Kaspersky Endpoint Security Cloud review

A strategic misfire

Kaspersky Endpoint Security Cloud
(Image: © Kaspersky )

TechRadar Verdict

The platform shines in some areas, but falls short of its peers in terms of its feature coverage since it offers some essential features only along with the expensive add-on.


  • +

    Detailed reports

  • +

    Active Directory support

  • +



  • -

    Doesn’t protect Linux endpoints

  • -

    Most features are Windows-only

Why you can trust TechRadar Our expert reviewers spend hours testing and comparing products and services so you can choose the best for you. Find out more about how we test.

Kaspersky offers a couple of cloud-based endpoint security solutions (opens in new tab) for mid-sized businesses. The solutions work on Windows and macOS workstations as well as Windows Server installations and can also protect Android and iOS devices. 

In our Kaspersky Endpoint Security Cloud (opens in new tab) review we’ve covered the default Cloud variant in this review, though we’ll point out how it differs from the Cloud Plus version. 


Both Kaspersky’s endpoint security solutions come with its file, web, and email threat protections to shield users from all kinds of malware (opens in new tab), phishing attacks, and other types of threats.

The platform will scan all files that are opened, saved, or run and will also scan all incoming and outgoing messages. It’ll also keep an eye on all inbound Internet traffic on the endpoints and will thwart remote network attacks and intrusions.

The solution also protects against ransomware (opens in new tab), on both Windows workstations and Windows servers. One of its best features is its remediation engine that will roll back any actions performed by malicious software to save you from crypto virus attacks. 

Kaspersky Endpoint Security Cloud 1

(Image credit: Kaspersky)

Kaspersky’s various security components monitor the activity of the apps on the endpoints in a bid to block any malicious actions. They rely on Behavior Stream Signatures (BSS) that contain sequences of actions performed by apps that are known to be dangerous. If the activity of an app on an endpoint matches any of the BSS, the agent on the endpoint will initiate the appropriate remedial action.

The product includes a vulnerability assessment component that’ll detect vulnerabilities on all endpoints that run Windows. It’ll hunt for vulnerabilities in the operating system as well as in the installed apps and will also list any available patches.

Like all good endpoint security solutions, Kaspersky too includes a software firewall (opens in new tab) as well to manage network activity and block potentially dangerous network connections.

Kaspersky Endpoint Security Cloud 2

(Image credit: Kaspersky )

One interesting feature of the solution, beyond security is the Cloud Discovery component, which allows you to monitor the use of cloud services (opens in new tab) on Windows endpoints. The component tracks the user’s attempts to access the cloud services both directly via web browsers or through desktop applications.

Like mentioned earlier, the platform will also protect mobile endpoints. Besides protecting a device from digital infections, it also offers other useful security features, most notably anti-theft protection. The feature will protect a device from unauthorized use, and if the device is lost or stolen, it can be locked remotely or wiped clean.

Kaspersky Endpoint Security Cloud 3

(Image credit: Kaspersky )

Interface and use

You can manage the Kaspersky endpoint security platform via its cloud-based interface. When you first sign into the administration wizard, you’ll be taken through a quick setup wizard to customize it for your company. You can enable and configure some features during initial setup or choose to do it later.

One of the good things about the interface is that the main landing page displays the steps you need to take, in order of their priority, to configure the platform. 

The platform offers multiple mechanisms for deploying the endpoints. The recommended procedure is to add users, which are the administrators for the different endpoints along with their email addresses (opens in new tab). The platform will then send an email to all of them with instructions to download and install the endpoint client on their respective machines. 

If you have an Active Directory server on the network, you can also ask the administration wizard to use it to deploy the client on multiple endpoints automatically. On servers though you can manually download and install the client from the administration wizard.

Kaspersky Endpoint Security Cloud 4

(Image credit: Kaspersky )

Once you’ve added the endpoints, you’ll need to assign them to a security profile. The platform has a default policy to help you get started, but you can easily create one as per your requirements.

The security profile contains the parameters for all supported operating systems. These are broadly classified into security settings and management settings. Under security settings you can choose to enable or disable the file, web, mail, network security protections as well as the firewall. You can also drill down and configure each one of them as per your needs. Under management settings, you can tweak the other features such as cloud discovery.

Surprisingly, during our tests we could enable and customize the device control, web control, and encryption (opens in new tab) management features from the interface, and they worked flawlessly. However as per Kaspersky’s website these features are only available in the Cloud Plus platform and should have been disabled just like Cloud Blocking and Patch Management (opens in new tab).

Kaspersky Endpoint Security Cloud 5

(Image credit: Kaspersky)

Plans and Pricing 

Unlike some of its peers, if you choose to use Kaspersky’s endpoint solution you’ll have to purchase a license for a minimum of 10 endpoints. 

Protecting 10 devices for 1 year will cost $322.50 or $32.25/device. As is usually the case, protecting more devices will reduce the cost per device. For instance, protecting 20 devices for 1 year will cost $547.50 or about $27/device. 

You’ll also find it cheaper to subscribe for a couple of years. A 2 year license for 10 devices costs $543.75, which comes to about $27/device/year. SImilarly, a 2 year license for 20 devices costs $922.50 or about $23/device/year.

The good thing about Kaspersky’s pricing is that it doesn’t charge you extra for protecting mobile devices. For every endpoint, you can secure two devices for free.

Final Verdict

While there isn’t anything inherently wrong with Kaspersky’s endpoint offering, most of the useful features are only available with the more expensive Plus edition. Worst still, you’ll get many of them with its peers, as part of the standard offering.

For instance, there’s device control, which is part of the standard package for many endpoint security products such as Bitdefender GravityZone Advanced Business Security (opens in new tab). Similarly, web control comes as a default with many solutions including Avast Business Antivirus Pro Plus (ABAPP) (opens in new tab), but isn’t available by default with Kaspersky’s endpoint platform.

Kaspersky’s endpoint platform also doesn’t offer the additional privacy apps (opens in new tab), such as a VPN (opens in new tab) or a sandbox environment that you get with ABAPP. 

All things considered, while the standard Kaspersky Endpoint Security Cloud offering is better than Avira Antivirus for Endpoint (opens in new tab) in terms of its protection coverage, it falls short of several others when it comes to the features it offers.

Mayank Sharma

With almost two decades of writing and reporting on Linux, Mayank Sharma would like everyone to think he’s TechRadar Pro’s expert on the topic. Of course, he’s just as interested in other computing topics, particularly cybersecurity, cloud, containers, and coding.