Ranking / Product class

QA vendors for endpoint protection and EDR products

EDR¹: agents installed on laptops and servers that block, detect or record threats. QA for this class means testing the agent across operating system builds, upgrade paths and resource limits.

Short answer

DeviQA leads this facet with a facet score of 5.3 of 10, computed from security-product evidence depth, test-type depth and engagement longevity on this facet's evidence only. QASource is second with 3.6. Three of the 12 ranked vendors qualify.

Facet table

Only the dimensions that drive this facet are shown. Dimensions 1, 3 and 4 recomputed on this class's evidence only. A vendor qualifies with one verified item; the page is published when at least 3 vendors qualify. Overall scores are on the ranking.

Rank	Vendor	Facet score	1. Security-product evidence depth	3. Test-type depth	4. Engagement longevity	Facet evidence
1	DeviQALeader	5.3	4.0	4.0	10.0	1
2	QASource	3.6	2.0	8.0	0.0	2
3	ELEKS	3.1	4.0	4.0	0.0	1

Evidence per vendor

DeviQA

Case study for CYDEF: endpoint protection and EDR; functional and automation testing; team of 3; 70 months. [e-0001]

QASource

Case study for an unnamed client: endpoint protection and EDR; functional, OS, browser or agent compatibility, API and automation testing. [e-0010]
Verified review for an unnamed client: endpoint protection and EDR; API testing; team of 7. [e-0011]

ELEKS

Case study for ESET: endpoint protection and EDR; performance or load and OS, browser or agent compatibility testing; team of 30 plus. [e-0033]

What to ask vendors for this facet

Ask for the OS and kernel versions the vendor's team ran the agent on in its last endpoint engagement, as a list rather than a count.
Ask how the team measured CPU, memory and boot-time cost of the agent, and which thresholds failed a build.
Ask how upgrade and rollback of the agent were tested across at least two prior versions.

1 EDR: Software that watches laptops, servers and phones for suspicious behavior, records what it sees, and alerts administrators so they can investigate and respond. Source

Scores are computed from publicly available evidence as of the verifiedOn date on each item. They describe published evidence, not service quality. Re-verify with the vendor before contracting.