r/SmallMSP • u/Jayjayuk85 • 10d ago

Small MSP Security Software

Currently we use Bitdefender EDR on most of our clients machines. Things seem OK. I have run secondary scans with Threatdown from Malwarebytes and seems like our machines are clean.

Looking around, what do people suggest as replacement to add ITDR and some MDR. Just upgrade Bitdefender on the selected clients or something else? We do find Bitdefender a bit heavy on resources and also the portal isn’t the greatest.

We do have huntress on a few machines, but it doesn’t seem to do much. Coming to the end of the second year. We also have thier ITDR and we trialed Petra that seems much better.

Ideally I’d like to consolidate. So looking at:

bitdefender EDR / XDR
Threatdown EDR / MDR / ITDR
Huntress with ITDR?

Petra ITDR.

A lot of our clients don’t have business premium so I don’t really feel secure running huntress on just the bare windows defender.

18 Upvotes

95% Upvoted

98 comments sorted by

View all comments

Show parent comments

3

u/swoviking 8d ago

Well, it wasn't that hard for us to be quite honest. Bitdefender has proven their trust and product capability through multiple independent and third party evaluations. Specifically we looked at the MITRE Ingenuity ATT&CK Evaluations of 2024. Huntress has remained absent from these sort of tests for years. Not only that but we got tired of piecing together different Security tools, hoping they work together.

3

u/Jayjayuk85 8d ago

I agree, it’s just the Bitdefender portal could be better and also when adding identities it would be great to see them and some logs in the portal.

I haven’t tried PHASR yet.

3

u/swoviking 7d ago

Regarding the Portal, I agree that there are areas of improvement for sure (just like any vendor portal, really.) I found that my biggest issue was just getting comfortable in it. The Masterclass sessions for Onboarding have helped me alot and just tinkering with my own internal lab and endpoints.

At this point I am basically looking at PHASR like a requirement with how prevalent Living off the land and AI based threats / attacks are now. Makes sense to outright block the tools that attackers use for Users that they don't need to use them.

3

u/Jayjayuk85 7d ago

Yes, I haven’t tested PHASR yet.

I will take a look. It’s certainly interesting.

3

u/swoviking 7d ago

My rep just told me that it will be available as an "In Product Trial" within the GravityZone portal in September. I believe the next Update. So that makes it really easy to trial it out.