# Best Endpoint Detection & Response (EDR) Software for Small Business - Page 2 *By [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)* Products classified in the overall Endpoint Detection & Response (EDR) category are similar in many regards and help companies of all sizes solve their business problems. However, small business features, pricing, setup, and installation differ from businesses of other sizes, which is why we match buyers to the right Small Business Endpoint Detection & Response (EDR) to fit their needs. Compare product ratings based on reviews from enterprise users or connect with one of G2's buying advisors to find the right solutions within the Small Business Endpoint Detection & Response (EDR) category. In addition to qualifying for inclusion in the Endpoint Detection & Response (EDR) Software category, to qualify for inclusion in the Small Business Endpoint Detection & Response (EDR) Software category, a product must have at least 10 reviews left by a reviewer from a small business. ## Top Endpoint Detection & Response (EDR) Software at a Glance | # | Product | Rating | Best For | What Users Say | |---|---------|--------|----------|----------------| | 1 | [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) | 4.6/5.0 (417 reviews) | AI-driven endpoint threat detection and real-time response | "[Crowdstrike Falcon: Proactive Security, Steep Learning Curve](https://www.g2.com/survey_responses/crowdstrike-falcon-endpoint-protection-platform-review-12958852)" | | 2 | [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) | 4.7/5.0 (791 reviews) | Ransomware rollback with synchronized endpoint-firewall detection | "[Excellent fleet visibility through Sophos Central, but watch the initial policy exceptions"](https://www.g2.com/survey_responses/sophos-endpoint-review-12955748)" | | 3 | [Acronis Cyber Protect Cloud](https://www.g2.com/products/acronis-cyber-protect-cloud/reviews) | 4.7/5.0 (1,371 reviews) | EDR with integrated ransomware rollback and backup | "[Easy Deployment, Intuitive Management, and Great Value](https://www.g2.com/survey_responses/acronis-cyber-protect-cloud-review-13120536)" | | 4 | [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) | 4.8/5.0 (886 reviews) | Human-led threat hunting with 24/7 SOC remediation | "[My Time Using Huntress](https://www.g2.com/survey_responses/huntress-managed-edr-review-9860826)" | | 5 | [ESET PROTECT](https://www.g2.com/products/eset-protect/reviews) | 4.6/5.0 (962 reviews) | Centralized behavioral threat detection across distributed endpoints | "[Great product placing ESET at the top of the list](https://www.g2.com/survey_responses/eset-protect-review-10057911)" | | 6 | [ThreatDown](https://www.g2.com/products/threatdown/reviews) | 4.6/5.0 (1,045 reviews) | Lightweight EDR with centralized multi-endpoint remediation | "[Excellent tool for End point defence as part of our Cyber Defence](https://www.g2.com/survey_responses/threatdown-review-9947439)" | | 7 | [Check Point Endpoint Security](https://www.g2.com/products/check-point-endpoint-security/reviews) | 4.5/5.0 (254 reviews) | Behavioral threat prevention with automated ransomware rollback | "[efficient, safe and friendly](https://www.g2.com/survey_responses/check-point-endpoint-security-review-7171717)" | | 8 | [Arctic Wolf](https://www.g2.com/products/arctic-wolf/reviews) | 4.7/5.0 (276 reviews) | Concierge-delivered SOC with 24/7 endpoint threat triage | "[Effortless Log Management and Monitoring with Built-In Parsers](https://www.g2.com/survey_responses/arctic-wolf-review-12190051)" | | 9 | [TrendAI Vision One](https://www.g2.com/products/trendai-vision-one/reviews) | 4.7/5.0 (246 reviews) | Cross-layer XDR threat correlation with unified console | "[Scalable Security with Easy Setup, Needs Better Training Support](https://www.g2.com/survey_responses/trendai-vision-one-review-12800247)" | | 10 | [Iru](https://www.g2.com/products/iru/reviews) | 4.7/5.0 (819 reviews) | Apple-native EDR with unified compliance enforcement | "[Intuitive, Powerful Endpoint Management That Is Getting Better](https://www.g2.com/survey_responses/iru-review-13067999)" | --- ## What Are the Most Common Questions About Endpoint Detection & Response (EDR) Software? *AI-generated · Last updated: May 26, 2026* ### Which EDR platform integrates with SIEM tools? Based on G2 reviews, several Endpoint Detection & Response (EDR) software products are mentioned as fitting SIEM-related workflows, but CrowdStrike Falcon Endpoint Protection Platform appears most often in recent reviews for this use case. According to verified users, it helps centralize telemetry, supports faster investigations, and is used to correlate endpoint events with broader security operations. G2 reviewers also mention Elastic Security and Sophos Endpoint in SIEM-oriented environments, though comments there are more limited or note some logging gaps. For buyers evaluating Endpoint Detection & Response (EDR) software, recent G2 feedback points to demand for centralized visibility, faster triage, and easier incident analysis when integrating endpoint data into wider monitoring processes. CrowdStrike Falcon Endpoint Protection Platform is the most frequently referenced option in the recent review set for this use case. ### Which is the best EDR platform for threat detection? Based on G2 reviews, CrowdStrike Falcon Endpoint Protection Platform is the most frequently reviewed product in the recent data for threat detection use cases. According to verified users, it is often praised for behavior-based detection, strong visibility across endpoints, and fast identification of malware, ransomware, fileless attacks, and suspicious activity. G2 reviewers mention that it helps reduce blind spots, improves investigation speed, and supports organized response workflows. Buyers comparing Endpoint Detection & Response (EDR) software should note that reviewers also mention alert noise, pricing concerns, and a learning curve, but the strongest recurring theme is confidence in detection depth and real-time visibility. Within this review set, CrowdStrike Falcon Endpoint Protection Platform stands out as the most supported answer. ### Which EDR platform offers AI-powered threat hunting? Based on G2 reviews, AI-assisted investigation and threat hunting come up most clearly for CrowdStrike Falcon Endpoint Protection Platform, Sophos Endpoint, and TrendAI Vision One. According to verified users, CrowdStrike Falcon Endpoint Protection Platform is frequently associated with AI-driven detection, Charlotte AI support, and rapid investigation workflows. G2 reviewers mention Sophos Endpoint for AI scan, visibility, and earlier threat detection, while TrendAI Vision One is noted for AI-assisted reviews, correlation, and broader XDR-style visibility. Across the recent review set, buyers looking for Endpoint Detection & Response (EDR) software with AI-oriented threat hunting should focus on products where users specifically describe faster triage, clearer context, and reduced manual investigation effort rather than generic AI claims alone. ### What top EDR tools for protecting enterprise endpoints? Based on G2 reviews, enterprise buyers evaluating Endpoint Detection & Response (EDR) software consistently mention centralized visibility, lightweight agents, scalable deployment, and strong response workflows. According to verified users, CrowdStrike Falcon Endpoint Protection Platform is used for broad enterprise visibility and protecting large environments with cloud-based management. G2 reviewers mention Sophos Endpoint for centralized policies, ransomware protection, and support for large device estates. They also reference Huntress Managed EDR for managed monitoring and analyst support, especially where teams want enterprise-style coverage without building a large in-house operation. The common thread across recent reviews is the need to protect many endpoints while keeping investigations, containment, and administration practical for security teams. **Here are some of the top-rated products on G2:** - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) – used for large environments needing centralized visibility, lightweight protection, and faster threat response - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) – chosen for centralized policy management, ransomware defense, and broad endpoint coverage - [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) – favored for managed monitoring, human-led investigations, and support for lean internal teams ### Which EDR solution offers the best incident forensics? Based on G2 reviews, incident forensics is most strongly associated with products that provide clear attack timelines, endpoint visibility, and investigation context. According to verified users, SentinelOne Singularity Endpoint is frequently praised for its Storyline feature, which helps show how events unfolded on an endpoint and simplifies investigation steps. G2 reviewers also mention CrowdStrike Falcon Endpoint Protection Platform for detailed telemetry, process visibility, and threat hunting support, while Sophos Endpoint is recognized for visibility and structured threat cases. For buyers researching Endpoint Detection & Response (EDR) software, the strongest signals in recent reviews point to tools that reduce manual reconstruction effort and give analysts enough context to understand impact, trace attack paths, and respond quickly. ### What best software for detecting fileless malware attacks? Based on G2 reviews, buyers asking about Endpoint Detection & Response (EDR) software for fileless attacks should look for repeated mentions