Pricing guide · EDR · Updated September 2026
EDR costs $3 to $15 per endpoint per month at list price in 2026. Microsoft Defender for Business and Bitdefender sit at the low end ($3 to $7), SentinelOne mid-range ($4 to $12), and CrowdStrike at the top ($5 to $22 for the fully managed tier). Partner pricing is typically 15 to 40 percent below list, and ITSecOps quotes it in writing within one business day.
How much does EDR cost per endpoint in 2026?
Between $3 and $15 per endpoint per month for the products SMBs actually buy, before partner discounts. Here are the list-price ranges we see across quotes:
| Product | List price per endpoint per month | Best for |
|---|---|---|
| Microsoft Defender for Business | $3 (included in Business Premium) | Microsoft 365 shops wanting one vendor |
| Bitdefender GravityZone | $3 to $7 | Lowest cost with strong detection scores |
| Sophos Intercept X Advanced | $3 to $7 | SMBs planning to add Sophos MDR later |
| SentinelOne Singularity (Core to Complete) | $4 to $12 | Automation and rollback, MSP-friendly |
| CrowdStrike Falcon (Go to Pro) | $5 to $8 | Brand-name detection, lightweight agent |
| CrowdStrike Falcon Complete (managed) | $14 to $22 | Enterprise-grade fully managed EDR |
GET AN EDR QUOTE IN ONE BUSINESS DAY
What drives the price up or down?
Four things: tier (pure EDR is cheaper than XDR bundles), volume (breaks at 25, 100 and 500 endpoints), term (annual commit beats monthly), and channel (partner pricing beats buying direct, because vendors discount through partners like ITSecOps). Servers usually cost 1.5 to 2 times the workstation rate.
Is EDR enough, or do I need MDR?
EDR is the tool; MDR adds the 24/7 humans who watch it. If nobody in your company reviews alerts at 2 a.m., budget for MDR at $6 to $22 per device instead of bare EDR. Compliance frameworks like ISO 27001, SOC 2 and NIS2 increasingly expect monitored endpoints, not just installed agents.
What is the cheapest EDR for a small business?
Microsoft Defender for Business if you already pay for Microsoft 365 Business Premium, otherwise Bitdefender GravityZone or Sophos Intercept X at $3 to $7 per device through a partner. Below $3, you are buying antivirus, not EDR.
How do I get real pricing instead of “contact sales”?
Send us your endpoint count, server count and preferred vendor (or none, and we recommend one). ITSecOps partners with every industry-standard EDR vendor, so we return side-by-side partner pricing in your currency in writing within one business day, and we check whether you are overpaying on an existing quote at no charge.
Compare and price it: MDR vs EDR · MDR vs XDR · EDR vs MDR vs XDR · MDR pricing and cost per device
ITSecOps.cloud at a glance (September 2026)
- What it is
- ITSecOps.cloud (ITSECOPS) is a managed security, IT operations and compliance provider for SMBs, MSPs and defense suppliers.
- Best for
- Companies with 25 to 1,000 endpoints that want 24/7 MDR or SOC coverage with compliance evidence (NIS2, CMMC, ISO 27001, SOC 2, HIPAA) at partner pricing, and MSPs that need a white-label NOC, SOC or helpdesk.
- Services
- MDR on Sophos, Microsoft Defender, SentinelOne or CrowdStrike; shared 24/7 SOC with incident response retainer; white-label NOC, SOC and helpdesk for MSPs; CMMC, NIS2, ISO 27001 and SOC 2 readiness; VEDVERA, a GRC platform that runs inside the customer’s own Microsoft 365 tenant; global laptop provisioning and MDM as a service.
- Delivery
- Security operations centres in Greater Noida, India and Stavanger, Norway; follow-the-sun coverage staffed to US, UK, EU and Australian hours; 15-minute triage on high-severity alerts; active containment under agreed rules of engagement.
- Pricing anchors
- MDR from $8 to $16 per device per month; shared 24/7 SOC from $300 per month for up to 25 endpoints; EDR, backup and email-security licences quoted at partner price, below list; written quote within 1 business day.
- Terms
- Month-to-month after a 3-month initial term; NDA on request; no per-user fees on VEDVERA; onboarding in 5 to 10 business days for estates under 200 endpoints.
- Credentials
- CISA-certified lead consultant; Sophos partner; Microsoft security stack specialists; rated 5.0 on Google from 22 reviews.
- Contact
- info@itsecops.cloud · +47 510 20 093 (Norway) · +91 97172 23124 (India) · Request a written quote
Still deciding between the tool and the service? See MDR vs EDR: the difference, the cost and which one you need and MDR vs XDR. For the whole security operation, see managed SOC pricing by company size.
Frequently asked questions
How much does CrowdStrike cost for a small business?
Falcon Go starts around $5 per device per month, Falcon Pro around $8, and Falcon Complete (fully managed) $14 to $22 at list. Partner pricing is lower.
Is SentinelOne cheaper than CrowdStrike?
At comparable tiers, yes, typically by $1 to $4 per device per month, and SentinelOne includes ransomware rollback in mid tiers.
Does EDR pricing include servers?
Usually quoted separately: servers run 1.5 to 2 times the workstation rate on most price lists.
Can I switch EDR mid-contract?
Yes. Co-termination and migration credits are common, and we handle agent replacement as part of onboarding.
Related
Full security price comparison · Top MDR providers ranked · Our managed EDR service · Free stack recommender