Anti-Malware Software

No security suite is entirely without flaws. From an admin standpoint, the nested menus within Sophos Central can occasionally feel a bit convoluted when you are hunting for very specific, granular configuration overrides. Review collected by and hosted on G2.com.

Sophos Endpoint directly resolves the escalating frequency of zero-day exploits, evasive malware, and rapid-fire ransomware attacks by replacing outdated signature methods with predictive deep-learning AL and real-time behavioral monitoring.

For an administrator and end-user alike, it eliminates the chronic blind spots and operational friction caused by distributed or remote workforces through a single, unified cloud management console. By automating complex threat triage, immediate process isolation, and automated file rollbacks via Crypto Guard, the platform successfully slashes alert fatigue and manual investigation overhead. this translates to immense practical benefits, including maximized business continuity, guaranteed data integrity for sensitive client and financial operations, and freed-up administrative bandwidth to focus on proactive infrastructure hardening rather than constant emergency firefighting. Review collected by and hosted on G2.com.

At first, I found it difficult to get used to the console. Having a guided configuration mode for tasks such as installing agents on new PCs, creating basic security policies, applying policies by group, understanding critical alerts, and generating executive reports would be useful. Review collected by and hosted on G2.com.

I use ESET PROTECT to centrally manage the security of many devices. It gives me visibility of the infrastructure, I can apply policies from a single place and see the status of the devices, which is valuable for managing 600 growing devices. Review collected by and hosted on G2.com.

One area I dislike about ManageEngine Endpoint Central is that the interface can sometimes feel cluttered and overwhelming, especially when navigating through advanced features. Some configurations require multiple steps, which can make routine tasks more time-consuming. Improving the UI, simplifying navigation, and providing clearer guidance for certain settings would make the overall experience more user-friendly and efficient. Review collected by and hosted on G2.com.

ManageEngine Endpoint Central helps solve the challenge of managing and securing multiple devices from one centralized platform. It makes tasks like software deployment, patch management, remote troubleshooting, and device monitoring much easier. This saves time, reduces manual work, and helps ensure that endpoints stay updated, secure, and compliant. Review collected by and hosted on G2.com.

Enabling the ability to deploy policy based on username rather than endpoint would be huge, some users may use more than one machine, or get a replacement machine, policies then need to be manually reapplied, if the policy was mapped by username, this would stop the need for manual reassignment Review collected by and hosted on G2.com.

Very good system overall, a few things to be tweaked such as asset tagging, allowing users to be assigned to PC's to help identify, More options to react to threats on custom scans. Review collected by and hosted on G2.com.

With MB we now have enterprise grade AV with high visibility of what is happening on our network. Before we were using standalone products which meant we had to run around quite often when a threat hit, we also had threats going unnoticed as standalone products did not report to us. MB has solved these issues and allowed us to react and protect our users with ease. Review collected by and hosted on G2.com.

The platform has a broad range of capabilities, which can make the initial configuration and tuning somewhat complex. Some advanced features also require additional time and experience to configure effectively. The amount of information available can occasionally be overwhelming for teams that are new to the platform, so having clearly defined use cases and policies from the beginning is helpful. Review collected by and hosted on G2.com.

CrowdStrike helps us improve endpoint security by providing centralized visibility, real-time threat detection, and investigation capabilities across our environment. It reduces the time required to identify and investigate suspicious activity and helps the security team respond to incidents more efficiently. The platform also helps reduce the risk associated with malware, endpoint compromise, and other security threats. Review collected by and hosted on G2.com.

Acronis integrates well with the Microsoft 365 environment, which is useful for protecting cloud data alongside endpoint backups. I also found it convenient to manage endpoint protection and backup activities from the same platform rather than relying on completely separate tools. The centralized approach makes it easier to manage different protection requirements across users and devices. Review collected by and hosted on G2.com.

Acronis helps us centralize backup and protection for endpoints and Microsoft 365 data instead of managing these tasks through separate solutions. It makes day-to-day administration easier by providing a single console for managing devices, protection policies, backups, and alerts. This has helped simplify deployment and monitoring, improve visibility into backup status, and reduce the manual effort required to manage multiple devices and customer environments. Review collected by and hosted on G2.com.

What I dislike about Check Point Harmony Endpoint is that, while it provides strong protection, there are some challenges that impact day-to-day operations.

From a performance perspective, it can be resource-intensive—especially during scans and updates—which may affect endpoint performance and user experience on lower-spec devices.

Regarding UI/UX and onboarding, the initial setup and policy configuration can be complex, with a noticeable learning curve for new teams. Navigating advanced settings and fully understanding policy behavior takes time and experience.

In terms of integrations, while it works very well within the Check Point ecosystem, integration with third-party tools and platforms outside that ecosystem can be limited or require additional effort.

For policy management, there is limited granularity in some scenarios—for example, certain configurations apply at the device level rather than allowing more flexible, user-based policy control.

Looking at support and onboarding, technical support is generally reliable, but response times—especially through email—can sometimes be slower than expected in critical situations.

