Xcitium offering

Xcitium Platform Packages

Essential EDR, Pro EDR and Enterprise EDR with EXDR options. The stack describes NGAV, firewall control, EDR, virtualization-based containment without decoys and Zero Trust containment, with ITSM and SIEM capabilities across the platform.

Discuss your requirements ↗

Layers of endpoint protection, management and analysis

Package selection

Start with the security layer your team needs

Essential EDR provides the shared endpoint protection layer. Pro adds response tools and IT service management; Enterprise adds EXDR and SIEM coverage. Separately purchased add-ons are shown in the full comparison.

01 · Essential EDR

Who this option fits

Teams starting with endpoint protection, EDR, and Zero Trust containment.

Package capabilities: Shared platform layer

All three packages include NGAV, Firewall Control, EDR with HIPS, and Zero Trust Containment.

Compare all platform capabilities

Package capability highlights

Essential EDR

01NGAV · firewall · EDR/HIPS

02Zero Trust Containment

Shared platform layer

02 · Pro EDR

Who this option fits

Teams that want endpoint response tools and IT service management alongside EDR.

Package capabilities: Additional response and management

Pro EDR adds ITSM and endpoint response tools, including remote scripting, process termination, file retrieval, and endpoint CLI.

Compare all platform capabilities

Package capability highlights

Pro EDR

01Shared endpoint layer

02AEDR · remote response

03ITSM

Additional response and management

03 · Enterprise EDR with EXDR

Who this option fits

Teams that need to investigate endpoint events with network and cloud telemetry and analyze SIEM data.

Package capabilities: Extended detection and log analysis

Enterprise adds EXDR and SIEM, with broader detection, investigation, and response across telemetry.

Compare all platform capabilities

Package capability highlights

Enterprise EDR with EXDR

01Shared endpoint layer

02AEDR · ITSM

03EXDR · SIEM · telemetry

Extended detection and log analysis

Package comparison

Compare platform packages

Capabilities of Essential EDR, Pro EDR and Enterprise EDR with EXDR, including Xcitium’s published support, timing and retention terms. Confirm local service scope, license entitlements and contracted terms separately.

Platform Technology Stack8

Platform Technology Stack
Capability	Essential EDR	Pro EDR	Enterprise EDR with EXDR
Next-Generation Antivirus (NGAV)	Included	Included	Included
Firewall Control	Included	Included	Included
EDR with HIPS	Included	Included	Included
Virtualization-Based Containment	Included	Included	Included
Xcitium’s Deception-Based Protection contains unknown execution in a virtualized environment without decoys.
Zero Trust Containment	Included	Included	Included
IT Service Management (ITSM)	Not included	Included	Included
Enhanced XDR (EXDR)	Not included	Not included	Included
Security Information and Event Management (SIEM)	Not included	Not included	Included

Platform Capabilities6

Platform Capabilities
Capability	Essential EDR	Pro EDR	Enterprise EDR with EXDR
Multi-Method Detection	Included	Included	Included
Integrated AI/ML Threat Intelligence and Indicators	Included	Included	Included
Static and Behavioral NGAV Threat Prevention	Included	Included	Included
Data Loss Prevention and Remediation	Included	Included	Included
Attack Surface Reduction	Included	Included	Included
Viruscope Behavior Monitoring	Included	Included	Included

Advanced EDR (AEDR)8

Advanced EDR (AEDR)
Capability	Essential EDR	Pro EDR	Enterprise EDR with EXDR
Advanced Response Tools	Not included	Included	Included
Remote Scripting	Not included	Included	Included
File Quarantine and Removal	Included	Included	Included
Remote Process Termination	Not included	Included	Included
File Retrieval	Not included	Included	Included
Endpoint CLI Access	Not included	Included	Included
Remote Windows Event Log Access	Not included	Included	Included
Network Isolation	Included	Included	Included

Enhanced XDR (EXDR) · Detection13

Enhanced XDR (EXDR) · Detection
Capability	Essential EDR	Pro EDR	Enterprise EDR with EXDR
Interprocess Memory Access	Not included	Not included	Included
Windows Event Hooks	Not included	Not included	Included
Device Driver Installations	Not included	Not included	Included
File Access, Modification, and Deletion	Not included	Not included	Included
Registry Access, Modification, and Deletion	Not included	Not included	Included
Network Connections	Not included	Not included	Included
URL Monitoring	Not included	Not included	Included
DNS Monitoring	Not included	Not included	Included
Process Creation	Not included	Not included	Included
Thread Creation	Not included	Not included	Included
Interprocess Communication (for example, named pipes)	Not included	Not included	Included
Real-Time Telemetry Expansion	Not included	Not included	Included
Endpoint Event Chaining and Enrichment	Not included	Not included	Included

