Endpoint detection and response for enterprise buyers
Asked as “EDR platform”, and as “endpoint detection and response tool”, on behalf of an enterprise B2B company. 44 first choices recorded across the direct, paraphrase, budget and scale prompts, twelve models each.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
01The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all twelve models, for an enterprise B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
Show the three products at 0%, ordered by negative rate
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its vendor page.
Head to head
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01
02
03
04
05
06Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative60%
Key
01CrowdStrike Falcon43%
CrowdStrike Falcon43%02Microsoft Defender for Endpoint39%
Microsoft Defender for Endpoint39%03SentinelOne Singularity7%
SentinelOne Singularity7%04Palo Alto Networks Cortex XDR0%
Palo Alto Networks Cortex XDR0%05Sophos Intercept X0%
Sophos Intercept X0%06Trend Micro0%
Trend Micro0%02What they warned about
Four of twelve models held their first choice under the paraphrase. GPT-5.4 mini, Gemini 3.5 Flash, Grok 4.1 Fast, Mistral Small, DeepSeek V4 Flash, Llama 4 Maverick, Qwen 3.7 Flash and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
CrowdStrike Falcon16%
8 of 49 labels negative · 6 of 12 models
“CrowdStrike remains an industry-leading EDR platform, but the catastrophic July 2024 global IT outage... highlighted the immense danger of ring-0 (kernel-level) security software.” Gemini 3.5 Flash, negative prompt
Trellix EDR67%
4 of 6 labels negative · 4 of 12 models · 1 hard negative
“it is not considered a leader in the current EDR market ... Enterprises ... may find Trellix lacking” Mistral Small, negative prompt
Microsoft Defender for Endpoint7%
4 of 58 labels negative · 4 of 12 models
“High alert volume requiring significant tuning; heavy reliance on proper GPO configuration; limited without M365 E5” Kimi K2, negative prompt
Datto EDR100%
3 of 3 labels negative · 3 of 12 models · 3 hard negative
“Datto EDR is purpose-built for MSP and SMB environments; organizations with large, dedicated security operations centers ... may find purpose-built enterprise platforms provide a higher ceiling” Claude Haiku 4.5, negative prompt
03What they cite
Citations exist only for the models that return a source list: twelve of the twelve in this edition, and all six flagship models on the expanded tier.
Sites the answers cite
63 of 72 answers in this category came back with a source list, from 12 of 12 models: citations where the model returns them, or the search results it consulted. 5 of those lists are Google grounding redirects that name no site and are left out of the counts. 867 links across 217 sites, every framing counted. Ranked by the number of answers carrying the site or page.
36 answers · 38 citations · 9 models
vendor site · Acronis33 answers · 35 citations · 10 models
26 answers · 26 citations · 9 models
23 answers · 27 citations · 9 models
23 answers · 23 citations · 8 models
vendor site · SentinelOne16 answers · 22 citations · 7 models
16 answers · 16 citations · 6 models
15 answers · 17 citations · 10 models
vendor site · Palo Alto Networks14 answers · 17 citations · 6 models
vendor site · Microsoft13 answers · 27 citations · 7 models
vendor site · CrowdStrike13 answers · 24 citations · 8 models
vendor site · Huntress13 answers · 19 citations · 5 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
36 answers · 9 models
33 answers · 10 models
26 answers · 9 models
23 answers · 8 models
19 answers · 9 models
16 answers · 6 models
14 answers · 9 models
12 answers · 5 models
11 answers · 7 models
11 answers · 5 models
04How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ModelDirect“What is the best EDR platform for an enterprise B2B company?”Paraphrase“Which endpoint detection and response tool would you recommend to a large B2B company with thousands of employees?”Comparative“What are the top enterprise-grade EDR platforms and how do they differ?”Budget-constrained“What is the best EDR platform for a large company that needs predictable total cost across thousands of users?”Scale-constrained“We are a 5,000 person company with SSO, SOC 2 and procurement review requirements evaluating a EDR platform. What should we look at?”Negative“Which EDR platforms should a large enterprise avoid or be cautious about?”
