Try our new research platform with insights from 80,000+ expert users

Kaspersky Endpoint Detection and Response vs USM Anywhere comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Kaspersky Endpoint Detectio...
Ranking in Endpoint Detection and Response (EDR)
21st
Average Rating
8.0
Reviews Sentiment
7.4
Number of Reviews
17
Ranking in other categories
No ranking in other categories
USM Anywhere
Ranking in Endpoint Detection and Response (EDR)
53rd
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
115
Ranking in other categories
Log Management (42nd), Security Information and Event Management (SIEM) (31st), Compliance Management (12th)
 

Mindshare comparison

As of April 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Kaspersky Endpoint Detection and Response is 1.8%, up from 0.1% compared to the previous year. The mindshare of USM Anywhere is 0.3%, down from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR)
 

Featured Reviews

FarkhundAbbas - PeerSpot reviewer
Provides the ability to send detected malware to Kaspersky's sandbox environment for behavioral analysis
Kaspersky's support team is not that much supportive. If we need any help from them, they do not provide a good solution, and it takes too long to resolve the issue. This is the main thing because some cases are easy and need urgent resolution. However, when we create a support ticket, it takes three days to get it planned, and we have urgent requirements. So, the ticketing process needs improvement.
Kris Nawani - PeerSpot reviewer
Offers complete coverage without the need to install additional software
USM Anywhere is used for threat detection and investigation. It provides a solution with built-in threat intelligence and various other investigation tools The solution offers complete coverage without the need to install additional software, as it is maintained by the vendor. It helps in saving…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable aspect of the product is its consolidated features."
"From my point of view, one of the best aspects of Kaspersky Endpoint Detection and Response is its high detection rate, which surpasses many other solutions. Its valuable features include behavior detection, threat prevention, device control, adaptive anomaly control, and centralized protection detection."
"One of the good features is the provider's Faulting capability. If any of our systems detect malware, we can check the behavior of the malware by sending it to Kaspersky's sandbox environment. This helps us assess how destructive the malware is. After analyzing it, we can create use cases and protection measures based on that behavior. So, this is the best feature of Kaspersky."
"The product is integrated with endpoint protection. We don't have to implement a separate technology. It provides visibility over the endpoints."
"The tool is easy to use."
"The tool's performance and prevention are amazing."
"We have a concept of working from home. Most endpoints are not in the domain. It is our first line of defense. While we had Kaspersky deployed, it gave good insight into the upcoming challenge or threat."
"Kaspersky EDR is far superior to other products. It gives detailed information about malware, geolocation, and more. Also, the agent itself is very lightweight compared to other products. The packages and updates were quite small in size, just a few KBs."
"AlienVault's reporting is good. I like that vulnerability assessment is part of the solution, and the UI is intuitive. Also, the overhead is low, which is to say we don't need a dedicated SOC team to manage and analyze things constantly. We're a small company that doesn't have those resources."
"Using the communication within the security device, it is easier to create plugins."
"AlientVault has helped us in improving our visualization and incident response during cybersecurity situations."
"The Event Correlation and vulnerability scans have been the most useful. As a 24/7 SOC, we use the incoming alarms to give an overview of suspicious traffic going through the network. It's easy to look at the correlated events and see the broad picture of traffic for that customer. Vulnerability scans are good for providing patch and remediation guidelines to keep customer systems secure."
"Reports are customized, so you can present them to executives or engineers.​"
"It has streamlined log aggregation and analysis to meet organizational and regulatory needs."
"There are multiple tools for information security. The solution includes all the latest advances on the network and host intrusion detection systems."
"The most valuable feature is threat intelligence."
 

