På Svenska
Hero image

Endpoint Detection & Response (EDR)

24/7 endpoint detection with active response


Users are your business' biggest attack surface

Endpoints and their users are the most common attack vectors used by today's attackers. Attacks can be carried out in several ways, such as through spam and phishing emails, or through malicious files and websites visited by the user. In other words, the exposure is high, and many of the major data breaches we have witnessed in recent years have been the result of a compromised user device or stolen user data.

68 %
68% say that endpoint attacks against their businesses increased between 2018 and 2019
million USD is the average loss from an endpoint attack
80 %
of successful data breaches are new or unknown "zero day attacks”
Content image

Protect your endpoints everywhere, always

The best technology to protect endpoints from attacks is Endpoint Detection & Response (EDR). Our BlueSOC Endpoint Detection & Response service combines leading EDR solutions with Sentor's BlueSOC, staffed by security analysts who monitor and act on suspicious activity around the clock. Our customised solution enables the detection of everything from malware infections, phishing campaigns and access to malicious websites, to advanced APT attacks and anomalous user behaviour. When irregularities are detected, endpoints can be isolated, code blocked and accounts locked, before they escalate into a full-blown incident.

Contact us

why sentor?

Benefits of EDR from Sentor

soc edr

Leading technology

Our customised solution is built on top of leading EDR solutions from Microsoft (Defender ATP) and Cynet (Cynet360).

Rapid implementation

The service can be installed within minutes and requires virtually no internal IT resources for operation and maintenance.

Human handling

Advanced threats and suspicious activity can be identified and investigated by experts in Sentor's BlueSOC, and then acted upon based on the scale and impact of the incident.

Better visibility

EDR provides better insight into the security status of your organisation's endpoints, for example to see what is affected by a particular vulnerability or has not been updated.

Protects remotely

Endpoint Detection & Response provides enhanced protection for your clients and users, whether they are in the office or remote.

High level of service

You get a dedicated Service Delivery Manager (SDM) who is responsible for monthly delivery meetings and reporting, and acts as your primary point of contact throughout the delivery.

the service in brief

How to get started


Preliminary workshop to define the scope of the endpoints to be protected, such as clients, servers and operating systems

Delivery begins

Service delivery begins with 24/7 monitoring and analytics from Sentor's BlueSOC


Deployment of agents to relevant endpoints and connection to Sentor's SOC


Continuous updating of detection functions, whitelisting and functionality for automatic mitigation

Incident plan

An Incident Response Plan (IRP) is developed in collaboration with you and your organisation

cloud security


Monthly reporting and regular service meetings with your assigned Service Delivery Manager

Contact us

We offer several contact routes and provide feedback as soon as possible. If you have sensitive information, we ask you to use the encrypted method.