Endpoint security

EDR and XDR

Agents and platforms that record endpoint activity to detect, investigate and respond to attacks, extended in XDR to other telemetry sources.

14 vendors · alphabetical, never ranked

• BitdefenderBitdefender sells GravityZone, a platform that consolidates endpoint protection, EDR, XDR and managed detection and response for organizations with lean IT and security teams.Ownership not established · primary category
• BroadcomBroadcom sells Symantec Enterprise Cloud, a security portfolio covering endpoint, network, information and email security, including endpoint detection, response and management products.Public (NASDAQ: AVGO) · primary category
• Check Point Software TechnologiesCheck Point Software Technologies sells network firewalls, a secure access service edge product, email security, and extended detection and response, among other cyber security products.Public (NASDAQ: CHKP)
• FortinetFortinet sells network security products built around its FortiGate firewall line, along with a unified SASE bundle of SD-WAN, ZTNA, CASB and WAF, and a security operations product line spanning SIEM, SOAR, EDR, XDR and NDR.Public (NASDAQ: FTNT)
• KasperskyKaspersky sells the Kaspersky Next product line, which combines endpoint protection with EDR and XDR tools for small and medium-sized businesses.Ownership not established · primary category
• MalwarebytesMalwarebytes sells ThreatDown, a platform that combines endpoint detection and response, identity threat detection and response, vulnerability and patch management, and email security with managed detection and response.Ownership not established · primary category
• MicrosoftMicrosoft sells a set of security products including Defender for extended detection and response, Sentinel for cloud-native SIEM, Purview for data protection and governance, Entra for identity and access, and Intune for endpoint management.Public (NASDAQ: MSFT) · primary category
• Palo Alto NetworksPalo Alto Networks sells network security, security operations, cloud security and identity security products, including firewalls, threat prevention, cloud posture and workload protection, and privileged access management.Public (NASDAQ: PANW)
• SonicWallSonicWall sells next-generation firewalls, a cloud secure edge product, endpoint security and managed detection and response services.Owned by Francisco Partners and Elliott Management since 2016
• SophosSophos sells endpoint protection, a firewall product, and managed detection and response services.Owned by Thoma Bravo since 2020 · primary category
• TaniumTanium sells an autonomous IT platform delivered through a single lightweight agent, providing real-time endpoint visibility, patching, compliance checks and threat detection, along with endpoint management that unifies IT operations and security.Ownership not established
• TrellixTrellix sells an AI-powered security platform built on threat intelligence, machine learning and extended detection and response, including endpoint security products.Owned by Symphony Technology Group since 2022 · primary category
• Trend MicroTrend Micro sells TrendAI Vision One, an enterprise cybersecurity platform covering cloud, endpoint, email, identity and network security, alongside a separate consumer security line.Public (TSE: 4704) · primary category
• WatchGuard TechnologiesWatchGuard Technologies sells network firewalls, identity threat detection and response, AI-powered endpoint detection and response, and a unified platform combining these with multi-factor authentication and secure Wi-Fi.Owned by Vector Capital since 2022

No vendor pays to be listed or to change what we write. Descriptions are ours, drawn from each company's own site and filings. Corrections: /corrections.