Need opinions and experiences on EDR/XDR platforms
Popular XDR in next 5 years for SMB market
Benefits of XDR
- Significant visibility into a network’s entire security posture and threats
- Prioritized workflows and decision making based on accurate full-network analysis
- Increased automation fit for monitoring and managing regular volumes of security data
- Faster detection and response thanks to the automation, prioritization, and visibility
Read More.
Why is XDR required?
What does XDR mean?
Videos
The place I work at currently uses ESET Protect as the endpoint protection platform and before renewing our licenses we are deciding if we need to switch from ESET into something like SentinelOne or Defender 365. We’re in the process of ramping up the organisation’s security as well starting next year and that is one of the reasons why we’re considering this switch as well.
Our ecosystem consists mostly of Windows PCs and servers, very few Linux servers, and also some Android devices, we got Office 365, and also got some infrastructure in Azure cloud as well. The top two contenders for me right now are Defender 365 (because of the footprint MS has on us and also because the whole ecosystem will integrate well), and SentinelOne. Crowdstrike (even though I like the product) didn’t make it because our higher-ups are still uneasy with their outage incident.
How are your experiences with these two products? Would love to hear about out-of-box protections, fine-tunings and integrations, support, and administration.
And also regarding ESET, they’ve served us well over the years. I think the company is looking for something ‘modern’ but I did my research and it seems like all these products do the exact same thing.
What are the most popular XDR platforms you think will be more and more popular in the next 5 years among SMB market between these 4?
-
SentinelOne
-
Microsoft Defender
-
Crowdstrike
-
Sophos
Microsoft Defender is great cuz it is easily integrated with Microsoft products which are everywhere in any org. SentinelOne has more affordable price as I was advised by someone working in MSP. Crowdstrike is classic but I heard they made some bad choices and go downhill. No experience with Sophos so far.
Also, for those licensing, do you buy through Pax8 or Dicker Data or something similar for a good price?