Endpoint Security
In short
Endpoint security means protecting the devices work actually happens on: laptops, phones, tablets, servers. It detects not only known malware but suspicious behaviour, can isolate an affected device from the network, and records what happened. Those three points are what separate it from a classic virus scanner.
How it differs from antivirus
A classic scanner compares files against a list of known threats. That works against the known and not against the new.
Behaviour-based protection asks instead what is happening on the device: why is a process encrypting thousands of files? Why is an Office document talking to a server abroad? With ransomware that difference decides whether the damage lasts hours or weeks.
The third point that often gets left out: the record
After an incident the important question is not what was removed but what left the building – and by which route somebody got in.
Without a record neither can be answered. A cleaned device with no log is a device you hope was the only one. That is not enough to notify affected people, nor to decide whether the same gap is still open elsewhere.
For a Swiss company
A usable baseline is already included in the higher Microsoft 365 plans – so the more common gap is not a missing product but that nobody is looking. An alert nobody reads is not detection.
There is also the notification duty: a breach of data security posing a high risk to the people affected has to be reported to the Federal Data Protection and Information Commissioner (FADP, SR 235.1). Only someone who kept records knows what needs reporting.
How we handle it
We run detection as a service with a person behind it rather than as a product. Without that part you have bought an alert, not a response.
Device control through Microsoft Intune, operations through managed IT, recovery through backup – the order an actual incident runs in.
Related terms
A term in your quote that nobody explained?
In a strategy call we translate the offer in front of you – even when it did not come from us.