EDR (Endpoint Detection & Response)
Security solution that detects, analyses and automatically responds to suspicious behaviour on endpoints in real time.
EDR (Endpoint Detection & Response) is the evolution of classic antivirus. Instead of merely matching known signatures, EDR continuously monitors process behaviour, network connections and file access, and can automatically isolate or roll back suspicious activity.
For private users, classic antivirus is usually enough – EDR is standard in SMB and enterprise.
Why this matters in 2026
EDR became standard in Swiss SMEs in 2026 – insurers increasingly require it for cyber policies. For private users a classic antivirus with behavioural detection is enough; EDR is overkill and not designed for individuals.
How to protect yourself
A current operating system, an up-to-date antivirus suite, strong unique passwords (use a password manager) and two-factor authentication on all important accounts already cover the vast majority of real-world risk. Detailed guides: see our How-To section.