Security Auditor at a tech services company with 51-200 employees
Real User
Dec 18, 2023
Datto Endpoint Detection and Response is good for what it does for the endpoint, but it is not enough to build a SOC. It may be enough for a small, first-level SOC or just a part of a SOC, but you probably need more tools if you want a more complicated solution and more advanced SOC. The solution should allow the automation of playbooks. If you have a typical problem, it automatically switches off something or locks the computer.
IT Manager at a educational organization with 501-1,000 employees
Real User
Aug 9, 2020
The deployment of the solution right now is terrible. We find it to be very bad. It could be improved enormously. The stability isn't ideal. The agents are in locked states and need to be reinstalled occasionally. There's also an area where they lack is the grouping of the agents. If it could be made a little easier to manage and for agents to be moved around it would make for a better solution. The solution needs to offer more support of different operating systems.
Endpoint Detection and Response (EDR) is a cybersecurity solution that focuses on detecting, investigating, and mitigating advanced cyber threats at the endpoint level. Organizations use EDR solutions to enhance their threat detection capabilities and respond effectively to security incidents.
EDR solutions combine real-time continuous monitoring and collection of endpoint data with rule-based automated response and analysis capabilities. This enables organizations to rapidly identify and...
The inclusion of web filtering would be good.
Datto Endpoint Detection and Response is good for what it does for the endpoint, but it is not enough to build a SOC. It may be enough for a small, first-level SOC or just a part of a SOC, but you probably need more tools if you want a more complicated solution and more advanced SOC. The solution should allow the automation of playbooks. If you have a typical problem, it automatically switches off something or locks the computer.
The solution could improve by having more deployment methods.
The deployment of the solution right now is terrible. We find it to be very bad. It could be improved enormously. The stability isn't ideal. The agents are in locked states and need to be reinstalled occasionally. There's also an area where they lack is the grouping of the agents. If it could be made a little easier to manage and for agents to be moved around it would make for a better solution. The solution needs to offer more support of different operating systems.