A firewall protects the edge of your network, but your laptops and desktops travel, connect to home Wi-Fi and open email attachments. Endpoint security runs on each device and stops malware and attacks wherever that device is. WatchGuard Endpoint Security is cloud-managed and comes in four tiers, so you can match the depth of protection to what you need.
The four tiers
- Basic (from $39.50/device) — set-and-forget protection that blocks malware and ransomware automatically, with anti-phishing, USB device control and vulnerability checks.
- Prime (from $49/device) — everything in Basic, plus tools to investigate and contain an attack: endpoint isolation, an attack root-cause view and anti-exploit.
- 360 (from $69/device) — everything in Prime, plus zero-trust app control that only lets verified software run, stops lateral movement and adds automated threat hunting.
- Elite (from $89/device) — everything in 360, plus advanced investigation tools for security teams; works with Total MDR.
Servers too
Endpoint Security for Servers (from $110/server) licenses the same cloud-managed, server-grade protection, priced per server.
Optional add-ons
Any tier can add Patch Management (keeps Windows and third-party apps up to date), Full Encryption (encrypts the disk so a lost laptop stays private) and Advanced Reporting (extra security reports and dashboards).
How to choose
Start with Basic for automatic, hands-off protection. Move up to Prime or 360 when you want to investigate and contain attacks, not just block them, and Elite when a security team needs deep tooling. Prices are per device, per year, and drop as your device count grows; longer terms cost less per year. For round-the-clock monitoring, add WatchGuard Total MDR, which needs Prime, 360 or Elite.
All resources