17 years helping Canadian businesses
choose better software
Endpoint Detection and Response Software
Endpoint Detection And Response (EDR) software helps organizations protect their networks from malicious software that can enter the system via endpoint devices.
Capterra offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links.
Learn more
Featured software
Most reviewed software
Explore the most reviewed products by our users on the Endpoint Detection and Response Software
Filter Results (157)
Countries available
Countries where the product is available. Note: Customer support may not be accessible in that country.
Canada
Pricing Options
Product type
157 results
Sort by
Threat detection and response backed by an in-house 24/7 SOC, no annual contract required.
Learn more about ConnectWise SIEM
ConnectWise SIEM (formerly Perch) offers threat detection and response backed by an in-house Security Operations Center (SOC). Defend against business email compromise, account takeovers, and see beyond your network traffic. Our team of threat analysts does all the tedium for you, eliminating the noise and sending only identified and verified treats to action on. Built with multi-tenancy, ConnectWise SIEM helps you keep clients safe with the best threat intel on the market.
Learn more about ConnectWise SIEM
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
Comprehensive Endpoint Detection and Response so you can be proactive in the fight against cyber threats.
Learn more about ThreatLocker
ThreatLocker® Detect has an edge over other EDR tools in detecting and responding to potential threats. Its advanced technology identifies and addresses known malicious activities while providing extensive coverage of events beyond just known ones.
ThreatLocker® Detect automated responses can give information, enforce rules, disconnect machines from the network, or activate lockdown mode quickly. When Lockdown mode starts, it blocks all activities, including task execution, network access, and storage access, ensuring maximum security.
With the capability of detecting remote access tools or PowerShell elevation, ThreatLocker® Detect also identifies events such as abnormal RDP traffic or multiple failed login attempts. Furthermore, the platform can determine if an event log is erased or if Windows Defender finds malware on a device. This proactive approach enables organizations to swiftly identify and respond to potential threats before they can cause significant damage.
Learn more about ThreatLocker
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
A complete XDR solution with timely incident alerts, environment monitoring, and expert input that supports full compliance.
Learn more about Heimdal XDR
The Heimdal XDR brings together 10 essential tools and security expertise to provide you with the ultimate protection you need.
You can eliminate the complexity of managing multiple security solutions and gain a comprehensive, integrated approach to cybersecurity.
Keep your endpoints, networks, emails, data and everything in between safe from cyber threats.
The platform comes equipped with an Action Center, which allows for seamless and efficient one-click automated and assisted actioning.
Learn more about Heimdal XDR
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
An endpoint detection & response suite that takes threat hunting, prevention and remediation to the next level. 1 agent, 6 solutions.
Learn more about Heimdal Endpoint Detection and Response (EDR)
A seamless EDR solution that consists of six top-of-the-line products working in unison to hunt, prevent, and remediate any cybersecurity incidents that might come your way. The products in question are Heimdal Threat Prevention (DNS-based security), Patch & Asset Management, Ransomware Encryption Protection, Next-Gen Antivirus, Privileged Access Management, and Application Control. The suite can be further enhanced with any available Heimdal module. One agent, up to 9 unified solutions.
Learn more about Heimdal Endpoint Detection and Response (EDR)
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
Prevent macOS malware, detect from Mac-specific threats, and monitor endpoints for compliance with Jamf Protect.
Learn more about Jamf Protect
Jamf Protect provides a complete endpoint protection solution to maintain macOS compliance, prevent macOS malware, detect and remediate Mac specific threats with minimal impact to the enduser experience. With known customizable prevention, intuitive dashboards, real-time alerts, and extensive reporting all of which is designed only for Macs, you can be certain that your Mac fleet is well secured and you always have full visibility into your Apple computers.
Learn more about Jamf Protect
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
Kandji EDR is purpose-built to detect and stop threats on Mac computers and is deployed alongside MDM in a unified agent.
Learn more about Kandji
Kandji Endpoint Detection & Response (EDR) is purpose-built to detect and stop threats on Mac computers. Armed with hundreds of millions of malware definitions, data from the world’s leading threat feeds, and a team of threat researchers feeding the detection engine, our threat intelligence for Mac is among the world’s most comprehensive.
Kandji EDR is deployed alongside MDM in a unified agent and monitors all files and applications on the Mac.
Learn more about Kandji
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
Keep your enpoints under control 24/7 with the ability to detect and respond to threats within just 20 minutes.
Learn more about UnderDefense MAXI
Experience the power of UnderDefense MAXI, an endpoint security platform. Uniting seamless threat detection, real-time intelligence, and expert incident response, MAXI secures your cloud, on-premise, and hybrid landscapes, regardless of your organization's size. Elevate your protection, with the ability to detect and respond to threats within just 20 minutes.
