Prismara Endpoint Security overview

Prismara Endpoint Security is endpoint detection, prevention and response (EDR) for your organisation’s Windows, macOS and Linux devices. It is SovSec’s alternative to Microsoft Defender for Endpoint. A lightweight sensor on each device detects and blocks threats, and related alerts are grouped into incidents in the Endpoint Security console at https://endpoint.prismara.eu.

The console is also an XDR hub: it brings together what your devices report so you can investigate an incident in one place, rather than switching between tools.

• Security teams who investigate incidents and decide how to respond.
• IT teams who deploy the sensor and keep devices protected.
• Authorised approvers, such as a security lead, who approve response actions before they run.

• Detect and block threats on every protected device, and see what was stopped.
• Investigate incidents with a timeline of what happened and which devices were affected.
• Respond to threats by isolating a device from the network, stopping a process, quarantining a file or collecting an investigation package.
• Keep control of response actions. Every response action must be approved by an authorised person before it runs, and every action is signed and recorded so you can see who requested it, who approved it and what happened.

You don’t have to switch over in one go. Prismara Endpoint Security can run alongside Microsoft Defender on the same devices while you move across. When you’re ready, you hand over protection through policy, device group by device group.

• Prismara SOC. If your organisation also uses Prismara SOC, incidents are forwarded to SovSec analysts automatically.
• Prismara Core. Deploy the sensor with Core, and use the device’s protection status in Core compliance checks.
• Prismara Reach. Connect to an affected computer to help the user once an incident is resolved.