Endpoint Protector by CoSoSys vs. Microsoft Defender for Endpoint

Endpoint Protector [by CoSoSys] is well suited for an environment where a data loss prevention solution is required and many different operating system types are used. It is also well suited for an organization that has a need to deploy a solution quickly. Endpoint Protector is not well suited for companies that need to have an API or other integrations with other IT tools.

Incentivized

Usually we had lots two platforms tasked with scanning exposures, anti-malware and provision for information and threat management. But with Microsoft Defender for Endpoint we have an all inclusive platform that even integrate with other Microsoft security apps such as Microsoft Defender for Cloud for enhanced threat insights and visibility.

Incentivized

• Can be used remotely via public IP or VPN
• Integrates well with Active Directory
• Easy to deploy

Incentivized

• It provides a unified security experience when combined with other Microsoft products such as Microsoft Defender for 365 and Azure Defender.
• It has an excellent dashboard and centralized view that make it easy to see and control everything from one location.
• It's an EDR tool designed to help you understand incidents and alerts better.
• Real-time detection of attacks and prompt endpoint device responses. It effortlessly interacts with additional Microsoft security products.

Incentivized

• App integration - CoSoSys supports a lot of industry standard apps but fails to provide protection on 3rd party applications.
• Complete disk encryption.
• Web filtering features.

Incentivized

• Does not allow for remediation from the management console.
• The ticket system doesn't alert the person assigned to the ticket.
• You have to submit requests for whitelisting applications.
• Scanning exclusions are tricky to find.
• Adding devices, especially Apple devices, is very cumbersome.

Incentivized

The first time I tried to onboard my macOS endpoints to MDE I struggled for quite a bit. I had to reach out to Microsoft's MDE support team. The tech was very helpful in walking me through the steps during a screen share session

Incentivized

Endpoint Protector [by CoSoSys] was able to be installed on all major operating systems. Endpoint Protector was also able to perform block actions and do it at a granular level among the endpoints. Business needs required a traditional data loss prevention and Endpoint Protector met those needs. We had a need to block some USB storage events and Endpoint Protector met those needs.

Incentivized

in an overall protection sentinelone is providing better protection for us, but as it comes with subscription's limitation, we have to be really careful in managing the licenses, the MS Defender for endpoint is providing us a decent protection which we are not complaining about, why we chose them ? as mentioned, this is coming with our subscription

Incentivized

• Didn’t work as expected
• Not sure yet if we are going to renew it, thankfully we didn’t make a 3 year contract required by them.
• The are not many options in the market for source code detection, so we may have to stick with it

Incentivized

• By providing robust threat protection, Defender for Endpoint can prevent downtime caused by security issues. Employees can work without interruptions, leading to increased productivity.
• By significantly decreasing the frequency of security incidents like malware infections and data breaches, Microsoft Defender for Endpoint can protect your network. The cost of incident response, cleanup, and potential regulatory fines are reduced as a result of the decrease in events.
• The implementation and configuration of Microsoft Defender for Endpoint may require an initial investment in licensing, training, and deployment, which can temporarily affect ROI.
• The cost of licensing can be substantial, especially for larger organizations. This cost needs to be factored into the ROI calculation.

Incentivized