Kaspersky EDR Optimum vs. WithSecure Business Suite

We have been using Kaspersky EDR Optimum for over 10 years, with the evolution of products reaching EDR now, we can verify the integrated responsiveness and visibility of our environment. Great protection tool on all OS. Very good value for money, with the new licensing, all business plans will now have native EDR.

Incentivized

• Very stable and cost-effective.
• Better integration with leading database vendors would be great; this would address features that are missing like x-windows support and concurrent secure file transfers.
• Patching is relatively fast and not as frequent as other vendors (with no impact on adherence to security best practices).

• Very easy to install and low storage footprint.

Incentivized

• KEDR Optimum is helping to see threat kill chain formation, which helps to get clear picture of the what exactly attacker was trying to do during attack.
• We are crating prevent execution rules to block the threat in our complete infra.
• Ioc scan to validate and remove the any active threat entry from our endpoints

Incentivized

• Most up to date secure/encryption technology.
• Very fast to set up and maintain.
• Supported by all major hardware platforms (Microsoft, Linux).

Incentivized

• Agent package size is little big, if it can be optimize with lite package would be great
• If possible Host Integrity functionality can be added, to take action as quarantine the non-compliance machine to connect our enterprise network
• Many times KSC cloud operating slow, if it can optimized for the faster response

Incentivized

• X-windows support could be more robust.
• Virtual shell adaptation could be improved.
• Greater concurrency for large secure transmissions would be a great add-on.

Incentivized

At the moment and unfortunately we'll not renew our licenses, due to the Russian conflict and the company policy that has forced us to get rid of any Russian related product. Before that incident, we were very happy with the product and we did not even think once about changing it... Maybe on the future...

Incentivized

This item can always be improved, perhaps by pre-elaborating very long reports, such that they are built progressively so that when the user wants to consult them, the delay is minimal. It would also be interesting to have a warehouse of reports, which serves as a repository where they can be consulted whenever needed, adding AI capabilities that allow data to be linked together and improve the analysis and possible correlations of events.

Incentivized

• Support organization is active, so is online community boards.
• There have been no significant issues that haven't been able to be quickly addressed by either online documentation or F-Secure support.
• Easy to use diagnostic tools and information gathering, make problem analysis fast.
• Phone support can be different due to time zone differences, but this has not been a major issue.

Incentivized

After several evaluations we concluded that the kasprsky provider has a solution for each processing environment we have.This impacts an excellent cost-benefit for achieving economies of scale on the company's infrastructure. On the other hand, we verified that during its operation, its level of effectiveness in terms of malware detection is excellent. Finally, it provides a desktop patch management solution that we found efficient and effective. Allowing you to automate the distribution of patches with a minimum staffing of technical personnel.

Incentivized

• This suite of software does not have any mentionable competition, in my opinion.
• It adheres to current security protocols, in-frequent patching requirements, low IT overhead, and on-going support are exemplary.
• Robust documentation and online community boards help keep support and maintenance transparent and efficient.
• Legacy support for older OS' is quite useful.
• Simplicity when onboarding into custom hybrid network configurations is also vital.

Incentivized

• In mayor aspect, saving time for IT/Cybersecurity teams.
• Agile process to short the operations outages.
• Centralized view and relevant data for SOC team.

Incentivized

• Very low cost.
• Low IT overhead (very low network bandwidth, CPU, storage utilization).
• Supported by all major hardware vendors.

Incentivized