of behavior-based detection rather than signature-only protection. According to verified users, CrowdStrike Falcon Endpoint Protection Platform is repeatedly described as effective against fileless threats, malware-free attacks, and suspicious behavior that traditional antivirus can miss. G2 reviewers also mention Sophos Endpoint for exploit prevention and ransomware blocking, and Check Point Harmony Endpoint for stopping sophisticated threats through layered prevention. Across the recent review set, the clearest pattern is that users value products that monitor behavior in real time, provide endpoint visibility, and support quicker investigation when suspicious activity does not rely on known malicious files. **Here are some of the top-rated products on G2:** - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) – highlighted for behavior-based detection of fileless and malware-free attacks - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) – used for exploit prevention, ransomware blocking, and endpoint investigation workflows - [Check Point Harmony Endpoint](https://www.g2.com/products/check-point-harmony-endpoint/reviews) – noted for layered prevention against ransomware, phishing, and advanced threats ### What best tools for cloud-based endpoint security? Based on G2 reviews, cloud-based management is a recurring priority for teams choosing Endpoint Detection & Response (EDR) software. According to verified users, Sophos Endpoint is often praised for web-based management, a cloud console, straightforward deployment, and centralized policies. G2 reviewers also mention CrowdStrike Falcon Endpoint Protection Platform for its cloud-native approach, lightweight agent, and rapid updates without heavy local infrastructure. Microsoft Defender for Endpoint appears in the recent reviews as another option for organizations already operating in the broader Microsoft environment. Across the category, reviewers consistently highlight the value of centralized cloud consoles, easier remote administration, and improved visibility across distributed devices when evaluating cloud-based endpoint security tools. **Here are some of the top-rated products on G2:** - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) – favored for web-based management, cloud deployment, and centralized endpoint policy control - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) – selected for cloud-native management, lightweight operation, and strong real-time visibility - [Microsoft Defender for Endpoint](https://www.g2.com/products/microsoft-defender-for-endpoint/reviews) – used for integrated cloud-managed endpoint security within Microsoft-centric environments ### What top-rated EDR solutions for regulated industries? Based on G2 reviews, regulated-industry buyers consistently focus on compliance support, centralized control, and clear reporting when evaluating Endpoint Detection & Response (EDR) software. According to verified users, Huntress Managed EDR is valued where teams need documented investigations and audit-friendly response support. G2 reviewers mention CrowdStrike Falcon Endpoint Protection Platform for helping with compliance requirements, visibility, and enterprise-grade endpoint coverage. They also mention Sophos Endpoint for compliance-related protection, centralized management, and policy enforcement. In the recent reviews, the most relevant pattern for regulated industries is not a single sector-specific feature but a combination of continuous monitoring, strong visibility, manageable reporting, and confidence that endpoint events can be investigated and acted on quickly. **Here are some of the top-rated products on G2:** - [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) – useful for documented investigations, managed response, and audit-oriented security workflows - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) – used for compliance-focused endpoint visibility and enterprise-grade protection - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) – chosen for centralized controls, endpoint protection, and support for compliance-driven environments ### What best EDR software for real-time incident response? Based on G2 reviews, real-time incident response is a major buying theme across Endpoint Detection & Response (EDR) software. According to verified users, Sophos Endpoint is frequently mentioned for automated remediation, device isolation, and centralized response from a cloud console. G2 reviewers also highlight Huntress Managed EDR for fast human-led investigation and automated remediations, especially when teams need round-the-clock support. CrowdStrike Falcon Endpoint Protection Platform is another recurring option for fast detection and organized response workflows. Recent feedback shows that buyers value products that combine timely alerts, clear investigation paths, and immediate containment actions, because those capabilities help reduce manual effort and keep incidents from spreading across the environment. **Here are some of the top-rated products on G2:** - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) – recognized for automated remediation, isolation, and centralized response actions - [Huntress Managed EDR](https://www.g2.com/products/huntress-managed-edr/reviews) – valued for rapid managed investigations and automated remediation support - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) – noted for fast threat detection and streamlined response workflows ### What top EDR tools for remote work environments? Based on G2 reviews, remote and hybrid work protection is a frequent theme in Endpoint Detection & Response (EDR) software feedback. According to verified users, Sophos Endpoint is appreciated for cloud-based updates, centralized management, and support for protecting distributed devices. G2 reviewers mention CrowdStrike Falcon Endpoint Protection Platform for visibility across remote machines and lighter endpoint impact, while ESET PROTECT is recognized for managing remote endpoints from one dashboard and securing home-connected devices. Recent reviews suggest buyers should prioritize tools that make policy management, visibility, and threat response practical even when devices are outside the corporate network. The strongest signals center on centralized consoles, consistent protection for off-site users, and less dependency on manual intervention. **Here are some of the top-rated products on G2:** - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) – supports centralized cloud management and protection for distributed remote devices - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) – helps secure remote machines with lightweight monitoring and fast detection - [ESET PROTECT](https://www.g2.com/products/eset-protect/reviews) – useful for remote endpoint oversight, centralized monitoring, and protection across mixed locations ## G2 Grid® for Endpoint Detection & Response (EDR) Software ![G2 Grid® for Endpoint Detection & Response (EDR) Software plotting products by satisfaction and market presence](https://www.g2.com/categories/endpoint-detection-response-edr/grids.png?focus%5B%5D=126474&focus%5B%5D=68442&focus%5B%5D=68606&focus%5B%5D=14988&focus%5B%5D=1436&focus%5B%5D=818&focus%5B%5D=1146&focus%5B%5D=14972) Highlighted products: Acronis Cyber Protect Cloud, Huntress Managed EDR, CrowdStrike Falcon Endpoint Protection Platform, ESET PROTECT, ThreatDown, Sophos Endpoint, IBM MaaS360, and Check Point Endpoint Security. Underlying data: [Grid® JSON](https://www.g2.com/categories/endpoint-detection-response-edr/grids.json?focus%5B%5D=acronis-cyber-protect-cloud&focus%5B%5D=huntress-managed-edr&focus%5B%5D=crowdstrike-falcon-endpoint-protection-platform&focus%5B%5D=eset-protect&focus%5B%5D=threatdown&focus%5B%5D=sophos-endpoint&focus%5B%5D=ibm-maas360&focus%5B%5D=check-point-endpoint-security&segment=small-business) ## How Many Endpoint Detection & Response (EDR) Software Products Does G2 Track? **Total Products under this Category:** 125 ### Category Stats (Jul 2026) - **Average Rating**: 4.43/5 The average rating of products in this category, based on all submitted ratings - **Top Trending Product**: Bitdefender GravityZone XDR (+0.75%) - Among all products in this category, Bitdefender GravityZone XDR recorded the largest rating increase compared to last month *Last updated: July 19, 2026* ## How Does G2 Rank Endpoint Detection & Response (EDR) Software Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 12,500+ Authentic Reviews - 125+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. --- **Sponsored** ### Prisma Browser for Business Prisma Browser for Business is a secure web browser tailored for small businesses, integrating advanced security features directly into the browsing experience. Built on the Chromium platform, it offers a familiar interface while providing enterprise-grade protection against online threats such as phishing, ransomware, and data breaches. This solution enables teams to work seamlessly across various applications and AI tools, ensuring data security without the need for a dedicated IT team. Key Features and Functionality: - Proactive Threat Protection: Utilizes AI-powered threat scanning to detect and block phishing attempts, malware, and other cyber threats in real-time. - Data Loss Prevention: Implements controls to prevent accidental sharing of sensitive information, such as disabling copy/paste and file uploads to unauthorized platforms. - AI Interaction Management: Monitors and regulates AI tool usage to prevent unintended actions and data leaks, ensuring that business information remains secure. - User-Friendly