Endpoint defense (EDR)
Protection on each device that detects suspicious behavior, not just known viruses, and can isolate a compromised computer.
What it is
EDR stands for endpoint detection and response. Traditional antivirus mostly compares files against a list of known threats. EDR also watches what programs actually do on a computer and flags behavior that looks like an attack, such as a program rapidly encrypting files or trying to steal saved passwords.
It records activity so investigators can see what happened, and it can contain a device by cutting it off from the network to stop an attack from spreading.
Why it matters for small and midsize businesses
Modern attacks often use brand-new malware or ordinary system tools that a list of known threats does not recognize. Watching behavior improves the odds of catching them.
The activity history matters too. If something does happen, you can find out how it started, what it touched, and whether it spread. That answer is what insurers, customers, and regulators tend to ask for. Visibility like this used to be available mostly to large enterprises.
Where it fits
Advanced Security includes everything in Fundamentals, plus:
- Endpoint defense (EDR) Protection on each device that detects suspicious behavior, not just known viruses, and can isolate a compromised computer.
- Identity and Microsoft 365 security Protecting the logins and settings behind your Microsoft 365 accounts, because stolen passwords are one of the most common ways in.
- Email security Filtering that catches phishing, malicious attachments, and impersonation before they reach your staff's inboxes.
- Security awareness and phishing simulations Short, regular training and practice phishing emails that teach employees to spot scams and report them.
- Device security (disk encryption and USB control) Encryption so a lost laptop does not expose your data, and controls on USB drives that can carry in malware or carry data out.
- Secure internet / web protection Filtering that blocks dangerous websites and downloads before an employee's browser reaches them.
- Microsoft 365 cloud backup A separate backup of your Microsoft 365 email and files, because keeping data in the cloud is not the same as having a backup.
Not sure whether this fits your business?
Start with a free checkup. We'll look at your setup and tell you plainly what makes sense and what doesn't.