Finally, from a pricing/ROI standpoint, the pricing model is not very transparent, as it typically requires going through partners or resellers for quotes. This can make it harder to quickly evaluate cost versus value.

Overall, while it is a powerful security solution, these areas can introduce operational friction if not carefully managed. Review collected by and hosted on G2.com.

Check Point Harmony Endpoint solves the challenge of protecting endpoints against increasingly sophisticated and evolving cyber threats, while also simplifying security management across the organization.

Before implementing it, endpoint protection was often fragmented—multiple tools for antivirus, anti-ransomware, and threat detection—making it harder to maintain visibility and respond quickly. Harmony Endpoint consolidates these capabilities into a single platform, providing layered protection against zero-day threats, ransomware, phishing, and advanced malware.

A key benefit is the centralized management console, which allows me to monitor all endpoints, enforce policies, and respond to incidents from one place. This significantly reduces administrative overhead and improves response times when dealing with security events.

From a security standpoint, its behavioral analysis and threat intelligence help detect and prevent attacks that traditional signature-based solutions might miss. This has strengthened our overall security posture and reduced risk exposure.

Additionally, the platform improves consistency and control by applying standardized security policies across all devices, ensuring compliance and minimizing configuration gaps.

Overall, it benefits me by simplifying endpoint security management, improving visibility, reducing operational complexity, and providing stronger, proactive protection against modern threats. Review collected by and hosted on G2.com.

The biggest pain point is policy and exclusion management at scale. Building exclusions is more manual than it should be; there's no clean way to test an exclusion's blast radius before it goes live, so tuning for a noisy line-of-business app on part of the fleet involves more trial-and-error than I'd like. A "preview affected endpoints" step or a staging mode for policy changes would cut real risk out of the process. Deep Visibility is powerful, but the query experience has a learning curve. The syntax isn't intuitive for newer analysts, and saved-query sharing and templating could be better. When I'm onboarding someone, threat hunting is the piece that takes longest to hand off, which partly defeats the "autonomous" pitch for smaller teams. Reporting is the other weak spot. The canned reports rarely match what I need for regulatory or management audiences, so I still end up exporting to build the view myself. More flexible, customisable reporting, or a proper report builder, would save hours each reporting cycle. On macOS, agent updates and OS-version compatibility have occasionally lagged behind Windows, which matters on a mixed fleet where I can't always hold back an OS update on a BYOD device. Tighter macOS parity would help. Console performance can also drag when pulling large time-range queries across the full fleet, and the alert volume before tuning is high enough that early days feel noisier than expected. Review collected by and hosted on G2.com.

The core problem it solves for us is endpoint visibility and response across a mixed Windows/macOS fleet that includes BYOD devices we don't fully control. Before, detection leaned heavily on signature-based tooling that missed behavioural threats and generated noise, and our response was manual; an analyst had to triage, decide, and contain, which meant slow reaction to anything that landed off-hours or while a laptop was off the VPN. Now the on-agent AI detects and auto-mitigates threats locally, so containment doesn't wait on an analyst or a cloud round trip. That's collapsed our mean time to respond to the incidents that matter, and the biggest single win is the one-click rollback on ransomware and malicious changes; reversing endpoint state cleanly has taken reimaging off the table for cases that used to mean hours of rebuild per machine. The second problem was unmanaged devices. We struggled to reliably find rogue or unenrolled endpoints on the network, but Ranger surfaces them without a separate discovery tool, which closed a real gap in our asset visibility and cut a line item from the stack. Third is investigation time. Storyline maps the full attack chain automatically, so triage that used to mean manually reconstructing process trees now takes a few minutes of confirming and acting – meaningfully less analyst time per alert, which for a lean team is the difference between keeping up and falling behind. Net benefit: faster response, less manual rebuild work, tighter asset visibility, and analyst hours redirected from triage to higher-value work. Review collected by and hosted on G2.com.

One thing I found challenging with Chrome Enterprise was getting comfortable with the wide range of management and policy settings. There are so many options that it took me some time to understand which ones were actually appropriate for the environment I was working in. I also found that troubleshooting certain configuration issues could be time-consuming, since it often required checking documentation and digging through multiple settings before I could pinpoint the relevant option. After I became more familiar with the platform, managing everything was much easier overall, but clearer navigation and more beginner-friendly guidance would help make the initial learning curve smoother. Review collected by and hosted on G2.com.

Chrome Enterprise helped me solve the challenge of managing browser settings and policies across multiple work devices without having to configure each one separately. With a centralized management approach, it was much easier to keep everything consistent and to handle extensions, permissions, updates, and access from one place. Because of that, I spent less time on repetitive administrative tasks and found it simpler to maintain the same setup across the devices I was responsible for. Overall, it made day-to-day browser management more structured, more consistent, and less time-consuming. Review collected by and hosted on G2.com.

nothing at all. It solves all of my pressing problems concerning security Review collected by and hosted on G2.com.

securing my workflow and projects Review collected by and hosted on G2.com.

When a customer escalates a problem, put a real person to investigate the issue instead of sending canned messages generated by AI Review collected by and hosted on G2.com.