Deployment: Offers a straightforward setup process with pre-configured security settings, allowing businesses to protect their teams without technical expertise. Primary Value and Problem Solved: Prisma Browser for Business addresses the critical need for robust cybersecurity in small businesses, which are increasingly targeted by sophisticated cyberattacks. By embedding security directly into the browser, it safeguards the primary workspace where employees spend the majority of their time. This solution not only protects against external threats but also mitigates risks associated with accidental data exposure through AI tools and other online platforms. By providing an easy-to-use, comprehensive security solution, Prisma Browser for Business empowers small businesses to focus on growth and productivity without compromising on security. [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=1159&secure%5Bchosen_at%5D=2026-07-19T16%3A04%3A04Z&secure%5Bdisplayable_resource_id%5D=1159&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=1159&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=1806417&secure%5Bresource_id%5D=1159&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fendpoint-detection-response-edr%2Fsmall-business%3Fpage%3D2&secure%5Btoken%5D=05b6d56d5ef205316e188b3e11b0f26156eedc49a10b132b25092008e77be91e&secure%5Burl%5D=https%3A%2F%2Fwww.paloaltonetworks.com%2Fprisma-browser-for-business%3Futm_source%3Dg2-panw_inhouse-amer-sase-smco-sfow%26utm_medium%3Ddisplay%26utm_campaign%3Dg2-sase-prisma_browser_smb-amer-us-awareness-en-native-cat_com%26utm_content%3D701Ki000000p2UKIAY&secure%5Burl_type%5D=custom_url) --- ## What Are the Top-Rated Endpoint Detection & Response (EDR) Software Products in 2026? ### 1. [Saner CVEM](https://www.g2.com/products/saner-cvem/reviews) Prevention-first Vulnerability and Exposure Management for unified visibility, prioritization, compliance, and remediation Saner Continuous Vulnerability and Exposure Management unifies asset exposure, posture anomaly detection, vulnerability assessment, compliance management, risk prioritization, patching, and endpoint actions in one dashboard. Saner CVEM is built to help teams continuously detect, assess, prioritize, and remediate vulnerabilities and other security risks from a unified console Why Choose Saner CVEM? • Unified dashboard with interactive views across visibility, detection, prioritization, and remediation for a single source of truth • Complete asset visibility across endpoint and non-endpoint devices, operating system applications, third-party applications, and lifecycle changes • Continuous risk discovery with rapid scans, daily-updated risk intelligence, and posture anomaly detection that helps surface outliers and misconfigurations faster • Context-driven prioritization with SSVC categories such as Act, Attend, Track, and Track\* so teams can focus on the risks that deserve action first. • Continuous compliance management with built-in templates, customizable profiles, daily checks, and deviation tracking across common frameworks. • Integrated patching and remediation with vulnerability-to-patch mapping, automated deployment workflows, and endpoint actions from the same ecosystem. • Machine-learning-assisted analysis to identify deeper risk patterns, detect unusual posture, and support smarter remediation decisions. • Customizable, audit-ready reporting for security, IT, and compliance teams that need clearer evidence and easier tracking. • Flexible deployment on cloud or on-premises, with remediation support across Windows, Linux, macOS, and AIX environments. **Average Rating:** 4.5/5.0 **Total Reviews:** 72 **How Do G2 Users Rate Saner CVEM?** - **Ease of Admin:** 9.0/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.0/10) - **Quality of Support:** 9.2/10 (Category avg: 8.7/10) - **Ease of Use:** 8.6/10 (Category avg: 8.7/10) **Who Is the Company Behind Saner CVEM?** - **Seller:** [SecPod](https://www.g2.com/sellers/secpod-b11d8014-d8ec-46e7-9e81-c0d14919fbfc) - **Company Website:** https://www.secpod.com/ - **Year Founded:** 2008 - **HQ Location:** Redwood City, California - **Twitter:** @secpod (542 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/secpod-technologies/ (168 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 41% Small-Business, 38% Mid-Market #### What Are Saner CVEM's Pros and Cons? **Pros:** - Security (14 reviews) - Features (12 reviews) - Ease of Use (10 reviews) - Customer Support (9 reviews) - Compliance Management (8 reviews) **Cons:** - Integration Issues (5 reviews) - Limited Features (4 reviews) - Slow Performance (4 reviews) - Slow Scanning (4 reviews) - Limited Cloud Integration (3 reviews) ### What Do G2 Reviewers Say About Saner CVEM? *AI-generated summary from verified user reviews* **Pros:** - Users value the **effective automation of security patches** with Saner CVEM, enhancing compliance for remote systems. - Users appreciate the **automated endpoint security and compliance tracking** of Saner CVEM, simplifying patch management for remote systems. - Users appreciate the **ease of use** of Saner CVEM, benefiting from its intuitive interface and efficient functionalities. - Users appreciate the **responsive customer support** of Saner CVEM, enhancing their overall security management experience. - Users value the **automated compliance management** of Saner CVEM, ensuring timely security updates across hybrid workforces. **Cons:** - Users face **integration issues** with Saner CVEM, especially requiring custom solutions and troubleshooting during data synchronization. - Users experience **limited features** in multi-tenant support, integration, and dashboard usability, affecting overall efficiency. - Users experience **slow performance** during initial dashboard loading and while handling large data sets, affecting efficiency. - Users experience **slow scanning** with initial dashboard loads and large data sets, impacting daily checks and efficiency. - Users find the **limited cloud integration** challenging, requiring workarounds and custom scripts for effective use. #### What Are Recent G2 Reviews of Saner CVEM? **"[Strong Visibility Across Assets, but Prioritization and UI Need Improvement](https://www.g2.com/survey_responses/saner-cvem-review-12398463)"** **Rating:** 4.0/5.0 stars *— Verified User in Pharmaceuticals* [Read full review](https://www.g2.com/survey_responses/saner-cvem-review-12398463) --- **"[Improve your digital security and combat vulnerabilities in your networks with Saner CVEM.](https://www.g2.com/survey_responses/saner-cvem-review-11395327)"** **Rating:** 5.0/5.0 stars *— Lydie D.* [Read full review](https://www.g2.com/survey_responses/saner-cvem-review-11395327) --- #### What Are G2 Users Discussing About Saner CVEM? - [What is SanerNow used for?](https://www.g2.com/discussions/what-is-sanernow-used-for) ### 2. [Heimdal](https://www.g2.com/products/heimdal/reviews) Accommodate all your cybersecurity needs under one convenient roof with the Heimdal® Unified Cybersecurity Platform. Our cybersecurity solutions can be used as standalone products or integrated into one another as part of a cohesive and unified XDR platform. Whether you’re a reseller, distributor, MSSP, or an organization committed to bolstering your online security, we provide an array of cutting-edge products to make your mission smoother. Heimdal® is a fast-growing cybersecurity company focused on continuous technological innovation. Since its establishment in 2014 in Copenhagen, based on the winning idea of CTF World Champions, Heimdal has experienced spectacular growth by proactively building products that anticipate threatscape trends. The company offers a multi-layeredand unified security suite that combines threat prevention, patch and asset management, endpoint rights management, antivirus and mail security which together secure customers against cyberattacks and keep critical information and intellectual property safe. Heimdal has been recognized as a thought leader in the industry and has won multiple international awards both for its solutions and for its educational content creation. The Heimdal line of products currently consists of 10 products and 2 services. The former category encompasses DNS Security for Endpoints & Network, Patch & Asset Management, Privileged Access Management, Application Control, Next-Gen Endpoint Antivirus, Ransomware Encryption Protection, Email Security, Email Fraud Prevention, and Remote Desktop. The latter is represented by Endpoint Detection & Response, as well as eXtended Detection & Response, or EDR and XDR for short. Currently, Heimdal’s cybersecurity solutions are deployed in more than 45 countries and supported regionally from offices in 15+ countries, by 175+ highly qualified specialists. Heimdal is ISAE 3000 certified and secures more than 2 million endpoints for over 10,000 companies. The company supports its partners without concessions on the basis of predictability and scalability. The common goal is to create a sustainable ecosystem and a strategic partnership. **Average Rating:** 4.4/5.0 **Total Reviews:** 73 **How Do G2 Users Rate Heimdal?** - **Ease of Admin:** 8.3/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.4/10 (Category avg: 9.0/10) - **Quality of Support:** 9.5/10 (Category avg: 8.7/10) - **Ease of Use:** 8.6/10 (Category avg: 8.7/10) **Who Is the Company Behind Heimdal?