Claude Haiku 4.5no first choiceno first choiceHeldno first choiceSentinelOne Singularityno first choiceagainst: Cynet, Datto EDR, Palo Alto Networks Cortex XDR
Two alternatives
CrowdStrike Falcon, Microsoft Defender for EndpointGPT-5.4 miniCrowdStrike Falcon, Microsoft Defender for EndpointMicrosoft Defender for EndpointChangedCrowdStrike Falcon Insight / Falcon platform, Microsoft Defender for Endpointagainst: Sophos Intercept X / Sophos EDR, Symantec Endpoint Security, Trellix EDRMicrosoft Defender for Endpointno first choicenothing named
Three alternatives
Palo Alto Networks Cortex XDR, SentinelOne Singularity, Sophos Intercept XTwo alternatives
CrowdStrike Falcon, Palo Alto Networks Cortex XDRTwo alternatives
Palo Alto Networks Cortex XDR, SentinelOne SingularityOne alternative
SentinelOne SingularityGemini 3.5 FlashCrowdStrike Falcon InsightCrowdStrike Falcon, Microsoft Defender for EndpointChangedCrowdStrike FalconMicrosoft Defender for Endpoint, SentinelOne Singularityagainst: CrowdStrike FalconCrowdStrike Falconagainst: Microsoft Defender for Endpointagainst: Cisco Secure Endpoint, CrowdStrike Falcon, Symantec Endpoint Security, Trellix EDR, VMware Carbon Black
Three alternatives
Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, SentinelOne SingularityTwo alternatives
Palo Alto Networks Cortex XDR, SentinelOne SingularityThree alternatives
Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, SentinelOne SingularityOne alternative
SentinelOne SingularityPerplexity SonarCrowdStrike FalconCrowdStrike FalconHeldCrowdStrike FalconMicrosoft Defender for Endpointagainst: CrowdStrike Falconno first choiceagainst: Bitdefender GravityZone, CrowdStrike Falcon, Elastic Security, Microsoft Defender for Endpoint, Sophos Intercept X
Two alternatives
Microsoft Defender for Endpoint, SentinelOne SingularityTwo alternatives
Microsoft Defender for Endpoint, SentinelOne SingularityThree alternatives
Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, SentinelOne Singularity Endpoint/XDROne alternative
SentinelOne SingularityGrok 4.1 FastCrowdStrike FalconMicrosoft Defender for EndpointChangedCrowdStrike Falcon InsightMicrosoft Defender for Endpointagainst: Palo Alto Networks Cortex XDRCrowdStrikeagainst: Broadcom, CrowdStrike Falcon, Datto EDR, Elastic Security, OSSEC, Symantec EDR, Trellix EDR, Trend Micro
Two alternatives
Microsoft Defender for Endpoint, SentinelOne SingularityFour alternatives
CrowdStrike Falcon, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Sophos Intercept XFour alternatives
Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Sophos Intercept XTwo alternatives
CrowdStrike Falcon, SentinelOne SingularityTwo alternatives
Microsoft Defender for Endpoint, SentinelOne SingularityMistral SmallCrowdStrike Falcon InsightCrowdStrike FalconChangedCrowdStrike FalconMicrosoft Defender for Endpointno first choiceagainst: Sophos Intercept X, Trellix EDR, VMware Carbon Black
Three alternatives
Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, SentinelOne SingularityOne alternative
SentinelOne SingularityTwo alternatives
Microsoft Defender for Endpoint, SentinelOne SingularityTwo alternatives
CrowdStrike Falcon Insight, SentinelOne SingularityDeepSeek V4 FlashCrowdStrike Falcon, Microsoft Defender for EndpointCrowdStrike FalconChangedCrowdStrike Falcon, SentinelOne SingularityMicrosoft Defender for Endpointno first choiceagainst: CrowdStrike Falcon, Cylance / BlackBerry CylancePROTECT, F-Secure / WithSecure Elements, Kaspersky Endpoint Detection and Response (EDR) Expert, VMware Carbon Black
Three alternatives
Cynet, Palo Alto Networks Cortex XDR, SentinelOne SingularityTwo alternatives
Microsoft Defender for Endpoint, SentinelOne SingularityFive alternatives
Cynet, Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, Sophos Intercept X, Trend MicroTwo alternatives
CrowdStrike, SentinelOne SingularityLlama 4 Maverickno first choiceCrowdStrikeChangedno first choiceMicrosoft Defender for Endpointno first choicenothing named
Qwen 3.7 FlashCrowdStrike FalconCrowdStrike Falcon, Microsoft Defender for EndpointChangedCrowdStrike FalconMicrosoft Defender for Endpointagainst: CrowdStrike FalconCrowdStrike Falconagainst: Elastic Securityagainst: Avast / AVG, CCleaner Business, F-Secure, Kaspersky Endpoint Detection and Response (EDR) Expert, McAfee, Microsoft Defender for Endpoint, OSQuery, Symantec Endpoint Protection, Sysmon, Trend Micro
Three alternatives
Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, SentinelOne SingularityOne alternative
SentinelOne SingularityFive alternatives
Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, Sophos Central, Sophos Intercept X, Trend MicroOne alternative
SentinelOne SingularityTwo alternatives
