How to choose an endpoint security platform
Base your choice on comparable evidence: your device inventory, observations from a pilot and your management requirements. This guide helps you ask the right questions, even if you ultimately do not choose Xcitium.
Four steps
- 01
Document your environment
Devices, operating systems, user roles and moments when nothing may change.
- 02
Ask about unknown threats
What does the solution do with a file that has not yet been classified? What is isolated, and how?
- 03
Check coverage and management
Central management, integrations, agent requirements, log retention and who follows up on alerts.
- 04
Validate in a pilot
Vendors' answers are only valuable once they have been tested in your environment.
Keep in mind
Cloud management is not a 24/7 service
A cloud console says nothing about who follows up on alerts at night.
Detection is not prevention
Ask what happens between the arrival of a new file and the first detection.
Test your own applications
Industry and custom applications behave differently from standard software.
Pilot: what do you test and what do you record?
| Check | What to test | What to record |
|---|---|---|
| Compatibility and rollout | Installation on representative devices | Supported versions, installation issues |
| Impact on work | Normal work and your critical applications | Resource usage, disruptions |
| Exceptions | An agreed exception or release | Who approves, what is the result |
| Investigation and response | A harmless, agreed test alert | Context, response actions, report export |
Your selection brief (to print)
Fill in these five points before you talk to vendors.
- Environment: number of devices, operating systems, locations and cloud
- Scope: which devices, servers and identities must be protected
- Responsibility: who manages the console and who follows up on alerts, including outside office hours
- Data: where logs and files may be processed and how long they are retained
- Acceptance criteria: when is the pilot successful
Complete your coverage
Frequently asked questions
Can Spiredesk set up a pilot for us?
Yes. We set up a trial on a representative group of devices and review the results against these criteria.
Endpoint security selection guide in your environment?
In a short demo we show you how it works, discuss your situation and make a proposal. No obligation, in English or Dutch.
Product information: xcitium.com. Xcitium, ZeroDwell, OpenEDR and related logos are trademarks of Xcitium Inc.