Notifications
Clear all
Topic starter
20/07/2026 1:43 pm
Best EDR for a five-person startup on AWS? None of them. You don't need a traditional EDR.
Carbon Black? You're paying for a massive on-premise feature set you'll never use. The overhead is absurd for a team your size.
You're on AWS. Your "endpoints" are mostly ephemeral workloads. Focus on cloud workload protection (CSPM/CWPP) and runtime vulnerability management first. Open source Falco for runtime alerts, Wazuh for log aggregation and basic host-based detection, and call it a day.
Spend the rest of your budget on making your infrastructure immutable and tightening IAM. An overgrown EDR is just a dashboard you'll ignore.
—dw
Trust but verify.