Item: Kaspersky EDR Expert
Rating: 10
Author: Verified User

Use Cases and Deployment Scope

We're using Kaspersky EDR Expert as endpoint protection, system hardening, exposure management, endpoint detection and response tool. It protects endpoints running Windows and Linux and detects modern threats with low system performance impact and almost no false alarms. Threat Intelligence portal is also very valuable.

Pros and Cons

Strongest endpoint protection product on the market according to 3rd party evaluation
Actionable detection data
Sandbox is extremely useful

It would be great to add SOAR product or capabilities into portfolio
As for EDR product itself, I haven't ran into any issues

Most Important Features

Endpoint protection and system hardening
Endpoint detection and response
Exposure management
Intelligence from a cloud

Return on Investment

Best protection on the market and low level of noise allows security guys to focus on what is really important
Enrichment and additional detection using sandbox and threat intelligence portal
Covering desktops and servers running various OS

Deciding Factors

Price, capabilities and well-know expertise

Resources

Simplicity, good IU and available training materials allow to start using the solution without any problems or concerns. Kaspersky EDR Expert can be operated even by a small team from one hand. From another hand, it gives maximum value to mature SOC teams when combined with other Kaspersky products

Alternatives Considered

SentinelOne Singularity, Sophos Intercept X and Trellix Endpoint Security ENS

Kaspersky EDR Expert delivers much better protection and detection rate

Key Insights

Do you think Kaspersky EDR Expert delivers good value for the price?

Yes

Are you happy with Kaspersky EDR Expert's feature set?

Yes

Did Kaspersky EDR Expert live up to sales and marketing promises?

Yes

Did implementation of Kaspersky EDR Expert go as expected?

Yes

Would you buy Kaspersky EDR Expert again?

Yes

Other Software Used

Kaspersky Endpoint Security for Business, Kaspersky Security Awareness, Microsoft Defender for Cloud

Likelihood to Recommend

Easy to learn, use and deploy. Kaspersky EDR Expert allows to automatically find unmanaged and rogue endpoints, remove previous agent from another vendor, install its agent, move endpoint to a group based on endpoint's characteristics, change security policies if for example endpoint is moved to another subnet or currently out-of-office, apply malware outbreak rules in case of attack

Kaspersky EDR Expert is a Great modern endpoint protection platform

Overall Satisfaction with Kaspersky EDR Expert