Enhanced XDR (EXDR) · Investigation14

Enhanced XDR (EXDR) · Investigation
Capability	Essential EDR	Pro EDR	Enterprise EDR with EXDR
Adaptive Event Modeling	Not included	Not included	Included
Behavioral Analysis	Not included	Not included	Included
Static File Analysis	Not included	Not included	Included
Time-Series Analysis	Not included	Not included	Included
Automated Malware Analysis Integration	Not included	Not included	Included
Threat Hunting Interface or API	Not included	Not included	Included
Matching Against Private Indicators of Compromise (IOC)	Not included	Not included	Included
Threat Intelligence Integration	Not included	Not included	Included
Linking Telemetry to Recreate Events	Not included	Not included	Included
Process and Attack Visualization	Not included	Not included	Included
Confidence-Based Alert Prioritization	Not included	Not included	Included
Alert Prioritization by System Criticality	Not included	Not included	Included
Risk Exposure Monitoring	Not included	Not included	Included
Reporting on Repeated Alerts for Automation	Not included	Not included	Included

Enhanced XDR (EXDR) · Remediation5

Enhanced XDR (EXDR) · Remediation
Capability	Essential EDR	Pro EDR	Enterprise EDR with EXDR
Remote Scripting	Not included	Included	Included
File Quarantine and Removal	Included	Included	Included
Remote Process Termination	Included	Included	Included
File Retrieval	Included	Included	Included
Network Isolation	Included	Included	Included

Services4

Services
Capability	Essential EDR	Pro EDR	Enterprise EDR with EXDR
Xcitium Threat Research Labs Service (CTRL)	Included	Included	Included
Automation Scripting Service	Not included	Included	Included
Baselining Pro Service	Not included	Included	Included
Cyber Transparency Service	Included	Included	Included

Endpoint Compliance and Management12

Endpoint Compliance and Management
Capability	Essential EDR	Pro EDR	Enterprise EDR with EXDR
Patch Management	Not included	Included	Included
Vulnerability Reporting	Not included	Included	Included
Custom Xcitium Security Policies	Included	Included	Included
Device Asset Discovery	Not included	Included	Included
Remote Monitoring and Management	Not included	Included	Included
Vulnerability Scanning	Not included	Included	Included
Device Enrollment	Included	Included	Included
Incident Log Activity	Included	Included	Included
Application Control	Included	Included	Included
External Device Control	Included	Included	Included
Compliance Reporting	Included	Included	Included
Hosted Ticketing	Included	Included	Included

Threat Intelligence1

Threat Intelligence
Capability	Essential EDR	Pro EDR	Enterprise EDR with EXDR
Monthly Threat Briefings	Included	Included	Included
Monthly threat briefings are available to organizations with a minimum number of endpoints; contact sales for the threshold.

Incident Response1

Incident Response
Capability	Essential EDR	Pro EDR	Enterprise EDR with EXDR
Automated Incident Containment	Included	Included	Included

Advanced Capabilities4

Advanced Capabilities
Capability	Essential EDR	Pro EDR	Enterprise EDR with EXDR
AI and Machine Learning	Included	Included	Included
Cloud Sandbox	Included	Included	Included
Zero Trust Architecture Support	Included	Included	Included
Cross-Platform Protection	Included	Included	Included

Platform SLA2

Platform SLA
Capability	Essential EDR	Pro EDR	Enterprise EDR with EXDR
Business-Hours Customer Support	Included	Included	Included
Platform support is available 5×9 during standard business hours.
Support for Critical Security Operations	Not included	Not included	Included
Enterprise EDR with EXDR includes 7×24 advanced support for critical security operations.

Data Security and Encryption3

Data Security and Encryption
Capability	Essential EDR	Pro EDR	Enterprise EDR with EXDR
Data Encryption at Rest and in Transit	Included	Included	Included
Data is encrypted at rest and in transit.
Data Retention	Included	Included	Included
Logs are retained for 7–30 days by default, with customized retention periods available.
Breach Notification	Included	Included	Included
Notice of a suspected breach is issued within 4 hours of discovery.

