We're currently using Windows Defender as our primary antivirus solution and we have a mix of Business Premium and a few E3 licenses. We're not paying for the advanced features associated with E5. To enhance our security posture, we're exploring options like implementing an EDR solution such as Huntress or Arctic Wolf. We're also open to switching from Windows Defender to something like SentinelOne if there's a solid justification for it. We're still in the planning phase, so any advice or recommendations would be greatly appreciated!
5 Answers
One option you might like is using a managed detection and response (MDR) service while keeping Defender. You can get managed services for just $35 per endpoint, which could be a good value. If you're leaning towards SentinelOne or Crowdstrike, they can bundle those with their MDR for around $75 per endpoint, which saves you on the licensing too.
Check out our EDR solution, it might be what you're looking for. It’s designed to offer comprehensive coverage for enterprise security needs. Here’s a link for more info [link].
I'd say stick with Defender and consider adding Huntress. Switching to SentinelOne might not be worth it; there are strong capabilities in Defender that work well if utilized correctly.
Going with Defender ATP is a solid choice! When it's configured right, it really enhances your security. It's worth considering, especially if you're sticking with Windows.
If your environment is primarily Windows, sticking with Defender and adding Huntress might be the way to go. I've got a lot of Macs in my setup, and I use SentinelOne, which works great for me across different platforms.
Thanks for the input! I appreciate your perspective on mixed environments since we do have some diversity.
That could be really helpful! I'll have to think about the extra support.