// THREAT DETECTION AND DATA PRIVACY TERM

Endpoint Protection

Endpoint protection is a security solution that protects individual devices like computers, laptops, and smartphones from cyber threats. It acts like an advanced antivirus, securing the entry points to a corporate network.

Endpoint Protection — illustration from Wikipedia
Image via Wikipedia

TECHNICAL DEFINITION

Endpoint Protection Platform (EPP) is a cybersecurity solution deployed on endpoint devices to prevent file-based malware attacks, detect malicious activity, and provide investigation and remediation capabilities. It integrates technologies like next-generation antivirus (NGAV), host-based firewalls, and endpoint detection and response (EDR) to secure desktops, laptops, and mobile devices from cyber threats and data breaches.

BACKGROUND

Computer security is a subdiscipline within the field of information security. It focuses on protecting computer software, systems, and networks from threats that can lead to unauthorized information disclosure, theft, or damage to hardware, software, or data, as well as to the disruption or misdirection of the services they provide.

READ MORE ON WIKIPEDIA

SYNONYMS & ALIASES

  • endpoint security
  • device protection
  • client security
  • antivirus
  • anti-malware
  • EPP
  • EDR

USAGE NOTE

Modern endpoint protection has moved beyond traditional signature-based antivirus to include behavioral analysis and response capabilities.

DEVELOPERS

Organizations developing technology related to Endpoint Protection.

  • CrowdStrike

    A cybersecurity technology company that provides cloud-native endpoint security. Its Falcon platform unifies next-generation antivirus (NGAV), endpoint detection and response (EDR), and managed threat hunting.

  • SentinelOne

    Offers the Singularity Platform, an AI-powered solution that provides autonomous endpoint protection (EPP), endpoint detection and response (EDR), and threat hunting across endpoints, containers, and cloud workloads.

  • Microsoft

    Develops Microsoft Defender for Endpoint, a comprehensive enterprise platform designed to help networks prevent, detect, investigate, and respond to advanced threats on devices.

  • Palo Alto Networks

    Provides Cortex XDR, an extended detection and response platform that integrates endpoint, network, and cloud data to stop sophisticated attacks.

  • Trellix

    Formed from the merger of McAfee Enterprise and FireEye, Trellix offers a living XDR architecture that includes advanced endpoint protection, detection, and response capabilities.

  • Broadcom (Symantec)

    Manages the Symantec enterprise security portfolio, which includes Symantec Endpoint Security, a solution providing threat protection, detection, and response for both traditional and mobile endpoints.

  • VMware Carbon Black

    Offers the VMware Carbon Black Cloud, a cloud-native endpoint protection platform that combines next-generation antivirus, EDR, and managed detection to protect against cyberattacks.

  • Sophos

    Develops Sophos Intercept X, an endpoint security solution that combines anti-ransomware technology, deep learning AI, exploit prevention, and EDR capabilities.

RELATED TERMS IN DEFENSE & ARCHITECTURE