OpenEDR

Free, open-source endpoint detection and response agent from Xcitium. Delivers transparent endpoint protection with MITRE-aligned analytics, real-time visibility, and precise root-cause intelligence. Security you can inspect, validate, and trust – without relying on vendor-defined risk scores or black-box AI decisions. Open-source design exposes endpoint protection logic, telemetry flow, and enforcement mechanisms without closed-source black-box decisions. Supported platforms are Windows.

Current Version

2.5.1.0

Product Page

xcitium.com/free-edr

Market

EnterpriseSMB

Licence

Open source

Price

Free

Record Created

2026-09-19

Last Updated

2026-10-10

Xcitium is the enterprise security business that used to be called Comodo. The company rebranded in 2022, keeping the same Bloomfield, New Jersey address and the same core technology while the Comodo name stayed on the consumer products, which are listed separately in this index. Its argument is the one Comodo made before it, and it remains genuinely unusual: instead of deciding whether an unknown file is malicious, run it inside a container where it cannot touch the real system. The company brands this ZeroDwell Containment, and the claim is that dwell time — the window between an attacker arriving and being noticed — can be taken to zero because nothing unknown is ever trusted in the first place. It sells the Xcitium Platform in EU and US instances with EDR tiers from Essential through Pro to Enterprise, and adds XDR, cloud workload protection and CNAPP around them. A reader comparing its results here with conventional scanners should note that containment and detection are measured differently: a product that neutralises an unknown file without classifying it can score oddly in a test built to count correct verdicts. Vendor page →

Website

xcitium.com

Country

🇺🇸United States

Headquarters

🇺🇸Bloomfield, United States

Year Established

1998

Customers

5,000 organisations

Users

85M devices protected

Revenue

$60.0M (2026)