Security Auditor at a tech services company with 51-200 employees
Real User
Dec 18, 2023
Datto Endpoint Detection and Response is good for what it does for the endpoint, but it is not enough to build a SOC. It may be enough for a small, first-level SOC or just a part of a SOC, but you probably need more tools if you want a more complicated solution and more advanced SOC. The solution should allow the automation of playbooks. If you have a typical problem, it automatically switches off something or locks the computer.
IT Manager at a educational organization with 501-1,000 employees
Real User
Aug 9, 2020
The deployment of the solution right now is terrible. We find it to be very bad. It could be improved enormously. The stability isn't ideal. The agents are in locked states and need to be reinstalled occasionally. There's also an area where they lack is the grouping of the agents. If it could be made a little easier to manage and for agents to be moved around it would make for a better solution. The solution needs to offer more support of different operating systems.
EDR solutions provide advanced capabilities for detecting and responding to threats on endpoints. These tools enhance security teams' ability to detect, investigate, and remediate incidents.EDR solutions offer enhanced endpoint protection by integrating real-time monitoring and advanced analytics. Designed for modern security teams, they facilitate immediate threat detection and remediation, effectively mitigating risks. User feedback highlights their capability to analyze extensive data...
The inclusion of web filtering would be good.
Datto Endpoint Detection and Response is good for what it does for the endpoint, but it is not enough to build a SOC. It may be enough for a small, first-level SOC or just a part of a SOC, but you probably need more tools if you want a more complicated solution and more advanced SOC. The solution should allow the automation of playbooks. If you have a typical problem, it automatically switches off something or locks the computer.
The solution could improve by having more deployment methods.
The deployment of the solution right now is terrible. We find it to be very bad. It could be improved enormously. The stability isn't ideal. The agents are in locked states and need to be reinstalled occasionally. There's also an area where they lack is the grouping of the agents. If it could be made a little easier to manage and for agents to be moved around it would make for a better solution. The solution needs to offer more support of different operating systems.