What is included in ESET PROTECT Enterprise?

ESET PROTECT console – Central management, available as cloud or on-premises deployment.
Modern Endpoint Protection – Protects Windows, macOS and Linux workstations from one policy.
Server Security – Real-time scanning for Windows Server and major Linux distributions.
ESET Inspect XDR – Detection, root-cause analysis and remote response from the console.
Full Disk Encryption – Encrypts Windows and macOS system disks, managed centrally.
Important – Vulnerability and patch management is a paid add-on.

What are the main benefits of ESET PROTECT Enterprise?

ESET PROTECT Enterprise is a subscription tier of the ESET PROTECT platform that pairs multilayered endpoint protection with ESET Inspect, the XDR component, managed from a single console you can run in the cloud or on your own servers. ESET Inspect was previously called ESET Enterprise Inspector, so older manuals and forum threads still use that name.

Single management console – Endpoint, server, mobile and encryption policies in one place.
Root-cause analysis – Trace an alert back to the process that started it.
Cloud sandboxing – ESET LiveGuard Advanced checks unknown files before users open them.
Mobile fleet coverage – Android and iOS devices enrolled and managed from the same console.
On-premises option – Run the console yourself when cloud management is not permitted.
Reporting for audits – Over 170 built-in reports drawn from more than 1000 data points.

Best antivirus? Why Windows Defender alone is not enough
Explains where the protection built into Windows stops and which additional layers a managed business environment needs.

Which company size is ESET PROTECT Enterprise suitable for?

The deciding factor is not headcount but whether someone reads the detections. ESET Inspect produces alerts with a process tree that a person has to interpret and act on. A company without that capacity buys a tool it will not use, unless a managed service provider operates the console on its behalf.

Test: Best antivirus programs for Windows
Compares current protection solutions and the criteria that separate them, as a starting point before you commit to one vendor platform.

Does ESET PROTECT Enterprise meet the requirements of Swiss cybersecurity legislation?

The reporting obligation under the revised Information Security Act has applied since 1 April 2025 and affects operators of critical infrastructure, for example energy and water utilities, transport companies, listed hospitals, cloud and data centre providers, and cantonal and municipal administrations. Affected organisations must report a cyberattack to the Federal Office for Cybersecurity (BACS) within 24 hours of discovering it, with a further 14 days to complete the report. ESET Inspect supports that deadline in one specific way: it retains the detection timeline and the process tree for an incident, so the initial report can state what was affected and when, without waiting for a full forensic analysis. What the product does not do is decide whether an incident is reportable, submit anything to BACS, or see beyond devices running an ESET agent, which means attacks on firewalls, network appliances or SaaS accounts remain outside its view. This is general product information and does not replace legal advice on your own reporting duties.

Does ESET PROTECT Enterprise meet the requirements of European cybersecurity legislation?

No security product makes an organisation NIS 2 compliant, because the directive addresses management accountability, risk analysis and documented processes rather than software. NIS 2 requires measures in categories including risk analysis and information system security, incident handling, business continuity and backup, supply chain security, access control and cryptography, and an assessment of how effective those measures are. ESET PROTECT Enterprise contributes to several of them: full disk encryption addresses part of the cryptography requirement, XDR detection and response supports incident handling, and console reporting produces the documented evidence an effectiveness assessment needs. It contributes nothing to business continuity and backup, nothing to supply chain security, and nothing to staff awareness training, and its access control governs the console rather than your network. Backup is the gap worth planning for first, because recovery from ransomware is judged on restore capability, not on detection quality.

Does ESET PROTECT Enterprise help with security questionnaires from large customers?

Yes, for a defined section of a questionnaire, and it is worth knowing which section before you start filling one in. It answers the items on centrally managed malware protection across workstations and servers, on endpoint detection and response with remote isolation and remediation, on encryption of company laptops, on mobile device protection, and on whether you can produce evidence, since the console ships over 170 built-in reports built from more than 1000 data points. It does not answer the items on backup and tested restores, on email and Microsoft 365 protection, on multi-factor authentication, on patch levels and vulnerability remediation, or on security awareness training, and at this tier four of those correspond to components ESET sells separately. If two or more of those items come back unanswered, price ESET PROTECT Elite before pricing individual add-ons, because Elite already contains vulnerability and patch management, mail server security, cloud app protection and multi-factor authentication, and consolidating within one vendor keeps a single console and a single evidence trail. Backup and awareness training have to come from outside the ESET platform in either case.

What is the difference between ESET PROTECT Enterprise and ESET PROTECT Elite?

The decisive difference is not XDR, because both tiers include ESET Inspect. Elite adds four components that Enterprise sells as separate add-ons: vulnerability and patch management, mail server security for Microsoft Exchange, cloud app protection for Microsoft 365 and Google Workspace, and multi-factor authentication. Enterprise is the right choice when mail filtering and identity management already sit elsewhere in your stack and you only want XDR on top of endpoint, server and encryption coverage. If you need even two of the four, compare the Elite price against the add-on total before deciding.

Which limitations should you know before buying?

The data centre region for the cloud console is chosen once during activation and cannot be changed afterwards, so the decision belongs in the planning phase rather than the rollout. ESET operates a Frankfurt location that serves the DACH region, which means Swiss buyers should expect console and detection data to reside in Germany rather than in Switzerland, and organisations that require domestic data residency will need the on-premises console instead. Full Disk Encryption covers Windows and macOS only, so Linux notebooks need a separate encryption approach and a separate answer in any audit, and on iOS the coverage is device management rather than an on-device security application. The four add-on components are the usual cause of a second purchase within the first year, and no ESET PROTECT tier includes backup, which has to be solved outside the platform.

Data loss is expensive: How backups help you avoid outages
Covers the recovery side that endpoint protection and XDR cannot address, including why tested restores matter more than detection alone.

Frequently asked questions about ESET PROTECT Enterprise

Does ESET PROTECT Enterprise protect a Microsoft Exchange server?

Only its file system. Server Security scans the files on the machine, but scanning messages, attachments and spam at mail level requires ESET Mail Security for Microsoft Exchange Server, which is an add-on at this tier and included from Elite upwards.

Can detections be forwarded to a SIEM?

Yes. ESET Inspect provides a public API used for integration with SIEM, SOAR and ticketing systems, so detections can feed an existing security operations workflow instead of being reviewed only inside the ESET console.

Can the management console run on our own servers?

Yes. Both the cloud console and ESET PROTECT On-Prem are covered by the same subscription, so running management in your own environment is a deployment decision rather than a separate purchase. This is the route for organisations that cannot place console data with a cloud provider.