Directory CybersecurityEndpoint Security & EDRDeep Instinct

Deep Instinct

About Deep Instinct

Deep Instinct DSX is a threat prevention solution that uses deep learning to identify and stop threats across cloud, NAS, applications, and endpoints before execution. It operates without agents and is designed to be privacy-first.

How to evaluate Endpoint Security & EDR

This is how the CIOPages Research Team evaluates this category. It is not an assessment of Deep Instinct. It comes from our Endpoint Detection & Response (EDR/XDR) buyer guide.

25%

Prevention & Detection Efficacy

Pre-execution and behavioral prevention, fileless and living-off-the-land detection, ransomware rollback, credential-theft detection, and breadth of MITRE ATT&CK technique coverage proven in independent and ATT&CK evaluations — not just the vendor’s own benchmark

18%

Investigation & Threat Hunting

Real-time endpoint search across the fleet, raw-telemetry retention and query language, process-tree and attack-timeline visualization, IOC and behavioral hunting, remote-shell live forensics, and how much of the triage an AI assistant can credibly take off the analyst

17%

Response & Remediation

Automated containment and network isolation, one-click and policy-driven response, ransomware and malicious-change rollback, host remediation without reimaging, and the granularity of response authority you can safely delegate to automation versus a human

15%

XDR Correlation & Telemetry Breadth

Native correlation across endpoint, identity, email, cloud-workload, and network signal; unified incident view with attack-chain reconstruction; quality of first-party telemetry versus third-party connectors; and whether correlation genuinely reduces alert volume or just renames it

15%

Endpoint Performance & Operations

Agent CPU, memory, and I/O footprint on laptops, servers, and VDI; single-agent versus multi-module sprawl; OS and architecture coverage (Windows, macOS, Linux, ARM, legacy); deployment and update controls including staged rollout and rollback; console scalability and API depth

10%

Managed Services & Ecosystem Fit

Quality and response-authority of the vendor’s own MDR option, openness to third-party MDR and SIEM/SOAR, threat-intelligence depth and attribution, marketplace and integration breadth, and the realism of support and professional-services coverage for your geographies

Other Endpoint Security & EDR Vendors

View all

Bitdefender

Carbon Black (VMware)

Related Buyer Guides

Our buyer guides across Cybersecurity. Each one compares the main vendors in its category and what buyers weigh up.

API Security Platforms

The API is now the primary attack surface, and a WAF pointed at it isn't API security. Evaluate Salt, Akamai (Noname), Imperva, F5, Traceable, Wallarm, Cequence, and Data Theorem on whether they actually discover your shadow APIs and catch BOLA and business-logic abuse at runtime — not just sign endpoints off as “protected.”

Attack Surface Management (ASM / CTEM)

Evaluate Wiz, CrowdStrike Falcon Surface, Microsoft Defender EASM, Cortex Xpanse, Censys, CyCognito, Tenable, and runZero across EASM, CAASM, and platform-embedded camps — judged on discovery accuracy and how cleanly the surface feeds prioritization, not how many assets it claims to find.

Cloud Access Security Broker (CASB)

Evaluate Netskope, Microsoft Defender for Cloud Apps, Zscaler, and Palo Alto for SaaS security, shadow IT discovery, and data protection.

CIOPages put this listing together from public sources. It’s information, not an endorsement. How we build listings. Work here? Claim this listing or .