** - **Seller:** [Heimdal®](https://www.g2.com/sellers/heimdal) - **Company Website:** https://heimdalsecurity.com/ - **Year Founded:** 2014 - **HQ Location:** Copenhagen, Denmark - **Twitter:** @HeimdalSecurity (5,086 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/heimdal-security/ (277 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer & Network Security, Construction - **Company Size:** 59% Mid-Market, 27% Small-Business #### What Are Heimdal's Pros and Cons? **Pros:** - Ease of Use (6 reviews) - Customer Support (5 reviews) - Product Quality (3 reviews) - Reliability (3 reviews) - Reliable (3 reviews) **Cons:** - Access Issues (2 reviews) - Complex Interface (2 reviews) - Limited Customization (2 reviews) - Not User-Friendly (2 reviews) - Poor Customer Support (2 reviews) ### What Do G2 Reviewers Say About Heimdal? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **simple and straightforward user interface** of Heimdal, making it accessible for entry-level personnel. - Users commend Heimdal's **exceptional customer support** , noting prompt responses and professional assistance that often exceeds expectations. - Users value the **robust security** of Heimdal, noting its reliability and user-friendly interface for effective defense. - Users praise Heimdal for its **reliable security solutions** , delivering consistent performance and dependable support for their needs. - Users value Heimdal for its **reliable security solutions** and responsive 24/7 support, enhancing user confidence. **Cons:** - Users face significant **access issues** with Heimdal's admin portal, finding navigation complex and essential resources hard to locate. - Users find the **complex interface** of Heimdal frustrating, struggling with navigation and accessing essential features. - Users find the **limited customization options** frustrating, particularly in navigating the complex admin portal and UI. - Users find Heimdal **not user-friendly** due to its complex admin portal and difficult navigation for essential tasks. - Users report challenges with **poor customer support** during initial setup, affecting overall experience and efficiency. #### What Are Recent G2 Reviews of Heimdal? **"[Clear Patch Management and Endpoint Visibility That Builds Compliance Confidence](https://www.g2.com/survey_responses/heimdal-review-13056558)"** **Rating:** 4.5/5.0 stars *— Verified User in Airlines/Aviation* [Read full review](https://www.g2.com/survey_responses/heimdal-review-13056558) --- **"[Automated patching makes life easier, but remote desktop needs work](https://www.g2.com/survey_responses/heimdal-review-12879665)"** **Rating:** 5.0/5.0 stars *— Kris B.* [Read full review](https://www.g2.com/survey_responses/heimdal-review-12879665) --- ### 3. [Palo Alto Cortex XSIAM](https://www.g2.com/products/palo-alto-cortex-xsiam/reviews) Product Description: Palo Alto Networks' Cortex XSIAM is an AI-driven security operations platform designed to transform traditional Security Operations Centers by integrating and automating key functions such as data centralization, threat detection, and incident response. By leveraging machine learning and automation, it enables organizations to detect and respond to threats more efficiently, reducing manual workloads and improving overall security posture. Key Features and Functionality: - Data Centralization: Aggregates data from various sources into a unified platform, providing comprehensive visibility across the enterprise. - AI-Powered Threat Detection: Utilizes machine learning algorithms to identify anomalies and potential threats in real-time. - Automated Incident Response: Streamlines response processes through automation, enabling rapid mitigation of security incidents. - Integrated SOC Capabilities: Combines functions such as Extended Detection and Response , Security Orchestration, Automation, and Response , Attack Surface Management , and Security Information and Event Management into a cohesive platform, eliminating the need for multiple disparate tools. - Scalability: Designed to handle large volumes of data and adapt to the evolving needs of modern enterprises. Primary Value and Problem Solved: Cortex XSIAM addresses the challenges of disjointed data, weak threat defense, and heavy reliance on manual work in traditional SOCs. By centralizing data and automating security operations, it simplifies processes, enhances threat detection accuracy, and accelerates incident response times. This transformation enables organizations to proactively outpace threats, reduce operational costs, and achieve a more robust security posture. **Average Rating:** 4.3/5.0 **Total Reviews:** 70 **How Do G2 Users Rate Palo Alto Cortex XSIAM?** - **Ease of Admin:** 7.9/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 9.0/10) - **Quality of Support:** 8.2/10 (Category avg: 8.7/10) - **Ease of Use:** 8.3/10 (Category avg: 8.7/10) **Who Is the Company Behind Palo Alto Cortex XSIAM?** - **Seller:** [Palo Alto Networks](https://www.g2.com/sellers/palo-alto-networks) - **Company Website:** https://www.paloaltonetworks.com - **Year Founded:** 2005 - **HQ Location:** Santa Clara, CA - **Twitter:** @PaloAltoNtwks (128,951 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/30086/ (22,313 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 48% Enterprise, 32% Mid-Market #### What Are Palo Alto Cortex XSIAM's Pros and Cons? **Pros:** - Log Management (13 reviews) - Dashboard Design (11 reviews) - Real-time Monitoring (11 reviews) - Simple (11 reviews) - Dashboard Customization (9 reviews) **Cons:** - Resource Intensive (9 reviews) - Complex Setup (8 reviews) - Cost (7 reviews) - Dashboard Issues (7 reviews) - Difficult Setup (7 reviews) ### What Do G2 Reviewers Say About Palo Alto Cortex XSIAM? *AI-generated summary from verified user reviews* **Pros:** - Users highlight **best-in-class log management** and effective alerting features, enhancing the overall usability and integration. - Users appreciate the **user-friendly dashboards** of Palo Alto Cortex XSIAM, highlighting ease of understanding alerts and metrics. - Users value the **real-time monitoring** capabilities of Palo Alto Cortex XSIAM, enhancing threat detection and response efficiency. - Users appreciate the **user-friendly interface** of Palo Alto Cortex XSIAM, making monitoring and deployment seamless and efficient. - Users appreciate the **good dashboard customization** in Palo Alto Cortex XSIAM, citing ease of use and integration. **Cons:** - Users find the solution **resource intensive** , increasing costs and complicating implementation due to high hardware requirements. - Users find the **complex implementation** of Palo Alto Cortex XSIAM time-consuming and resource-intensive, requiring significant technical expertise. - Users find the **cost** of Palo Alto Cortex XSIAM to be higher than competitors, impacting affordability for smaller companies. - Users report **dashboard issues** that hinder monitoring and create a messy interface, impacting usability and visibility. - Users struggle with the **difficult setup** of Palo Alto Cortex XSIAM, finding it complex and time-consuming for implementation. #### What Are Recent G2 Reviews of Palo Alto Cortex XSIAM? **"[Streamlines Security Operations with Automation](https://www.g2.com/survey_responses/palo-alto-cortex-xsiam-review-13067964)"** **Rating:** 4.0/5.0 stars *— Ronald D.* [Read full review](https://www.g2.com/survey_responses/palo-alto-cortex-xsiam-review-13067964) --- **"[Cortex XSIAM helps us cut through noise and focus on real threats](https://www.g2.com/survey_responses/palo-alto-cortex-xsiam-review-13117053)"** **Rating:** 4.0/5.0 stars *— Verified User in Financial Services* [Read full review](https://www.g2.com/survey_responses/palo-alto-cortex-xsiam-review-13117053) --- #### What Are G2 Users Discussing About Palo Alto Cortex XSIAM? - [What is IBM Security ReaQta used for?](https://www.g2.com/discussions/what-is-ibm-security-reaqta-used-for) - [What does QRadar stand for?](https://www.g2.com/discussions/what-does-qradar-stand-for) - 1 comment, 1 upvote - [How do I use IBM QRadar?](https://www.g2.com/discussions/how-do-i-use-ibm-qradar) - 1 comment - [What are the key component of IBM QRadar?](https://www.g2.com/discussions/what-are-the-key-component-of-ibm-qradar) - 1 comment - [What is IBM QRadar Siem?](https://www.g2.com/discussions/what-is-ibm-qradar-siem) - 1 comment ### 4. [Trellix Endpoint Security](https://www.g2.com/products/trellix-endpoint-security/reviews) The Trellix Endpoint Security Suite is a comprehensive and unified set of solutions that protects devices and endpoints across your hybrid network, empowering your organization to address complex, distributed security issues thoroughly, efficiently, and quickly. It uses analytics and machine learning to achieve industry-leading threat protection, all while offering the flexibility to connect to products from other vendors. The solution helps you unify your data and threat defenses from device to cloud, for integrated security. **Average Rating:** 4.3/5.0 **Total Reviews:** 320 **How Do G2 Users Rate Trellix Endpoint Security?** - **Ease of Admin:** 8.2/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.1/10 (Category avg: 9.0/10) - **Quality of Support:** 8.5/10 (Category avg: 8.7/10) - **Ease of Use:** 8.6/10 (Category avg: 8.7/10) **Who Is the Company Behind Trellix Endpoint Security?