The Endpoint Detection and Response Solutions (EDR) market is defined as solutions that record and store endpoint-system-level behaviors, use various data analytics techniques to detect suspicious system behavior, provide contextual information, block malicious activity, and provide remediation suggestions to restore affected systems.
EDR solutions must provide the following four primary capabilities:
•	Detect security incidents
•	Contain the incident at the endpoint
•	Investigate security incidents
•	Provide remediation guidance

Endpoint Detection and Response Solutions

Endpoint Detection and Response (EDR) Solutions

An Endpoint Protection Platform (EPP) is a solution deployed on endpoint devices to prevent file-based malware, to detect and block malicious activity from trusted and untrusted applications, and to provide the investigation and remediation capabilities needed to dynamically respond to security incidents and alerts. 

Endpoint Protection Platforms

Endpoint Security and Protection Software

Gartner defines operational technology (OT) as:
Hardware and software that detects or causes a change through the direct monitoring and/or control of physical devices, processes and events in asset-centric enterprises, particularly in production and operations.

OT security is defined as:
The practices and technologies used to protect people, assets and information involved in the monitoring and/or control of physical devices, processes and events.

In this market, Gartner has expanded OT security to include OT security services as:
Consulting and managed security services deployed with multiple delivery methods to help companies assess, design and manage security strategy and activities for the protection of OT systems.

Operational Technology Security

Operational Technology (OT) Security

Cortex XDR Enterprise IT Software Reviews | Gartner Peer Insights

Darktrace Industrial Immune System

Darktrace

Nozomi Networks Guardian

Nozomi Networks

FortiClient

Fortinet

BOTsink

Attivo Networks

Symantec Endpoint Security

Broadcom (Symantec)

The Claroty Platform

Claroty

Lumeta

FireMon

Zscaler Deception

Zscaler

Check Point Advanced Endpoint Threat Detection

Check Point Software Technologies

tenable.ot (formerly Indegy Platform)

Tenable

1B - 3B USD

50M - 250M USD

Services

Finance

Cortex XDR

Palo Alto Networks

IT Security Officer

We have been using Cortex XDR (including predecessor Traps) for a couple of years and it is getting better with every new version. The last 2 years really have been a big improvement. You need to do some tuning, especially for the behavioral analytics, but the results are good and improving stil. 

Forcepoint

Cisco

CyberArk

Deloitte

Principal Information Security And Risk

Provided real time threat protection through Wildfire and constant monitoring of end points. Fantastic after sales support too! 

Head Of IT Security

Have been an early adopter of the previous version (TRAPS); and we found lots of benefits for us to expand the scope to Cortex XDR to give us better and deeper visibility to our endpoint protection & activities

Active

Read Operational Technology (OT) Security reviews verified by Gartner. Compare and find the best Operational Technology (OT) Security for your organization.