Endpoint Security platforms combine Endpoint Protection Platform (EPP) prevention with Endpoint Detection and Response (EDR) — and increasingly Extended Detection and Response (XDR) — to prevent, detect, and respond to threats on laptops, desktops, servers, and cloud workloads. Core capabilities include signature and behavioral malware prevention, memory and script protection, ransomware rollback, endpoint telemetry and threat hunting, automated containment (process kill, host isolation, network quarantine), integration with identity and email signals for cross-domain correlation, and managed-detection-and-response (MDR) service wrappers. Leading vendors include CrowdStrike, SentinelOne, Microsoft Defender for Endpoint, Palo Alto Cortex XDR, Sophos, Trend Micro, Bitdefender, and VMware Carbon Black.