After extensive testing, AV-Comparatives has awarded Kaspersky Endpoint Detection & Response Expert the rank of Strategic Leader. This award is for MITRE’s consistently excellent mapping of their strategies, techniques, including procedures, as well as for their ability to automatically halt any attack that is detected (TTPs). The product received great marks from reviewers for its ROI and low scores for TCO (TCO). In addition, “PreventionResponse Capability” ranked the product in the top three of categories where participants fared best.
The rising frequency of targeted strikes to enterprise networks is a key factor propelling the worldwide EDR market, making the ability to decrease the time to detect & respond to malware occurrences increasingly important. The Insight Partners forecasts that the global market for endpoint detection & response solutions will increase from $785.5 million in 2017 to $5,871.6 million in 2025, representing a compound annual growth rate (CAGR) of 28.8 percent from 2018 to 2025. This indicates that EDR is rapidly becoming an indispensable cybersecurity device for most businesses.
Kaspersky Endpoint Detection & Response Expert was ranked as a “Strategic Leader” in the AV-Comparatives Enterprise EPR CyberRisk Quadrant, an integral part of the Endpoint Preventing and Responding (EPR) Test, thanks to its high level of effectiveness in prevention and response to breaches, as well as its reasonable product cost & operational accuracy.
Ten EPR products were evaluated by AV-Comparatives, with each product being put through 50 unique targeted attack scenarios within the Endpoint Prevention & Response (EPR) Test. Each attack had three distinct stages: initial compromise of an endpoint, internal spread, and eventual compromise of assets. The product’s ability to automatically take action to prevent the threat (active response) or warn the administrator of the attack so that they can take action themselves was evaluated at each level of the testing process (passive response). Products were compared based on their capacity to take corrective measures, such as disconnecting the endpoints from the network, reinstalling it from a backup, or modifying its Windows registry settings.
“Kaspersky Endpoint Detection and Response Expert was able to protect against all the targeted attacks during the assessment, before the threats could progress inside and infiltrate the organization’s network. It demonstrated both cumulative Active and Passive Response rates at 100 percent.” – said the founder and CEO of AV-Comparatives, Andreas Clementi.
“We are pleased to receive the new confirmation about the true capabilities of Kaspersky EDR to actively protect enterprise infrastructure from targeted attacks. We participate in such complex assessments to independently verify that we develop the efficient technologies inside the security solutions, and we are ready to protect customers’ corporate networks” – said the Head of Threat Research at Kaspersky, Alexander Liskin.
