CyberIndexBeta

Product

Heimdal's endpoint detection and response offering for hunting and responding to threats on endpoints. Heimdal Endpoint Detection and Response is built on Next-Gen Antivirus & Firewall , a solution that monitors each endpoint continuously, correlates behavior, and applies automated response actions. Heimdal Endpoint Detection and Response grants you access to all the essential cybersecurity layers your business needs to protect itself against both known and unknown online and insider threats. Unlike traditional cybersecurity measures, a unified EDR approach provides unparalleled endpoint visibility, allowing for rapid response in the face of threats. Heimdal Endpoint Detection & Response (EDR) covers Linux, macOS, Windows and Windows Server.

Current Version
5.6.1
Market
EnterpriseSMB
Licence
Paid
Price
Quote
Record Created
2026-09-19
Last Updated
2026-10-20

Vendor

Heimdal is a Danish security company based in Copenhagen that sells a single unified platform to organisations, mostly mid-sized ones and through managed service providers. It is younger than most vendors here and grew from one idea — stopping threats at the DNS and patch layer, before anything needs to be detected on the endpoint — into a broad suite. The range is modular and each module carries the company name: Heimdal DNS Security, Heimdal Patch & Asset Management, Heimdal Application Control, Heimdal Ransomware Encryption Protection, Heimdal Email Security and Heimdal Email Fraud Prevention, with Heimdal Privilege Elevation & Delegation Management and Heimdal Privileged Account & Session Management covering administrative rights. Detection and response run from Heimdal Endpoint Detection & Response up through Heimdal XDR and the managed Heimdal MXDR. Its positioning is European compliance — NIS2, GDPR, ISO 27001 — and prevention rather than detection, which is worth bearing in mind when comparing it here: much of what it sells is designed to act before the point at which a detection test measures anything. Vendor page →

Country
Denmark
Headquarters
Copenhagen, Denmark
Year Established
2014
Customers
15K organisations
Users
3M devices protected
Revenue
≈ $3.7M (2025)

Platforms

Linuxnative
macOSnative
Windowsnative
Windows Servernative

Target Market

Enterprise secondarySMB primary

Capabilities

Malware Detectionkeynative
Ransomware Protectionkeynative
Behavioral Detectionkeynative
Web Protectionkeynative
Email Protectionoptional module
Host Firewallnative
Sandbox Analysisnative
Cloud-Assisted Scanningnative
Heuristic Detectionnative
Device Controloptional module
Vulnerability Shieldingoptional module
Central Management Consolenative

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 5.6.1Windows
  • 3.5.8macOS

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Not known

Change History

This record was created 2026-09-19. Everything below is what has changed since.

  • 2026-10-20New versionNew version: 3.5.8 (macOS)evidence
  • 2026-10-20New versionNew version: 5.6.1 (Windows)evidence
  • 2026-09-23Capability addedVulnerability Shielding: optional moduleevidence
  • 2026-09-23Capability addedDevice Control: optional moduleevidence
  • 2026-09-23Capability addedEmail Protection: optional moduleevidence
  • 2026-09-23Capability addedCentral Management Console: built inevidence
  • 2026-09-23Capability addedWeb Protection: built inevidence
  • 2026-09-23Capability addedRansomware Protection: built inevidence
  • 2026-09-23Capability addedHost Firewall: built inevidence
  • 2026-09-23Capability addedHeuristic Detection: built inevidence
  • 2026-09-23Capability addedCloud-Assisted Scanning: built inevidence
  • 2026-09-23Capability addedSandbox Analysis: built inevidence
  • 2026-09-23Capability addedBehavioral Detection: built inevidence
  • 2026-09-23Capability addedMalware Detection: built inevidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-22Product updatedListed in Small Business Antimalwareevidence
  • 2026-09-20Pricing plan addedPrice: price on requestevidence
  • 2026-09-20Platform addedRuns on Linuxevidence
  • 2026-09-20Platform addedRuns on macOSevidence
  • 2026-09-20Platform addedRuns on Windows Serverevidence
  • 2026-09-20Platform addedRuns on Windowsevidence
  • 2026-09-19Product updatedSold to: SMBevidence
  • 2026-09-19Product updatedAlso sold to: Enterpriseevidence
  • 2026-09-19Product createdNew product listedevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.