/what-is-bitdefender-gravityzone-business-security) ### 5. [Lookout](https://www.g2.com/products/lookout/reviews) Lookout is a mobile app that fights cybercriminals by predicting and stopping mobile attacks before they do harm. **Average Rating:** 4.3/5.0 **Total Reviews:** 67 **How Do G2 Users Rate Lookout?** - **Ease of Admin:** 9.7/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.0/10) - **Quality of Support:** 8.5/10 (Category avg: 8.7/10) - **Ease of Use:** 8.8/10 (Category avg: 8.7/10) **Who Is the Company Behind Lookout?** - **Seller:** [Lookout](https://www.g2.com/sellers/lookout) - **Year Founded:** 2007 - **HQ Location:** San Francisco, CA - **Twitter:** @Lookout (44,263 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/824768/ (516 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 43% Small-Business, 41% Enterprise #### What Are Lookout's Pros and Cons? **Pros:** - Ease of Use (5 reviews) - Security (4 reviews) - Features (3 reviews) - Protection (3 reviews) - Management Ease (2 reviews) **Cons:** - Limited Features (2 reviews) - Update Issues (2 reviews) - Alert Issues (1 reviews) - Complex Configuration (1 reviews) - Deployment Issues (1 reviews) ### What Do G2 Reviewers Say About Lookout? *AI-generated summary from verified user reviews* **Pros:** - Users find Lookout's **ease of use** invaluable, simplifying device monitoring and providing comprehensive protection effortlessly. - Users appreciate the **comprehensive security** provided by Lookout, ensuring their privacy and data safety across devices. - Users love the **safety features** of Lookout, appreciating its user-friendly app and comprehensive malware scanning. - Users love the **comprehensive protection** from Lookout, enjoying its user-friendly features for online security and privacy. - Users appreciate the **management ease** of Lookout, benefiting from a compact and useful mobile app for cybersecurity. **Cons:** - Users find the **limited features** of Lookout frustrating, necessitating additional apps for essential functions and updates. - Users face **update issues** with Lookout, finding frequent updates inconvenient and sometimes unwanted installations occurring. - Users experience **alert issues** due to insufficient reporting functions and lack of detailed site information. - Users find the **complex configuration** process time-consuming and face unwanted installation attempts on devices. - Users face **deployment issues** due to frequent updates, which can hinder the overall user experience and app design. #### What Are Recent G2 Reviews of Lookout? **"[Mobile app management](https://www.g2.com/survey_responses/lookout-review-8714984)"** **Rating:** 5.0/5.0 stars *— Chris H.* [Read full review](https://www.g2.com/survey_responses/lookout-review-8714984) --- **"[One and only best cloud platform for mobile security](https://www.g2.com/survey_responses/lookout-review-9119842)"** **Rating:** 5.0/5.0 stars *— Atul T.* [Read full review](https://www.g2.com/survey_responses/lookout-review-9119842) --- #### What Are G2 Users Discussing About Lookout? - [What is Lookout used for?](https://www.g2.com/discussions/what-is-lookout-used-for) ### 6. [BlackFog](https://www.g2.com/products/blackfog/reviews) Data can’t be stolen if it never leaves. BlackFog prevents data exfiltration from endpoints, stopping sensitive information from flowing to ransomware groups, AI tools, cloud services, and other unauthorized destinations. While most cybersecurity solutions focus on detecting threats, BlackFog focuses on preventing the outcome attackers want most: access to your data. Our endpoint-native platform monitors and controls outbound communications in real time, preventing data loss through ransomware, insider threats, shadow AI, and other exfiltration channels. BlackFog pioneered anti data exfiltration (ADX), a category built around a simple principle: the endpoint is the last place data can be stopped before it’s gone. By operating directly on the device, BlackFog provides visibility and control across browsers, cloud applications, AI tools, encrypted connections, and emerging AI workflows that traditional network-based approaches often miss. Today, organizations use BlackFog to prevent ransomware data theft, govern AI usage, reduce data loss risk, and protect sensitive information wherever users work. Key Capabilities \* Anti data exfiltration (ADX) \* Ransomware Data Theft Prevention \* Shadow AI Discovery and Governance \* AI Data Loss Prevention \* Insider Threat Protection \* Real-Time Outbound Traffic Control \* Endpoint Data Protection \* Compliance and Privacy Enforcement **Average Rating:** 4.9/5.0 **Total Reviews:** 32 **How Do G2 Users Rate BlackFog?** - **Ease of Admin:** 9.2/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.0/10) - **Quality of Support:** 9.4/10 (Category avg: 8.7/10) - **Ease of Use:** 9.2/10 (Category avg: 8.7/10) **Who Is the Company Behind BlackFog?** - **Seller:** [BlackFog](https://www.g2.com/sellers/blackfog) - **Company Website:** https://www.blackfog.com - **Year Founded:** 2015 - **HQ Location:** BlackFog Inc. Suite 1400 4 Embarcadero Ctr San Francisco CA 94111, United States - **Twitter:** @blackfogprivacy (1,494 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/blackfog/ (26 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer & Network Security, Information Technology and Services - **Company Size:** 58% Small-Business, 27% Mid-Market #### What Are BlackFog's Pros and Cons? **Pros:** - Security (17 reviews) - Protection (16 reviews) - Customer Support (12 reviews) - Ease of Use (12 reviews) - Security Protection (10 reviews) **Cons:** - Missing Features (4 reviews) - UX Improvement (4 reviews) - Limited Features (3 reviews) - Alert Management (2 reviews) - Complexity (2 reviews) ### What Do G2 Reviewers Say About BlackFog? *AI-generated summary from verified user reviews* **Pros:** - Users value **BlackFog's robust security measures** , effectively protecting sensitive data across various industries with ease and efficiency. - Users commend BlackFog for its **exceptional protection** against ransomware, enhancing their confidence in data security. - Users highlight the **exceptional customer support** of BlackFog, making the experience friendly and seamless with their guidance. - Users appreciate the **user-friendly interface** of BlackFog, enhancing the overall experience with seamless setup and support. - Users value BlackFog for its **robust security protection** , ensuring data safety effortlessly and consistently. **Cons:** - Users feel a lack of **essential features** , like automated reporting and integration options, reducing BlackFog's usability. - Users find the **UI design distracting** , with translucent windowing making the experience less seamless despite overall user-friendliness. - Users note the **limited features** of BlackFog, particularly lacking advanced device management tools for comprehensive security. - Users experience challenges with **false positives in alert management** , leading to inefficiencies and time-consuming processes. - Users find the **complex user interface** of BlackFog challenging, especially for those new to cybersecurity tools. #### What Are Recent G2 Reviews of BlackFog? **"[Reliable Data Security with Outstanding Support](https://www.g2.com/survey_responses/blackfog-review-10843261)"** **Rating:** 5.0/5.0 stars *— Christopher C.* [Read full review](https://www.g2.com/survey_responses/blackfog-review-10843261) --- **"[Simple, Fast Deployment with In-Demand AI Guardrails](https://www.g2.com/survey_responses/blackfog-review-12674925)"** **Rating:** 5.0/5.0 stars *— Mike B.* [Read full review](https://www.g2.com/survey_responses/blackfog-review-12674925) --- #### What Are G2 Users Discussing About BlackFog? - [What is BlackFog used for?](https://www.g2.com/discussions/what-is-blackfog-used-for) ### 7. [SonicWall Capture Client](https://www.g2.com/products/sonicwall-capture-client/reviews) SonicWall Capture Client is a unified client platform that delivers multiple Endpoint Detection & Response (EDR) capabilities, including behavior-based malware protection, advanced threat hunting and visibility into application vulnerabilities. **Average Rating:** 4.3/5.0 **Total Reviews:** 18 **How Do G2 Users Rate SonicWall Capture Client?** - **Ease of Admin:** 8.8/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 9.0/10) - **Quality of Support:** 8.3/10 (Category avg: 8.7/10) - **Ease of Use:** 9.1/10 (Category avg: 8.7/10) **Who Is the Company Behind SonicWall Capture Client?** - **Seller:** [SonicWall](https://www.g2.com/sellers/sonicwall) - **Year Founded:** 1991 - **HQ Location:** Milpitas, CA - **Twitter:** @SonicWall (29,274 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/4926/ (1,962 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services - **Company Size:** 56% Small-Business, 33% Mid-Market #### What Are SonicWall Capture Client's Pros and Cons? **Pros:** - Security (6 reviews) - Deployment Ease (2 reviews) - Easy Setup (2 reviews) - Features (2 reviews) - Automation (1 reviews) **Cons:** - False Positives (2 reviews) - Missing Information (2 reviews) - Limitations (1 reviews) - Missing Features (1 reviews) - Remote Access Issues (1 reviews) ### What Do G2 Reviewers Say About SonicWall Capture Client? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **robust endpoint protection** of SonicWall Capture Client, enabling effective security management from anywhere. - Users value the **easy deployment process** of SonicWall Capture Client, enabling streamlined management of devices from anywhere. - Users value the **easy setup** of SonicWall Capture Client, enabling seamless deployment and centralized management of devices. - Users appreciate the **real-time protection** of SonicWall Capture Client, seamlessly integrating with firewalls for effective management. - Users appreciate the **automation of email alerts** for detected viruses, enhancing their security and response time. **Cons:** - Users experience **false positives** when legitimate emails are caught, complicating communication despite adjustments to the allowed list. - Users find the **documentation lacking** , making it hard to find answers to specific questions or issues. - Users find **uninstalling complicated** and seek better integration capabilities with other SIEMs for improved functionality. - Users find the **missing features** of SonicWall Capture Client, like SIEM integration, hinder usability and device management. - Users are frustrated by the **frequent log-offs** that hinder seamless remote access and productivity with SonicWall Capture Client. #### What Are Recent G2 Reviews of SonicWall Capture Client? **"[Effective Device Management with SonicWall Capture Client](https://www.g2.com/survey_responses/sonicwall-capture-client-review-12210399)"** **Rating:** 4.5/5.0 stars *— Josh M.* [Read full review](https://www.g2.com/survey_responses/sonicwall-capture-client-review-12210399) --- **"[Centralized Security, Needs Better Optimization](https://www.g2.com/survey_responses/sonicwall-capture-client-review-12210573)"** **Rating:** 4.5/5.0 stars *— James L.