** - **Seller:** [Skyhigh Security](https://www.g2.com/sellers/skyhigh-security-2026-07-02) - **Year Founded:** 2004 - **HQ Location:** Plano, TX - **Twitter:** @Trellix (241,168 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/skyhighsecurity/posts/?feedView=all (751 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Senior Software Engineer, Software Developer - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 42% Mid-Market, 41% Enterprise #### What Are Trellix Endpoint Security's Pros and Cons? **Pros:** - Ease of Use (6 reviews) - Features (4 reviews) - Threat Detection (4 reviews) - Customer Support (3 reviews) - Protection (3 reviews) **Cons:** - Difficult Configuration (2 reviews) - Expensive (2 reviews) - Agent Issues (1 reviews) - Complex Installation (1 reviews) - Complex Interface (1 reviews) ### What Do G2 Reviewers Say About Trellix Endpoint Security? *AI-generated summary from verified user reviews* **Pros:** - Users highlight the **ease of use** of Trellix Endpoint Security, making implementation and management straightforward. - Users value the **robust, multi-layered protection** of Trellix Endpoint Security against various cyber threats and exploits. - Users praise the **advanced threat detection** of Trellix Endpoint Security for its proactive protection against sophisticated attacks. - Users highlight the **responsive customer support** of Trellix Endpoint Security, enhancing their overall user experience. - Users praise Trellix Endpoint Security for its **robust multi-layered protection** against diverse threats and advanced detection methods. **Cons:** - Users find the **difficult configuration** of Trellix Endpoint Security to be complex, especially for newcomers or small teams. - Users find the **high cost** of Trellix Endpoint Security unappealing compared to competitors offering better value. - Users report **agent issues** with high CPU and memory usage during startup, requiring advanced configuration skills. - Users find the **complex installation** process of Trellix Endpoint Security challenging, especially for those new to enterprise tools. - Users find the **interface complex** , making navigation and initial setup challenging for new or smaller teams. #### What Are Recent G2 Reviews of Trellix Endpoint Security? **"[Seamless Orchestration and Robust Protection Across All Endpoints](https://www.g2.com/survey_responses/trellix-endpoint-security-review-11979182)"** **Rating:** 5.0/5.0 stars *— Jose M.* [Read full review](https://www.g2.com/survey_responses/trellix-endpoint-security-review-11979182) --- **"[Reliable Security with Easy Deployment](https://www.g2.com/survey_responses/trellix-endpoint-security-review-12706673)"** **Rating:** 4.0/5.0 stars *— Philip B.* [Read full review](https://www.g2.com/survey_responses/trellix-endpoint-security-review-12706673) --- #### What Are G2 Users Discussing About Trellix Endpoint Security? - [What is MVISION Endpoint Security Platform used for?](https://www.g2.com/discussions/what-is-mvision-endpoint-security-platform-used-for) - [What is MVISION Endpoint Security used for?](https://www.g2.com/discussions/what-is-mvision-endpoint-security-used-for) - 1 comment - [What is McAfee AntiVirus Plus used for?](https://www.g2.com/discussions/what-is-mcafee-antivirus-plus-used-for) - [What is FireEye Security Suite used for?](https://www.g2.com/discussions/what-is-fireeye-security-suite-used-for) - [What is McAfee Application Control used for?](https://www.g2.com/discussions/what-is-mcafee-application-control-used-for) ### 5. [Barracuda Managed XDR](https://www.g2.com/products/barracuda-managed-xdr/reviews) Barracuda Managed XDR is the comprehensive next-generation cybersecurity solution that protects organizations of all sizes against today’s ever-evolving threat landscape. Barracuda Managed XDR is a fully managed service instantly augmenting an organization’s IT staff, identifying signals amidst noise, and reducing TTR from days to seconds. The solution features advanced AI-driven threat protection, SIEM, SOAR, and enterprise-grade threat intelligence from 11+ billion IOCs and hundreds of ML-enriched detection rules aligned to the MITRE ATT&CK framework. Ingesting trillions of events across endpoints, servers, identity, cloud, email, and firewalls, the cloud-native solution detects, responds to, and eliminates cyberthreats in real time across the attack lifecycle. An ‘open’ XDR solution, Barracuda Managed XDR integrates with an organization’s existing technology, ensuring a smooth deployment while enhancing security resilience and operational efficiency. Barracuda Managed XDR is powered by Barracuda’s 24/7/365 global SOC, featuring five specialized expert-level teams delivering best-in-class SLAs and proactive real-time threat detection and response. **Average Rating:** 4.6/5.0 **Total Reviews:** 34 **How Do G2 Users Rate Barracuda Managed XDR?** - **Ease of Admin:** 8.6/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.0/10) - **Quality of Support:** 9.4/10 (Category avg: 8.7/10) - **Ease of Use:** 9.4/10 (Category avg: 8.7/10) **Who Is the Company Behind Barracuda Managed XDR?** - **Seller:** [Barracuda](https://www.g2.com/sellers/barracuda) - **Company Website:** https://www.barracuda.com - **Year Founded:** 2002 - **HQ Location:** Campbell, CA - **Twitter:** @Barracuda (15,239 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/barracuda-networks/ (2,248 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 44% Small-Business, 35% Mid-Market #### What Are Barracuda Managed XDR's Pros and Cons? **Pros:** - Ease of Use (6 reviews) - Monitoring (6 reviews) - Protection (6 reviews) - Security (6 reviews) - Alerts (5 reviews) **Cons:** - Lack of Customization (2 reviews) - Learning Curve (2 reviews) - Not User-Friendly (2 reviews) - Portal Issues (2 reviews) - Agent Issues (1 reviews) ### What Do G2 Reviewers Say About Barracuda Managed XDR? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use** of Barracuda Managed XDR, benefiting from quick setup and intuitive interface. - Users value the **24/7 monitoring and proactive security** of Barracuda Managed XDR, enhancing confidence and reducing workload. - Users value the **24/7 security and proactive protection** from Barracuda Managed XDR, enhancing confidence in their systems. - Users value the **24/7 comprehensive security** of Barracuda Managed XDR, enhancing confidence and protection against cyber threats. - Users value the **24/7 proactive alerts** of Barracuda Managed XDR, enhancing security and minimizing response times effectively. **Cons:** - Users find the **lack of customization** in Barracuda Managed XDR limits their reporting and management flexibility. - Users face a **steep learning curve** with Barracuda Managed XDR, making initial setup and navigation challenging. - Users find Barracuda Managed XDR **not user-friendly** , desiring more customization and self-management options, especially for reporting. - Users find the **portal issues** cumbersome, requiring frequent logins for program management across different dashboards. - Users find the **agent on the endpoint device limited** , requiring portal access for program management, which is inconvenient. #### What Are Recent G2 Reviews of Barracuda Managed XDR? **"[Simplified Endpoint Security, Perfect Integration](https://www.g2.com/survey_responses/barracuda-managed-xdr-review-12340161)"** **Rating:** 5.0/5.0 stars *— Adrian C.* [Read full review](https://www.g2.com/survey_responses/barracuda-managed-xdr-review-12340161) --- **"[Seamless Integration and Fast, Detailed Security Alerts with 24/7 Protection](https://www.g2.com/survey_responses/barracuda-managed-xdr-review-11816588)"** **Rating:** 4.0/5.0 stars *— Alain D.* [Read full review](https://www.g2.com/survey_responses/barracuda-managed-xdr-review-11816588) --- ### 6. [CrowdSec](https://www.g2.com/products/crowdsec/reviews) CrowdSec is an open-source security stack that detects aggressive behaviors and prevents them from accessing your systems. Its user-friendly design and ease of integration into your current security infrastructure offer a low technical entry barrier and a high-security gain. Once an unwanted behavior is detected, it is automatically blocked. The aggressive IP, scenario triggered and the timestamp is sent for curation, to avoid poisoning & false positives. If verified, this IP is then redistributed to all CrowdSec users running the same scenario. By sharing the threat they faced, all users are protecting each other. **Average Rating:** 4.7/5.0 **Total Reviews:** 85 **How Do G2 Users Rate CrowdSec?** - **Ease of Admin:** 8.8/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 9.0/10) - **Quality of Support:** 8.9/10 (Category avg: 8.7/10) - **Ease of Use:** 8.8/10 (Category avg: 8.7/10) **Who Is the Company Behind CrowdSec?** - **Seller:** [CrowdSec](https://www.g2.com/sellers/crowdsec) - **Year Founded:** 2020 - **HQ Location:** Paris, FR - **Twitter:** @Crowd_Security (19,491 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/crowdsec/?originalSubdomain=fr (30 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer & Network Security, Information Technology and Services - **Company Size:** 69% Small-Business, 20% Mid-Market #### What Are Recent G2 Reviews of CrowdSec? **"[It's a real life-saver in terms of hosting stuff](https://www.g2.com/survey_responses/crowdsec-review-8191423)"** **Rating:** 5.0/5.0 stars *— Rei B.* [Read full review](https://www.g2.com/survey_responses/crowdsec-review-8191423) --- **"[Crowdsec best endpoint in SMB](https://www.g2.com/survey_responses/crowdsec-review-11691179)"** **Rating:** 5.0/5.0 stars *— Pramod s.