Endpoint Security · Foundational
EDR / XDR
Detects and responds to endpoint and cross-domain threats.
8 options listedTypical cost: $60-$185/endpoint/yrDETECT (DE) / RESPOND (RS)
Overview
EDR records endpoint telemetry to detect, investigate, and remediate intrusions; XDR correlates across endpoint, network, identity, and cloud. These are the core of modern detection-and-response programs. Enterprise tiers add managed threat hunting. List pricing runs roughly $60-$185 per endpoint per year.
Core detection-and-response; the primary breach-stopping control today.
Advantages
- CrowdStrike best-in-class detection plus OverWatch hunting
- SentinelOne autonomous rollback and aggressive pricing
- Defender near-zero marginal cost on E5
- Wazuh/Velociraptor free.
Trade-offs
- CrowdStrike premium with SIEM/identity sold as add-ons
- Defender console depth and non-Windows trail competitors
- OSS is heavy self-ops
- alert fatigue without staffing.
Vendors & tools in this area
CrowdStrike FalconCommercial
Cloud-native EDR/XDR leader; OverWatch hunting; premium, modular.
Visit site →SentinelOneCommercial
Autonomous endpoint AI with one-click rollback; aggressive pricing.
Visit site →Elastic SecurityCommercial
XDR built on the Elastic Stack; pay-as-you-go serverless pricing with zero per-endpoint agent fees.
Visit site →