Endpoint Security
Discover endpoint security tools including EDR, antivirus, XDR, application control, and device protection platforms.
8 results in Endpoint Security
Active Pro listings from this category appear first. Your sort applies within Pro and Free results.
Shortlists for Endpoint Security
Explore collections with tools relevant to this category, grouped by deployment, source model or workload.
Security tools for MSPs and multi-customer operations →
2 matching tools from this category
IT tools with an API →
2 matching tools from this category
How to choose endpoint security tools
Endpoint security platforms protect laptops, servers and mobile devices against malware, ransomware and hands-on attackers. Modern suites combine prevention such as antivirus and application control with detection and response features that record process activity, flag suspicious behaviour and let analysts isolate a machine or roll back changes. Network security tools watch traffic between hosts and SIEM tools correlate logs from many sources, whereas this category acts on the device itself.
Who uses these tools
- Security analysts triaging endpoint alerts
- IT admins deploying agents across company devices
- Managed service providers protecting client devices
Capabilities to compare
- Malware and ransomware prevention with rollback
- Behavioural detection and threat hunting telemetry
- Remote isolation and response actions
- Operating system and server workload coverage
- Managed detection and response options
Operating considerations
- Agent performance impact on older machines
- Telemetry retention and cloud data location
- Kernel-level agents can break during updates
- Licensing per endpoint, module or tier
Selection checklist
- Inventory every operating system and server type you run, then confirm agent support and feature parity on each.
- Pilot the agent on representative devices and measure CPU, memory and false positive rates.
- Check how alerts reach your team after hours and whether a managed detection service is needed.
- Review how agent updates are staged so a faulty release cannot hit every device at once.
What belongs in this category: A product belongs here when it installs an agent or uses native device controls to prevent, detect or respond to threats on endpoints, including antivirus, EDR, XDR and managed detection services.
Endpoint Security on iThub in figures
iThub lists 8 tools in Endpoint Security. 1 of 8 can be self-hosted and 2 of 8 offer an API.
- Tools listed
- 8
- Self-hostable
- 1
- With an API
- 2
- Web app
- 3
- Desktop app
- 5
Recently added: Acronis, SentinelOne, CrowdStrike, McAfee
Typical use cases
- Blocking ransomware and reverting encrypted files
- Investigating a compromised laptop through recorded process history
- Isolating an infected server from the network remotely
- Protecting client devices across many managed tenants
Trade-offs to model
- Full EDR gives deep visibility but produces alerts someone must triage, while basic antivirus needs little attention and catches less.
- Running the console yourself keeps control over response decisions, whereas a managed detection service covers nights and weekends.
Common mistakes
- Buying detection and response features without staff or a service to investigate the alerts they produce.
- Leaving exclusions added during troubleshooting in place permanently, creating blind spots attackers can use.
Compare CrowdStrike and SentinelOne →Browse security tools for MSPs →SIEM and threat intelligence →
Continue the technical evaluation
Use the resources that match your decision stage. Profile data and linked sources were refreshed through November 10, 2026.
