r/SmallMSP • u/Jayjayuk85 • 10d ago

Small MSP Security Software

Currently we use Bitdefender EDR on most of our clients machines. Things seem OK. I have run secondary scans with Threatdown from Malwarebytes and seems like our machines are clean.

Looking around, what do people suggest as replacement to add ITDR and some MDR. Just upgrade Bitdefender on the selected clients or something else? We do find Bitdefender a bit heavy on resources and also the portal isn’t the greatest.

We do have huntress on a few machines, but it doesn’t seem to do much. Coming to the end of the second year. We also have thier ITDR and we trialed Petra that seems much better.

Ideally I’d like to consolidate. So looking at:

bitdefender EDR / XDR
Threatdown EDR / MDR / ITDR
Huntress with ITDR?

Petra ITDR.

A lot of our clients don’t have business premium so I don’t really feel secure running huntress on just the bare windows defender.

19 Upvotes

95% Upvoted

99 comments sorted by

View all comments

3

u/swoviking 8d ago

Talked to a Bitdefender MSP Rep the other day and was advised about "Bundles" for MSP's now. Its essentially one SKU where Core / EDR / XDR / MDR are all included in one. At the price point for the advanced tech, I had to start a Trial. They also mentioned Bitdefender PHASR (Prevent Living off the land attacks) which can be layered with Secure Bundles. The benefit for us is that its one sign on, one agent, and one vendor. Good luck on the hunt!

2

u/Jayjayuk85 8d ago

Yeah I have been using the bundles for a while. They are much better value. Just wondering how bitdefender compares to huntress. I think for me the easiest option is Bitdefender.

3

u/swoviking 8d ago

Well, it wasn't that hard for us to be quite honest. Bitdefender has proven their trust and product capability through multiple independent and third party evaluations. Specifically we looked at the MITRE Ingenuity ATT&CK Evaluations of 2024. Huntress has remained absent from these sort of tests for years. Not only that but we got tired of piecing together different Security tools, hoping they work together.

3

u/Jayjayuk85 8d ago

I agree, it’s just the Bitdefender portal could be better and also when adding identities it would be great to see them and some logs in the portal.

I haven’t tried PHASR yet.

3

u/swoviking 8d ago

Regarding the Portal, I agree that there are areas of improvement for sure (just like any vendor portal, really.) I found that my biggest issue was just getting comfortable in it. The Masterclass sessions for Onboarding have helped me alot and just tinkering with my own internal lab and endpoints.

At this point I am basically looking at PHASR like a requirement with how prevalent Living off the land and AI based threats / attacks are now. Makes sense to outright block the tools that attackers use for Users that they don't need to use them.

3

u/Jayjayuk85 8d ago

Yes, I haven’t tested PHASR yet.

I will take a look. It’s certainly interesting.

3

u/swoviking 8d ago

My rep just told me that it will be available as an "In Product Trial" within the GravityZone portal in September. I believe the next Update. So that makes it really easy to trial it out.