EDR / XDR – Endpoint & Extended Detection and Response

EDR stands for Endpoint Detection and Response: software on endpoints that detects suspicious behaviour, reports incidents and enables countermeasures, such as isolating a device. The difference compared to traditional antivirus lies in behavioural analysis rather than pure signature checking.

XDR (Extended Detection and Response) extends this approach beyond the endpoint to email, identities, cloud services and networks. Signals from multiple sources are aggregated so that attack chains become visible that would remain inconspicuous individually.

What matters is not just the tool, but the operation: who monitors the alerts, how quickly a response is made, what happens at night. That is precisely what Endpoint Protection covers as a managed service.