* [Read full review](https://www.g2.com/survey_responses/sonicwall-capture-client-review-12210573) --- #### What Are G2 Users Discussing About SonicWall Capture Client? - [How do you use Sonicwall Capture Client?](https://www.g2.com/discussions/how-do-you-use-sonicwall-capture-client) - [How does capture client work?](https://www.g2.com/discussions/how-does-capture-client-work) - [What makes capture client unique?](https://www.g2.com/discussions/what-makes-capture-client-unique) - [What does SonicWall Capture Client do?](https://www.g2.com/discussions/what-does-sonicwall-capture-client-do) ### 8. [Heimdal](https://www.g2.com/products/heimdal/reviews) Accommodate all your cybersecurity needs under one convenient roof with the Heimdal® Unified Cybersecurity Platform. Our cybersecurity solutions can be used as standalone products or integrated into one another as part of a cohesive and unified XDR platform. Whether you’re a reseller, distributor, MSSP, or an organization committed to bolstering your online security, we provide an array of cutting-edge products to make your mission smoother. Heimdal® is a fast-growing cybersecurity company focused on continuous technological innovation. Since its establishment in 2014 in Copenhagen, based on the winning idea of CTF World Champions, Heimdal has experienced spectacular growth by proactively building products that anticipate threatscape trends. The company offers a multi-layeredand unified security suite that combines threat prevention, patch and asset management, endpoint rights management, antivirus and mail security which together secure customers against cyberattacks and keep critical information and intellectual property safe. Heimdal has been recognized as a thought leader in the industry and has won multiple international awards both for its solutions and for its educational content creation. The Heimdal line of products currently consists of 10 products and 2 services. The former category encompasses DNS Security for Endpoints & Network, Patch & Asset Management, Privileged Access Management, Application Control, Next-Gen Endpoint Antivirus, Ransomware Encryption Protection, Email Security, Email Fraud Prevention, and Remote Desktop. The latter is represented by Endpoint Detection & Response, as well as eXtended Detection & Response, or EDR and XDR for short. Currently, Heimdal’s cybersecurity solutions are deployed in more than 45 countries and supported regionally from offices in 15+ countries, by 175+ highly qualified specialists. Heimdal is ISAE 3000 certified and secures more than 2 million endpoints for over 10,000 companies. The company supports its partners without concessions on the basis of predictability and scalability. The common goal is to create a sustainable ecosystem and a strategic partnership. **Average Rating:** 4.4/5.0 **Total Reviews:** 72 **How Do G2 Users Rate Heimdal?** - **Ease of Admin:** 8.3/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.4/10 (Category avg: 9.0/10) - **Quality of Support:** 9.5/10 (Category avg: 8.7/10) - **Ease of Use:** 8.6/10 (Category avg: 8.7/10) **Who Is the Company Behind Heimdal?** - **Seller:** [Heimdal®](https://www.g2.com/sellers/heimdal) - **Company Website:** https://heimdalsecurity.com/ - **Year Founded:** 2014 - **HQ Location:** Copenhagen, Denmark - **Twitter:** @HeimdalSecurity (5,086 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/heimdal-security/ (277 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer & Network Security, Construction - **Company Size:** 60% Mid-Market, 26% Small-Business #### What Are Heimdal's Pros and Cons? **Pros:** - Easy Setup (2 reviews) - File Transfer (2 reviews) - Issue Resolution (2 reviews) - Patch Management (2 reviews) - Product Quality (2 reviews) **Cons:** - Complex Interface (2 reviews) - Not User-Friendly (2 reviews) - Poor Customer Support (2 reviews) - Poor Interface Design (2 reviews) - Restart Issues (2 reviews) ### What Do G2 Reviewers Say About Heimdal? *AI-generated summary from verified user reviews* **Pros:** - Users praise the **easy setup** of Heimdal, appreciating its straightforward installation and quick integration with their systems. - Users find that **file transfer** with Heimdal is seamless and reliable, enhancing overall productivity and ease of use. - Users commend Heimdal for its **exceptional issue resolution support** , providing quick and professional solutions exceeding expectations. - Users value the **reliable patch management** of Heimdal, delivering consistent performance without issues during monthly updates. - Users value the **reliable security solutions** of Heimdal, complemented by excellent support and user-friendly interface. **Cons:** - Users find the **complex interface** of Heimdal difficult to navigate, complicating simple tasks like accessing settings and downloads. - Users find Heimdal's interface **not user-friendly** , struggling with navigation and accessibility of essential functions. - Users express concerns about **poor customer support** during initial setup, impacting their experience and deployment process. - Users find the **poor interface design** of Heimdal difficult to navigate, complicating essential tasks and access. - Users experience **restart issues** with Heimdal, feeling unprotected after scans until the software is rebooted. #### What Are Recent G2 Reviews of Heimdal? **"[Automated patching makes life easier, but remote desktop needs work](https://www.g2.com/survey_responses/heimdal-review-12879665)"** **Rating:** 5.0/5.0 stars *— Kris B.* [Read full review](https://www.g2.com/survey_responses/heimdal-review-12879665) --- **"[Clear Patch Management and Endpoint Visibility That Builds Compliance Confidence](https://www.g2.com/survey_responses/heimdal-review-13056558)"** **Rating:** 4.5/5.0 stars *— Verified User in Airlines/Aviation* [Read full review](https://www.g2.com/survey_responses/heimdal-review-13056558) --- ### 9. [Field Effect MDR](https://www.g2.com/products/field-effect-mdr/reviews) Field Effect delivers intelligence-grade managed detection and response for the AI era. Built on Federated Smart Compute™ and nation-state tradecraft, our holistic MDR platform uncovers weaknesses early, blocks attacks in real time, and reduces risk across the entire threat surface—endpoint, network, cloud, and more. With an 18-second median time to detect, Field Effect helps MSPs and overwhelmed IT teams outpace agentic attacks and achieve premium protection with the team they have. **Average Rating:** 4.8/5.0 **Total Reviews:** 43 **How Do G2 Users Rate Field Effect MDR?** - **Ease of Admin:** 9.3/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.3/10 (Category avg: 9.0/10) - **Quality of Support:** 9.3/10 (Category avg: 8.7/10) - **Ease of Use:** 9.2/10 (Category avg: 8.7/10) **Who Is the Company Behind Field Effect MDR?** - **Seller:** [Field Effect](https://www.g2.com/sellers/field-effect) - **Company Website:** https://fieldeffect.com/ - **Year Founded:** 2016 - **HQ Location:** Ottawa - **Twitter:** @fieldeffectsoft (1,304 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/field-effect-software (151 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 52% Small-Business, 27% Mid-Market #### What Are Field Effect MDR's Pros and Cons? **Pros:** - Ease of Use (10 reviews) - Customer Support (8 reviews) - Alert Notifications (6 reviews) - Setup Ease (6 reviews) - Threat Detection (6 reviews) **Cons:** - Alert Issues (5 reviews) - Inefficient Alert System (3 reviews) - Learning Curve (3 reviews) - Communication Issues (2 reviews) - Integration Issues (2 reviews) ### What Do G2 Reviewers Say About Field Effect MDR? *AI-generated summary from verified user reviews* **Pros:** - Users value the **ease of use** of Field Effect MDR, appreciating its simple setup and intuitive interface for all team members. - Users praise the **helpful customer support** of Field Effect MDR, ensuring quick responses and valuable assistance. - Users value the **alert notifications** from Field Effect MDR, enabling timely detection and management of vulnerabilities effectively. - Users highlight the **easy setup** of Field Effect MDR, making deployment seamless and quick for their teams. - Users value the **24/7 threat detection** of Field Effect MDR, ensuring immediate response and protection against cyber threats. **Cons:** - Users face challenges with **alert issues** , often requiring additional support and clarity on alerts from Field Effect MDR. - Users find the **inefficient alert system** overwhelming, requiring frequent support for clearer information and managing alerts. - Users find the **learning curve steep** in Field Effect MDR, requiring time for effective onboarding and adjustments. - Users experience **communication issues** due to overly technical explanations requiring simplification for clients, impacting clarity. - Users face **integration issues** that complicate report generation and lead to unnecessary account shutdowns. #### What Are Recent G2 Reviews of Field Effect MDR? **"[Valuable Alerts and Insightful Dashboard Make Field Effect Stand Out](https://www.g2.com/survey_responses/field-effect-mdr-review-12092172)"** **Rating:** 5.0/5.0 stars *— Lawrence S.* [Read full review](https://www.g2.com/survey_responses/field-effect-mdr-review-12092172) --- **"[Exceptional Security and Usability with Field Effect MDR](https://www.g2.com/survey_responses/field-effect-mdr-review-12178101)"** **Rating:** 5.0/5.0 stars *— Melissa C.* [Read full review](https://www.g2.com/survey_responses/field-effect-mdr-review-12178101) --- #### What Are G2 Users Discussing About Field Effect MDR? - [What is Covalence used for?](https://www.g2.com/discussions/what-is-covalence-used-for) - 1 comment ### 10. [DefenseStorm](https://www.g2.com/products/defensestorm/reviews) DefenseStorm is a comprehensive cybersecurity platform specifically designed for financial institutions, focusing on cyber risk assessment, governance, security, and fraud prevention. This integrated solution addresses the unique challenges that banks and other financial entities face in maintaining cyber risk readiness amidst a complex landscape of regulations and technological demands. The platform is tailored to meet the stringent requirements of the banking sector, making it a vital resource for organizations seeking to enhance their cybersecurity posture. DefenseStorm's intelligent data engine, known as GRID ACTIVE, plays a crucial role in this process by providing real-time access to critical threat data. This capability allows financial institutions to analyze and respond to potential threats swiftly, ensuring they remain vigilant against evolving cyber risks. Targeted at banks and financial service providers, DefenseStorm offers a range of use cases that are essential for maintaining compliance and safeguarding sensitive data. The platform not only helps institutions assess their current cyber risk levels but also provides governance tools that facilitate adherence to regulatory requirements. By integrating security measures with fraud detection capabilities, DefenseStorm enables organizations to create a robust defense against both internal and external threats. One of the standout features of DefenseStorm is its Cyber Threat Surveillance Operations (CTS Ops) team, which provides round-the-clock support. This managed service ensures that financial institutions have access to expert resources at all times, allowing them to leverage specialized knowledge and experience in combating cyber threats. The continuous monitoring and proactive threat management offered by the CTS Ops team enhance the overall security framework of the institution, providing peace of mind to stakeholders. Overall, DefenseStorm's unique focus on the banking sector, combined with its advanced data analytics and dedicated support services, positions it as a critical tool for financial institutions aiming to navigate the complexities of cybersecurity. By equipping organizations with the necessary tools and expertise, DefenseStorm helps them not only to meet regulatory obligations but also to foster a culture of security that is essential in today's digital landscape. **Average Rating:** 4.8/5.0 **Total Reviews:** 30 **How Do G2 Users Rate DefenseStorm?** - **Ease of Admin:** 8.9/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.7/10 (Category avg: 9.0/10) - **Quality of Support:** 9.8/10 (Category avg: 8.7/10) - **Ease of Use:** 8.7/10 (Category avg: 8.7/10) **Who Is the Company Behind DefenseStorm?