CyberIndexBeta

Product

Symantec Endpoint Protection is Broadcom's on-premises endpoint protection platform for organisation-managed Windows, macOS and Linux endpoints, combining signature and behaviour-based malware prevention with a host firewall and intrusion prevention under a central management server (SEPM). It is the on-premises tier of the Symantec Endpoint Security line. Among the capabilities recorded for it are behavioral detection, central management console, cloud-assisted scanning and device control. Its record also notes heuristic detection, host firewall, malware detection and vulnerability shielding. The stated market is Enterprise. Symantec Endpoint Protection is sold on a quoted basis rather than at a published price.

Current Version
22.20.2.57
Market
Enterprise
Licence
Paid
Price
Quote
Record Created
2026-08-20
Last Updated
2026-10-10

Vendor

Broadcom is a semiconductor company that became one of the largest enterprise software owners by acquisition, and its presence in this index is entirely the result of two purchases: Symantec's enterprise security business in 2019, and VMware — which by then owned Carbon Black — in 2023. What it sells here is Symantec Enterprise Cloud, including the Symantec Endpoint Security agent that descends from Symantec Endpoint Protection, alongside the Carbon Black products. The consumer Norton business was never part of the deal; it stayed behind as NortonLifeLock and is now part of Gen Digital, listed separately in this index. Broadcom's approach to acquired software is well documented and worth knowing: it concentrates on the largest customers and simplifies the product range, so buyers evaluating these products should confirm what is still sold and to whom. The technology is long-established and the laboratory record for the Symantec engine is deep, but the vendor relationship is quite different from the one that produced it. Vendor page →

Country
United States
Headquarters
Palo Alto, United States
Year Established
1961
Customers
100K organisations
Users
50M users
Revenue
$63.9B (2025)

Platforms

Linuxnative
macOSnative
Windowsnative
Windows Servernative

Target Market

Enterprise secondary

Capabilities

Malware Detectionkeynative
Ransomware ProtectionkeyNot known
Behavioral Detectionkeynative
Web ProtectionkeyNot known
Email ProtectionNot known
Host Firewallnative
Sandbox AnalysisNot known
Cloud-Assisted Scanningnative
Heuristic Detectionnative
Device Controlnative
Vulnerability Shieldingnative
Central Management Consolenative

4 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 22.20.2.57Windows
  • 14.3.11240.9000macOS
  • 14.3.9683.9100Linuxreleased 2026-07-17

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

At a glance — latest result per lab test

AV-TEST Antivirus Test

Tested: macOSlab report ↗

Each bar is one lab’s own figure on that lab’s own scale. Labs test different models at different times, so the figures are not combined into one score.

AV-TEST Antivirus TestTest antivirus software for MacOS Sequoia - December 2025
Protection: 6Performance: 6Usability: 6

Certifications

Common Criteria3 expiredshow 3 certificates ▾
OESIS Framework SupportSupported1 activeSupported
OPSWAT Certified Security ApplicationGold1 activeGold

Change History

This record was created 2026-08-20. Everything below is what has changed since.

  • 2026-10-02Certification addedCertification expired: Common Criteria (EAL2)evidence
  • 2026-10-02Certification addedCertification expired: Common Criteriaevidence
  • 2026-10-02Certification addedCertification expired: Common Criteria (EAL2)evidence
  • 2026-09-23Capability addedCentral Management Console: built inevidence
  • 2026-09-23Capability addedCloud-Assisted Scanning: built inevidence
  • 2026-09-23Capability addedHeuristic Detection: built inevidence
  • 2026-09-23Capability addedDevice Control: built inevidence
  • 2026-09-23Capability addedVulnerability Shielding: built inevidence
  • 2026-09-23Capability addedHost Firewall: built inevidence
  • 2026-09-23Platform addedRuns on Windows Serverevidence
  • 2026-09-22New versionNew version: 22.20.2.57 (Windows)evidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-22Product updatedListed in Home Antimalwareevidence
  • 2026-09-20New versionNew version: 14.3.9683.9100 (Linux)evidence
  • 2026-09-19Platform addedRuns on Linuxevidence
  • 2026-09-19Product updatedNo longer sold to: Consumerevidence
  • 2026-09-19Pricing plan addedPrice: price on requestevidence
  • 2026-09-18Test result addedNew AV-TEST Antivirus Test resultevidence
  • 2026-09-09New versionNew version: 16.0.0 (Windows)evidence
  • 2026-09-09New versionNew version: 14.3.11240.9000 (macOS)evidence
  • 2026-09-04Product updatedListed in Network Firewallevidence
  • 2026-08-20Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-08-20Capability addedBehavioral Detection: built inevidence
  • 2026-08-20Capability addedMalware Detection: built inevidence
  • 2026-08-20Pricing plan addedPrice: paidevidence
  • 2026-08-20Product updatedAlso sold to: Enterpriseevidence
  • 2026-08-20Product updatedAlso sold to: Consumerevidence
  • 2026-08-20New versionNew version: 16.0.0evidence
  • 2026-08-20Platform addedRuns on macOSevidence
  • 2026-08-20Platform addedRuns on Windowsevidence
  • 2026-08-20Certification addedCertified: OPSWAT Certified Security Application (Gold)evidence
  • 2026-08-20Product createdNew product listedevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.