Learn more about UnderDefense MAXI
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
The only XDR Solution that delivers endpoint security, Network Security, Deception & active Directory protection in a single platform.
Learn more about Fidelis Elevate
Fidelis Elevate, an active XDR platform, fortifies cyber security by automating defense operations across diverse network architectures. It seamlessly extends security controls from traditional networks to the cloud and endpoints, making it the powerhouse of a cyber-resilient environment. As the only purpose-built XDR platform for proactive cyber defense, Fidelis Elevate offers contextual visibility and integrated deception for swift threat detection, hunting, and response.
Fidelis Elevate is the only XDR platform that offers:
Comprehensive Active Directory Defense, 300+ Field Contextual Traffic analysis, Integrated Deception Technology, Intelligent Active Threat Detection with MITRE ATT&CK Mapping, AI-driven Sandbox Analysis, In-band Traffic Decryption Network DLP, Risk-Aware Terrain Mapping and more...
Learn more about Fidelis Elevate
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
Uninterrupted protection for organizations with 250+ employees, multiplatform cyber risk management and 24/7 ESET expertise on call.
Learn more about ESET PROTECT MDR
ESET's MDR service represents the most densely multilayered and effective cybersecurity approach in the world. The MDR service takes ESET's cutting-edge technology and augments it with hands-on expertise, delivered 24/7/365, ensuring antimalware technology and strategy are perfectly aligned. With full XDR capabilities thanks to ESET Inspect, the XDR-enabling component, this is the optimal approach to securing your enterprise.
Learn more about ESET PROTECT MDR
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
Cybersecurity to prevent data breaches for organizations with 250+ employees, covering a suite of devices, networks, and applications.
Learn more about ESET Endpoint Security
ESET Endpoint Security software is a cloud-based and on-premises application for internet security and malware protection. It has a global user base that comprises businesses of every size. Cloud sandbox technology enables users to protect their mobile devices, laptops, and desktops against ransomware, zero-day attacks, and data breaches. It features file, bot, and mail protection, along with remote device management, virtualization security, firewall set-up, and web control.
Learn more about ESET Endpoint Security
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
Cloud-based Endpoint Detection and Response (EDR) with 72-hour ransomware recovery for Windows PCs, Windows servers and Linux servers.
Cloud-based Endpoint Detection and Response (EDR) with 72-hour ransomware recovery for Windows PCs, Windows servers and Linux servers. Rated #1 for ease-of-use to help businesses identify, analyze, and remediate threats on a unified platform.
Learn more about Malwarebytes for Business
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
On-prem & cloud-based unified endpoint management and security tool that helps manage organization endpoints from single console.
Endpoint Central is a unified endpoint management solution that helps in managing servers, laptops, desktops, smartphones, & tablets from a central location. Using either an on-premise or a cloud-based UEM allows you to automate regular endpoint management routines like installing patches, deploying software, imaging & deploying OS, manage mobiles & BYOD devices, remote troubleshooting, modern management & much more! It also has a mobile app that allows you to manage endpoints anywhere, anytime!
Learn more about ManageEngine Endpoint Central
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
DNS web content & security filter for business that blocks malware, ransomware and phishing + provides advanced web content control.
WebTitan is a DNS Based Web content filter and Web security layer that blocks cyber attacks, malware, ransomware and malicious phishing as well as providing granular web content control.
WebTitan DNS filtering filters over 2 billion DNS requests every day and identifies 300,000 malware iterations a day.
Our intelligent AI driven real time content categorization engine combines industry leading anti-virus and cloud based architecture.
Try a free Trial of WebTitan today, full support included.
Learn more about WebTitan
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
500,000 reasons to try Paessler PRTG: That's the number of users that rely on it every day. Why not start your trial right away?
Say hello to Paessler PRTG, our award-winning monitoring solution. It takes care of everything happening in your IT, OT and IoT infrastructures, featuring an easy-to-use and intuitive interface, as well as our mind-blowing customer support. PRTG scales from small to enterprise environments, making life so much easier for our customers with growing networks, as they can simply stick with PRTG. Plus, it obviously saves costs by avoiding critical outages, while optimizing the overall network quality.
Learn more about PRTG
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
Prevent major issues, adapt quickly, and be ready for anything with unified security and observability, powered by AI.
Splunk is the key to enterprise resilience. Trusted by the world’s leading organizations to keep their digital systems secure and reliable, Splunk can prevent major issues, absorb shocks, and accelerate transformation. With visibility into all your digital systems, you can respond to incidents before they have bigger business impacts. Take the next steps to make your organization more resilient with the all-in-one unified security and observability platform.