** - **Seller:** [DEFENSESTORM](https://www.g2.com/sellers/defensestorm) - **Company Website:** https://www.defensestorm.com - **Year Founded:** 2014 - **HQ Location:** Alpharetta, Georgia - **LinkedIn® Page:** https://www.linkedin.com/company/defensestorm/ (89 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Banking, Financial Services - **Company Size:** 80% Mid-Market, 20% Small-Business #### What Are DefenseStorm's Pros and Cons? **Pros:** - Customer Support (19 reviews) - Team Quality (12 reviews) - Ease of Use (10 reviews) - Staff Expertise (8 reviews) - Alert Notifications (5 reviews) **Cons:** - Difficult Navigation (3 reviews) - Training Required (3 reviews) - Asset Management (2 reviews) - Difficult Organization (2 reviews) - Inadequate Reporting (2 reviews) ### What Do G2 Reviewers Say About DefenseStorm? *AI-generated summary from verified user reviews* **Pros:** - Users value the **exceptional customer support** of DefenseStorm, appreciating their responsiveness and tailored solutions. - Users praise the **expert and friendly support team** of DefenseStorm, which greatly enhances their cybersecurity experience. - Users appreciate the **ease of use** of DefenseStorm, highlighting smooth onboarding and flexible, intuitive solutions. - Users commend the **expertise and support** of DefenseStorm staff, noting their responsiveness and dedication to customer needs. - Users value the **24/7 alert notifications** from DefenseStorm, ensuring proactive issue detection and peace of mind. **Cons:** - Users find **difficult navigation** within DefenseStorm's platform, hindering effective integration and overall user experience. - Users note a need for improved **training materials** and videos to enhance their overall experience with DefenseStorm. - Users find the **manual asset management** cumbersome, impacting the usability of DefenseStorm's asset discovery features. - Users find **difficult organization** in DefenseStorm's executive reporting, complicating summary interpretation for non-IT stakeholders. - Users find the **reporting inadequate** , as it's challenging to create clear executive summaries for non-technical stakeholders. #### What Are Recent G2 Reviews of DefenseStorm? **"[Exceptional, Responsive Support for Setup and Monitoring](https://www.g2.com/survey_responses/defensestorm-review-12909124)"** **Rating:** 4.5/5.0 stars *— Jonathan B.* [Read full review](https://www.g2.com/survey_responses/defensestorm-review-12909124) --- **"[Essential for Monitoring and Compliance](https://www.g2.com/survey_responses/defensestorm-review-10828894)"** **Rating:** 5.0/5.0 stars *— Derrick M.* [Read full review](https://www.g2.com/survey_responses/defensestorm-review-10828894) --- ### 11. [Wazuh](https://www.g2.com/products/wazuh/reviews) Wazuh is a free and open source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh, with over 30 million downloads per year, has one of the largest open-source security communities in the world. Wazuh helps organizations of all sizes protect their data assets against security threats. Learn more about the project at wazuh.com **Average Rating:** 4.5/5.0 **Total Reviews:** 67 **How Do G2 Users Rate Wazuh?** - **Ease of Admin:** 8.6/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.5/10 (Category avg: 9.0/10) - **Quality of Support:** 8.3/10 (Category avg: 8.7/10) - **Ease of Use:** 8.6/10 (Category avg: 8.7/10) **Who Is the Company Behind Wazuh?** - **Seller:** [Wazuh Inc.](https://www.g2.com/sellers/wazuh-inc) - **Year Founded:** 2015 - **HQ Location:** Campbell, US - **Twitter:** @wazuh (8,026 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/wazuh/ (276 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** SOC Analyst - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 49% Small-Business, 39% Mid-Market #### What Are Wazuh's Pros and Cons? **Pros:** - Ease of Use (3 reviews) - Affordable (2 reviews) - Cybersecurity (1 reviews) - Easy Management (1 reviews) - Easy Setup (1 reviews) **Cons:** - Complex Interface (2 reviews) - Not User-Friendly (2 reviews) - Complex Implementation (1 reviews) - Difficult Learning (1 reviews) - Difficult Setup (1 reviews) ### What Do G2 Reviewers Say About Wazuh? *AI-generated summary from verified user reviews* **Pros:** - Users enjoy the **user-friendly interface** of Wazuh, appreciating its straightforward learning curve and ease of use. - Users appreciate the **affordability** of Wazuh, benefiting from enterprise-level security without high licensing costs. - Users value Wazuh for its **real-time threat detection and control** over security events in their infrastructure. - Users value the **easy management** of Wazuh, benefiting from a vast knowledge base and cost savings. - Users find Wazuh's **easy setup** beneficial, facilitating quick deployment and efficient endpoint management without additional costs. **Cons:** - Users struggle with the **complex interface** , finding it challenging to navigate during setup and configuration. - Users find Wazuh **not user-friendly** , struggling with the steep learning curve and complex setup processes. - Users find the **complicated implementation** of Wazuh challenging, citing risks associated with its open-source nature. - Users struggle with the **difficult learning curve** of Wazuh, particularly during initial setup and tuning challenges. - Users face a **difficult setup** with Wazuh, hampered by a steep learning curve and confusing configurations. #### What Are Recent G2 Reviews of Wazuh? **"[Powerful Open-Source On-Prem Security Monitoring with Easy Integration](https://www.g2.com/survey_responses/wazuh-review-12267146)"** **Rating:** 4.5/5.0 stars *— Yogesh G.* [Read full review](https://www.g2.com/survey_responses/wazuh-review-12267146) --- **"[Centralized Monitoring and security Incidents Simplified](https://www.g2.com/survey_responses/wazuh-review-12848657)"** **Rating:** 4.5/5.0 stars *— Karsh T.* [Read full review](https://www.g2.com/survey_responses/wazuh-review-12848657) --- #### What Are G2 Users Discussing About Wazuh? - [What is Wazuh - The Open Source Security Platform used for?](https://www.g2.com/discussions/what-is-wazuh-the-open-source-security-platform-used-for) - 1 comment ### 12. [Saner CVEM](https://www.g2.com/products/saner-cvem/reviews) Prevention-first Vulnerability and Exposure Management for unified visibility, prioritization, compliance, and remediation Saner Continuous Vulnerability and Exposure Management unifies asset exposure, posture anomaly detection, vulnerability assessment, compliance management, risk prioritization, patching, and endpoint actions in one dashboard. Saner CVEM is built to help teams continuously detect, assess, prioritize, and remediate vulnerabilities and other security risks from a unified console Why Choose Saner CVEM? • Unified dashboard with interactive views across visibility, detection, prioritization, and remediation for a single source of truth • Complete asset visibility across endpoint and non-endpoint devices, operating system applications, third-party applications, and lifecycle changes • Continuous risk discovery with rapid scans, daily-updated risk intelligence, and posture anomaly detection that helps surface outliers and misconfigurations faster • Context-driven prioritization with SSVC categories such as Act, Attend, Track, and Track\* so teams can focus on the risks that deserve action first. • Continuous compliance management with built-in templates, customizable profiles, daily checks, and deviation tracking across common frameworks. • Integrated patching and remediation with vulnerability-to-patch mapping, automated deployment workflows, and endpoint actions from the same ecosystem. • Machine-learning-assisted analysis to identify deeper risk patterns, detect unusual posture, and support smarter remediation decisions. • Customizable, audit-ready reporting for security, IT, and compliance teams that need clearer evidence and easier tracking. • Flexible deployment on cloud or on-premises, with remediation support across Windows, Linux, macOS, and AIX environments. **Average Rating:** 4.5/5.0 **Total Reviews:** 72 **How Do G2 Users Rate Saner CVEM?** - **Ease of Admin:** 9.0/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.0/10) - **Quality of Support:** 9.2/10 (Category avg: 8.7/10) - **Ease of Use:** 8.6/10 (Category avg: 8.7/10) **Who Is the Company Behind Saner CVEM?** - **Seller:** [SecPod](https://www.g2.com/sellers/secpod-b11d8014-d8ec-46e7-9e81-c0d14919fbfc) - **Company Website:** https://www.secpod.com/ - **Year Founded:** 2008 - **HQ Location:** Redwood City, California - **Twitter:** @secpod (542 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/secpod-technologies/ (168 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 41% Small-Business, 38% Mid-Market #### What Are Saner CVEM's Pros and Cons? **Pros:** - Security (14 reviews) - Features (12 reviews) - Ease of Use (10 reviews) - Customer Support (9 reviews) - Compliance Management (8 reviews) **Cons:** - Integration Issues (5 reviews) - Expensive (4 reviews) - Limited Features (4 reviews) - Slow Performance (4 reviews) - Slow Scanning (4 reviews) ### What Do G2 Reviewers Say About Saner CVEM? *AI-generated summary from verified user reviews* **Pros:** - Users value the **enhanced security** provided by Saner CVEM, streamlining patch management for hybrid workforces efficiently. - Users value the **automated endpoint security** of Saner CVEM, streamlining compliance and patch management for hybrid workforces. - Users appreciate the **ease of use** of Saner CVEM, highlighting its fast scanning and intuitive interface. - Users value the **responsive customer support** from Saner CVEM, enhancing their experience and addressing concerns effectively. - Users value the **automation of compliance tracking** in Saner CVEM, enhancing efficiency and audit readiness for hybrid teams. **Cons:** - Users face **integration issues** with Saner CVEM, requiring workarounds and custom solutions for effective functionality. - Users find the **pricing high** , especially small businesses, making it less accessible for new users. - Users find the **limited features** of Saner CVEM challenging, particularly regarding multi-tenant support and integrations. - Users experience **slow performance** when loading dashboards and managing large datasets, affecting daily checks and usability. - Users experience **slow scanning** with initial dashboard load times, affecting daily checks on large data sets. #### What Are Recent G2 Reviews of Saner CVEM? **"[Strong Visibility Across Assets, but Prioritization and UI Need Improvement](https://www.g2.com/survey_responses/saner-cvem-review-12398463)"** **Rating:** 4.0/5.0 stars *— Verified User in Pharmaceuticals* [Read full review](https://www.g2.com/survey_responses/saner-cvem-review-12398463) --- **"[Improve your digital security and combat vulnerabilities in your networks with Saner CVEM.](https://www.g2.com/survey_responses/saner-cvem-review-11395327)"** **Rating:** 5.0/5.0 stars *— Lydie D.* [Read full review](https://www.g2.com/survey_responses/saner-cvem-review-11395327) --- #### What Are G2 Users Discussing About Saner CVEM? - [What is SanerNow used for?](https://www.g2.com/discussions/what-is-sanernow-used-for) ### 13. [N-able Endpoint Detection and Response (EDR)](https://www.g2.com/products/n-able-endpoint-detection-and-response-edr/reviews) N-able Endpoint Detection and Response (EDR), powered by SentinelOne®, helps MSPs and IT departments prevent, detect, and quickly respond to ever-changing cyberthreats with behavioral AI threat detection, automated remediation, and rollback. Leverage powerful EDR integration with the N‑able N‑sight RMM or N‑able N‑central solutions to gain holistic monitoring and management capabilities. **Average Rating:** 4.1/5.0 **Total Reviews:** 18 **How Do G2 Users Rate N-able Endpoint Detection and Response (EDR)?** - **Ease of Admin:** 8.1/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 9.0/10) - **Quality of Support:** 8.9/10 (Category avg: 8.7/10) - **Ease of Use:** 8.7/10 (Category avg: 8.7/10) **Who Is the Company Behind N-able Endpoint Detection and Response (EDR)?** - **Seller:** [N-able](https://www.g2.com/sellers/n-able) - **HQ Location:** Morrisville, North Carolina - **Twitter:** @Nable (15,859 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/n-able (2,287 employees on LinkedIn®) - **Ownership:** NYSE: NABL **Who Uses This Product?