Solutions · Small businesses
Endpoint protection for small businesses without a security team.
ThreatBreaker is endpoint protection for small business laptops and servers: it stops bad programs and ransomware, keeps working without internet, and a local IT partner can run it for you.
No security team needed. No prices to decode: your partner quotes per device.
Is this just antivirus?
Not quite, and that is the point. Traditional antivirus mostly compares files against a list of known bad ones. ThreatBreaker also watches what a program does: if something starts encrypting your files or hiding itself, it is stopped, even if nobody has seen it before.
Antivirus grew into EDR (endpoint detection and response), which watches programs and raises an alert for someone to deal with. ThreatBreaker goes a step further, to endpoint control and prevention: it stops the threat itself, investigates it and contains it. So if you are comparing the best EDR for small business, or the best antivirus for small business, look one step past both.
And no, you do not keep a separate antivirus running alongside it. ThreatBreaker includes signature scanning, so one agent does both jobs.
SMB cybersecurity, in the order that matters
Endpoint protection is one step of five. If you are starting from scratch, this is the order we would do them in.
- 01Patch what you runMost break-ins use a known hole. ThreatBreaker's scheduled CVE scans show which machines are missing fixes.
- 02Turn on MFAA second login step on email and remote access stops most stolen passwords from working.
- 03Keep backups you can restoreOffline or immutable copies, tested. This is the step that saves you after ransomware.
- 04Protect every laptop and serverEndpoint protection that blocks, investigates and contains: this page.
- 05Decide who answers an alertYou, or an IT partner who watches it for you. Decide before 2am, not at 2am.
Endpoint security for business, on the machines you actually have
Pick a machine to see what happens when a bad program shows up on it.
Endpoint protection for small business, without the overhead
Works without internet
Decisions are made on the machine, so a laptop on a plane or a server behind a firewall stays protected.
Light by design
One agent of about 14 MB, built not to slow down the machine it protects.
Installs in minutes
An installer for Windows and Mac, one command on Linux, and it connects itself.
Asks before it acts
Isolating a machine or deleting a file waits for a person's approval unless you choose otherwise.
A view for people who are not security analysts
ThreatBreaker has a Lite mode for exactly this reader: one scrolling page instead of an analyst console.
How you are doing
Which devices are protected, and what needs your attention, in plain language.
One button per threat
Each threat comes with a short explanation and a single action: remove and resolve, or quarantine and remove.
What it stopped for you
A summary of what was stopped, handled and checked over the last seven or thirty days.
Detail when you want it
The technical detail stays one click below the action, for your IT partner or anyone curious.
Ransomware protection for small business
Decoy files sit among your real ones as an early warning. When ransomware starts encrypting them, ThreatBreaker removes what the attacker set up to come back after a restart, tells the person at the desk in plain language what is happening, and shuts the machine down so the encryption stops. The evidence stays for whoever investigates.
It contains ransomware; it does not restore encrypted files. That is what your backups are for.
Your cyber-insurance questionnaire
Insurers ask the same few questions. Here is what ThreatBreaker helps you answer, and what it does not.
| The insurer asks | ThreatBreaker helps you show | Still on you |
|---|---|---|
| Is EDR deployed on all endpoints? | Every protected machine and its status, in one console | Installing it on every machine |
| Are security logs retained? | Incident, forensic and audit records kept for set periods | Your other systems' logs |
| Do you have documented incident response? | A timeline and evidence package for every incident | Your written plan and who to call |
| Do you use MFA? | Not covered | Turning it on for email and remote access |
| Do you keep backups? | Not covered | Backups you have tested |
ThreatBreaker helps you meet the monitoring and logging requirements. It does not make you compliant or insurable on its own.
Who runs it, and what it costs
Most small businesses get ThreatBreaker through a local IT partner, the managed service provider that already looks after your computers. They install it, watch the alerts and act on them, so you do not need a security person of your own.
Pricing is per device, quoted by your partner with the rest of their service. If you would rather look first, start a free trial and connect a few machines yourself.
What it does not do
- –Back up your files or restore them after ransomware. Keep backups.
- –Filter your email or spam.
- –Replace MFA. Turn it on anyway.
- –Block a program before it starts on Windows: there, it stops and removes it once it runs. Pre-execution blocking is on macOS and Linux.
Small business questions
- Is this just antivirus, and do I still need antivirus as well?
- It does what antivirus does and more: it also watches what programs do, so new threats are stopped too. You do not need a separate antivirus alongside it.
- What is the best endpoint protection for a business with no security staff?
- One that a partner can run for you, or that works without someone watching it all day. ThreatBreaker investigates each alert itself and asks before taking drastic action.
- How much does EDR cost for a small business?
- EDR and similar tools are usually priced per device per month. ThreatBreaker is quoted per device by your IT partner as part of their service, and you can start with a free trial.
- Will my cyber-insurance questionnaire accept this, and who watches the alerts?
- It helps you show endpoint protection on every machine, retained security records and documented incidents. Alerts are watched by your IT partner, or by you if you run it yourself.
- What happens when it finds ransomware?
- Decoy files raise the alarm early, the attacker's foothold is removed, and the machine is shut down, so the encryption stops. Restoring files is a job for your backups.
- Does it run on Macs and Linux servers, and will it slow them down?
- Yes: Windows, macOS and Linux. The agent is about 14 MB and is built to stay out of the way of the work the machine is doing.
- Does it need an internet connection?
- No. Detection runs on the machine itself, so protection continues when the connection drops. The console catches up when it is back.
Find an IT partner who runs it for you
Tell us a little about your business and we will introduce you to a ThreatBreaker partner near you.