The product is complex to configure, and there are too many errors that are not errors, making it an area that can be considered for improvement.

Every vendor is working on making the job of SOC analysts easier, with fewer false positives and more precise detections. ESET uses LiveGrid technology that provides feedback on the reputation of files and operations. It's hard to eliminate all of the false positives, but hopefully, we'll see some improvement with the advances in AI. 

For XDR tools like ESET Inspect, customers must have a higher knowledge of Windows internals and other "under the hood" processes that are underlying day-to-day activities in the network. There is a challenging learning curve that customers need to master and for the adequate implementation of an XDR solution, time is needed. Not for the installation of the software, that's easy, but for setting the solution to work satisfactorily concerning specifics of the environment. Also, never mind ESET's traditionally light footprint, every XDR solution asks for solid server power to process raw events from endpoints. The more you want to return for forensics, the larger the database.

ESET's main goal is to create lightweight, highly configurable products with a high detection rate. Sometimes it can be overwhelming for customers to have such a vast area of possibilities for configuring and ways to solve problems in the implementation or exploitation of ESET software. Customers like easy-to-use solutions with not much servicing under the hood, and that's perfectly fine. We all like the administration where software does it all by itself, but that's not possible in the area of IT security. The vendor's job is to provide easy-of-use, but not to jeopardize the abbility to configure protection to the smallest details. ESET successfully maintains that perfect balance through the years, and with exceptionally good technical support, you can find answers to every question.

The platform's price could be better.

The solution could improve the consumption of resources. The RAM and CPU usage increases during usage which can cause issues. We have three separate services and it would be beneficial if all were executed from one agent limiting the over usage of system resources.

Persuading clients to install two agents for a single solution is an arduous task as it can lead to increased consumption due to the use of two separate agents.

It would be beneficial if there was a network-level log for all the network devices for the EDR.