# Security — prevention, detection or response — which of the six security routes is yours

*A TechBag category guide. Last reviewed 2026-10-03.*

- Canonical: https://www.thetechbag.com/browse/security
- Routes: 6

## The routes

### Endpoint Protection

EPP and EDR answer different questions. Most buyers purchase one believing they bought both.

- 47 products compared
- Guide: https://www.thetechbag.com/browse/security/endpoint-protection
- Boundary terms resolved: EPP — Endpoint Protection Platform · EDR — Endpoint Detection & Response · XDR — Extended Detection & Response

### Managed Detection & Response

You’re not buying software. You’re buying whether someone picks up the phone at 2am — and what they’re permitted to do.

- 19 products compared
- Guide: https://www.thetechbag.com/browse/security/managed-detection-response
- Boundary terms resolved: MDR vs EDR you operate yourself · MDR vs MSSP · MDR vs MXDR

### Email Security

Your mail platform already filters spam. What it doesn’t stop is a message with no attachment, no link and no malware.

- 36 products compared
- Guide: https://www.thetechbag.com/browse/security/email-security
- Boundary terms resolved: Gateway (MX) deployment · API deployment · What the platform already filters

### Vulnerability Management

Finding vulnerabilities is the easy part. The question is which twenty matter, and who fixes them.

- 23 products compared
- Guide: https://www.thetechbag.com/browse/security/vulnerability-management
- Boundary terms resolved: Vulnerability scanning · Exposure management · Penetration testing (VAPT) · Breach & attack simulation (BAS)

### SIEM & Log Management

SIEM pricing is a data problem, not a software problem. The licence is the small number.

- 36 products compared
- Guide: https://www.thetechbag.com/browse/security/siem-log-management
- Boundary terms resolved: Log management · SIEM · XDR · SOAR

### Cloud & Workload Security

An agent on a laptop and an agent on a container are not the same problem. Most endpoint vendors sell you the former and call it cloud security.

- 19 products compared
- Guide: https://www.thetechbag.com/browse/security/cloud-workload-security
- Boundary terms resolved: CSPM — Cloud Security Posture Management · CWPP — Cloud Workload Protection Platform · CIEM — Cloud Infrastructure Entitlement Management · CNAPP — Cloud-Native Application Protection Platform

---

*Vendor-neutral. Nothing gated. https://www.thetechbag.com/browse/security*