CyberIndexBeta

AhnLab EDR

AhnLabEnterprise Antimalware (primary)Compare with others in Enterprise Antimalware

Product

Endpoint detection and response product for organisations with AI-assisted threat analysis and reporting. AhnLab EDR detects advanced threats through behavioral analysis, AI-driven investigation, and proactive threat hunting. AhnLab EDR, powered by our EDR-dedicated proprietary engine, fuels users to achieve a greater understanding of full attack stories by delivering laser-accurate detection and graphical visualization of the result. AhnLab EDR analyzes a wide range of endpoint activities and accurately detect sophisticated threats. It runs on Windows.

Current Version
Not known
Product Page
ahnlab.com/…/endpoint-detection-r…
Market
Enterprise
Licence
Paid
Price
Quote
Record Created
2026-09-19
Last Updated
2026-10-10

Vendor

AhnLab is South Korea's largest security company and the only one of that scale to have been started by the author of the product: Ahn Cheol-soo wrote the V3 antivirus as a medical doctor in 1988, founded the company in 1995, and later left it for national politics. It is listed on the Korean exchange and headquartered in Seongnam, in the Pangyo technology district south of Seoul. The V3 engine still carries the consumer and endpoint line — AhnLab V3 for households and AhnLab V3 Security for Business — with AhnLab EPP as the managed endpoint platform, AhnLab EDR above it, and AhnLab XDR, AhnLab TIP for threat intelligence and AhnLab SOAR for response at the operations end. Its network side sells AhnLab TrusGuard firewalls, AhnLab IPS and AhnLab MDS for network sandboxing, with AhnLab CWPP for cloud workloads and AhnLab CPS PLUS for cyber-physical systems. Its market is overwhelmingly domestic, which is the main reason a Korean buyer will find far more AhnLab products on sale than this index lists, and why its products appear less often in the European public test cycles than vendors of comparable size. Vendor page →

Website
ahnlab.com
Country
South Korea
Headquarters
Seongnam, South Korea
Year Established
1995
Customers
25K organisations
Users
20M users
Revenue
≈ $195.4M (2025)

Platforms

Windowsnative

Target Market

Enterprise primary

Capabilities

Malware DetectionkeyNot known
Ransomware ProtectionkeyNot known
Behavioral DetectionkeyNot known
Web ProtectionkeyNot known
Email ProtectionNot known
Host FirewallNot known
Sandbox AnalysisNot known
Cloud-Assisted ScanningNot known
Heuristic DetectionNot known
Device ControlNot known
Vulnerability ShieldingNot known
Central Management ConsoleNot known

12 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

Not known

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

At a glance — latest result per lab test

MITRE ATT&CK Evaluations (Enterprise)

2025-12-10lab report ↗

Each bar is one lab’s own figure on that lab’s own scale. Labs test different models at different times, so the figures are not combined into one score.

All results

MITRE ATT&CK Evaluations (Enterprise)MITRE ATT&CK Evaluations — Enterprise 20252025-12-10
Technique-level detection: 25.6%Any detection: 71.1%Benign activity not alerted: 88.2%Attack sub-steps evaluated: 90
MITRE ATT&CK Evaluations (Enterprise)MITRE ATT&CK Evaluations — Enterprise 20242024-12-11
Technique-level detection: 37.3%Any detection: 47.5%Benign activity not alerted: 83.3%Attack sub-steps evaluated: 59

Certifications

Not known

Change History

This record was created 2026-09-19. Everything below is what has changed since.

  • 2026-10-07Test result addedNew MITRE ATT&CK Evaluations (Enterprise) resultevidence
  • 2026-10-07Test result addedNew MITRE ATT&CK Evaluations (Enterprise) resultevidence
  • 2026-09-29Platform addedRuns on Windowsevidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-20Pricing plan addedPrice: price on requestevidence
  • 2026-09-19Product createdNew product listedevidence
  • 2026-09-19Product updatedSold to: Enterpriseevidence
Something wrong? Suggest a correction →

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.