Add-Ons (purchased separately)5

Add-Ons (purchased separately)
Capability	Essential EDR	Pro EDR	Enterprise EDR with EXDR
DNS and Web Filtering	Purchased separately	Purchased separately	Purchased separately
Available as a separate purchase for each of the three packages.
Email Security Monitoring	Purchased separately	Purchased separately	Purchased separately
Available as a separate purchase for each of the three packages.
Cloud Compliance (CNAPP)	Purchased separately	Purchased separately	Purchased separately
Available as a separate purchase for each of the three packages.
Cloud Security Posture Management (CSPM)	Purchased separately	Purchased separately	Purchased separately
Available as a separate purchase for each of the three packages.
Cloud Workload Protection Platform (CWPP)	Purchased separately	Purchased separately	Purchased separately
Available as a separate purchase for each of the three packages.

Capabilities

Fit the way your team works

Core capabilities

The stack describes NGAV, firewall control, EDR, virtualization-based containment without decoys and Zero Trust containment, with ITSM and SIEM capabilities across the platform.

Deployment and fit

Enterprise EDR with EXDR adds correlation across network, cloud and identity telemetry for cross-domain visibility and response. Confirm exact licensing in a proposal.

Three package tiers

Essential EDR focuses on ZeroTrust protection; Pro EDR adds advanced endpoint protection and ITSM; Enterprise EDR with EXDR targets enterprise-grade threat detection and response.

Capabilities

Capabilities with a specific purpose

Scope

Essential EDR, Pro EDR and Enterprise EDR with EXDR are tiers of a unified security platform.

Workflow

The platform description lists NGAV, firewall control, EDR, Zero Trust containment and ITSM/SIEM, alongside cloud security, workload hardening and compliance content.

Output and handoff

Enterprise EDR with EXDR connects network, cloud and identity telemetry for cross-domain visibility and response. License inclusions are recorded in the proposal.

Responsibility boundary

Packages are selected by features, agent count, log sources and support needs; inclusions are recorded in the proposal and agreement.

Compare approaches

Core protection and additional operational layers

Consideration	Essential EDR	Pro / Enterprise
Primary focus	Shared protection with NGAV, EDR/HIPS and Zero Trust containment.	Pro adds remote response and ITSM; Enterprise extends coverage with EXDR and SIEM.
Workflow	Manage endpoint policies and EDR alerts.	Select tools for remote actions or investigation across telemetry domains.
Output and handoff	Core endpoint visibility and containment; check inclusions in the full matrix.	Additional response tools or correlated EXDR investigation; check inclusions in the full matrix.

Before you start

Map package tiers in the proposal

Record endpoint, network/cloud/identity, ITSM and SIEM needs, deployment boundaries and license counts; request a contractual component schedule for each tier.

01
Which exact features are licensed in Essential, Pro and Enterprise?
02
Which network/cloud/identity sources and integrations are needed for EXDR?
03
How are ITSM, SIEM, agent counts, support and retention scoped?

Evidence for your evaluation

Platform tiers and full comparison

Compare Essential, Pro and Enterprise features, separately purchased add-ons and Xcitium’s published service terms.

In practice

Comparing endpoint package levels

A security leader maps needs from core endpoint protection through broader EXDR visibility. The team compares Essential, Pro, and Enterprise tiers against its control requirements and licensing.

What your team gains

01
A requirements-led choice among three tiers.
02
Package-level evaluation of NGAV, firewall, EDR, and Zero Trust capabilities.
03
A focused review of network, cloud, and identity telemetry in Enterprise EXDR.

Before you decide

Questions, answered

Which platform packages are available?

Essential EDR, Pro EDR and Enterprise EDR with EXDR.

What does Enterprise EDR with EXDR extend?

Enterprise EDR with EXDR correlates network, cloud and identity telemetry for cross-domain visibility and response.

How should feature entitlements be confirmed?

Confirm each tier’s features, agent count, support and retention in the proposal and agreement.

Next step

Discuss your requirements

Tell us about your environment and priorities to discuss the right solution, pilot scope and rollout in Azerbaijan.

Discuss your requirements ↗

Xcitium Platform Packages

Who this option fits

Package capabilities: Shared platform layer

Who this option fits

Package capabilities: Additional response and management

Who this option fits

Package capabilities: Extended detection and log analysis

Compare platform packages

Fit the way your team works

Core capabilities

Deployment and fit

Three package tiers

Scope

Workflow

Output and handoff

Responsibility boundary

Map package tiers in the proposal

Evidence for your evaluation

Platform tiers and full comparison↗

Comparing endpoint package levels

Discuss your requirements

Platform tiers and full comparison