ThreatDown Endpoint Protection

What ThreatDown Endpoint Protection is

ThreatDown Endpoint Protection provides malware protection and remediation for Windows, macOS, and Linux endpoints. It uses predictive threat detection and proactive blocking, managed through a cloud-based console; ThreatDown says its endpoint technologies use one lightweight agent. Core capabilities include next-generation antivirus, device control, application blocking, vulnerability assessment, and browser phishing protection. Ransomware Rollback can restore files that were encrypted, detected, or modified up to seven days after an attack. The Advanced EDR bundle adds endpoint detection and response, patch and firewall management, drive encryption, and managed threat hunting. Higher bundles add 24/7 managed detection and response, then identity threat detection and response and premium support. Service providers can use ThreatDown OneView to manage multiple customers' endpoints from a multi-tenant console. Listed integrations include Splunk Enterprise, Microsoft Sentinel, Google Chronicle, Stellar Cyber, and Splunk Phantom. The product is paid, with pricing on request, and subscription customers receive Standard Support during their term.