Attivo Endpoint Detection Net (EDN) vs. Webroot Antivirus + Internet Security Complete (SecureAnywhere)

Attivo Endpoint Detection Net (EDN) is a suitable option in mid level and large companies to detect insider threats and stealthy attackers. It is highly recommended where data is highly sensitive and there are chances of attack to get access to critical revers to get saves credentials and stored files. for small and medium business this solution is not recommended where perimeter security is already configured.

Incentivized

Webroot can be great if you have many employees using computers. Sensitive business information can be accessed by malicious threats online if your employees are not trained to avoid these problems. In this case, I think it's important to have software to protect you. If working with a smaller team (and not doing any sort of video production or other intensive software/applications) I can't see a need for anything like Webroot. Learning how to use the internet safely and protecting your file storage are things to be done on the cheap and with smarts.

Incentivized

• To mimic production servers to deceive attackers
• To detect the lateral movements of adversary through machine learning algorithms
• To feed dummy data on production servers through threat strike feature

Incentivized

• Webroot provides a very easy to use web interface with GSM. From a single dashboard we can control all of our endpoints that are currently using Webroot services. This is extremely helpful for central management for my engineers.
• Webroot's new (2.0) plugin for Automate (formerly LabTech) provides us with integration into our RMM platform that allows for a large majority of the daily operational tasks to be completed without ever having to move to a different application and/or the web dashboard. The integration is key for engineers to make changes on the fly and quickly. They have done a good job with the 2.0 plugin after coming from the 1st iteration.
• Webroot interface on the machines is a simple and easy UI to follow and understand. Seeing what the product is doing and how it is configured is very straightforward and doesn't require much hunting with the local interface on machines.

Incentivized

• Attivo Endpoint Detection Net (EDN) should have capability for getting forensics packages from compromised systems in my opinion.
• I believe Auto phishing email detection capability should be improved to meet industry requirements to tackle phishing attack vector
• Malware detection capabilities should be improved to work to kernel level for better visibility in my opinion.

Incentivized

• It would be nice if there was a notification when Webroot blocked something. Power users may need to legitimately edit things like their hosts file, but they dont know Webroot is preventing them from doing so. They could easily temporarily disable it to do what they need to do if they were aware. Same thing goes for files that get quarantined without notice, it leaves the user wondering why their legitimate file keeps disappearing.
• While the web based console is nice and easy to use, it could use a little better reporting.
• If an administrator disabled a feature (like the firewall, for example) then the Webroot GUI should not alert the end user about whenever they open it. The software should be aware it is being administratively controlled.

Incentivized

It's easy to renew with Webroot, their support is very attentive and highly available. However if you do choose to change products, they even provide means of removing the software from your endpoints via the admin portal which is very convenient.

Incentivized

We have not had to use Webroot support much over the years. The one or two times we did we were referred to online documentation and in a somewhat condescending manner in one case and in another case, the support person did not demonstrate much knowledge of their product and referred us to the user community for support.

Incentivized

Attivo provides a user friendly management with a centralized manager. We can do configuration of Attivo Endpoint Detection Net (EDN) from a centralized console and deploy the Attivo Endpoint Detection Net (EDN) very easily. In other deception tool like forti deceptor etc, they have a bit poor user interface in my opinion and use-ability feature are improved in Attivo as compared to its competitors solutions I believe

Incentivized

As previously mentioned, Webroot is struggling to compete. Specifically, it is struggling to show value when similar products are catching more and offer more complete packages for remediation as well. We have discontinued the use of Webroot in favor of offering more advanced protection tools by default to our contracted clients.

Incentivized

Ease of implementation across various devices is easy and efficient regardless of scale. Whether it is 5 devices or 500 the product continually proves its the best in its class.

Incentivized

• Attivo Endpoint Detection Net (EDN) helps to protect information hence Attivo Endpoint Detection Net (EDN) is securing sensitive data therefore ROI is better as loosing the data is much more costlier as per Business Impact Analysis.
• In small organization ROI is not effective as cost of Attivo Endpoint Detection Net (EDN) is a bit high and data being protected through EDN is not high value asset in my opinon.
• It is a better technology to detect cyber threats so anyway it is recommended to use for better security posture.

Incentivized

• It has had a mostly positive impact as we have not had any breaches.
• The only negative impact has been when Webroot Antivirus + Internet Security Complete (SecureAnywhere) changed something on their end that caused one of our business applications to not be usable by end-users. That cost our business a fair amount as it took 4 days before it could be used again.

Incentivized