EDR (Endpoint Detection & Response): SentinelOne, CrowdStrike, Huntress. Active defense at the device.
Add: DNS filtering (DNSFilter, Cisco Umbrella), email security (Proofpoint, Avanan), MFA (Multi-Factor Authentication) everywhere, awareness training (KnowBe4), vulnerability scanning.
Layered defense — no single tool catches everything.
