1Gartner Magic Quadrant for Endpoint Protection Platforms, by Evgeny Mirolyubov, Max Taggett, Franz Hinner, and Nikul Patel, 31st December, 2023.
The report Magic Quadrant for Endpoint Protection Platforms was published as Magic Quadrant for Enterprise Antivirus in 2005-06, as Magic Quadrant for Enterprise Antivirus, 1H03 in 2003 and as Enterprise Antivirus 2Q02 MQ: Room for Improvement in 2002.
GARTNER is a registered trademark and service mark, MAGIC QUADRANT and PEER INSIGHTS are trademarks of Gartner, Inc. and/or its affiliates in the U.S. and internationally and are used herein with permission. All rights reserved.
Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences with the vendors listed on the platform, should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates.
The GARTNER PEER INSIGHTS CUSTOMERS’ CHOICE badge is a trademark and service mark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved.
Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner research organization and should not be construed as statements of fact. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.
Adding NDR up-levels EDR to XDR for a broader perspective and context to hunt, detect, investigate, and respond to threats swiftly and decisively.
Reduce team stress by eliminating wasted time, sorting through alerts and figuring out where to start your investigations.
Section 1 - Column 4. Praesent non velit ut libero
condimentum pulvinar sed vitae tellus.
Vestibulum
id tristique elit. Suspendisse posuere rutrum
sodales. Nam id elit ac sem iaculis lacinia
posuere vitae metus.
Network Detection and Response (NDR)
Recognized as a Representative Vendor
Must have capabilities:
 |
Deliver, via physical or virtual sensors, form factors compatible with on-premises and cloud networks to analyze raw network packet traffic or traffic flows (for example, IP flow information). |
|
Model normal network traffic and highlight unusual traffic activity that falls outside the normal range. NDR must also provide detection based on behavioral techniques (non-signature-based detection), including machine learning (ML) and advanced analytics that detect network anomalies. |
|
Aggregate individual alerts into structured incidents to facilitate threat investigation and provide automatic or manual response capabilities to react to the detection of malicious network traffic. |
Read the report→
2024 Gartner Market Guide for Network Detection and Response (NDR)
Section 2 - Column 3. Praesent non velit ut libero
condimentum pulvinar sed vitae tellus.
Vestibulum
id tristique elit. Suspendisse posuere rutrum
sodales. Nam id elit ac sem iaculis lacinia
posuere vitae metus.
Section 2 - Column 4. Praesent non velit ut libero
condimentum pulvinar sed vitae tellus.
Vestibulum
id tristique elit. Suspendisse posuere rutrum
sodales. Nam id elit ac sem iaculis lacinia
posuere vitae metus.
Endpoint Protection Platforms (EPP)
Named a Leader 19 times in a row since 2002
Must-Have capabilities:
|
Prevention of, and protection against, security threats, including malware that uses file-based and fileless attack techniques. |
|
The ability to detect and prevent threats using behavioral analysis of endpoint, application and end-user activity. |
Standard capabilities:
|
Assessment of endpoints for vulnerabilities and risk reporting based on inventory, configuration, patch and policy of endpoint devices. |
|
Integrated endpoint detection and response (EDR) functionality enabling raw telemetry collection, detection customization, post incident investigation and remediation. |
“Trend Micro continues to enhance its single console experience and capabilities, ranging from attack surface management and security configuration management to extended detection and response. ”
Read the report→
2024 Gartner Magic Quadrant for Endpoint Protection Platforms
Section 3 - Column 3. Praesent non velit ut libero
condimentum pulvinar sed vitae tellus.
Vestibulum
id tristique elit. Suspendisse posuere rutrum
sodales. Nam id elit ac sem iaculis lacinia
posuere vitae metus.
Section 3 - Column 4. Praesent non velit ut libero
condimentum pulvinar sed vitae tellus.
Vestibulum
id tristique elit. Suspendisse posuere rutrum
sodales. Nam id elit ac sem iaculis lacinia
posuere vitae metus.
EPP Use Cases
“Trend Micro excels in the security platform use case with its broad workspace security suite, XDR functionality and attack surface risk management capabilities.”
2024 Gartner Critical Capabilities for Endpoint Protection Platforms
We were ranked:
First
in the Architecturally Constrained Environments Use Case
Second
in the Security Platform Use Case
Third
in the Managed Security Services
Use Case
Section 4 - Column 4. Praesent non velit ut libero
condimentum pulvinar sed vitae tellus.
Vestibulum
id tristique elit. Suspendisse posuere rutrum
sodales. Nam id elit ac sem iaculis lacinia
posuere vitae metus.
Network Detection and Response (NDR)
Customers’ Choice 2024
Midsize Enterprise ($50M – 1B)
4.7 ⭐⭐⭐⭐⭐ 74 Ratings
“Trend Micro XDR, Integrating the Endpoint and Network on one platform with correlation.”
See what our users say→
Contribute a review→