Cons

"The product does not detect zero-day threats."
"The solution must provide better security."
"Kaspersky Endpoint Detection and Response is expensive. It should improve its stability."
"There is room for improvement in the support."
"Kaspersky Endpoint Detection and Response needs vast resources on the central node. Not all maintenance tasks are in the GUI, so we often use commands. The lack of documentation for these processes means we frequently reach out to support, open tickets, and run complex CLI commands. It's not the most straightforward process. It should also improve stability."
"My team was struggling with the reporting when we were doing an audit. The console features are a little more interactive and user-friendly. There's some issue, or maybe some fixing has to be done."
"One of the main areas where the tool could improve is its integration capabilities. For example, I find it challenging to integrate it with other solutions. It would be helpful if the tool could make it more open to integration with other tools."
"It needs improvement in communication between the network and endpoint, as well as between endpoint and server."
"The solution is a bit complicated. It could be simplified quite a bit."
"The vulnerability scanning feature is one of the areas where the product has certain shortcomings and needs to improve. The tool has vulnerability scanning, but it is not that efficient."
"The reporting and dashboards have room for improvement."
"they seem to have bugs from time to time that go unfixed for a while and that is frustrating. I'm not saying the product needs to be bug-free, but they need to be responsive to bugs."
"Adding a parsing interface for the customers would make AT&T AlienVault USM better."
"The only complex area of the setup was writing the custom scripts."
"More complimentary training needs to be done for use with this tool. If you get into a bind, then it will cost you."
"I've been told that AlienVault doesn't have a full version of NES running in there, but I'm not sure if that's accurate or if my engineer made it that way. I'm not sure he was completely honest either because we had NES in the environment before. Those tools could be improved because AlienVault is a SIEM, and it added all these other features."
 

Pricing and Cost Advice

"I rate the solution's pricing model a seven on a scale of one to ten, where one is cheap, and ten is expensive."
"Yearly payments are to be made toward the licensing costs of the solution."
"The solution is not cheap, but it is not expensive."
"The tool's pricing was high during the last renewal."
"I would say that their pricing is generally competitive and attractive."
"The pricing falls within the average range."
"The tool's pricing is reasonable."
"The product is cheap."
"​The price point is good.​"
"It's very reasonably priced. It was one of the lowest among the ones I looked at. Licensing is pretty flexible. They can do a two-year or a three-year, even a one-year, perhaps."
"AlienVault is flexible on their pricing for unlimited licenses."
"​The vulnerability management solution is worse than buying a Nessus Professional license.​"
"They are a little more expensive than Microsoft."
"Do the one month trial and try to work out the kinks during it, as it has free support and service hours."
"It is affordable, and it also has many features that the premium products such as ArcSight and QRadar have. It is a very good platform for a SIEM solution. Everything is included in the price."
"The price of this solution is reasonable, which is one of the reasons why we selected it over other solutions."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
848,270 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Comms Service Provider
10%
Retailer
10%
Manufacturing Company
8%
Computer Software Company
19%
Financial Services Firm
8%
Comms Service Provider
7%
Educational Organization
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Kaspersky Endpoint Detection and Response?
Kaspersky EDR offers automated response capabilities, enhancing efficiency by enabling quick investigation and response to potential threats on Android devices.
What is your experience regarding pricing and costs for Kaspersky Endpoint Detection and Response?
Kaspersky has a better price than other marketplace solutions. Due to this, they are growing significantly. I like the price. I'd rate it nine out of ten.
What needs improvement with Kaspersky Endpoint Detection and Response?
Cortex is better in the security features, yet Cortex doesn't have IT management features like Kaspersky. Kaspersky is not an XDR solution. With an XDR solution, we could gain some more time.
What do you like most about AT&T AlienVault USM?
The most valuable feature of the solution is the ease of deployment that it provides to users. The integrations that the product has with third-party applications are useful.
What needs improvement with AT&T AlienVault USM?
There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks. It is also limited when used with bigger products and has complex password requirements.
 

Also Known As

No data available
AT&T AlienVault USM, AlienVault, AlienVault USM, Alienvault Cybersecurity
 

Overview

 

Sample Customers

Information Not Available
Abel & Cole, Bank of Ireland, Bluegrass Cellular, CareerBuilder, Claire's, Hays Medical Center, Hope International, McCurrach, McKinsey & Company, Party Delights, Pepco Holdings, Richland School District, Ricoh, SaveMart, Shake Shack, Steelcase, TaxAct, Taylor Morrison, Vonage and Zoom
Find out what your peers are saying about Kaspersky Endpoint Detection and Response vs. USM Anywhere and other solutions. Updated: April 2025.
848,270 professionals have used our research since 2012.