** - **Top Industries:** Computer & Network Security - **Company Size:** 50% Small-Business, 50% Mid-Market #### What Are N-able Endpoint Detection and Response (EDR)'s Pros and Cons? **Pros:** - Customer Support (1 reviews) - Ease of Use (1 reviews) - Implementation Ease (1 reviews) - Incident Response (1 reviews) - Threat Detection (1 reviews) **Cons:** - False Positives (1 reviews) - Learning Curve (1 reviews) - Uninstallation Problems (1 reviews) ### What Do G2 Reviewers Say About N-able Endpoint Detection and Response (EDR)? *AI-generated summary from verified user reviews* **Pros:** - Users commend the **efficient self-operation** of N-able, noting easy implementation and minimal need for customer support. - Users appreciate the **ease of implementation** with N-able, highlighting its ability to operate autonomously after setup. - Users appreciate the **easy implementation** of N-able EDR, allowing smooth operation with minimal intervention. - Users appreciate the **proactive threat detection and real-time response** capabilities of N-able EDR, simplifying endpoint management. - Users appreciate the **proactive threat detection** of N-able EDR, recognizing its effectiveness in identifying and neutralizing threats. **Cons:** - Users often face **high false positives** with N-able EDR, leading to extra time spent on verification processes. - Users find the **steep learning curve** for N-able EDR's advanced features challenging, impacting their initial experience. - Users note **uninstallation problems** , requiring a new installer for each computer, which can be inconvenient. #### What Are Recent G2 Reviews of N-able Endpoint Detection and Response (EDR)? **"[Advanced and proactive endpoint protection with exceptional threat detection](https://www.g2.com/survey_responses/n-able-endpoint-detection-and-response-edr-review-10748580)"** **Rating:** 5.0/5.0 stars *— Verified User in Computer & Network Security* [Read full review](https://www.g2.com/survey_responses/n-able-endpoint-detection-and-response-edr-review-10748580) --- **"[N-able is the best EDR I have used.](https://www.g2.com/survey_responses/n-able-endpoint-detection-and-response-edr-review-11757410)"** **Rating:** 4.5/5.0 stars *— Rick J.* [Read full review](https://www.g2.com/survey_responses/n-able-endpoint-detection-and-response-edr-review-11757410) --- ### 14. [Intezer](https://www.g2.com/products/intezer-intezer/reviews) Intezer automates the entire alert triage process, like an extension of your team handling Tier 1 SOC tasks for every alert at machine-speed. Intezer monitors incoming incidents from endpoint, reported phishing pipelines, or SIEM tools, then autonomously collects evidence, investigates, makes triage decisions, and escalates only the serious threats to your team for human intervention. Power your SOC with artificial intelligence that makes sure every alert is deeply analyzed (including every single artifact like files, URLs, endpoint memory, etc.), detecting malicious code in memory and other evasive threats. Fast set up and integrations with your SOC team's workflows (EDR, SOAR, SIEM, etc.) means Intezer's AI can immediately start filtering out false positives, giving you detailed analysis about every threat, and speeding up your incident response time. With Intezer: • Reduce Tier 1 escalation, sending only 4% of alerts on average to your team for immediate action. • Identify up to 97% of false positive alerts without taking any time from your analysts. • Reduce average triage time to 5 minutes or less, while giving your analysts deep context about every alert to prioritize critical treats and respond faster. **Average Rating:** 4.5/5.0 **Total Reviews:** 187 **How Do G2 Users Rate Intezer?** - **Ease of Admin:** 8.8/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 9.0/10) - **Quality of Support:** 8.6/10 (Category avg: 8.7/10) - **Ease of Use:** 9.1/10 (Category avg: 8.7/10) **Who Is the Company Behind Intezer?** - **Seller:** [Intezer](https://www.g2.com/sellers/intezer) - **Year Founded:** 2015 - **HQ Location:** New York - **Twitter:** @IntezerLabs (10,170 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/10656303/ (88 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Software Engineer, Student - **Top Industries:** Computer & Network Security, Information Technology and Services - **Company Size:** 54% Small-Business, 23% Mid-Market #### What Are Intezer's Pros and Cons? **Pros:** - Security (3 reviews) - Security Protection (3 reviews) - Cybersecurity (2 reviews) - Detection Accuracy (2 reviews) - Ease of Use (2 reviews) **Cons:** - Access Control (1 reviews) - Complex Interface (1 reviews) - Data Privacy (1 reviews) - Difficult Navigation (1 reviews) - Expensive (1 reviews) ### What Do G2 Reviewers Say About Intezer? *AI-generated summary from verified user reviews* **Pros:** - Users value the **effective malware detection** and blocking capabilities of Intezer, ensuring robust system security. - Users value the **effective security protection** of Intezer, appreciating its timely malware detection and comprehensive EDR features. - Users value the **easy detection and blocking of malware** with Intezer, ensuring robust system security. - Users value the **detection accuracy** of Intezer, ensuring timely malware blocking and enhanced security. - Users find Intezer to provide **ease of use** with fast integration and efficient malware detection capabilities. **Cons:** - Users note the **lack of access control** limits visibility over files, affecting user experience in certain situations. - Users struggle with **complex interface** and encounter limitations on the free tier, affecting usability and experience. - Users note the **lack of control over file visibility** in certain situations, which may raise privacy concerns. - Users find the **difficult navigation** in Intezer challenging due to poor UI and small text size. - Users find Intezer's services to be **expensive** , especially citing limitations in the free tier and GUI problems. #### What Are Recent G2 Reviews of Intezer? **"[CTI coordinator](https://www.g2.com/survey_responses/intezer-review-5353729)"** **Rating:** 4.0/5.0 stars *— Verified User in Banking* [Read full review](https://www.g2.com/survey_responses/intezer-review-5353729) --- **"[Effortless Malware Detection and Robust Endpoint Security With Intezer](https://www.g2.com/survey_responses/intezer-review-12060113)"** **Rating:** 4.5/5.0 stars *— Franck P.* [Read full review](https://www.g2.com/survey_responses/intezer-review-12060113) --- #### What Are G2 Users Discussing About Intezer? - [What is genetic malware analysis?](https://www.g2.com/discussions/what-is-genetic-malware-analysis) - 1 comment - [Is Intezer good?](https://www.g2.com/discussions/is-intezer-good) - 1 comment - [What does Intezer do?](https://www.g2.com/discussions/what-does-intezer-do) - 1 comment - [What is Intezer analyze?](https://www.g2.com/discussions/what-is-intezer-analyze) - 2 comments ### 15. [Symantec Protection Suite Enterprise Edition](https://www.g2.com/products/symantec-symantec-protection-suite-enterprise-edition/reviews) Symantec Protection Suite Enterprise Edition combines best-of-breed products to secure your endpoint and email infrastructure. It delivers protection against complex malware, data loss, and spam threats along with industry-leading messaging protection. **Average Rating:** 4.3/5.0 **Total Reviews:** 22 **How Do G2 Users Rate Symantec Protection Suite Enterprise Edition?** - **Ease of Admin:** 9.0/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.0/10 (Category avg: 9.0/10) - **Quality of Support:** 8.2/10 (Category avg: 8.7/10) - **Ease of Use:** 9.1/10 (Category avg: 8.7/10) **Who Is the Company Behind Symantec Protection Suite Enterprise Edition?** - **Seller:** [Broadcom](https://www.g2.com/sellers/broadcom-ab3091cd-4724-46a8-ac89-219d6bc8e166) - **Year Founded:** 1991 - **HQ Location:** San Jose, CA - **Twitter:** @broadcom (63,909 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/broadcom/ (55,094 employees on LinkedIn®) - **Ownership:** NASDAQ: CA **Who Uses This Product?** - **Top Industries:** Information Technology and Services - **Company Size:** 44% Mid-Market, 36% Small-Business #### What Are Symantec Protection Suite Enterprise Edition's Pros and Cons? **Pros:** - Alert Notifications (1 reviews) - Cybersecurity Protection (1 reviews) - Dashboard Usability (1 reviews) - Ease of Use (1 reviews) - Features (1 reviews) **Cons:** - Missing Features (1 reviews) ### What Do G2 Reviewers Say About Symantec Protection Suite Enterprise Edition? *AI-generated summary from verified user reviews* **Pros:** - Users value the **alert notifications** from Symantec, providing timely information on threats and ensuring peace of mind. - Users appreciate the **robust cybersecurity protection** of Symantec, ensuring endpoints remain secure from threats and breaches. - Users praise the **dashboard usability** of Symantec Protection Suite, finding the interface engaging and easy to navigate. - Users appreciate the **ease of use** of Symantec Protection Suite, providing peace of mind while ensuring optimal security. - Users commend the **robust security features** of Symantec Protection Suite, ensuring peace of mind against digital threats. **Cons:** - Users note the **missing firewall features** in Symantec Protection Suite, impacting its overall functionality despite decent threat protection. #### What Are Recent G2 Reviews of Symantec Protection Suite Enterprise Edition? **"[Symantec Protection Suite Enterprise Edition is a robust and comprehensive security solution](https://www.g2.com/survey_responses/symantec-protection-suite-enterprise-edition-review-7739528)"** **Rating:** 4.0/5.0 stars *— Kashif Ali S.* [Read full review](https://www.g2.com/survey_responses/symantec-protection-suite-enterprise-edition-review-7739528) --- **"[Symantec protection is guaranteed always](https://www.g2.com/survey_responses/symantec-protection-suite-enterprise-edition-review-5260073)"** **Rating:** 4.0/5.0 stars *— Oluwatobi A.* [Read full review](https://www.g2.com/survey_responses/symantec-protection-suite-enterprise-edition-review-5260073) --- #### What Are G2 Users Discussing About Symantec Protection Suite Enterprise Edition? - [What is Symantec Protection Suite Enterprise Edition used for?](https://www.g2.com/discussions/what-is-symantec-protection-suite-enterprise-edition-used-for) ### 16. [Acronis Cyber Protect](https://www.g2.com/products/acronis-acronis-cyber-protect/reviews) Acronis Cyber Protect delivers robust protection against cyberthreats, unparalleled backup and recovery capabilities and simplified management and visibility through a single pane of glass, for the entire environment. Key features of Acronis Cyber Protect include: · Cyberthreat protection: Using artificial intelligence (AI) and machine learning (ML), proactively secures data, applications and systems, from advanced cyberattacks, including ransomware and other forms of malware. · Rapid Recovery: Reduced dependency on central IT support empowers users to initiate one-click recovery of distributed endpoints, including bare-metal recovery of physical workloads. · Reduced TCO: Broad, multigenerational OS support, enables vendor consolidation while ensuring comprehensive protection. · Simplified management: Centralized management includes local autonomy and seamless integration with existing third-party tools to provide a unified view of backup and recovery operations along with broad, multigenerational OS support. · Data sovereignty: With the use of Acronis’ extensive network of global data centers, users can ensure compliance and master regional data sovereignty laws, offering peace of mind and regulatory compliance. Acronis is majority-owned by EQT. **Average Rating:** 4.3/5.0 **Total Reviews:** 657 **How Do G2 Users Rate Acronis Cyber Protect?** - **Ease of Admin:** 8.4/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.4/10 (Category avg: 9.0/10) - **Quality of Support:** 8.3/10 (Category avg: 8.7/10) - **Ease of Use:** 8.6/10 (Category avg: 8.7/10) **Who Is the Company Behind Acronis Cyber Protect?** - **Seller:** [Acronis](https://www.g2.com/sellers/acronis) - **Year Founded:** 2003 - **HQ Location:** Schaffhausen - **Twitter:** @acronis (94,498 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/13179/ (1,965 employees on LinkedIn®) - **Ownership:** Acronis is majority-owned by EQT **Who Uses This Product?** - **Who Uses This:** Support Analyst, IT Manager - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 45% Small-Business, 40% Mid-Market #### What Are Acronis Cyber Protect's Pros and Cons? **Pros:** - Backup Solutions (10 reviews) - Ease of Use (8 reviews) - Features (8 reviews) - Data Recovery (5 reviews) - Security (5 reviews) **Cons:** - Expensive (6 reviews) - Complexity (4 reviews) - Difficult Learning (4 reviews) - Poor Customer Support (4 reviews) - Slow Performance (4 reviews) ### What Do G2 Reviewers Say About Acronis Cyber Protect? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **all-in-one backup and cybersecurity solution** of Acronis Cyber Protect, simplifying data management and recovery. - Users value the **user-friendly interface** of Acronis Cyber Protect, making data protection and recovery easy to manage. - Users appreciate the **all-in-one backup and cybersecurity** solution of Acronis Cyber Protect, simplifying data management and protection. - Users appreciate the **quick data recovery** features of Acronis Cyber Protect, allowing for rapid restoration of operations. - Users value the **integration of backup and cybersecurity** in Acronis Cyber Protect, simplifying data management significantly. **Cons:** - Users find Acronis Cyber Protect to be **expensive** , making it challenging for smaller businesses to adopt it. - Users find the **complexity of setup** in Acronis Cyber Protect challenging, especially for those unfamiliar with IT tools. - Users find the setup and onboarding of Acronis Cyber Protect to be **difficult and time-consuming** , impacting overall experience. - Users are frustrated by Acronis' **poor customer support** , citing slow response times and complicated issue resolution processes. - Users experience **slow performance** with Acronis Cyber Protect, especially on older machines or after complex configurations. #### What Are Recent G2 Reviews of Acronis Cyber Protect? **"[Effortless Backup and Disaster Recovery](https://www.g2.com/survey_responses/acronis-cyber-protect-review-12712384)"** **Rating:** 4.5/5.0 stars *— VIVEK KUMAR D.* [Read full review](https://www.g2.com/survey_responses/acronis-cyber-protect-review-12712384) --- **"[Comprehensive Protection with Single pane of glass Management](https://www.g2.com/survey_responses/acronis-cyber-protect-review-12711723)"** **Rating:** 4.5/5.0 stars *— Dave P.* [Read full review](https://www.g2.com/survey_responses/acronis-cyber-protect-review-12711723) --- #### What Are G2 Users Discussing About Acronis Cyber Protect? - [Is Acronis free software?](https://www.g2.com/discussions/is-acronis-free-software) - [What is the best backup solution for enterprise?](https://www.g2.com/discussions/what-is-the-best-backup-solution-for-enterprise) - 1 comment - [What is Acronis software?](https://www.g2.com/discussions/what-is-acronis-software) - [Does Acronis do incremental backup?](https://www.g2.com/discussions/does-acronis-do-incremental-backup) - 1 comment - [Is Acronis cyber protect an antivirus?](https://www.g2.com/discussions/is-acronis-cyber-protect-an-antivirus) ### 17. [Cybereason Defense Platform](https://www.g2.com/products/cybereason-defense-platform/reviews) Cybereason automatically detects malicious activity and presents it in an intuitive way. It deploys easily with minimal organizational impact and provides end-to-end context of an attack campaign. Most organizations deploy Cybereason and start detecting attacks within 24 to 48 hours. **Average Rating:** 4.4/5.0 **Total Reviews:** 18 **How Do G2 Users Rate Cybereason Defense Platform?** - **Ease of Admin:** 9.3/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 9.0/10) - **Quality of Support:** 7.9/10 (Category avg: 8.7/10) - **Ease of Use:** 8.6/10 (Category avg: 8.7/10) **Who Is the Company Behind Cybereason Defense Platform?** - **Seller:** [Cybereason](https://www.g2.com/sellers/cybereason) - **Year Founded:** 2012 - **HQ Location:** La Jolla, San Diego, US - **LinkedIn® Page:** https://www.linkedin.com/company/cybereason (482 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 61% Enterprise, 22% Small-Business #### What Are Cybereason Defense Platform's Pros and Cons? **Pros:** - Cybersecurity (2 reviews) - Ease of Use (2 reviews) - Security (2 reviews) - AI (1 reviews) - AI Technology (1 reviews) **Cons:** - Feature Limitations (1 reviews) - Lack of Clarity (1 reviews) - Limited Customization (1 reviews) - Limited Features (1 reviews) - Poor Customer Support (1 reviews) ### What Do G2 Reviewers Say About Cybereason Defense Platform? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **great security options** of the Cybereason Defense Platform, benefiting from swift and effective threat detection. - Users find the **ease of use** in the Cybereason Defense Platform enhances their experience while ensuring robust security. - Users appreciate the **great security options** offered by the Cybereason Defense Platform, ensuring swift detection of threats. - Users praise the **swift detection of malicious activity** enabled by Cybereason's AI-driven hunting engine. - Users praise the **AI-driven automated hunting engine** of Cybereason for its swift threat detection and behavioral insights. **Cons:** - Users feel the **feature limitations** hinder custom detection rules and urge for a better user interface. - Users find the **lack of clarity in after-sales support** can complicate the business experience with Cybereason. - Users feel the Cybereason Defense Platform has **limited customization** , particularly in user interface and detection rules features. - Users feel the need for **limited features** in Cybereason Defense Platform, particularly in the user interface and detection rules. - Users find that the **poor customer support** negatively impacts their overall experience with the Cybereason Defense Platform. #### What Are Recent G2 Reviews of Cybereason Defense Platform? **"[Uncomplicated defense](https://www.g2.com/survey_responses/cybereason-defense-platform-review-10564960)"** **Rating:** 4.0/5.0 stars *— Andre S.* [Read full review](https://www.g2.com/survey_responses/cybereason-defense-platform-review-10564960) --- **"[Great EDR and MDR!](https://www.g2.com/survey_responses/cybereason-defense-platform-review-9038436)"** **Rating:** 4.5/5.0 stars *— Elie H.* [Read full review](https://www.g2.com/survey_responses/cybereason-defense-platform-review-9038436) --- #### What Are G2 Users Discussing About Cybereason Defense Platform? - [What does Cybereason Defense Platform do?](https://www.g2.com/discussions/cybereason-defense-platform-what-does-cybereason-defense-platform-do) - [What does Cybereason Defense Platform do?](https://www.g2.com/discussions/what-does-cybereason-defense-platform-do) - [What is the use of Cybereason Defense Platform?](https://www.g2.com/discussions/what-is-the-use-of-cybereason-defense-platform) - [How does Cybereason EDR work?](https://www.g2.com/discussions/how-does-cybereason-edr-work) - [What does Cybereason software do?](https://www.g2.com/discussions/what-does-cybereason-software-do) ### 18. [IBM QRadar EDR](https://www.g2.com/products/ibm-qradar-edr/reviews) IBM Security QRadar EDR (formerly ReaQta) combines automation and dashboards to minimize analyst workloads, detect anomalous endpoint behavior and remediate threats in near real time. IBM Security QRadar EDR is available on AWS Marketplace. With visibility across endpoints, it combines expected features, like MITRE ATT&CK mapping and attack visualizations, with dual-engine AI and automation. For teams that need extended support, managed detection and response (MDR) services offers 24/7 monitoring and response to help keep users protected. IBM Security QRadar EDR (formerly ReaQta) can be deployed as SaaS, on-premises and in air-gapped environments. For more information, visit https://www.ibm.com/products/qradar-edr **Average Rating:** 4.2/5.0 **Total Reviews:** 45 **How Do G2 Users Rate IBM QRadar EDR?** - **Ease of Admin:** 8.3/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.0/10) - **Quality of Support:** 8.2/10 (Category avg: 8.7/10) - **Ease of Use:** 8.5/10 (Category avg: 8.7/10) **Who Is the Company Behind IBM QRadar EDR?** - **Seller:** [IBM](https://www.g2.com/sellers/ibm) - **Year Founded:** 1911 - **HQ Location:** Armonk, New York, United States - **Twitter:** @IBMSecurity (74,660 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/1009/ (328,202 employees on LinkedIn®) - **Ownership:** SWX:IBM **Who Uses This Product?** - **Top Industries:** Computer & Network Security - **Company Size:** 45% Small-Business, 40% Mid-Market #### What Are IBM QRadar EDR's Pros and Cons? **Pros:** - Threat Detection (23 reviews) - Ease of Use (20 reviews) - Cybersecurity (16 reviews) - Detection Efficiency (9 reviews) - Protection (8 reviews) **Cons:** - Expensive (17 reviews) - Difficult Learning (11 reviews) - Resource Intensive (9 reviews) - False Positives (7 reviews) - High Resource Usage (7 reviews) ### What Do G2 Reviewers Say About IBM QRadar EDR? *AI-generated summary from verified user reviews* **Pros:** - Users value the **advanced threat detection** capabilities of IBM QRadar EDR, ensuring robust protection against potential attacks. - Users value the **ease of use** of IBM QRadar EDR, appreciating its straightforward installation and user-friendly interface. - Users value the **robust threat detection** capabilities of IBM QRadar EDR, ensuring effective protection against malicious threats. - Users praise the **advanced threat detection** capabilities of IBM QRadar EDR, enhancing security and incident response efficiency. - Users appreciate the **advanced threat detection** capabilities of IBM QRadar EDR, ensuring robust protection against cyber threats. **Cons:** - Users find IBM QRadar EDR **expensive** , making it challenging for mid-sized and small businesses to afford. - Users find the **difficult learning curve** of IBM QRadar EDR challenging due to its complexity and setup requirements. - Users note that QRadar EDR is **resource intensive** , leading to increased infrastructure costs and setup complexity. - Users experience **many false positives** with IBM QRadar EDR, requiring manual investigation and potentially impacting efficiency. - Users experience **high resource usage** challenges with IBM QRadar EDR, often requiring advanced hardware for optimal performance. #### What Are Recent G2 Reviews of IBM QRadar EDR? **"[One of the best Security tool for Blue team with a capability of intercepting the bad guys.](https://www.g2.com/survey_responses/ibm-qradar-edr-review-8011831)"** **Rating:** 5.0/5.0 stars *— Mark Julius M.* [Read full review](https://www.g2.com/survey_responses/ibm-qradar-edr-review-8011831) --- **"[One of the best EDR](https://www.g2.com/survey_responses/ibm-qradar-edr-review-9506318)"** **Rating:** 4.5/5.0 stars *— sibil b.* [Read full review](https://www.g2.com/survey_responses/ibm-qradar-edr-review-9506318) --- ### 19. [CrowdSec](https://www.g2.com/products/crowdsec/reviews) CrowdSec is an open-source security stack that detects aggressive behaviors and prevents them from accessing your systems. Its user-friendly design and ease of integration into your current security infrastructure offer a low technical entry barrier and a high-security gain. Once an unwanted behavior is detected, it is automatically blocked. The aggressive IP, scenario triggered and the timestamp is sent for curation, to avoid poisoning & false positives. If verified, this IP is then redistributed to all CrowdSec users running the same scenario. By sharing the threat they faced, all users are protecting each other. **Average Rating:** 4.7/5.0 **Total Reviews:** 85 **How Do G2 Users Rate CrowdSec?** - **Ease of Admin:** 8.8/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 9.0/10) - **Quality of Support:** 8.9/10 (Category avg: 8.7/10) - **Ease of Use:** 8.8/10 (Category avg: 8.7/10) **Who Is the Company Behind CrowdSec?** - **Seller:** [CrowdSec](https://www.g2.com/sellers/crowdsec) - **Year Founded:** 2020 - **HQ Location:** Paris, FR - **Twitter:** @Crowd_Security (19,491 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/crowdsec/?originalSubdomain=fr (30 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer & Network Security, Information Technology and Services - **Company Size:** 69% Small-Business, 20% Mid-Market #### What Are Recent G2 Reviews of CrowdSec? **"[It's a real life-saver in terms of hosting stuff](https://www.g2.com/survey_responses/crowdsec-review-8191423)"** **Rating:** 5.0/5.0 stars *— Rei B.* [Read full review](https://www.g2.com/survey_responses/crowdsec-review-8191423) --- **"[Crowdsec best endpoint in SMB](https://www.g2.com/survey_responses/crowdsec-review-11691179)"** **Rating:** 5.0/5.0 stars *— Pramod s.