* [Read full review](https://www.g2.com/survey_responses/crowdsec-review-11691179) --- #### What Are G2 Users Discussing About CrowdSec? - [What are the benefits and drawbacks of using CrowdSec for cybersecurity, and what do you recommend for improvement?](https://www.g2.com/discussions/what-are-the-benefits-and-drawbacks-of-using-crowdsec-for-cybersecurity-and-what-do-you-recommend-for-improvement) - [What is CrowdSec used for?](https://www.g2.com/discussions/what-is-crowdsec-used-for) - 1 comment ### 7. [Acronis Cyber Protect](https://www.g2.com/products/acronis-acronis-cyber-protect/reviews) Acronis Cyber Protect delivers robust protection against cyberthreats, unparalleled backup and recovery capabilities and simplified management and visibility through a single pane of glass, for the entire environment. Key features of Acronis Cyber Protect include: · Cyberthreat protection: Using artificial intelligence (AI) and machine learning (ML), proactively secures data, applications and systems, from advanced cyberattacks, including ransomware and other forms of malware. · Rapid Recovery: Reduced dependency on central IT support empowers users to initiate one-click recovery of distributed endpoints, including bare-metal recovery of physical workloads. · Reduced TCO: Broad, multigenerational OS support, enables vendor consolidation while ensuring comprehensive protection. · Simplified management: Centralized management includes local autonomy and seamless integration with existing third-party tools to provide a unified view of backup and recovery operations along with broad, multigenerational OS support. · Data sovereignty: With the use of Acronis’ extensive network of global data centers, users can ensure compliance and master regional data sovereignty laws, offering peace of mind and regulatory compliance. Acronis is majority-owned by EQT. **Average Rating:** 4.3/5.0 **Total Reviews:** 657 **How Do G2 Users Rate Acronis Cyber Protect?** - **Ease of Admin:** 8.4/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.4/10 (Category avg: 9.0/10) - **Quality of Support:** 8.3/10 (Category avg: 8.7/10) - **Ease of Use:** 8.6/10 (Category avg: 8.7/10) **Who Is the Company Behind Acronis Cyber Protect?** - **Seller:** [Acronis](https://www.g2.com/sellers/acronis) - **Year Founded:** 2003 - **HQ Location:** Schaffhausen - **Twitter:** @acronis (94,498 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/13179/ (1,965 employees on LinkedIn®) - **Ownership:** Acronis is majority-owned by EQT **Who Uses This Product?** - **Who Uses This:** Support Analyst, IT Manager - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 45% Small-Business, 40% Mid-Market #### What Are Acronis Cyber Protect's Pros and Cons? **Pros:** - Backup Solutions (10 reviews) - Ease of Use (8 reviews) - Features (8 reviews) - Data Recovery (5 reviews) - Security (5 reviews) **Cons:** - Expensive (6 reviews) - Complexity (4 reviews) - Difficult Learning (4 reviews) - Poor Customer Support (4 reviews) - Slow Performance (4 reviews) ### What Do G2 Reviewers Say About Acronis Cyber Protect? *AI-generated summary from verified user reviews* **Pros:** - Users value the **all-in-one backup and cybersecurity** solution of Acronis Cyber Protect for seamless management and quick recovery. - Users find Acronis Cyber Protect to have an **intuitive interface** , making backup and cybersecurity management seamless and efficient. - Users appreciate the **all-in-one solution** of Acronis Cyber Protect, seamlessly integrating backup and cybersecurity features. - Users appreciate the **quick and efficient data recovery** offered by Acronis Cyber Protect, enhancing business continuity. - Users appreciate the **all-in-one security and backup solution** of Acronis Cyber Protect, streamlining data management effectively. **Cons:** - Users find Acronis Cyber Protect to be **expensive** , making it less accessible for smaller businesses and budgets. - Users find the **complexity** of Acronis Cyber Protect challenging, particularly during initial setup and configuration. - Users find the **difficult learning curve** of Acronis Cyber Protect to be frustrating, especially for those unfamiliar with IT tools. - Users express frustration over **poor customer support** , highlighting delays and lack of accountability from the Acronis team. - Users often experience **slow performance** with Acronis Cyber Protect, particularly affecting older machines and user onboarding. #### What Are Recent G2 Reviews of Acronis Cyber Protect? **"[Comprehensive Protection with Single pane of glass Management](https://www.g2.com/survey_responses/acronis-cyber-protect-review-12711723)"** **Rating:** 4.5/5.0 stars *— Dave P.* [Read full review](https://www.g2.com/survey_responses/acronis-cyber-protect-review-12711723) --- **"[Effortless Backup and Disaster Recovery](https://www.g2.com/survey_responses/acronis-cyber-protect-review-12712384)"** **Rating:** 4.5/5.0 stars *— VIVEK KUMAR D.* [Read full review](https://www.g2.com/survey_responses/acronis-cyber-protect-review-12712384) --- #### What Are G2 Users Discussing About Acronis Cyber Protect? - [Is Acronis free software?](https://www.g2.com/discussions/is-acronis-free-software) - [What is the best backup solution for enterprise?](https://www.g2.com/discussions/what-is-the-best-backup-solution-for-enterprise) - 1 comment - [What is Acronis software?](https://www.g2.com/discussions/what-is-acronis-software) - [Does Acronis do incremental backup?](https://www.g2.com/discussions/does-acronis-do-incremental-backup) - 1 comment - [Is Acronis cyber protect an antivirus?](https://www.g2.com/discussions/is-acronis-cyber-protect-an-antivirus) ### 8. [VIPRE Endpoint Security Cloud](https://www.g2.com/products/vipre-endpoint-security-cloud/reviews) VIPRE Endpoint Security Cloud is a next-generation antivirus (NGAV) platform, a.k.a. Endpoint Protection Platform (EPP), that detects and blocks malicious activity on your Microsoft Windows and Apple MacOS desktops, laptops, and servers. Consistently ranked at the top of independent testing agencies' lists, VIPRE combines excellent detection with low false positives, minimal system impact, and an easy to use mobile-ready administrative console. Packed with other goodies such as integrated vulnerability and patch management, web access control, and DNS protection, VIPRE will keep you safe against even the most sophisticated threats. **Average Rating:** 4.3/5.0 **Total Reviews:** 56 **How Do G2 Users Rate VIPRE Endpoint Security Cloud?** - **Ease of Admin:** 8.5/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.0/10) - **Quality of Support:** 8.5/10 (Category avg: 8.7/10) - **Ease of Use:** 8.4/10 (Category avg: 8.7/10) **Who Is the Company Behind VIPRE Endpoint Security Cloud?** - **Seller:** [VIPRE Security](https://www.g2.com/sellers/vipre-security) - **Year Founded:** 1994 - **HQ Location:** Clearwater, FL - **Twitter:** @VIPRESecurity (8,293 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/11052300/ (233 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services - **Company Size:** 48% Small-Business, 43% Mid-Market #### What Are VIPRE Endpoint Security Cloud's Pros and Cons? **Pros:** - Ease of Use (2 reviews) - Alert Notifications (1 reviews) - Antivirus Software (1 reviews) - Centralization (1 reviews) - Centralized Management (1 reviews) **Cons:** - Backup Issues (1 reviews) - Missing Features (1 reviews) - Needs Improvement (1 reviews) ### What Do G2 Reviewers Say About VIPRE Endpoint Security Cloud? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use** of VIPRE Endpoint Security Cloud, finding its management console very efficient. - Users value the **alert notifications** from VIPRE Endpoint Security Cloud, enhancing their awareness and response to potential threats. - Users find Vipre Endpoint Security Cloud to be **easy to install** and efficient, providing reliable protection without hassle. - Users appreciate the **central management console** of VIPRE Endpoint Security Cloud, simplifying network management significantly. - Users value the **centralized management console** of VIPRE Endpoint Security Cloud for simplifying network management effectively. **Cons:** - Users note that **backup issues** persist, particularly regarding the restoration of removed email links. - Users note a **lack of important features** , particularly regarding link restoration in emails that need enhancements. - Users note that the **link restoration feature** in VIPRE Endpoint Security Cloud requires improvement for better usability. #### What Are Recent G2 Reviews of VIPRE Endpoint Security Cloud? **"[Love the Ease of Use](https://www.g2.com/survey_responses/vipre-endpoint-security-cloud-review-5257779)"** **Rating:** 4.0/5.0 stars *— Verified User in Marketing and Advertising* [Read full review](https://www.g2.com/survey_responses/vipre-endpoint-security-cloud-review-5257779) --- **"[Great AV software for business environments](https://www.g2.com/survey_responses/vipre-endpoint-security-cloud-review-9096169)"** **Rating:** 4.0/5.0 stars *— Brian B.* [Read full review](https://www.g2.com/survey_responses/vipre-endpoint-security-cloud-review-9096169) --- #### What Are G2 Users Discussing About VIPRE Endpoint Security Cloud? - [How good is Vipre Antivirus?](https://www.g2.com/discussions/how-good-is-vipre-antivirus) - [What is endpoint security used for?](https://www.g2.com/discussions/what-is-endpoint-security-used-for) - [How do I upgrade Vipre endpoint security?](https://www.g2.com/discussions/how-do-i-upgrade-vipre-endpoint-security) - [What is Vipre endpoint security?](https://www.g2.com/discussions/what-is-vipre-endpoint-security) ### 9. [IBM QRadar EDR](https://www.g2.com/products/ibm-qradar-edr/reviews) IBM Security QRadar EDR (formerly ReaQta) combines automation and dashboards to minimize analyst workloads, detect anomalous endpoint behavior and remediate threats in near real time. IBM Security QRadar EDR is available on AWS Marketplace. With visibility across endpoints, it combines expected features, like MITRE ATT&CK mapping and attack visualizations, with dual-engine AI and automation. For teams that need extended support, managed detection and response (MDR) services offers 24/7 monitoring and response to help keep users protected. IBM Security QRadar EDR (formerly ReaQta) can be deployed as SaaS, on-premises and in air-gapped environments. For more information, visit https://www.ibm.com/products/qradar-edr **Average Rating:** 4.2/5.0 **Total Reviews:** 45 **How Do G2 Users Rate IBM QRadar EDR?