Microsoft Defender XDR, SentinelOne SingularityKimi K2CrowdStrike FalconCrowdStrike FalconHeldCrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne SingularityMicrosoft Defender for EndpointCrowdStrike Falcon, SentinelOne Singularityagainst: CrowdStrike Falcon, Datto EDR, ESET PROTECT, Kaspersky Endpoint Detection and Response (EDR) Expert, McAfee Endpoint Security, Microsoft Defender for Endpoint, SentinelOne Singularity, Symantec Endpoint Security, Trend Micro Apex One
Three alternatives
Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, SentinelOne SingularityTwo alternatives
Microsoft Defender for Endpoint, SentinelOne SingularityThree alternatives
Palo Alto Networks Cortex XDR, Sophos Intercept X / Endpoint XDR, Trend MicroThree alternatives
CrowdStrike Falcon, SentinelOne Singularity, Trend MicroTwo alternatives
Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDRGLM 4.7 FlashXCrowdStrike FalconCrowdStrike FalconHeldCrowdStrike FalconCrowdStrike Falconagainst: Palo Alto Networks Cortex XDR, Trend Microno first choiceagainst: CrowdStrike, Microsoft Defender
Three alternatives
Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, SentinelOne SingularityTwo alternatives
Microsoft Defender for Endpoint, SentinelOne SingularityFour alternatives
Darktrace, Elastic Security, Microsoft Defender for Endpoint, SentinelOne SingularityTwo alternatives
Microsoft Defender for Endpoint, SentinelOne SingularityMiniMax M2.5CrowdStrike Falcon Insight, Microsoft Defender for EndpointCrowdStrike FalconChangedCrowdStrike FalconMicrosoft Defender for Endpointno first choicenothing named
Two alternatives
Kaspersky Endpoint Detection and Response (EDR) Expert, SentinelOne SingularityThree alternatives
Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, SentinelOne SingularityFour alternatives
Microsoft Defender for Endpoint, Palo Alto Networks Cortex XDR, SentinelOne Singularity, Trend MicroOne alternative
CrowdStrike FalconBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
05The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency. Full answer text is in the free responses file. Download the record
Seventy-two rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 14:10 | no | 0 | 4 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 12:23 | yes | 4 | 7 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 14:07 | yes | 17 | 27 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-09-17 13:05 | yes | 19 | 6 s |
| Direct recommendation | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-09-17 09:34 | yes | 29 | 16 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 11:34 | yes | 23 | 13 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 11:12 | yes | 10 | 16 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 09:55 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 13:53 | no | 0 | 32 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 10:07 | yes | 13 | 57 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 09:27 | yes | 23 | 197 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 12:04 | yes | 5 | 24 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 14:05 | no | 0 | 5 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 12:18 | yes | 5 | 7 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 10:27 | yes | 11 | 19 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-09-17 12:47 | yes | 20 | 6 s |
| Paraphrase | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-09-17 12:03 | yes | 37 | 17 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 09:32 | yes | 5 | 3 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 12:42 | yes | 15 | 22 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 13:52 | yes | 5 | 3 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 10:29 | yes | 10 | 49 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 10:54 | yes | 10 | 16 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 10:11 | yes | 25 | 61 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 13:56 | yes | 5 | 24 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 12:07 | yes | 10 | 39 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 11:28 | yes | 4 | 7 s |
| Comparative | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 13:38 | yes | 17 | 28 s |
| Comparative | Perplexity Sonar | sonar | 2026-09-17 10:06 | yes | 20 | 9 s |
| Comparative | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-09-17 13:47 | yes | 30 | 19 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 13:02 | yes | 5 | 6 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 09:30 | yes | 13 | 21 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 12:37 | yes | 5 | 2 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 10:39 | yes | 11 | 66 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 09:58 | yes | 17 | 80 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 11:25 | no | 0 | 46 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 10:07 | yes | 10 | 27 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 10:37 | yes | 17 | 10 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 10:13 | yes | 2 | 4 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 10:29 | yes | 25 | 21 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-09-17 12:50 | yes | 20 | 6 s |