Learn more about Splunk Enterprise
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
Cybersecurity solution that provides with licensing options to fit the protection needs of businesses, datacenters, and public cloud.
GravityZone is built from the ground up for virtualization and cloud to deliver business security
services to physical endpoints, mobile devices, virtual machines in private, public cloud and Exchange
mail servers.
GravityZone Enterprise Security provides flexible licensing options to fit the protection needs of your offices, datacenters and public
cloud. All security services are delivered from one virtual appliance to install on premise covering all endpoints across your environment.
Learn more about Bitdefender GravityZone
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
Local product
Webroot Business Endpoint Protection
4.5
(213)
Local product
Local product
Multi-vector protection against viruses and malware offering full protection against all of today's sophisticated malware threats.
Multi-vector protection against viruses and malware offering full protection against all of today's sophisticated malware threats including Trojans, keyloggers, phishing, spyware, back-doors, rootkits, zero-day and advanced persistent threats. Built in Identity & Privacy Shield stops data being stolen or captured when using the Internet and the outbound firewall also stops malware stealing data. No need to worry about or run updates, cloud-driven security means endpoints are always up to date.
Learn more about Webroot Business Endpoint Protection
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
The JumpCloud Directory Platform reimagines the directory as a complete platform for identity, access, and device management.
JumpCloud® delivers a unified open directory platform that makes it easy to securely manage identities, devices, and access across your organization. With JumpCloud, IT teams and MSPs enable users to work securely from anywhere and manage their Windows, Apple, Linux, and Android devices from a single platform. JumpCloud is IT Simplified.
Learn more about JumpCloud Directory Platform
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
Safetica is a global software company that provides Data Loss Prevention and Insider Risk Management solutions to organizations.
Safetica is an integrated Data Loss Prevention (DLP) and Insider Risk Management (IRM) solution, which helps companies to identify, classify, and protect sensitive data as well as detect, analyze, and mitigate risks posed by insiders within an organization.
Safetica covers the following data security solutions:
Data Classification
Data Loss Prevention
Insider Risk Management
Cloud Data Protection
Regulatory compliance
Whether deployed on-premise or in the cloud, our solution is designed to protect business-critical data against accidental leaks and intentional theft in today's hybrid landscape.
Learn more about Safetica
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
Maintain complete endpoint visibility and inventory of all software with Automox's cloud-based platform.
Automox allows you to maintain complete visibility into the endpoints and software used in your organization's day-to-day operations, while also providing the information needed to manage patching, risk mitigation, and endpoint hardening decisions. With Automox, you'll have the ability to see all endpoints and applications from a single console which enables administrators to identify misconfigured systems, missing patches, or compliance issues.
Learn more about Automox
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
WatchGuard EDR responds to known and unknown threats by providing visibility and controlling applications running on the network.
WatchGuard Endpoint Security delivers the technologies required to stop advanced cyberattacks on endpoints, including next-gen antivirus, EDR, ThreatSync (XDR), and DNS filtering solutions. WatchGuard EDR provides powerful endpoint detection and response protection from zero-day attacks, ransomware, cryptojacking, and other advanced targeted attacks using new and emerging machine-learning and deep-learning AI models.
Learn more about WatchGuard Endpoint Security
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
Ivanti Connect Secure offers a seamless SSL VPN for secure remote access from any web-enabled device and location.
Ivanti Connect Secure is a SSL VPN solution that grants remote and mobile users secure access to corporate networks from any web-enabled device. It provides a unified client for both remote and on-site access, integrating with directory and identity services, EMM/MDM, SIEM, and advanced firewalls. The solution features dynamic adaptive multi-factor authentication, including biometrics, TOTP, SAML 2.0, PKI, IAM, and digital certificates, ensuring secure connections. It enforces endpoint compliance, allowing only approved devices to connect.
Learn more about Ivanti Connect Secure
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
Cybersecurity with AI-powered prevention, detection, response and hunting in a single autonomous XDR platform.
At SentinelOne, we are redefining cybersecurity by pushing the boundaries of autonomous technology. Our Singularity ️XDR Platform encompasses AI-powered prevention, detection, response, and threat hunting across user endpoints, containers, cloud workloads, and IoT devices. Empowering modern enterprises to defend faster, at greater scale, and with higher accuracy across their entire attack surface.
Learn more about SentinelOne
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
Teramind tracks employee behavior, detects threats, and optimizes your business for productivity with advanced employee monitoring.
Discover Teramind - the ultimate tool for businesses looking to optimize productivity, streamline workflows, and protect assets. Our customizable platform ensures regulatory compliance, detects and prevents insider threats, and monitors remote employees. Automated actions keep your business secure and efficient, while real-time alerts and logs provide all-around security. Experience the power of machine-learned behavior analytics to secure your company data. Ready to revolutionize your business?
