Essentials
Contact Cisco
Subscription
Core endpoint protection, continuous monitoring, dynamic file analysis, endpoint isolation, and USB device control.
Check current pricing →
Cisco Secure Endpoint
Cisco Secure Endpoint provides cloud-managed endpoint protection, detection, threat hunting, and response for Windows, macOS, Linux, Android, and iOS devices.
Editorial overview
Aggregated Overview
Cisco documents broad endpoint coverage, EDR, behavioral monitoring, sandboxing, isolation, device control, APIs, Orbital investigation tools, and Talos threat hunting. Independent ratings are generally positive, while reviewers also report setup complexity, tuning requirements, and limited public p
This profile combines documented product information and independent evidence where available. It is not a hands-on test unless TechZella explicitly identifies one.
Cisco Secure Endpoint Decision Snapshot
A quick way to understand who this product may suit, where its limits matter, and which facts are most relevant before you compare alternatives.
Platforms
Android, API, iOS, Linux, macOS, Private Cloud
TechZella assessment
8.1/10
Overview
Cisco Secure Endpoint is endpoint security software for preventing, detecting, investigating, and responding to threats. Cisco describes it as a single-agent product with cloud-based analytics and support for public or private cloud deployment.
The product protects Windows, macOS, Linux, Android, and iOS devices. It was formerly known as Cisco AMP for Endpoints. Its capabilities include behavioral monitoring, malware analysis, endpoint isolation, device control, risk scoring, threat hunting, and response automation.
Secure Endpoint connects with Cisco XDR and other Cisco security products. Cisco positions its Essentials, Advantage, and Premier tiers for organizations with different detection, investigation, and managed threat-hunting requirements.
Security & Privacy
For security-sensitive software, TechZella focuses on documented architecture, authentication, data handling, deployment and privacy details that can affect a buying decision. This is product research, not an independent security audit.
Security posture at a glance
| Deployment | Public cloud or private cloud |
|---|---|
| Security model | Prevention, EDR, threat hunting, and response |
Security claims are presented only when supported by documented sources. The presence of this section does not constitute a penetration test, certification or independent security audit.
Cisco Secure Endpoint Features
Endpoint Protection
- Machine-learning-based behavioral monitoring
- Continuous endpoint monitoring
- Fileless malware and ransomware protection
- Dynamic file analysis
- Endpoint isolation
- USB mass-storage device control
Detection and Response
- Endpoint detection and response
- Incident investigation
- Threat containment
- Response actions through console
- Risk-based vulnerability visibility
- Host firewall management in supported tiers
Threat Hunting
- Cisco Talos threat hunting in Premier
- Orbital Advanced Search
- Predefined investigation and threat-hunting queries
- Remote scripts through Orbital
- MITRE ATT&CK-mapped threat hunting
Integrations and Automation
- Cisco XDR integration
- Cisco Umbrella integration
- Cisco Duo integration
- Cisco Secure Malware Analytics integration
- Automated XDR playbooks
- Secure Endpoint API
- Orbital API
Deployment and Coverage
- Public-cloud deployment
- Private-cloud deployment
- Windows support
- macOS support
- Linux support
- Android support
- iOS support
Cisco Secure Endpoint Specifications
| Product type | Endpoint security platform |
|---|---|
| Deployment | Public cloud or private cloud |
| Supported platforms | Windows, macOS, Linux, Android, iOS |
| Management | Centralized cloud console |
| Security model | Prevention, EDR, threat hunting, and response |
| API | Secure Endpoint API and Orbital API |
| Integrations | Cisco XDR, Cisco Umbrella, Cisco Duo, Cisco Secure Malware Analytics, selected third-party XDR integrations |
| Pricing model | Quote-based subscription |
| Free trial | Not publicly listed |
| Former product name | Cisco AMP for Endpoints |
| Company founded | 1984 |
| Company headquarters | San Jose, California, United States |
Cisco Secure Endpoint Pricing & Plans
Advantage
Contact Cisco
Subscription
Adds risk-based vulnerability visibility, Orbital Advanced Search, remote scripts, advanced malware analytics, and host firewall controls.
Check current pricing →Premier
Contact Cisco
Subscription
Adds Cisco Talos threat hunting with detailed alerts and remediation recommendations.
Check current pricing →Pricing may change. Verify current plans on the vendor's website.
Our evidence-based assessment
TechZella Score
A proprietary editorial score based on product capabilities, usability, value, performance, support and user sentiment evidence.
8.1/10High confidence
Cisco documents broad endpoint coverage, EDR, behavioral monitoring, sandboxing, isolation, device control, APIs, Orbital investigation tools, and Talos threat hunting. Independent ratings are generally positive, while reviewers also report setup complexity, tuning requirements, and limited public pricing.
Methodology v1.0. The assessment weighs feature coverage (25%), ease of use (15%), value for money (20%), performance (15%), support (10%) and user sentiment (15%), using researched product evidence and verified review evidence where available. It is a TechZella editorial assessment, not a direct user-review average.
Cisco Secure Endpoint Pros & Cons
Pros
- Broad operating-system coverage across desktop, server, and mobile endpoint environments.
- Combines prevention, EDR, threat hunting, malware analysis, and response capabilities.
- Supports public-cloud and private-cloud deployment models.
- Includes endpoint isolation, USB device control, and API-driven administration.
- Integrates with Cisco XDR and the wider Cisco security portfolio.
- Receives generally positive ratings from G2, Gartner Peer Insights, and TrustRadius.
Cons
- Cisco does not publish standard numeric prices on its official pricing pages.
- Advanced investigation and threat-hunting capabilities are restricted to higher tiers.
- Implementation and policy tuning may require experienced security administrators.
- Some independent reviewers report reporting, alert-noise, or configuration challenges.
- The product's mobile connector capabilities differ from its desktop endpoint controls.
Community feedback
Reviews
No reviews yet. Be the first to share your experience.
Write a Review
Please log in to submit a review.
Cisco Secure Endpoint Competitors & Alternatives
Compare similar products directly, then see which alternatives may make more sense when your requirements differ.
Direct competitors
These products address broadly similar requirements. The descriptions focus on documented reasons a buyer might compare them with Cisco Secure Endpoint.
FAQ
What is Cisco Secure Endpoint?
It is endpoint protection and response software that monitors devices, blocks threats, investigates activity, and supports remediation.
Which operating systems does Cisco Secure Endpoint support?
Cisco lists Microsoft Windows, Linux, Apple macOS, Apple iOS, and Google Android as compatible operating systems.
Does Cisco Secure Endpoint provide an API?
Yes. Cisco documents a Secure Endpoint API using client credentials and also provides the Orbital API for endpoint queries, scripts, and investigation tasks.
Does Cisco Secure Endpoint offer a free trial?
Cisco’s public product and licensing pages do not list a standard self-service free trial. Prospective customers are directed toward Cisco sales, partners, demos, or evaluation discussions.
What integrations are available?
Documented integrations include Cisco XDR, Cisco Umbrella, Cisco Duo, Cisco Secure Malware Analytics, and selected third-party integrations exposed through Cisco XDR.
Is Cisco Secure Endpoint cloud-based?
Yes. Cisco describes public-cloud deployment and also supports private-cloud deployment for eligible environments.