* [Read full review](https://www.g2.com/survey_responses/crowdsec-review-11691179) --- #### What Are G2 Users Discussing About CrowdSec? - [What are the benefits and drawbacks of using CrowdSec for cybersecurity, and what do you recommend for improvement?](https://www.g2.com/discussions/what-are-the-benefits-and-drawbacks-of-using-crowdsec-for-cybersecurity-and-what-do-you-recommend-for-improvement) - [What is CrowdSec used for?](https://www.g2.com/discussions/what-is-crowdsec-used-for) - 1 comment ### 20. [Datto Endpoint Detection and Response (EDR)](https://www.g2.com/products/datto-endpoint-detection-and-response-edr/reviews) Datto EDR is a layered, integrated endpoint security solution that provides continuous monitoring and automated responses to threats that target Windows, Mac and Linux-based endpoints. Going beyond traditional antivirus, Datto EDR records and analyzes endpoint behaviors, proactively identifying and responding to activities that signal potential threats, including zero-day threats, multi-staged attacks, and advanced persistent threats (APTs). Datto EDR offers features tailored for Managed Service Providers (MSPs) and small to midsized enterprises, providing endpoint detection and response in an affordable, user-friendly package. Highlights include an advanced correlation engine to reduce alert fatigue, rapid threat response capabilities, fileless attack detection via behavioral analysis, ransomware detection, ransomware rollback, and integrations with Datto AV, Datto RMM, RocketCyber MDR, and the Kaseya IT Complete platform. **Average Rating:** 4.2/5.0 **Total Reviews:** 25 **How Do G2 Users Rate Datto Endpoint Detection and Response (EDR)?** - **Ease of Admin:** 8.0/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 9.0/10) - **Quality of Support:** 8.0/10 (Category avg: 8.7/10) - **Ease of Use:** 8.1/10 (Category avg: 8.7/10) **Who Is the Company Behind Datto Endpoint Detection and Response (EDR)?** - **Seller:** [Kaseya](https://www.g2.com/sellers/kaseya) - **Company Website:** https://www.kaseya.com/ - **Year Founded:** 2000 - **HQ Location:** Miami, FL - **Twitter:** @KaseyaCorp (17,411 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/kaseya/ (5,471 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 84% Small-Business, 16% Mid-Market #### What Are Datto Endpoint Detection and Response (EDR)'s Pros and Cons? **Pros:** - Centralization Management (5 reviews) - Cost Saving (4 reviews) - Protection (2 reviews) - Security Protection (2 reviews) - App Variety (1 reviews) **Cons:** - Integration Issues (2 reviews) - Compatibility Issues (1 reviews) - Connectivity Issues (1 reviews) - Learning Curve (1 reviews) - Limited Customization (1 reviews) ### What Do G2 Reviewers Say About Datto Endpoint Detection and Response (EDR)? *AI-generated summary from verified user reviews* **Pros:** - Users value the **centralized management** of Datto EDR, streamlining security and enhancing overall peace of mind. - Users value the **cost-effective pricing** of Datto EDR, benefiting from an all-in-one security solution. - Users appreciate the **intuitive dashboard** of Datto EDR, making endpoint security management easy and effective. - Users value the **unified security approach** of Datto EDR, ensuring comprehensive protection for their endpoints. - Users appreciate the **variety of security applications** in Kaseya 365 Endpoint, significantly enhancing their security measures. **Cons:** - Users experience **integration issues** with Datto EDR and RMM, complicating workflow and accessibility of backup information. - Users experience **compatibility issues** with certain applications like Dropbox, requiring frequent exclusions for optimal performance. - Users frequently experience **connectivity issues** , leading to intermittent disconnections from several endpoints. - Users face a **slightly steeper learning curve** with Datto EDR, which can be overwhelming for newcomers. - Users express frustration over limited **customization** in Datto EDR, feeling misled by the product's promised integration. #### What Are Recent G2 Reviews of Datto Endpoint Detection and Response (EDR)? **"[Highly Effective Detection, Seamless Setup](https://www.g2.com/survey_responses/datto-endpoint-detection-and-response-edr-review-12579198)"** **Rating:** 5.0/5.0 stars *— Simon L.* [Read full review](https://www.g2.com/survey_responses/datto-endpoint-detection-and-response-edr-review-12579198) --- **"[Enhanced Security and Peace of Mind](https://www.g2.com/survey_responses/datto-endpoint-detection-and-response-edr-review-11973038)"** **Rating:** 4.0/5.0 stars *— Michael H.* [Read full review](https://www.g2.com/survey_responses/datto-endpoint-detection-and-response-edr-review-11973038) --- ### 21. [Palo Alto Cortex XSIAM](https://www.g2.com/products/palo-alto-cortex-xsiam/reviews) Product Description: Palo Alto Networks' Cortex XSIAM is an AI-driven security operations platform designed to transform traditional Security Operations Centers by integrating and automating key functions such as data centralization, threat detection, and incident response. By leveraging machine learning and automation, it enables organizations to detect and respond to threats more efficiently, reducing manual workloads and improving overall security posture. Key Features and Functionality: - Data Centralization: Aggregates data from various sources into a unified platform, providing comprehensive visibility across the enterprise. - AI-Powered Threat Detection: Utilizes machine learning algorithms to identify anomalies and potential threats in real-time. - Automated Incident Response: Streamlines response processes through automation, enabling rapid mitigation of security incidents. - Integrated SOC Capabilities: Combines functions such as Extended Detection and Response , Security Orchestration, Automation, and Response , Attack Surface Management , and Security Information and Event Management into a cohesive platform, eliminating the need for multiple disparate tools. - Scalability: Designed to handle large volumes of data and adapt to the evolving needs of modern enterprises. Primary Value and Problem Solved: Cortex XSIAM addresses the challenges of disjointed data, weak threat defense, and heavy reliance on manual work in traditional SOCs. By centralizing data and automating security operations, it simplifies processes, enhances threat detection accuracy, and accelerates incident response times. This transformation enables organizations to proactively outpace threats, reduce operational costs, and achieve a more robust security posture. **Average Rating:** 4.4/5.0 **Total Reviews:** 61 **How Do G2 Users Rate Palo Alto Cortex XSIAM?** - **Ease of Admin:** 8.1/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.4/10 (Category avg: 9.0/10) - **Quality of Support:** 8.2/10 (Category avg: 8.7/10) - **Ease of Use:** 8.4/10 (Category avg: 8.7/10) **Who Is the Company Behind Palo Alto Cortex XSIAM?** - **Seller:** [Palo Alto Networks](https://www.g2.com/sellers/palo-alto-networks) - **Company Website:** https://www.paloaltonetworks.com - **Year Founded:** 2005 - **HQ Location:** Santa Clara, CA - **Twitter:** @PaloAltoNtwks (128,951 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/30086/ (22,313 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 48% Enterprise, 29% Mid-Market #### What Are Palo Alto Cortex XSIAM's Pros and Cons? **Pros:** - Ease of Use (50 reviews) - Threat Detection (37 reviews) - Integrations (28 reviews) - Cybersecurity (27 reviews) - Features (27 reviews) **Cons:** - Expensive (28 reviews) - Difficult Learning (17 reviews) - Complexity (14 reviews) - Integration Issues (14 reviews) - UX Improvement (12 reviews) ### What Do G2 Reviewers Say About Palo Alto Cortex XSIAM? *AI-generated summary from verified user reviews* **Pros:** - Users find Palo Alto Cortex XSIAM to be **easy to understand and user-friendly** , enhancing their security product integration experience. - Users value the **effective threat detection** capabilities of Palo Alto Cortex XSIAM, identifying both known and unknown risks. - Users value the **easy integrations** with multiple systems, enhancing the functionality and efficiency of Palo Alto Cortex XSIAM. - Users value the **rapid incident response capabilities** of Palo Alto Cortex XSIAM, enhancing overall cybersecurity effectiveness. - Users appreciate the **intuitive dashboard and easy threat detection** features of Cortex XSIAM, enhancing overall security management. **Cons:** - Users find the **cost of Palo Alto Cortex XSIAM to be prohibitively expensive** , affecting its overall value and accessibility. - Users find the **difficult learning** curve of Palo Alto Cortex XSIAM challenging, especially for non-technical users. - Users find the **complexity** of Palo Alto Cortex XSIAM overwhelming, requiring significant time and expertise to effectively manage. - Users face significant **integration issues** with Palo Alto Cortex XSIAM, affecting overall usability and performance negatively. - Users face **significant UX challenges** with Palo Alto Cortex XSIAM, citing a less intuitive interface and limited customization. #### What Are Recent G2 Reviews of Palo Alto Cortex XSIAM? **"[Palo Alto Cortex XSIAM Streamlines SOC Work with Smart Noise Reduction and Automation](https://www.g2.com/survey_responses/palo-alto-cortex-xsiam-review-12626074)"** **Rating:** 5.0/5.0 stars *— Rohan K.* [Read full review](https://www.g2.com/survey_responses/palo-alto-cortex-xsiam-review-12626074) --- **"[Data Automation, and AI Analytics for Faster Incident Response](https://www.g2.com/survey_responses/palo-alto-cortex-xsiam-review-12675702)"** **Rating:** 4.5/5.0 stars *— Ahmad O.* [Read full review](https://www.g2.com/survey_responses/palo-alto-cortex-xsiam-review-12675702) --- #### What Are G2 Users Discussing About Palo Alto Cortex XSIAM? - [What is IBM Security ReaQta used for?](https://www.g2.com/discussions/what-is-ibm-security-reaqta-used-for) - [What does QRadar stand for?](https://www.g2.com/discussions/what-does-qradar-stand-for) - 1 comment, 1 upvote - [How do I use IBM QRadar?](https://www.g2.com/discussions/how-do-i-use-ibm-qradar) - 1 comment - [What are the key component of IBM QRadar?](https://www.g2.com/discussions/what-are-the-key-component-of-ibm-qradar) - 1 comment - [What is IBM QRadar Siem?](https://www.g2.com/discussions/what-is-ibm-qradar-siem) - 1 comment ### 22. [Symantec Endpoint Detection and Response (EDR)](https://www.g2.com/products/symantec-symantec-endpoint-detection-and-response-edr/reviews) Detect, isolate, and eliminate intrusions across all endpoints using AI, automated incident generation, and unparalleled threat intelligence. **Average Rating:** 4.3/5.0 **Total Reviews:** 12 **How Do G2 Users Rate Symantec Endpoint Detection and Response (EDR)?** - **Ease of Admin:** 6.7/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.9/10 (Category avg: 9.0/10) - **Quality of Support:** 7.5/10 (Category avg: 8.7/10) - **Ease of Use:** 7.6/10 (Category avg: 8.7/10) **Who Is the Company Behind Symantec Endpoint Detection and Response (EDR)?** - **Seller:** [Broadcom](https://www.g2.com/sellers/broadcom-ab3091cd-4724-46a8-ac89-219d6bc8e166) - **Year Founded:** 1991 - **HQ Location:** San Jose, CA - **Twitter:** @broadcom (63,909 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/broadcom/ (55,094 employees on LinkedIn®) - **Ownership:** NASDAQ: CA **Who Uses This Product?** - **Company Size:** 40% Enterprise, 33% Small-Business #### What Are Recent G2 Reviews of Symantec Endpoint Detection and Response (EDR)? **"[Visibility of your environment via EDR](https://www.g2.com/survey_responses/symantec-endpoint-detection-and-response-edr-review-7302232)"** **Rating:** 4.0/5.0 stars *— Verified User in Airlines/Aviation* [Read full review](https://www.g2.com/survey_responses/symantec-endpoint-detection-and-response-edr-review-7302232) --- **"[Review on Symantec EDR](https://www.g2.com/survey_responses/symantec-endpoint-detection-and-response-edr-review-8174333)"** **Rating:** 4.0/5.0 stars *— sai k.* [Read full review](https://www.g2.com/survey_responses/symantec-endpoint-detection-and-response-edr-review-8174333) --- #### What Are G2 Users Discussing About Symantec Endpoint Detection and Response (EDR)? - [What is Symantec Endpoint Detection and Response (EDR) used for?](https://www.g2.com/discussions/what-is-symantec-endpoint-detection-and-response-edr-used-for) ### 23. [Carbon Black Cloud](https://www.g2.com/products/carbon-black-cloud/reviews) The Carbon Black Cloud security platform helps you strengthen and unify security tools to see more and stop more. Carbon Black unifies visibility across your endpoints, networks, and containers to enable you to stop threats targeting your organization with speed and confidence. Carbon Black protects against the full spectrum of modern cyber-attacks, including emerging threats and ransomware. Top SOC teams, IR firms and MSSPs have adopted Carbon Black as a core component of their prevention, detection, and response capability stack. Carbon Black is available via MSSP or directly. **Average Rating:** 4.1/5.0 **Total Reviews:** 38 **How Do G2 Users Rate Carbon Black Cloud?