Kaspersky EDR Expert Reviews & Insights

We're using Kaspersky EDR Expert as endpoint protection, system hardening, exposure management, endpoint detection and response tool. It protects endpoints running Windows and Linux and detects modern threats with low system performance impact and almost no false alarms. Threat Intelligence portal is also very valuable.

Easy to learn, use and deploy. Kaspersky EDR Expert allows to automatically find unmanaged and rogue endpoints, remove previous agent from another vendor, install its agent, move endpoint to a group based on endpoint's characteristics, change security policies if for example endpoint is moved to another subnet or currently out-of-office, apply malware outbreak rules in case of attack

We use it for all of the our workstation and now we are planning to deploy it to servers. We use EDR to get large amount of controls and logs from our hosts. Then we use collected data to determine cybersecurity incidents. Also this product decreases the load to our SIEM-system because the correlation between logs and security events.

It is a very comprehensive product to learn everything about incidents on the windows hosts. Also EDR can create some incidents during its analyze. But it is pretty useless when we are talking about linux systems. Further it is not so good when algorithms are not described clearly (like it was when we used Traps). So there are some ways to improve the product

We have IT guy who likes all these security stuff, so he deployed trial version and during trial period Kaspersky EDR Expert helped us to detect some malicious activities, so we decide to keep it and buy commercial license.

Kaspersky EDR Expert helped us to stop ransomware attack and APT attack.

We're using Kaspersky EDR Expert capabilities additionally to Endpoint Security to increase visibility and detection as well as to improve response.

Kaspersky EDR Expert is well suited for detection in complex environments

I use Kaspersky EDR Expert as an antivirus and app control and web filter.

We use Kaspersky EDR Expert to detect and respond to threats in our environment as it is much faster than any human can detect and respond to threats.

Kaspersky EDR Expert is well suited for organizations with limited human resources to monitor and manage threats; Kaspersky EDR Expert plugs that gap.

Kaspersky EDR Expert is a new sophisticated EDR system. We used this system to provide endpoint protection, advanced detection, threat hunting and investigation capabilities. It was used by SOC and IT operations for incident response to hunt, prioritize, investigate and neutralize complex threats and APT-like attacks. The business problems we addressed: end-point device security management, end-point protection, threat analysis and investigation, incident process management, protection against APT attacks.

I think system could be used for small business that is very price sensitives and prepared to take security risks for the low price system. In my opinion, It is too risky to use this system for security sensitives enterprises

We utilize Kaspersky Endpoint Detection and Response to help secure our network and proactively prevent cyber-attacks and malicious software from accessing our systems.

Looking at other products in the market, Kaspersky provides advanced features at a reasonable cost.

We use Kaspersky EDR Expert in client computers in our organization because we need a reliable system to protect these machines from malicious attacks and also to control other security aspects in the cliente computers. So far we are happy with the product and recomend it to any company that do not have too many computers to manage, since is a realy easy software to deploy and mantain.

This product is suited for small enterprises where you have less than 50 computers to manage, it performs well and do not make the client machine slower. Because it lacks some automation in gathering information from client machines, it maybe difficult to manage a broader number of machines, but for small size companies is really good doing the job of protection of the client machine really well.

Virus protection and password management are the main uses. We do not utilize any of its VPN capabilities; those are handled in another software.

Helping with password compliance is good, as well as helping serve as a password manager. Does a good job of identifying spam and malware.