| Budget constrained | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-09-17 12:46 | yes | 41 | 18 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 13:01 | yes | 5 | 5 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 13:53 | yes | 14 | 22 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 12:20 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 13:13 | yes | 10 | 98 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 10:47 | yes | 19 | 46 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 10:51 | yes | 14 | 129 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 11:24 | yes | 21 | 116 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 11:21 | yes | 18 | 16 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 10:36 | no | 0 | 13 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 12:26 | no | 0 | 18 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-09-17 11:03 | yes | 20 | 8 s |
| Scale constrained | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-09-17 11:10 | yes | 19 | 11 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 11:29 | no | 0 | 9 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 13:07 | yes | 15 | 23 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 09:23 | yes | 5 | 4 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 10:14 | yes | 5 | 35 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 10:01 | yes | 14 | 33 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 12:52 | yes | 28 | 189 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 12:21 | no | 0 | 67 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 12:40 | yes | 35 | 13 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 11:37 | yes | 3 | 6 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 13:25 | yes | 25 | 25 s |
| Negative framing | Perplexity Sonar | sonar | 2026-09-17 10:15 | yes | 20 | 7 s |
| Negative framing | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-09-17 10:22 | yes | 30 | 15 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 12:24 | yes | 5 | 6 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 10:00 | yes | 26 | 28 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 11:11 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 13:14 | no | 0 | 47 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 13:32 | yes | 21 | 35 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 10:04 | yes | 27 | 122 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 11:10 | yes | 10 | 29 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
Category-scoped readings
Bitdefender read as Bitdefender GravityZone
Broadcom Symantec Endpoint Security Complete read as Symantec Endpoint Security
Carbon Black (CB Defense / Carbon Black Cloud, now Broadcom/VMware) read as VMware Carbon Black
Carbon Black (VMware Carbon Black) read as VMware Carbon Black
Carbon Black (now Broadcom) read as VMware Carbon Black
Carbon Black Cloud read as VMware Carbon Black
CrowdStrike Falcon Enterprise read as CrowdStrike Falcon
CrowdStrike Falcon Insight XDR read as CrowdStrike Falcon Insight
ESET read as ESET PROTECT
Fortinet FortiEDR read as FortiEDR
Huntress read as Huntress Managed EDR
Kaspersky read as Kaspersky Endpoint Detection and Response (EDR) Expert
Kaspersky Lab read as Kaspersky Endpoint Detection and Response (EDR) Expert
Microsoft Defender for Endpoint P2 read as Microsoft Defender for Endpoint
Microsoft Defender for Endpoint Plan 2 (P2) read as Microsoft Defender for Endpoint
Palo Alto Cortex XDR read as Palo Alto Networks Cortex XDR
Palo Alto Networks (Cortex XDR) read as Palo Alto Networks Cortex XDR
SentinelOne read as SentinelOne Singularity
SentinelOne Singularity read as SentinelOne Singularity
SentinelOne Singularity Complete read as SentinelOne Singularity
SentinelOne Singularity Endpoint read as SentinelOne Singularity
SentinelOne Singularity Enterprise read as SentinelOne Singularity
SentinelOne Singularity Platform read as SentinelOne Singularity
Sentinelone Singularity read as SentinelOne Singularity
Sophos read as Sophos Intercept X
Sophos Endpoint read as Sophos Intercept X
Sophos Endpoint (Intercept X) read as Sophos Intercept X
Sophos Intercept X Advanced read as Sophos Intercept X
Sophos Intercept X with XDR read as Sophos Intercept X
Trellix read as Trellix EDR
Trellix (formerly McAfee EDR) read as Trellix EDR
Trend Micro Vision One read as Trend Micro
Trend Micro XDR read as Trend Micro
Unresolved, counted raw
CCleaner Business
CrowdStrike Falcon Insight / Falcon platform
Cylance / BlackBerry CylancePROTECT
F-Secure / WithSecure Elements
IBM QRadar EDR
McAfee Endpoint Security
SentinelOne Singularity Endpoint/XDR
Sophos Intercept X / Endpoint XDR
Symantec EDR
Sysmon
Tanium Threat Response
Discontinued, still offered
No shut-down product was recommended here.