Service · Cyber security

Antivirus and EDR

Business-grade protection differs from home antivirus not by catching more malware but by being manageable. Thirty separately installed copies with their own settings do not protect a company: a single forgotten machine without updates is enough. EDR goes further and records what actually happens on each device, so an attack can be stopped and investigated.

Send an enquiry See the scope

One console

all devices

EDR

behaviour, not just signatures

Isolation

in one click

Status

in a monthly report

What the service covers

What matters is not installation but oversight: someone must be able to see that protection is active everywhere and genuinely working. We usually work with Microsoft Defender for Business or Defender for Endpoint, and also with other established EDR products.

Talk it through with us

Central management

One place from which the status of every device in the company is visible.

Workstations

Scanning of files, mail and web traffic, plus behaviour analysis that catches suspicious processes.

Servers

Dedicated policies: a file server and a database server need quite different exclusions.

Attack surface

Rules that block macros from the internet, abuse of scripting tools and theft of stored credentials.

Silent devices

Machines that have not checked in for a week go on a separate list and are chased up.

Response

Alert triage, isolation of an infected machine from the network, and a report.

How we deliver it

Rolling out to a hundred devices can be done in a few days. Most of the time goes on policies and exclusions.

Selection

We choose the product based on your requirements and licences. Defender is often already paid for.

Deployment

Centrally through Intune or group policy, with nobody walking from desk to desk.

Policies

Rules and exclusions. Wrong exclusions on database servers are the classic cause of complaints about slowness.

Operation

We monitor status, handle alerts and send reports.

Ransomware gangs test their tools against every mainstream antivirus before they strike. Signature scanning catches known threats, not a payload built for you. Protection comes from layers working together: EDR, restricted rights, an allow list for software and backups the attacker cannot reach.

Common questions

The one that meets your requirements and that your IT staff can manage. Detection rates among the leading products differ little, while management and support differ a lot. With Business Premium, Defender for Business is an obvious starting point.

Isolate the machine from the network but do not switch it off, because shutting down wipes traces in memory. EDR can isolate the device remotely so it only talks to the console. Then follow the procedure, which must be written before the first incident.

For a small firm with no sensitive data, good antivirus under central management may suffice. Once you hold customer data, run production or face NIS2 duties, EDR is the norm, because it lets you see what happened and stop it.

Phones with work email and system access should at minimum have a passcode, encryption and remote wipe through Intune. Antivirus on the phone matters less than those three things.

Related services

View the whole area

Service GDPR and personal data security Access, logging and encryption for personal data Service Security policies and documentation Policies and procedures people can actually follow Service Security solution deployment Selecting, piloting and rolling out security tools Service Infrastructure protection Perimeter, network zones and secure remote access

Bring your endpoint protection under control

Give us the number of devices and your current product. We will bring it under central management and tailor the rules to your servers.

Email
office@apply.dk

Coverage
All of Denmark, delivered remotely

I agree that Apply may handle my details as set out in the privacy policy