Leaders

High Performers

Contenders

Niche

Market Presence

Satisfaction

See Reviews

G2 Grid® Scoring

Endpoint Detection & Response (EDR) Software Definition

Endpoint detection and response (EDR) software is the newest member of the endpoint security family. EDR tools combine elements of both endpoint antivirus and endpoint management solutions to detect, investigate, and remove any malicious software that penetrates a network’s devices. EDR solutions give greater visibility of a system’s overall health including each specific device’s state. Companies use these tools to mitigate endpoint penetrations quickly and prevent data loss, theft, or system failures. They are typically used as a complement to larger security systems such as security information and event management (SIEM), vulnerability management, and incident response tools.

The best EDR software solutions record and store system behaviors, employing various data analytics techniques to identify suspicious activities. They also provide contextual information, block malicious actions, and offer remediation suggestions to restore affected systems.

To qualify for inclusion in the Endpoint Detection and Response (EDR) category, a product must:

• Alert administrators when devices have been compromised
• Search data and systems for the presence of malware
• Possess analytics and anomaly detection features
• Possess malware removal features

Endpoint Detection & Response (EDR) Grid® Scoring Description

• Products in the Leader quadrant are rated highly by G2 users and have substantial Market Presence scores. Leaders include: ThreatDown, Sophos Endpoint, Huntress Managed EDR, Acronis Cyber Protect Cloud, ESET PROTECT, Microsoft Defender for Endpoint, Arctic Wolf, CrowdStrike Falcon Endpoint Protection Platform, SentinelOne Singularity, Cynet - All-in-One Cybersecurity Platform, N-able N-central, N-able N-Sight RMM, Kaspersky Endpoint Detection and Response, and Cisco Secure Endpoints
• High Performing products have high customer Satisfaction scores and low Market Presence compared to the rest of the category. High Performers include: Coro Cybersecurity, ThreatLocker, Acronis Cyber Protect, Todyl Security Platform, DefenseStorm, SanerNow, and Field Effect MDR
• Contender products have relatively low customer Satisfaction scores and high Market Presence compared to the rest of the category. While they may have positive reviews, they do not have enough reviews to validate those ratings. Contenders include: Trend Vision One, IBM MaaS360, Palo Alto Cortex XSIAM, WatchGuard Endpoint Security, Cortex XDR, Carbon Black EDR, Bitdefender GravityZone, FortiEDR, Trellix Endpoint Security, and Barracuda Managed XDR
• Niche products have relatively low Satisfaction scores and low Market Presence compared to the rest of the category. While they may have positive reviews, they do not have enough reviews to validate those ratings. Niche products include: Cybereason Defense Platform, N-able Endpoint Detection and Response (EDR), WithSecure Elements Endpoint Detection and Response, Datto Endpoint Detection and Response (EDR), Heimdal®, Wazuh - The Open Source Security Platform, Intezer, Uptycs, Symantec Protection Suite Enterprise Edition, CrowdSec, Symantec Endpoint Detection and Response (EDR), and Xcitium