** - **Ease of Admin:** 8.3/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.0/10) - **Quality of Support:** 8.2/10 (Category avg: 8.7/10) - **Ease of Use:** 8.5/10 (Category avg: 8.7/10) **Who Is the Company Behind IBM QRadar EDR?** - **Seller:** [IBM](https://www.g2.com/sellers/ibm) - **Year Founded:** 1911 - **HQ Location:** Armonk, New York, United States - **Twitter:** @IBMSecurity (74,660 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/1009/ (328,202 employees on LinkedIn®) - **Ownership:** SWX:IBM **Who Uses This Product?** - **Top Industries:** Computer & Network Security - **Company Size:** 45% Small-Business, 40% Mid-Market #### What Are IBM QRadar EDR's Pros and Cons? **Pros:** - Threat Detection (23 reviews) - Ease of Use (20 reviews) - Cybersecurity (16 reviews) - Detection Efficiency (9 reviews) - Protection (8 reviews) **Cons:** - Expensive (17 reviews) - Difficult Learning (11 reviews) - Resource Intensive (9 reviews) - False Positives (7 reviews) - High Resource Usage (7 reviews) ### What Do G2 Reviewers Say About IBM QRadar EDR? *AI-generated summary from verified user reviews* **Pros:** - Users commend the **advanced threat detection** capabilities of IBM QRadar EDR for ensuring robust security against various threats. - Users appreciate the **ease of use** of IBM QRadar EDR, noting its simple installation and intuitive interface. - Users value the **advanced threat detection and endpoint protection** provided by IBM QRadar EDR, enhancing overall security. - Users praise IBM QRadar EDR for its **excellent detection efficiency** , effectively identifying and responding to advanced threats. - Users appreciate the **robust threat protection** of IBM QRadar EDR, enhanced by continuous updates and AI efficiency. **Cons:** - Users find IBM QRadar EDR to be **expensive** , which can be a barrier for mid-range and small businesses. - Users find the **difficult learning curve** for IBM QRadar EDR hampers effective usage and adds to overall complexity. - Users highlight the **resource-intensive nature** of IBM QRadar EDR, impacting costs and workflow during implementation. - Users report **many false positives** in IBM QRadar EDR, complicating the investigation process and affecting efficiency. - Users note a **high resource usage** in IBM QRadar EDR, making it challenging without sufficient hardware specifications. #### What Are Recent G2 Reviews of IBM QRadar EDR? **"[One of the best Security tool for Blue team with a capability of intercepting the bad guys.](https://www.g2.com/survey_responses/ibm-qradar-edr-review-8011831)"** **Rating:** 5.0/5.0 stars *— Mark Julius M.* [Read full review](https://www.g2.com/survey_responses/ibm-qradar-edr-review-8011831) --- **"[One of the best EDR](https://www.g2.com/survey_responses/ibm-qradar-edr-review-9506318)"** **Rating:** 4.5/5.0 stars *— sibil b.* [Read full review](https://www.g2.com/survey_responses/ibm-qradar-edr-review-9506318) --- ### 10. [Intezer](https://www.g2.com/products/intezer-intezer/reviews) Intezer automates the entire alert triage process, like an extension of your team handling Tier 1 SOC tasks for every alert at machine-speed. Intezer monitors incoming incidents from endpoint, reported phishing pipelines, or SIEM tools, then autonomously collects evidence, investigates, makes triage decisions, and escalates only the serious threats to your team for human intervention. Power your SOC with artificial intelligence that makes sure every alert is deeply analyzed (including every single artifact like files, URLs, endpoint memory, etc.), detecting malicious code in memory and other evasive threats. Fast set up and integrations with your SOC team's workflows (EDR, SOAR, SIEM, etc.) means Intezer's AI can immediately start filtering out false positives, giving you detailed analysis about every threat, and speeding up your incident response time. With Intezer: • Reduce Tier 1 escalation, sending only 4% of alerts on average to your team for immediate action. • Identify up to 97% of false positive alerts without taking any time from your analysts. • Reduce average triage time to 5 minutes or less, while giving your analysts deep context about every alert to prioritize critical treats and respond faster. **Average Rating:** 4.5/5.0 **Total Reviews:** 187 **How Do G2 Users Rate Intezer?** - **Ease of Admin:** 8.8/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 9.0/10) - **Quality of Support:** 8.6/10 (Category avg: 8.7/10) - **Ease of Use:** 9.1/10 (Category avg: 8.7/10) **Who Is the Company Behind Intezer?** - **Seller:** [Intezer](https://www.g2.com/sellers/intezer) - **Year Founded:** 2015 - **HQ Location:** New York - **Twitter:** @IntezerLabs (10,170 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/10656303/ (88 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Software Engineer, Student - **Top Industries:** Computer & Network Security, Information Technology and Services - **Company Size:** 54% Small-Business, 23% Mid-Market #### What Are Intezer's Pros and Cons? **Pros:** - Security (3 reviews) - Security Protection (3 reviews) - Cybersecurity (2 reviews) - Detection Accuracy (2 reviews) - Ease of Use (2 reviews) **Cons:** - Access Control (1 reviews) - Complex Interface (1 reviews) - Data Privacy (1 reviews) - Difficult Navigation (1 reviews) - Expensive (1 reviews) ### What Do G2 Reviewers Say About Intezer? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **strong security features** of Intezer, ensuring timely detection and blocking of malware. - Users value Intezer for its **effective malware detection and security features** that enhance overall system protection. - Users value the **ease of malware detection and blocking** with Intezer, enhancing overall cybersecurity effectiveness. - Users value the **high detection accuracy** of Intezer, ensuring timely malware detection and enhanced system security. - Users appreciate the **ease of use** of Intezer, making malware detection and security integration straightforward and efficient. **Cons:** - Users find the **lack of access control** to file visibility a downside, though it facilitates peer review benefits. - Users express frustration with the **complex interface** of Intezer, finding it difficult to navigate and use effectively. - Users find the **lack of control over file visibility** a downside, despite potential benefits for peer review. - Users find the **difficult navigation** in Intezer frustrating due to a poorly designed UI and small text size. - Users find the **expensive pricing** of Intezer limiting, particularly due to the capping of the free tier. #### What Are Recent G2 Reviews of Intezer? **"[CTI coordinator](https://www.g2.com/survey_responses/intezer-review-5353729)"** **Rating:** 4.0/5.0 stars *— Verified User in Banking* [Read full review](https://www.g2.com/survey_responses/intezer-review-5353729) --- **"[Effortless Malware Detection and Robust Endpoint Security With Intezer](https://www.g2.com/survey_responses/intezer-review-12060113)"** **Rating:** 4.5/5.0 stars *— Franck P.* [Read full review](https://www.g2.com/survey_responses/intezer-review-12060113) --- #### What Are G2 Users Discussing About Intezer? - [What is genetic malware analysis?](https://www.g2.com/discussions/what-is-genetic-malware-analysis) - 1 comment - [Is Intezer good?](https://www.g2.com/discussions/is-intezer-good) - 1 comment - [What does Intezer do?](https://www.g2.com/discussions/what-does-intezer-do) - 1 comment - [What is Intezer analyze?](https://www.g2.com/discussions/what-is-intezer-analyze) - 2 comments ## What Is Endpoint Detection & Response (EDR) Software? [Endpoint Protection Software](https://www.g2.com/categories/endpoint-protection) ## What Software Categories Are Similar to Endpoint Detection & Response (EDR) Software? - [Antivirus Software](https://www.g2.com/categories/antivirus) - [Endpoint Protection Platforms](https://www.g2.com/categories/endpoint-protection-platforms) - [Managed Detection and Response (MDR) Software](https://www.g2.com/categories/managed-detection-and-response-mdr) --- ## How Do You Choose the Right Endpoint Detection & Response (EDR) Software? ### What You Should Know About Endpoint Detection & Response (EDR) Software ### What is endpoint detection and response (EDR) software? EDR software is used to help companies identify and remediate threats related to network-connected endpoints. EDR solutions inform security professionals of vulnerable or infected endpoints and guide them through the remediation process. After incidents have been resolved, EDR tools help teams investigate issues and the vulnerable components that allow an endpoint to become compromised. Continuous monitoring is one of the core capabilities of endpoint detection technologies. These monitoring features provide complete and continuous visibility across a company’s network-connected endpoints. Individuals can monitor behaviors, vulnerabilities, and activity for abnormalities. When abnormalities are identified, the detection portion of EDR technology transitions to the response portion. Endpoint response begins with alerting and