Which ransomware is the biggest threat in 2020?
Answered Aug 26, 2020
99
Which EPP provider does the best job at ransomware protection? Which provider is best at proactively defending against unknown threats?
66 Answers
Paresh MakwanaTop 5LeaderboardReseller
Cylance:
One of the fastest growing vendors in the Endpoint Security market, Cylance has built its reputation on the back of proactive and preventive antivirus technology based on artificial intelligence, machine learning, and algorithmic science. Headquartered in Irvine, California and
with offices around the world, Cylance was founded by a team of security industry professionals and scientists with the goal to “redefine the endpoint standard of protection by preventing threats from ever executing.”
Bottom Line: Cylance’s signatureless anti-malware provides an alternative to traditional, signature-based technology, and benefits from easy deployment and management, low-performance impact, and high detection rates against new threat variants. The company is a good pick for companies of all sizes looking to shore-up existing defenses, or for an alternative to traditional anti-malware. The most valuable feature is the ability to respond to zero-day and unknown threats.
Cylance’s AI and Machine Learning ensures that all types of malware and PUP (Potential Unwanted Programs) are detected and your endpoint devices are fully protected, even with day zero threats.
Chetan WoodunTop 5Real User
Some words about ransomware first.
Ransomware has become much more targeted these days, so that ordinary users are less likely to suffer from it.
Also, avoid the free tools as with the degree of sophistication and the way they target companies, most of them will not remove the ransomware.
Finally, also think about protecting mobile devices as these now has email clients, VPN tools and access to corporate applications. Therefore, go for those protecting mobile phones also.
I have seen many interesting products proposed in this forum. Adding the following 3:
1. Bitdefender
2. AVG Antivirus paid version
3. Trend Micro Antivirus RandomBuster
This application addresses the ransomware issue through a bait mechanism - fake files are placed in pre-selected strategic locations around a system and are then observed for any malicious behaviors or attack attempts.
Steve PenderTop 5LeaderboardReal User
SentinelOne is my recommended solution.
The SentinelOne Endpoint Protection Platform (EPP) unifies prevention, detection, and response in a single purpose-built agent, powered by machine learning and automation. It is not reliant on hash signatures or an internet connection. SentinelOne provides prevention and detection of attacks across all major vectors and rapid elimination of threats with a fully automated real-time response without human intervention.
SentinelOne can also detect and protect against zero-day, file less and lateral movement attacks.
SentinelOne has not been breached and offers upto $1,000,000 warranty if it cannot roll back a ransomware attack.
Please contact me at cybersec@global.co.za for more information, a demonstration, or a quote.
Manoj NairTop 5LeaderboardReal User
OK a real tricky answer. There are so many out there now and all seem to have one or the other upper hand on the ransomware arena. It all depends on their back end system finally - How they analyse and how fast they analyse (even if in the wild) . And most importantly how fast u can get tech support - Try out Crowdstrike, Checkpoint, Sophos, McAfee, TrendMicro. Remember this - you need to be more specific with your actual physical scenario to get a better answer. This one is very generic in purpose.
RicardoGranados (Ingram Micro Inc.)Real User
Cortex XDR de Palo Alto Networks is the best solution in the market, because it has protection methods multiples, like are Local Machine Learning/IA, Static Analysis, Dynamic Analysis, Network Profiling, Baremetal, Exploits Protection (By technical or method, no by exploit), Kernel Protection, Behavior Anomaly Protection, etc. Best score in the Mitre att&ck Evaluation.
reviewer1272021 (IT Security Architect at a tech vendor with 51-200 employees)User
There are several good ones and it depends on budget, integrations needed, staff levels, etc. Crowdstrike Falcon is great if you can afford it. Price reflects "set it and forget it" type of EPP. No need to hire FTE to manage it and comes with 24x7x365 SOC. If you can manage, SentinelOne offers great detections and incident response capabilities (it is really an EDR). S1 has a ransomware rollback feature in case it gets through initial detections (can restore encrypted files if needed) and provides up to 1 million in ransom costs to back up their confidence. If you are a Checkpoint shop and want to leverage some of their other features (Cloudguard SaaS, Endpoint Encryption, etc.) then their Sandblast agent also offers great detections and a rollback feature of their own. Palo Alto traps is decent if you are a PAN shop but can get heavy on admin overhead. Same with Cisco AMP. We do not sell traditional A/V anymore because of polymorphic threats and zero day. Must have behavioral analytics and anomaly detection capabilities.
Find out what your peers are saying about CrowdStrike, SentinelOne, Cisco and others in Endpoint Protection for Business (EPP). Updated: September 2021.
534,299 professionals have used our research since 2012.
Related Questions
User at TUBITAK
Aug 19 2021
Hello peers,
I am working as an IT member at a research company with 200 employees (at most).
I am looking at the pros and cons of SCCM and BigFix software.
At the moment, we are using BigFix just for updating and I think if we switch to SCCM that would be a more complicated and costly solution because of my company's infrastructure and requirements.
What is your professional recommendation for me? Is SCCM going to bring unnecessary workload for a small company, such as mine? Also, is it worth choosing SCCM over BigFix based on its features, budget, etc?
Thank you!
Nurit Sherman
Content Specialist
IT Central Station
Aug 25 2021
Hi community,
We all know that it's important to conduct a trial and/or proof-of-concept as part of the buying process.
Do you have any advice for your peers about the best way to conduct a trial/POC?
How do you conduct a trial effectively? Are there any mistakes to avoid?
Asked By
Rony_Sklar
Community Manager at IT Central Station
Community Manager
Buyer's Guide
Download our free Endpoint Protection for Business (EPP) Report and find out what your peers are saying about CrowdStrike, SentinelOne, Cisco, and more!