The deployment of the solution right now is terrible. We find it to be very bad. It could be improved enormously.

The stability isn't ideal. The agents are in locked states and need to be reinstalled occasionally.

There's also an area where they lack is the grouping of the agents. If it could be made a little easier to manage and for agents to be moved around it would make for a better solution.

The solution needs to offer more support of different operating systems.

The solution could improve by having more deployment methods.

Datto Endpoint Detection and Response is good for what it does for the endpoint, but it is not enough to build a SOC. It may be enough for a small, first-level SOC or just a part of a SOC, but you probably need more tools if you want a more complicated solution and more advanced SOC.

The solution should allow the automation of playbooks. If you have a typical problem, it automatically switches off something or locks the computer.