Kaspersky EDR

Boost endpoint security while cutting costs

Digitally transforming enterprises are valuable targets for cybercriminals. Today, just uncovering and blocking individual threats as they arise isn’t enough -  defending yourself successfully against complex threats at the earliest possible stage requires root cause analysis. Implementing the full endpoint protection cycle, from automatic threat blocking to complex incident response, means supplementing preventive technologies with advanced defense capabilities. Kaspersky Endpoint Detection and Response (EDR) provides comprehensive visibility across all endpoints on the corporate network, enabling the automation of routine tasks in order to discover, prioritize, investigate and neutralize advanced threats.  The result is a significant increase in the speed and effectiveness of incident processing, at no extra cost.

  • Single agent for prevention, investigation, hunting and response

    A single agent reduces TCO, simplifies incident handling and minimizes maintenance costs. As a switchable module within world-leading Kaspersky Endpoint Security, activating the investigation, hunting and response functionality of Kaspersky EDR is quick and easy.

  • Drives operational efficiency

    Kaspersky EDR reduces initial evidence collection time from hours to minutes via continuous collection and analysis of endpoint-level telemetry. The Web interface enables real-time investigation and provides an historical database overview of activities even if a particular endpoint is not on the network or has been reimaged or encrypted during malicious action.

  • Improves security and safeguards privacy

    As an investigation and response tool, Kaspersky EDR is designed to deliver complete privacy of enterprise raw telemetry and critical data/files - all data collection, analysis and storage is performed on-site. This leads to complete control of data by security teams and avoids the risks associated with third parties. The result? Better trust and improved privacy.

Suitable For

For companies struggling with incident response due to a lack of resources, manual handling and/or insufficient existing technologies, Kaspersky EDR’s integrated solution and single web console provide a full picture of the security scenario to help manage complex threats easily and efficiently.

Kaspersky Anti-Targeted Attack Platform
ICSA Labs: Advanced Threat Defense test (Q1, Q2, Q3, Q4)
Kaspersky Threat Management and Defense
Radicati APT Protection Market Quadrant 2019
Kaspersky Threat Intelligence Services
The Forrester New Wave™: External Threat Intelligence Services, Q3 2018

In Use

  • Integrated Endpoint Protection

    Kaspersky EDR and Kaspersky Endpoint Security for Business share a single endpoint agent - where Kaspersky Lab endpoint protection is already installed, Kaspersky EDR can simply be activated within the existing software agent. No added burden on endpoints, no added management and maintenance costs – just the knowledge that your workstations and servers are fully protected against the most advanced threats and targeted attacks. Our integrated approach to endpoint protection automatically prevents common threats while providing endpoint controls, supporting the advanced detection and prioritization of complex attacks, enabling a detailed investigation and an effective response to incidents.

  • Enhanced investigation process cycle

    Kaspersky EDR enables the ongoing monitoring and visualization of every investigative stage, with fast access to data, even where compromised workstations are inaccessible or data has been encrypted by hackers. The investigation process is enhanced with threat hunting, IoC scanning and correlating events to unique Indicators of Attack (IoAs) provided by Kaspersky Lab, while mapping to MITRE ATT&CK helps identify the tactics and techniques used by cybercriminals. Enabling your security specialists to understand the entire sequence of intruder actions as part of a mature investigation process  increases the volume and quality of incident processing, helping them to respond appropriately - and fast!

  • Centralization for a faster, more accurate response

    Quality and speed of incident response are KPIs commonly applied to today’s Information Security Departments.  By centralizing incident management across all the endpoints on your corporate network, Kaspersky EDR provides a seamless workflow. A single interface for monitoring, investigation and response means security tasks can be performed more effectively and efficiently – with no flipping between multiple tools and consoles. Incident response across distributed infrastructures is supported through centralized and automated actions, all helping to streamline the work of your security team.  No costly additional resources needed, no more expensive downtime and no lost productivity.


Premium Support

Professional help is available whenever you need it. Operating in more than 200 countries, from 34 offices worldwide, we have you covered 24/7/365. Take advantage of our Premium support packages, or call on our Professional Services to ensure that you derive maximum benefit from your Kaspersky Lab security installation.

The Threats

Without the capability to implement a unified and automated adaptive security approach that Kaspersky Threat Management and Defense provides, your IT infrastructure and wider organization is laid open to:

  • Scan

    Slower detection, response and reaction times, providing increased opportunities for an attack to do damage.

  • Scan

    Lowered security due to difficulties in applying Threat intelligence across the entire network.

  • Scan

    Shortages of sufficient staff qualified to undertake manual/semi-manual Threat Analysis and Hunting.

  • Scan

    Unique attacks remaining undetected by patterns or not known at the time of penetration.

  • Scan

    Lack of threat visualization and investigation capabilities.

  • Scan

    Business disruption during disjointed and unstructured recovery and investigation processes.

Let’s start the conversation! To talk to one of our experts about how True Cybersecurity can inform your corporate security strategy. Get in touch!