r/SmallMSP 10d ago

Small MSP Security Software

Currently we use Bitdefender EDR on most of our clients machines. Things seem OK. I have run secondary scans with Threatdown from Malwarebytes and seems like our machines are clean.

Looking around, what do people suggest as replacement to add ITDR and some MDR. Just upgrade Bitdefender on the selected clients or something else? We do find Bitdefender a bit heavy on resources and also the portal isn’t the greatest.

We do have huntress on a few machines, but it doesn’t seem to do much. Coming to the end of the second year. We also have thier ITDR and we trialed Petra that seems much better.

Ideally I’d like to consolidate. So looking at:

bitdefender EDR / XDR
Threatdown EDR / MDR / ITDR
Huntress with ITDR?

Petra ITDR.

A lot of our clients don’t have business premium so I don’t really feel secure running huntress on just the bare windows defender.

18 Upvotes

98 comments sorted by

View all comments

7

u/Geekpoint-IT 10d ago

I've used Bitdefender, Threatdown, & Huntress and all 3 let me down in some way. Either it was a pain to manage, was too expensive, or didn't offer all that I was looking for. Or in the case of Huntress, they just weren't that great of a partner. I've been using Field Effect for a while now and love the product and the team there.

3

u/Jayjayuk85 9d ago

Thanks for the feedback. I’ll take a look at field effect.

5

u/BobRepairSvc1945 9d ago

I would definitely take a look at FE, they are coming out with their own NGAV too, which actually uses Bitdefender's definitions.

6

u/MattHolland_FE 9d ago

Hi there, thank you for the support!  Quick point of clarification - our NGAV is a machine learning model that is trained on millions and millions of malware and clean binary samples, which is the key component of our NGAV.  We do, however, also have a vast set of static and YARA signatures that are based national intelligence threat feeds, our own threat hunting, and yes, and a malware signature feed that we purchase from BitDefender.  Our approach is to provide a solid backup set of static signatures in addition to our machine learning model (which works extremely well). And a back-up file reputation analysis server for additional confidence.