Kaspersky EDR Expert is a Great modern endpoint protection platform
We're using Kaspersky EDR Expert as endpoint protection, system hardening, exposure management, endpoint detection and response tool. It …
Starting at $52.30 3-year commitment, calculated per year per endpoint
View PricingOverview
What is Kaspersky EDR Expert?
Kaspersky Endpoint Detection and Response (EDR) Expert provides endpoint protection, advanced detection, threat hunting and investigation capabilities and multiple response options in a single package. It is an EDR solution for IT security teams with more mature incident response processes,…
Recent Reviews
Awards
Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards
Reviewer Pros & Cons
Pricing
Kaspersky EDR Expert
$52.30
Cloud
Pricing is for a 3-year commitment, calculated per year. 1 and 2 year licenses also available. per endpoint
Entry-level set up fee?
- No setup fee
Offerings
- Free Trial
- Free/Freemium Version
- Premium Consulting/Integration Services
Starting price (does not include set up fee)
- $52.30 3-year commitment, calculated per year per endpoint
Product Details
- About
- Integrations
- Competitors
- Tech Details
- FAQs
What is Kaspersky EDR Expert?
Kaspersky Endpoint Detection and Response (EDR) Expert provides endpoint protection, advanced detection, threat hunting and investigation capabilities and multiple response options in a single package. It is an EDR solution for IT security teams with more mature incident response processes, enabling them to hunt, prioritize, investigate and neutralize complex threats and APT-like attacks.
Kaspersky also describes what they believe are the product's key benefits, and differentiators:
Key features
- Advanced detection, including methods based on machine learning
- Indicator of Compromise (IoC), Indicator of Attack (IoA) and Sandbox detection
- Monitoring and visualization with drill-down capability
- Guided investigation
- Centralized telemetry storage
- Threat hunting capabilities
- MITRE ATT&CK mapping
- Multiple response options
- Access to Kaspersky Threat Intelligence Portal
- Single cloud or on-prem console
Kaspersky also describes what they believe are the product's key benefits, and differentiators:
Benefits
- Single agent with next-gen endpoint security (EPP)
- Provides tools for defending against complex and advanced threats
- Allows for proactive threat hunting, not only reacting to incidents
- Deep investigation helps prevent similar incidents in the future
- Several response options, automation and customization to best fit the cybersecurity team
- Reduces required cybersecurity resources through guidance and automation
- Simple way to upgrade to Native XDR
DIfferentiators
- Includes next-gen endpoint security (EPP)
- Guided investigation helps analyze threats quickly and learn on the job
- Proprietary Indicators of Attack
- Sandbox with capability to use customer-defined images (on a select range of OS)
- Threat Intelligence
- API to send gathered telemetry to third-party systems
- Supports both cloud and on-premise deployments
Kaspersky EDR Expert Features
- Supported: Extended prevention - EPP included in the license provides detection and prevention based on Machine Learning. It also includes patch management, encryption and Adaptive Anomaly Control, an automatic system hardening tool.
- Supported: Advanced detection - Besides Machine Learning and Behavior Analysis, the solution uses IoC and IoA detection and a customizable Sandbox.
- Supported: MITRE ATT&CK mapping - IoAs and Sandbox detections are mapped to MITRE ATT&CK for the further analysis of the adversary’s Tactics, Techniques and Procedures.
- Supported: Threat hunting - Real-time automated threat hunting with IoAs, access to Threat Intelligence Portal knowledge base and a flexible Query Builder allow for multiple ways to perform proactive threat hunting
- Supported: Forensic investigation - Retrospective analysis can be performed over a vast array of telemetry gathered from each endpoint. It is collected in a centralized cloud or on-prem storage, making the data available even if the compromised endpoint is inaccessible or encrypted.
- Supported: Incident response - Automated, guided and manual ‘one click’ response options are available via the central management console. Options include network isolation, delete file, prevent execution, start process, and get file.
Kaspersky EDR Expert Screenshots
Kaspersky EDR Expert Video
Kaspersky Expert Security
Kaspersky EDR Expert Integrations
- VirusTotal
- Own API for sending telemetry to 3rd party systems
- syslog
- Active Directory
Kaspersky EDR Expert Competitors
Kaspersky EDR Expert Technical Details
| Deployment Types | On-premise, Software as a Service (SaaS), Cloud, or Web-Based |
|---|---|
| Operating Systems | Windows, Linux |
| Mobile Application | No |
| Supported Countries | All |
| Supported Languages | English, Russian |
Frequently Asked Questions
Kaspersky Endpoint Detection and Response (EDR) Expert provides endpoint protection, advanced detection, threat hunting and investigation capabilities and multiple response options in a single package. It is an EDR solution for IT security teams with more mature incident response processes, enabling them to hunt, prioritize, investigate and neutralize complex threats and APT-like attacks.
Kaspersky EDR Expert starts at $52.3.
CrowdStrike Falcon, Sophos Intercept X, and SentinelOne Singularity are common alternatives for Kaspersky EDR Expert.
The most common users of Kaspersky EDR Expert are from Mid-sized Companies (51-1,000 employees).
Kaspersky EDR Expert Customer Size Distribution
| Consumers | 0% |
|---|---|
| Small Businesses (1-50 employees) | 3% |
| Mid-Size Companies (51-500 employees) | 46% |
| Enterprises (more than 500 employees) | 51% |
