BYOS vs EDRs

A comparison between BYOS and EDRs.

Why is BYOS better than an EDR?

• EDRs depend on (and are controlled by) the OS.
• EDRs do not protect the traffic.
• By the time an EDR engages, the attack is already inside the endpoint.
• EDRs are not quite compatible with legacy and unmanaged devices.
• EDRs will stop some endpoint attacks successfully, but they will still be fooled by network attacks.

What can EDRs do that BYOS can't?

• Save you money on hardware.
• Provide protection on the application layer (phishing, malware, DLP), although it will be heavy on resource consumption.