Endpoint detection and response (EDR)
Security software that watches for suspicious behaviour on a device and can isolate it, going beyond signature-based antivirus.
Traditional antivirus matches files against a list of known bad ones. EDR watches behaviour instead: a process encrypting files quickly, or a script reaching somewhere it should not, gets flagged and often the machine gets isolated from the network automatically.
The word managed is doing real work in managed EDR. The tool generates alerts, and alerts nobody reads are not security. Managed means somebody is actually triaging them.
For a small office the honest framing is that this is the difference between finding out about ransomware from the tool and finding out from an employee.
What it costs
$9 per person per month here as an add-on. Standalone managed EDR typically runs $10 to $25 per endpoint.
Related questions
Is EDR included in managed IT?
In standard-tier agreements usually yes, which is part of why they cost $150 to $200 per user. In narrower plans it is an add-on with its own price.
Do we still need antivirus with EDR?
EDR products generally include the antivirus function, so it is a replacement rather than an addition. Confirm that rather than paying for both.
Related service: Endpoint management · Endpoint Management Pricing