Security Controls In The US Enterprise: Endpoint Security

Security Controls In The US Enterprise: Endpoint Security


Jason Pappalexis, John Whetstone, Will Fisher, Mike Spanbauer


Endpoint protection products (EPP), also known as conventional/traditional antivirus, have existed since the 1980s and are found in most enterprise security architectures. Advanced endpoint protection (AEP) products are the next evolution of this technology, combining EPPs with endpoint detection and response (EDR) technology in order to provide detection, blocking, and forensic insight. The AEP market is populated by a number of start-ups, many of which market their products as supplemental to EPPs.


  • Product scope, alternatives, deployment, and purchase authority 
  • Metrics on product use within the enterprise 
  • Who manages endpoint security products? (breakdown by organization size) 
  • Who uses API controls? (breakdown by organization size) 
  • Enterprise challenges



Part of a series on security controls deployed by US enterprises, this brief includes current usage statistics for AEP products within small and medium-sized enterprises (SMEs), large enterprises (LEs), and very large enterprises (VLEs).  

As with all NSS Labs group tests, there was no fee for participation. All testing was conducted independently and was not paid for by any vendor.