We allow our customers to upload all sorts for documents, and we needed a tool that could scan online before saving the documents to our systems Review collected by and hosted on G2.com.

The third-party app patch management module doesn’t let you push updates per device or per patch as easily as the OS patch management module does. Some users have also reported that Heimdal sometimes forces restarts after patches are applied, even though we don’t have that option enabled in our baseline settings.

In addition, some of the descriptions within the endpoint settings platform aren’t very clear, which can make it harder to understand what certain options actually do. Review collected by and hosted on G2.com.

Endpoint management oversight gives me a single place to view all endpoints and their IP addresses. This makes it much easier to troubleshoot issues, quickly identify which endpoint is having problems, and confirm who it belongs to.

One of our company requirements is to maintain a software database that is controlled and secure, while still being available for end users to access the software whenever they need it, without having to rely on the OEM's website.

Having the confidence and the evidence, that endpoints are receiving their updates has been integral to passing Cyber Essential audits. Review collected by and hosted on G2.com.

The firewall and rules have vastly improved and I can see any data I need from just a click or two. Review collected by and hosted on G2.com.

My problem was I was always chasing cyber criminals trying to stay a head of what they do and how they do it. This product allows me to focus on other security issues and I know that no malicious activity is going on in my environment. It has saved me countless hours in review of my environment. The reporting is great and I can get reports now of the files and activity that I can use to meet compliances. Review collected by and hosted on G2.com.

The only downside is the simplicity (best-selling point). The support engineers provide full logs or other hardware information, like network MAC addresses. Review collected by and hosted on G2.com.

Coro ensures we have a fully managed EDR system, so we are compliant with the requirements of our cybersecurity insurance policy. It works around the clock, so our small tech team doesn't have to watch the store, and can focus efforts on more strategic work for our event. Review collected by and hosted on G2.com.

I do not have any dislikes about BlackFog. In my 30 plus years in the IT industry, this software and the company is the best I have worked with. They have went over and above to make sure I am proficient on using the software. I have zero questions that have went unanswered about using the software. Review collected by and hosted on G2.com.

The data in the healthcare industry is a big target for bad actors wanting your information. It is a constant battle with every new peice of software and technology that comes out to keep things secure. BlackFog is another tool that administrators can benefit from by running on the inside looking out. It helps us by protecting our data from the biggest threat that most companies have and that is the uneducated end user. Blackfog can geoblock, prevent malicious and questionable programs from executing, monitor the dark web for your information, and shut down malicious advertising when browsing. It monitors programs trying to run and what data leaves the workstation or server. A great feature to the software is the abilty to easily pull information on anything that triggers a positive. This gives you more information on what, who, when and where that is going on and gives you the critical information you need to decide what actions if any need to be taken. Review collected by and hosted on G2.com.

There are sometimes that HitmanPro ends up detecting false positives. Also, it's tendency to halt operating system operations when certain false positives are detected can be annoying. Review collected by and hosted on G2.com.

Cybersecurity is a major business consideration for attorneys like myself. Hitman Pro provides an extra layer of defense that makes overall cybersecurity more manageable. Review collected by and hosted on G2.com.

The client on a PC has multiple .exe files in the zip, and it seems like overcooking it. I don't like that unless you buy up to EMS, their is no support. I did find a bug and was told they can't help me as I don't pay for EMS.

If you change the group of traffic you want to bring over the split tunnel it drops all connections instantly vs waiting till clients reconnect to push the config. This causes issues where your users are effected and you have to plan this simple change as maintenance. Review collected by and hosted on G2.com.

I don't use it for Endpoint Management like it says above. That is a required field here and an option in EMS not the free version. Connecting clients remotely is what we use it for. We also use it to identify traffic that has been MFA'd (VPN connected clients get a special subnet) and then allow them access to servers that require MFA being supplied somewhere in the chain. Review collected by and hosted on G2.com.

I don’t see anything to complain really at this stage Review collected by and hosted on G2.com.

Bastion Technologies is taking off me the burden of thinking about cyber and cover all items I need to protect my start up. I do not have time or knowledge to compare all solutions and know what is required for me. Bastion is tailored for SMBs and this is saving me hours and headaches. I set it up quickly, support is super responsive when I had a question, and then I could fix all my issues on my own. Even my employees liked the trainings and phishing simulations and are challenging themselves with it. In a word Bastion is taking all the brain power and risks of cyber off me. Review collected by and hosted on G2.com.

runs some services in background constantly which can slow the system of older versions Review collected by and hosted on G2.com.

we can have local and cloud backups in offsite securely. Also, we can schedule the backup processes as per our requirement and auto delete the older backups if not required. This helps my business in managing the backups efficiently for software projects Review collected by and hosted on G2.com.

One of the things that might be an issue is that with the automation of this product, you sometimes forget it's there running. Review collected by and hosted on G2.com.

Powertech Antivirus is the security we need for customers who access our file system from outside of our protected sources. This is great for our security knowing that if someone from another company we do not manage is compromised, that we are still protected. Review collected by and hosted on G2.com.