** - **Ease of Admin:** 8.1/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 9.0/10) - **Quality of Support:** 8.4/10 (Category avg: 8.7/10) - **Ease of Use:** 8.2/10 (Category avg: 8.7/10) **Who Is the Company Behind Carbon Black Cloud?** - **Seller:** [Broadcom](https://www.g2.com/sellers/broadcom-ab3091cd-4724-46a8-ac89-219d6bc8e166) - **Year Founded:** 1991 - **HQ Location:** San Jose, CA - **Twitter:** @broadcom (63,909 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/broadcom/ (55,094 employees on LinkedIn®) - **Ownership:** NASDAQ: CA **Who Uses This Product?** - **Top Industries:** Financial Services - **Company Size:** 56% Mid-Market, 33% Enterprise #### What Are Carbon Black Cloud's Pros and Cons? **Pros:** - Ease of Use (2 reviews) - Protection (2 reviews) - Security (2 reviews) - Antivirus Protection (1 reviews) - Artificial Intelligence (1 reviews) **Cons:** - Agent Removal Issues (1 reviews) - Compatibility Issues (1 reviews) - Complex Implementation (1 reviews) - Complex Installation (1 reviews) - Configuration Issues (1 reviews) ### What Do G2 Reviewers Say About Carbon Black Cloud? *AI-generated summary from verified user reviews* **Pros:** - Users find the **ease of use** in Carbon Black Cloud to be exceptional, enhancing their overall experience effortlessly. - Users value the **effective protection** offered by Carbon Black Cloud, ensuring robust security for their digital infrastructure. - Users value the **excellent security features** of Carbon Black Cloud, ensuring robust protection for their digital infrastructure. - Users value the **advanced 24/7 antivirus protection** offered by Carbon Black Cloud, ensuring comprehensive security against threats. - Users appreciate the **advanced AI-powered security features** of Carbon Black Cloud, ensuring effective 24/7 protection at an affordable price. **Cons:** - Users face **agent removal issues** with Carbon Black Cloud, affecting tasks like proctored exams and requiring software reinstallation. - Users struggle with **compatibility issues** on Microsoft operating systems, finding customization necessary for a user-friendly experience. - Users find the **complex implementation** of global blocks and whitelists a significant challenge in Carbon Black Cloud. - Users experience **complex installation** issues, leading to interruptions and the need for software reinstallation during critical tasks. - Users face challenges with **configuration issues** when implementing global blocks or whitelists, making policy updates cumbersome. #### What Are Recent G2 Reviews of Carbon Black Cloud? **"[Powerful Tool for Endpoint and Detection Response](https://www.g2.com/survey_responses/carbon-black-cloud-review-8274401)"** **Rating:** 4.5/5.0 stars *— Mithun C.* [Read full review](https://www.g2.com/survey_responses/carbon-black-cloud-review-8274401) --- **"[The product is good at stopping malicious software/behavior.](https://www.g2.com/survey_responses/carbon-black-cloud-review-10240572)"** **Rating:** 4.0/5.0 stars *— Verified User in Retail* [Read full review](https://www.g2.com/survey_responses/carbon-black-cloud-review-10240572) --- #### What Are G2 Users Discussing About Carbon Black Cloud? - [What is VMware Carbon Black Cloud used for?](https://www.g2.com/discussions/what-is-vmware-carbon-black-cloud-used-for) - [What are the benefits of VMware carbon black to organizations?](https://www.g2.com/discussions/vmware-carbon-black-cloud-what-are-the-benefits-of-vmware-carbon-black-to-organizations) - [What does carbon black software do?](https://www.g2.com/discussions/vmware-carbon-black-cloud-what-does-carbon-black-software-do) - [What is VMware carbon black cloud endpoint?](https://www.g2.com/discussions/what-is-vmware-carbon-black-cloud-endpoint) - [Which of the following are features of VMware carbon black cloud?](https://www.g2.com/discussions/which-of-the-following-are-features-of-vmware-carbon-black-cloud) ### 24. [VIPRE Endpoint Security Cloud](https://www.g2.com/products/vipre-endpoint-security-cloud/reviews) VIPRE Endpoint Security Cloud is a next-generation antivirus (NGAV) platform, a.k.a. Endpoint Protection Platform (EPP), that detects and blocks malicious activity on your Microsoft Windows and Apple MacOS desktops, laptops, and servers. Consistently ranked at the top of independent testing agencies' lists, VIPRE combines excellent detection with low false positives, minimal system impact, and an easy to use mobile-ready administrative console. Packed with other goodies such as integrated vulnerability and patch management, web access control, and DNS protection, VIPRE will keep you safe against even the most sophisticated threats. **Average Rating:** 4.3/5.0 **Total Reviews:** 56 **How Do G2 Users Rate VIPRE Endpoint Security Cloud?** - **Ease of Admin:** 8.5/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.0/10) - **Quality of Support:** 8.5/10 (Category avg: 8.7/10) - **Ease of Use:** 8.4/10 (Category avg: 8.7/10) **Who Is the Company Behind VIPRE Endpoint Security Cloud?** - **Seller:** [VIPRE Security](https://www.g2.com/sellers/vipre-security) - **Year Founded:** 1994 - **HQ Location:** Clearwater, FL - **Twitter:** @VIPRESecurity (8,293 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/11052300/ (233 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services - **Company Size:** 48% Small-Business, 43% Mid-Market #### What Are VIPRE Endpoint Security Cloud's Pros and Cons? **Pros:** - Alert Notifications (1 reviews) - Antivirus Software (1 reviews) - Centralization (1 reviews) - Centralized Management (1 reviews) - Ease of Use (1 reviews) **Cons:** - Backup Issues (1 reviews) - Missing Features (1 reviews) - Needs Improvement (1 reviews) ### What Do G2 Reviewers Say About VIPRE Endpoint Security Cloud? *AI-generated summary from verified user reviews* **Pros:** - Users value the **alert notifications** of VIPRE Endpoint Security Cloud for their timely and effective communication of threats. - Users appreciate the **ease of installation** with VIPRE Endpoint Security Cloud, enjoying its unobtrusive performance. - Users appreciate the **centralized management** of VIPRE Endpoint Security Cloud, simplifying network oversight and administration. - Users value the **central management console** of VIPRE Endpoint Security Cloud for simplifying network management effectively. - Users appreciate the **ease of installation** with VIPRE Endpoint Security Cloud, allowing for a hassle-free experience. **Cons:** - Users note **backup issues** , particularly with the need for improved link restoration from removed emails. - Users note the need for **improved link restoration** features in VIPRE Endpoint Security Cloud for better usability. - Users note that the **restoration of removed email links** needs improvement for a better experience. #### What Are Recent G2 Reviews of VIPRE Endpoint Security Cloud? **"[Love the Ease of Use](https://www.g2.com/survey_responses/vipre-endpoint-security-cloud-review-5257779)"** **Rating:** 4.0/5.0 stars *— Verified User in Marketing and Advertising* [Read full review](https://www.g2.com/survey_responses/vipre-endpoint-security-cloud-review-5257779) --- **"[Great AV software for business environments](https://www.g2.com/survey_responses/vipre-endpoint-security-cloud-review-9096169)"** **Rating:** 4.0/5.0 stars *— Brian B.* [Read full review](https://www.g2.com/survey_responses/vipre-endpoint-security-cloud-review-9096169) --- #### What Are G2 Users Discussing About VIPRE Endpoint Security Cloud? - [How good is Vipre Antivirus?](https://www.g2.com/discussions/how-good-is-vipre-antivirus) - [What is endpoint security used for?](https://www.g2.com/discussions/what-is-endpoint-security-used-for) - [How do I upgrade Vipre endpoint security?](https://www.g2.com/discussions/how-do-i-upgrade-vipre-endpoint-security) - [What is Vipre endpoint security?](https://www.g2.com/discussions/what-is-vipre-endpoint-security) ### 25. [Uptycs](https://www.g2.com/products/uptycs-uptycs/reviews) Uptycs unified CNAPP and XDR platform is a comprehensive security solution designed to protect the full spectrum of modern attack surfaces in your cloud, data centers, user devices, build pipelines, and containers. With a strong focus on DevSecOps, Uptycs offers a powerful combination of CNAPP capabilities, including Cloud Workload Protection Platform (CWPP), Kubernetes Security Posture Management (KSPM), Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlement Management (CIEM), and Cloud Detection and Response (CDR). With Uptycs you also get industry-leading eXtended Detection and Response (XDR) across macOS, Windows, and Linux endpoints, ensuring comprehensive protection, detection, and investigation. Uptycs delivers real-time threat detection, context-rich alerts, and maps detections to the MITRE ATT&CK framework for improved security insights. Uptycs performs scanning of containers for vulnerabilities throughout the CI/CD pipeline, promoting agile DevOps workflows, and reducing risk in production environments. Uptycs seamlessly integrates with existing tools and processes, streamlining operations and improving overall efficiency. Customers also benefit from the flexibility to choose between agent-based and agentless scanning options tailored to their unique cloud workload needs. Discover how Uptycs can transform your security posture with a comprehensive, flexible, and powerful security solution designed to meet the needs of today's complex and rapidly evolving cloud environments. Shift up with Uptycs. KEY DIFFERENTIATORS: 1. Unified & Comprehensive Platform: Uptycs offers a holistic security solution with CNAPP capabilities (CWPP, KSPM, CSPM, CIEM, and CDR) across data centers, laptops, build pipelines, containers, and cloud environments, reducing tool sprawl. 2. Advanced XDR: Industry-leading eXtended Detection and Response for endpoint protection across macOS, Windows, and Linux systems. 3. DevSecOps Focus: Enhanced security for container-based workloads and Kubernetes, supporting agile DevOps workflows. 4. Real-Time Threat Detection: Context-rich alerts and threat detection mapped to the MITRE ATT&CK framework for improved insights. 5. CI/CD Integration: Efficiently scan containers for vulnerabilities throughout the CI/CD pipeline, reducing risk in production. 6. Both agent-based and agentless scanning. Deploy agentless scanning for rapid, friction-free coverage to keep your data secure, and gain continuous runtime security, real-time investigations, and remediation with agent-based telemetry. 7. Rich API & Compatibility: Seamless integration with existing security tools and platforms, powered by osquery for broad compatibility. 8. Expert Support & Flexibility: Dedicated support from security experts and the best of both worlds with agent-based and agentless scanning options tailored to your needs. **Average Rating:** 4.4/5.0 **Total Reviews:** 13 **How Do G2 Users Rate Uptycs?** - **Ease of Admin:** 8.3/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.0/10) - **Quality of Support:** 9.0/10 (Category avg: 8.7/10) - **Ease of Use:** 7.9/10 (Category avg: 8.7/10) **Who Is the Company Behind Uptycs?** - **Seller:** [Uptycs](https://www.g2.com/sellers/uptycs) - **Year Founded:** 2016 - **HQ Location:** Waltham, US - **Twitter:** @uptycs (1,483 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/uptycs/ (134 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Financial Services - **Company Size:** 54% Mid-Market, 38% Enterprise #### What Are Uptycs's Pros and Cons? **Pros:** - Cloud Computing (1 reviews) - Cloud Security (1 reviews) - Cloud Technology (1 reviews) - Compliance (1 reviews) - Compliance Management (1 reviews) **Cons:** - Expensive (1 reviews) - Pricing Issues (1 reviews) ### What Do G2 Reviewers Say About Uptycs? *AI-generated summary from verified user reviews* **Pros:** - Users value Uptycs for its **comparative analysis features** , making it easier to choose the best cloud security tools. - Users appreciate Uptycs for its **comparative analysis feature** , aiding in effective cloud security tool selection. - Users value Uptycs for its **comparative feature** , which aids in selecting the best cloud security tools. - Users appreciate Uptycs for its **compliance with security standards** , enhancing their monitoring and research capabilities. - Users appreciate the **compliance management** features of Uptycs for monitoring security and meeting industry standards. **Cons:** - Users express disappointment over the **high fees** , wishing they could continue using Uptycs without the expensive costs. - Users are deterred by the **high pricing** , which impacts their willingness to continue using Uptycs. #### What Are Recent G2 Reviews of Uptycs? **"[Excellent lightweight EDR with full Mac support](https://www.g2.com/survey_responses/uptycs-review-8402333)"** **Rating:** 4.5/5.0 stars *— Joseph M.