containment. Security professionals are alerted of threats present to their systems and isolate potentially compromised endpoints from further network access; this helps prevent one infected endpoint from becoming hundreds. Once systems are properly organized to contain malware and threat actors, security teams can work to remove malware and prevent future access from actors to endpoint devices. EDR platforms store threat data related to security incidents, improving a team's ability to defend against threats in the future by helping them identify root causes and threat actors. Additionally, zero-day exploits may be identified, and other vulnerabilities may be remediated as a result. This will help prevent third-party privilege escalation, malware injection, and unapproved endpoint control from occurring in the future. Some EDR products provide machine learning capabilities to analyze events, improve threat hunting, and reduce false positives by automating protection and remediation processes. ### Key benefits of EDR software - Monitor endpoints and detect issues or security incidents - Remediate present threats to endpoints - Investigate incidents to identify causes - Contain threats and restrict access to other endpoints or networks ### Why use endpoint detection and response solutions? Endpoints are some of the most vulnerable components of a business' network structure. One vulnerable endpoint could cause a company’s entire network, databases, and sensitive information to become exposed or stolen. EDR systems will help secure individual endpoints, detect issues as they arise, and contain threats that make their way beyond traditional security structures. Endpoint protection is even more relevant considering the growing popularity of bring-your-own-device (BYOD) policies. When employees are in complete control over downloads, applications, and updates, security must be a priority. Every day professionals are not the most security-savvy individuals and may unintentionally compromise their devices or put business information at risk. **Zero-day threats—** While traditional prevention tools such as antivirus software or firewall technology are helpful as the first line of defense, zero-day threats are bound to occur. The nature of these threats means they have yet to be discovered and, therefore, cannot be defended against. EDR solutions will help identify new threats as they arise and remediate them before damage occurs. **Visibility and control—** Continuous monitoring and endpoint visibility help defend against traditional malware and sophisticated threats. Monitoring can help identify known threats as they arise and detect minute details that indicate the presence of advanced threats. Hackers are always developing new ways to enter networks undetected through fileless malware or malicious code injection. Monitoring capabilities will improve a team’s ability to detect anomalies caused by outside actors and threats. **Analysis and deterrence —** EDR software improves a security organization’s ability to review the data associated with security events, data breaches, and network attacks. The data collected from these events can be reviewed back to the initial onset and used to identify the vulnerability or exploit used. Once identified, security teams and software developers can work collectively to resolve flaws and prevent similar attacks from occurring in the future. ### What are the common features of EDR products? **Detection—** Detection capabilities result from monitoring practices. Monitoring collects information about properly functioning systems and can be applied to identify abnormal behavior or functionality. Once identified, IT and security professionals are alerted and directed through the review and resolution processes. **Containment —** Once threats are present within an endpoint device, access must be restricted from the greater network and additional endpoints. Often referred to as quarantine features, these capabilities can help protect a network when a threat is detected. **Remediation—** As threats are discovered, they must be dealt with. EDR software allows individuals and security teams to track incidents back to their onset and identify suspicious actors or malware. **Investigation—** After incidents occur, EDR tools collect large amounts of data associated with the endpoint device and provide a historical record of activities. This information can be used to quickly identify the cause of an incident and prevent its reoccurrence in the future. #### Additional EDR features **Behavioral analysis—** Behavior analysis capabilities allow administrators to gain valuable insights into end-user behavior. This data can be used as a reference for monitoring features to compare against and detect anomalies. **Real-time monitoring —** Real-time and continuous monitoring capabilities allow security professionals to constantly monitor systems and detect anomalies in real time. **Threat data documentation—** Event data recording capabilities automate the collection and curation of incident data. This information can alert security teams of the performance and health of a company's endpoint-enabled devices. **Data exploration —** Data exploration features allow security teams to review data associated with security incidents. These data points can be cross-referenced and analyzed to provide insights on better protecting endpoints in the future. ### Potential issues with EDR solutions **Endpoint variety—** Endpoints come in many shapes and sizes, from laptops and servers to tablets and smartphones. A business should ensure that all types of endpoints connected to its network are compatible with a chosen EDR solution. This is especially important for businesses with a large number of BYOD devices that run different operating systems and applications. **Scalability —** Scale refers to the size and scope of your network of connected endpoints. It’s a major consideration because some EDR tools may only facilitate monitoring on a specific number of devices or limit the number of concurrent investigations or remediations. Companies with large pools of endpoints should be sure the solutions they consider can handle the number of endpoints and provide adequate monitoring for the scale of their business and projected growth. **Efficacy —** Efficacy refers to the actual functional benefit of using a software solution. Companies may be wasting their time if security teams are inundated with false positives or conflicting results. This is a key identifier in user reviews and third-party evaluations that buyers should consider when evaluating a product. **Administration and Management —** Companies adopting EDR for the first time should be sure they have sufficient staff equipped with skills relevant to using EDR software. Smaller, growing businesses may not be best suited for adopting complex security systems and may be better served using managed services until the need for security matches their ability to deliver. ### Software and services related to EDR software EDR software is one member of the endpoint protection and security family. These tools provide the remediation component of the endpoint protection process but not all of the prevention and management components in other endpoint security software. [**Endpoint protection suites**](https://www.g2crowd.com/categories/endpoint-protection-suites? __hstc=171774463.81494f0ac47c15794fea57ed705405f2.1607315526284.1610948873867.1611035647295.58&__ hssc=171774463.13.1611035647295&__hsfp=669407890) **—** Endpoint protection suites are sophisticated platforms containing capabilities across all segments of the endpoint security technology world. They include virus and malware protection as well as the administration and management of endpoint devices. [**Endpoint antivirus software**](https://www.g2.com/categories/antivirus) **—** Antivirus technologies are some of the oldest solutions for endpoint security. These tools help prevent malware, computer viruses, and other threats from compromising an endpoint device. These capabilities are present in many security technologies, but antivirus software is specifically dedicated to this kind of protection. [**Endpoint management software**](https://www.g2.com/categories/endpoint-management) **—** Endpoint management software documents, monitors, and manages endpoints connected to a network. These tools ensure that only approved devices access a company’s network and require connected devices to pass specific security requirements before gaining access. This may mean implementing software updates, security scans, or user authentication processes. [**Endpoint security services**](https://www.g2.com/categories/endpoint-security-services) **—** Endpoint security services are a form of managed security services that are often the go-to for organizations without dedicated security staff. These solution providers deliver services surrounding the entire endpoint security stack to reduce a business’s need to manage day-to-day tasks and resolve issues directly. These services will not provide the same level of customization or control but will provide a business with peace of mind until they are capable of handling security issues in-house. **Incident response software—** Incident response software is a term for general security incident management and threat remediation tools. These products are designed to facilitate incident investigation and solve them at the point of attack. These tools may provide some similar forensic analysis capabilities but often do not provide the same endpoint monitoring and control functionality.