An endpoint detection and respons platform (EDR) is a solution deployed on endpoint devices to harden endpoints, prevent malware and malicious attacks, and to provide the investigation and remediation capabilities needed to dynamically respond to security incidents when they evade protection controls.
Endpoint security has evolved from traditional antivirus software to providing comprehensive protection from sophisticated malware and evolving zero-day threats.
Challenges
Traditional EDR solutions have been delivered via a client agent managed by an on-premises management server.
More modern solutions utilize a cloud-native architecture that shifts the management and some of the analysis and detection workload to the cloud.
How can this technology help you?
Typically, endpoint security software will include these key components:
Machine-learning classification to detect zero-day threats in near real time
Advanced antimalware and antivirus protection to protect, detect, and correct malware across multiple endpoint devices and operating systems
Proactive web security to ensure safe browsing on the web
Data classification and data loss prevention to prevent data loss and exfiltration
Integrated firewall to block hostile network attacks
Email gateway to block phishing and social engineering attempts targeting your employees
Actionable threat forensics to allow administrators to quickly isolate infections
Insider threat protection to safeguard against unintentional and malicious actions
Centralized endpoint management platform to improve visibility and simplify operations
Endpoint, email and disk encryption to prevent data exfiltration
Request more information about EDR solutions
vendors
