Skip to main content
CMDashCybersecurity Maturity Dashboard
← All landscape areas
Endpoint Security · Foundational

EPP / Next-Gen Antivirus

Prevents malware and exploits on endpoints.

7 options listedTypical cost: $30-$60/endpoint/yrPROTECT (PR)

EPP/NGAV stops known and behavior-based malware at the device using signatures, ML, and exploit prevention. It is the baseline control on every workstation and server. Frequently bundled with EDR in modern platforms. Priced per endpoint per year.

Minimum endpoint defense required on every device.

  • Baseline everywhere
  • Defender effectively free on M365 E5
  • CrowdStrike/SentinelOne strong prevention
  • cloud-managed.
  • Commodity tier on its own
  • real protection needs EDR
  • possible agent conflicts
  • Defender weaker cross-platform.
CrowdStrikeCommercial

Cloud-native endpoint/identity/cloud leader; premium platform.

Visit site →
Microsoft DefenderCommercial

Endpoint/EPP bundled with M365; strong if all-Microsoft.

Visit site →
SentinelOneCommercial

Autonomous endpoint AI with one-click rollback; aggressive pricing.

Visit site →
SophosCommercial

SMB/mid-market endpoint + MDR; synchronized security.

Visit site →
Trend MicroCommercial

Long-standing endpoint + Vision One XDR; strong hybrid.

Visit site →
ClamAVOpen source

Open-source antivirus engine.

Visit site →
Bitdefender GravityZoneCommercial

Bundled EPP/EDR suite with 30+ security modules; 2026 Gartner Peer Insights Customers' Choice for EPP.

Visit site →
EPP / Next-Gen Antivirus — Cybersecurity Landscape Atlas — CMDash