Learn more about Teramind
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
Microsoft 365 Defender enables businesses to stop attacks with automated, cross-domain security and built-in AI.
Microsoft 365 Defender stops attacks with automated, cross-domain security and built-in AI. As threats become more complex and persistent, alerts increase, and security teams are overwhelmed. Microsoft 365 Defender, part of Microsofts XDR solution, leverages the Microsoft 365 security portfolio to automatically analyze threat data across domains, building a complete picture of each attack in a single dashboard. With this breadth and depth of clarity defenders can now focus on critical threats.
Learn more about Microsoft 365 Defender
...
Read more
Features
- Anomaly/Malware Detection
- Whitelisting/Blacklisting
- Prioritization
- Remediation Management
- Continuous Monitoring
Endpoint Detection and Response Software Buyers Guide
Table of Contents
What is endpoint detection and response (EDR) software?
Endpoint detection and response (EDR) software helps organizations continuously monitor, investigate, and respond to active threats that target network endpoints.
An effective EDR system should include the following capabilities:
- Incident data search and investigation
- Alert triage or suspicious activity validation
- Suspicious activity detection
- Threat hunting or data exploration
- Stopping malicious activity
EDR software is closely related to endpoint protection software , cybersecurity software , network security software , and vulnerability management software .
The benefits of EDR software
Network breaches are becoming more prevalent and most of the breaches are initiated via endpoints such as desktops, mobile devices, or servers. A well-implemented EDR strategy offers tremendous benefits, such as:
- Real-time protection against new threats: AV-Test, an IT security company, registers over 350,000 new malware and potentially unwanted applications every day. EDR software collects endpoint data that offer granular visibility around patterns, behavior, and other clues to identify and highlight potentially harmful applications and new malware in real time. Availability of real-time information can help IT teams safeguard networks from both existing and new threats.
- Proactive cyber defense using data analytics: EDR solutions are not just restricted to securing endpoints and networks—they also help in investigating threats. EDR solutions continuously monitor online and offline endpoints, and collect data on historical events that can be used to map out guidelines to prevent future incidents. These solutions also provide intelligent feeds to IT security teams that can help them avoid critical damage before it’s too late.
Typical features of EDR software
- Alerts/notifications: Send alerts and notify critical stakeholders whenever the solution discovers a threat or anomaly in the network.
- Anomaly/malware detection: Scan and detect potentially dangerous and harmful software that can disrupt or damage an endpoint or gain unauthorized access to a network.
- Reporting/analytics: View and track metrics related to network security.
- Remediation management: Identify and implement steps to restore systems to optimal conditions.
- Behavioral analytics: Continuously track the behavior of the systems connected to a network to check for anomalies.
- Continuous monitoring: Continuously assess and monitor system health and application usage.
Considerations when purchasing endpoint detection and response software
- Basic vs. high-end EDR solution: EDR software typically begins by collecting, storing, and analyzing large amounts of data which it uses to offer security insights to IT teams. Basic solutions may simply collect data and present the information on the screen; the decision to quarantine or delete infected files depends on the in-house security experts. Advanced solutions, on the other hand, may analyze the scan results and then self-clean the system.
- Cloud vs. on-premise: Cloud deployment of the software offers benefits such as a lower upfront cost, faster service delivery, and remote management. But it stores your data on third-party servers, which limits your control over your data. If you’re willing to share your business and security data with a third-party service provider, opt for cloud-based option; otherwise, go with on-premise deployment.
Relevant EDR software trends
- EDR market to grow: The EDR market is expected to grow at almost 50% annually through 2020 , and most large enterprises will have EDR capabilities by 2025.The growth will be driven by the fact that current EDR implementation spans only 40 million endpoints; there are over 711 million desktops, laptops and other devices that can still utilize this software.
- EPP and EDR to consolidate: Endpoint protection platforms (EPP) will consolidate with EDR in the near future, triggered by businesses no longer solely relying on protection solutions; they need more advanced solutions that can detect and respond to live threats while constantly protecting the networks. Approximately 40% of EDR deployments are using both EDR and EPP from the same vendor. Going forward, vendors will bundle their EPP and EDR offerings into one consolidated application.
- Machine learning and AI : EDR applications collect huge amount of data every minute. It’s not possible for humans to manage and analyze such volume of data. That's why vendors are now adding AI capabilities to their solutions to speed up the scanning process and proactively detect threats. Machine learning helps identify new practices of attacks and update the application based on ever-changing user and endpoint behavior.
