Endpoint Detection and Response (EDR) and Managed Detection and Response (MDR), powered by Webroot, provide a comprehensive endpoint security ecosystem designed for Managed Service Providers (MSPs).
Both solutions help MSPs overcome key challenges, such as limited visibility, resource constraints, and rising cyber threats; however, they differ in how they’re managed and who handles incident response.
EDR empowers your team to detect, investigate, and remediate endpoint threats directly.
MDR extends protection further with 24/7 managed detection and response handled by Webroot’s Security Operations Center (SOC).
EDR vs MDR
| Feature | EDR | MDR (Managed Detection and Response) |
|---|---|---|
| Management | Managed by the MSP | Managed 24/7 by Webroot’s SOC |
| Operation | Requires Endpoint Protection (EPP) to function | Can operate independently of EPP |
| Detection | Automated analysis of endpoint data | Human + AI analysis with continuous threat hunting |
| Response | MSP investigates and remediates threats manually | Webroot analysts detect, triage, and respond automatically |
| Coverage | Dependent on your team’s schedule | 24/7 global monitoring and remediation |
| Ideal for | MSPs with in-house security expertise | MSPs seeking “hands-off,” managed threat response |
How to enable EDR & MDR
Log in to your Webroot Management Console.
The dashboard appears.
Select your Site (Customer).
Click the Site name to open the customer’s page.
- Navigate to the Endpoint Protection tab.
Enable the “Endpoint Protection” toggle.
This activates the main Webroot protection module across endpoints.
Under the same section, you’ll find two additional options:
- EDR (Endpoint Detection and Response):
Works in conjunction with Endpoint Protection. It allows advanced monitoring, alerting, and incident management. - MDR (Managed Detection and Response):
Can operate independently, even if Endpoint Protection is not enabled. This service provides 24/7 managed monitoring and response by Webroot’s security experts.