* [Read full review](https://www.g2.com/survey_responses/uptycs-review-8402333) --- **"[A unified solution to improve IT management and operations – all in one.](https://www.g2.com/survey_responses/uptycs-review-10769636)"** **Rating:** 4.0/5.0 stars *— Rajitha A.* [Read full review](https://www.g2.com/survey_responses/uptycs-review-10769636) --- ## What Is Endpoint Detection & Response (EDR) Software? [Endpoint Protection Software](https://www.g2.com/categories/endpoint-protection) ## What Software Categories Are Similar to Endpoint Detection & Response (EDR) Software? - [Antivirus Software](https://www.g2.com/categories/antivirus) - [Endpoint Protection Platforms](https://www.g2.com/categories/endpoint-protection-platforms) - [Managed Detection and Response (MDR) Software](https://www.g2.com/categories/managed-detection-and-response-mdr) --- ## How Do You Choose the Right Endpoint Detection & Response (EDR) Software? ### What You Should Know About Endpoint Detection & Response (EDR) Software ### What is endpoint detection and response (EDR) software? EDR software is used to help companies identify and remediate threats related to network-connected endpoints. EDR solutions inform security professionals of vulnerable or infected endpoints and guide them through the remediation process. After incidents have been resolved, EDR tools help teams investigate issues and the vulnerable components that allow an endpoint to become compromised. Continuous monitoring is one of the core capabilities of endpoint detection technologies. These monitoring features provide complete and continuous visibility across a company’s network-connected endpoints. Individuals can monitor behaviors, vulnerabilities, and activity for abnormalities. When abnormalities are identified, the detection portion of EDR technology transitions to the response portion. Endpoint response begins with alerting and containment. Security professionals are alerted of threats present to their systems and isolate potentially compromised endpoints from further network access; this helps prevent one infected endpoint from becoming hundreds. Once systems are properly organized to contain malware and threat actors, security teams can work to remove malware and prevent future access from actors to endpoint devices. EDR platforms store threat data related to security incidents, improving a team's ability to defend against threats in the future by helping them identify root causes and threat actors. Additionally, zero-day exploits may be identified, and other vulnerabilities may be remediated as a result. This will help prevent third-party privilege escalation, malware injection, and unapproved endpoint control from occurring in the future. Some EDR products provide machine learning capabilities to analyze events, improve threat hunting, and reduce false positives by automating protection and remediation processes. ### Key benefits of EDR software - Monitor endpoints and detect issues or security incidents - Remediate present threats to endpoints - Investigate incidents to identify causes - Contain threats and restrict access to other endpoints or networks ### Why use endpoint detection and response solutions? Endpoints are some of the most vulnerable components of a business' network structure. One vulnerable endpoint could cause a company’s entire network, databases, and sensitive information to become exposed or stolen. EDR systems will help secure individual endpoints, detect issues as they arise, and contain threats that make their way beyond traditional security structures. Endpoint protection is even more relevant considering the growing popularity of bring-your-own-device (BYOD) policies. When employees are in complete control over downloads, applications, and updates, security must be a priority. Every day professionals are not the most security-savvy individuals and may unintentionally compromise their devices or put business information at risk. **Zero-day threats—** While traditional prevention tools such as antivirus software or firewall technology are helpful as the first line of defense, zero-day threats are bound to occur. The nature of these threats means they have yet to be discovered and, therefore, cannot be defended against. EDR solutions will help identify new threats as they arise and remediate them before damage occurs. **Visibility and control—** Continuous monitoring and endpoint visibility help defend against traditional malware and sophisticated threats. Monitoring can help identify known threats as they arise and detect minute details that indicate the presence of advanced threats. Hackers are always developing new ways to enter networks undetected through fileless malware or malicious code injection. Monitoring capabilities will improve a team’s ability to detect anomalies caused by outside actors and threats. **Analysis and deterrence —** EDR software improves a security organization’s ability to review the data associated with security events, data breaches, and network attacks. The data collected from these events can be reviewed back to the initial onset and used to identify the vulnerability or exploit used. Once identified, security teams and software developers can work collectively to resolve flaws and prevent similar attacks from occurring in the future. ### What are the common features of EDR products? **Detection—** Detection capabilities result from monitoring practices. Monitoring collects information about properly functioning systems and can be applied to identify abnormal behavior or functionality. Once identified, IT and security professionals are alerted and directed through the review and resolution processes. **Containment —** Once threats are present within an endpoint device, access must be restricted from the greater network and additional endpoints. Often referred to as quarantine features, these capabilities can help protect a network when a threat is detected. **Remediation—** As threats are discovered, they must be dealt with. EDR software allows individuals and security teams to track incidents back to their onset and identify suspicious actors or malware. **Investigation—** After incidents occur, EDR tools collect large amounts of data associated with the endpoint device and provide a historical record of activities. This information can be used to quickly identify the cause of an incident and prevent its reoccurrence in the future. #### Additional EDR features **Behavioral analysis—** Behavior analysis capabilities allow administrators to gain valuable insights into end-user behavior. This data can be used as a reference for monitoring features to compare against and detect anomalies. **Real-time monitoring —** Real-time and continuous monitoring capabilities allow security professionals to constantly monitor systems and detect anomalies in real time. **Threat data documentation—** Event data recording capabilities automate the collection and curation of incident data. This information can alert security teams of the performance and health of a company's endpoint-enabled devices. **Data exploration —** Data exploration features allow security teams to review data associated with security incidents. These data points can be cross-referenced and analyzed to provide insights on better protecting endpoints in the future. ### Potential issues with EDR solutions **Endpoint variety—** Endpoints come in many shapes and sizes, from laptops and servers to tablets and smartphones. A business should ensure that all types of endpoints connected to its network are compatible with a chosen EDR solution. This is especially important for businesses with a large number of BYOD devices that run different operating systems and applications. **Scalability —** Scale refers to the size and scope of your network of connected endpoints. It’s a major consideration because some EDR tools may only facilitate monitoring on a specific number of devices or limit the number of concurrent investigations or remediations. Companies with large pools of endpoints should be sure the solutions they consider can handle the number of endpoints and provide adequate monitoring for the scale of their business and projected growth. **Efficacy —** Efficacy refers to the actual functional benefit of using a software solution. Companies may be wasting their time if security teams are inundated with false positives or conflicting results. This is a key identifier in user reviews and third-party evaluations that buyers should consider when evaluating a product. **Administration and Management —** Companies adopting EDR for the first time should be sure they have sufficient staff equipped with skills relevant to using EDR software. Smaller, growing businesses may not be best suited for adopting complex security systems and may be better served using managed services until the need for security matches their ability to deliver. ### Software and services related to EDR software EDR software is one member of the endpoint protection and security family. These tools provide the remediation component of the endpoint protection process but not all of the prevention and management components in other endpoint security software. [**Endpoint protection suites**](https://www.g2crowd.com/categories/endpoint-protection-suites? __hstc=171774463.81494f0ac47c15794fea57ed705405f2.1607315526284.1610948873867.1611035647295.58&__ hssc=171774463.13.1611035647295&__hsfp=669407890) **—** Endpoint protection suites are sophisticated platforms containing capabilities across all segments of the endpoint security technology world. They include virus and malware protection as well as the administration and management of endpoint devices. [**Endpoint antivirus software**](https://www.g2.com/categories/antivirus) **—** Antivirus technologies are some of the oldest solutions for endpoint security. These tools help prevent malware, computer viruses, and other threats from compromising an endpoint device. These capabilities are present in many security technologies, but antivirus software is specifically dedicated to this kind of protection. [**Endpoint management software**](https://www.g2.com/categories/endpoint-management) **—** Endpoint management software documents, monitors, and manages endpoints connected to a network. These tools ensure that only approved devices access a company’s network and require connected devices to pass specific security requirements before gaining access. This may mean implementing software updates, security scans, or user authentication processes. [**Endpoint security services**](https://www.g2.com/categories/endpoint-security-services) **—** Endpoint security services are a form of managed security services that are often the go-to for organizations without dedicated security staff. These solution providers deliver services surrounding the entire endpoint security stack to reduce a business’s need to manage day-to-day tasks and resolve issues directly. These services will not provide the same level of customization or control but will provide a business with peace of mind until they are capable of handling security issues in-house. **Incident response software—** Incident response software is a term for general security incident management and threat remediation tools. These products are designed to facilitate incident investigation and solve them at the point of attack. These tools may provide some similar forensic analysis capabilities but often do not provide the same endpoint monitoring and control functionality.