Endpoint Detection and Response (EDR)

What does Endpoint Detection and Response (EDR) mean?

Endpoint detection and response (EDR) is a specific type of security focusing on endpoint devices. It is often described as the use of a central data repository to observe and analyze endpoint vulnerabilities and work toward stronger endpoint threat response.

Endpoint detection and response revolves around the philosophy of endpoint security – that by securing and locking down systems at the device endpoint, security professionals and other stakeholders can get effective protection against hackers and malware operators. Endpoint detection and response helps to achieve this goal by creating a structure and framework for vulnerability handling at the endpoint. Some security professionals compare it to advanced threat protection in terms of the models that are used.

Endpoint detection and response may be composed of both tools and capabilities, where proactive monitoring of endpoints provides positive outcomes. Endpoint detection and response is often used in the context of cybersecurity.