In short
WatchGuard Endpoint Security 360 is the current name for WatchGuard EPDR, which was originally sold as Panda Adaptive Defense 360. It combines AI-based malware and ransomware prevention with detection and response, then adds the Zero-Trust Application Service, which blocks unknown applications by default, and lateral movement containment. It is licensed per endpoint.
Get a quote for WatchGuard Endpoint Security 360
Tell us roughly how many users or sites you have and we will reply by email with options and a quote.
From Panda Adaptive Defense 360 to Endpoint Security 360
The product has had three names, which is why searches for each are still common:
| Name | When you will see it |
|---|---|
| Panda Adaptive Defense 360 | The original Panda Security product. Older licences, documentation and many search results still use it |
| WatchGuard EPDR | The name after WatchGuard acquired Panda Security: endpoint protection, detection and response |
| WatchGuard Endpoint Security 360 | The current name since WatchGuard reorganised its endpoint range in April 2026 |
Panda's old Adaptive Defense 360 web page now redirects to WatchGuard Endpoint Security. The technology lineage is continuous: existing agents and policies carry on working through each rename, and the new name shows in WatchGuard Cloud and on your next renewal. For the full range of editions, including Basic, Prime and Elite, see WatchGuard Endpoint Security editions.
Not sure which licence fits? Ask us
Tell us what you need and we will recommend the right licence for your organisation, with a quote.
What Endpoint Security 360 includes
Endpoint Security 360 sits third of WatchGuard's four editions, so it includes everything in Basic and Prime:
- Prevention: attack surface reduction, AI-powered malware and ransomware protection and behavioural threat detection, with automatic blocking and clean-up.
- Detection and response: anti-exploit detections, endpoint isolation and response, MITRE ATT&CK-mapped alerts with root cause analysis, and remediation through ThreatSync, WatchGuard's XDR layer.
- MDR compatibility: 360 works with WatchGuard's Core MDR service, which WatchGuard runs and licenses as a module.
On top of that, 360 adds two things that define it:
- Zero-Trust Application Service: WatchGuard describes 360 as blocking untrusted applications by default and enforcing strict execution policies automatically, while continuously monitoring trusted applications for signs of compromise. WatchGuard says AI does most of the classification work, with its own experts behind it.
- Lateral movement detection and containment: stops threats spreading from one endpoint to others across the network, limiting the impact of a compromised device.
WatchGuard also highlights detailed endpoint activity logs for investigations and a low alert volume, which matters if you do not have someone watching a console all day.
Why deny-by-default matters for ransomware
Most antivirus works by deciding whether something looks bad. A deny-by-default approach flips that: an unknown program does not run until it has been classified as safe. For a small business, the practical benefit is that a brand-new piece of ransomware, or an attacker's tool that has not been seen before, has a much harder time getting started.
The trade-off is that legitimate but unusual software, such as a niche line-of-business application or an in-house tool, may need to be classified or allowed before it runs. That is why we plan a 360 roll-out in stages: start with a pilot group, review what would have been blocked, then widen and tighten the policy.
Application control is one layer among several. Our guide to ransomware protection for business explains how it fits with backup, recovery and staff awareness.
Is WatchGuard Endpoint Security 360 the right fit for you?
We will check it against your systems and requirements and recommend the right option.
360 vs Prime vs Elite
The question most people ask at renewal is whether to stay on 360, step down to Prime or move up to Elite.
| Capability | Prime | 360 | Elite |
|---|---|---|---|
| Malware and ransomware prevention, behavioural detection | Yes | Yes | Yes |
| Anti-exploit, isolation and response, root cause analysis | Yes | Yes | Yes |
| ThreatSync XDR remediations and MDR compatibility | Yes | Yes | Yes |
| Zero-Trust Application Service (deny by default) | - | Yes | Yes |
| Lateral movement detection and containment | - | Yes | Yes |
| Advanced investigation tools: timelines, process trees, lateral movement maps | - | - | Yes |
| Natural-language searching of telemetry | - | - | Yes |
| Granular policy controls and remote shell access | - | - | Yes |
Prime suits organisations that want detection and response without deny-by-default application control. 360 suits those who want deny-by-default prevention with low day-to-day effort. Elite, formerly Advanced EPDR, suits security teams and providers who investigate incidents in depth and want extended data retention. WatchGuard also lists Elite's GenAI investigation assistant for querying telemetry in plain language.
Renewing Panda Adaptive Defense 360 or WatchGuard EPDR
If your renewal paperwork uses an older name, this is how it maps:
| On your renewal | Current equivalent |
|---|---|
| Panda Adaptive Defense 360 | WatchGuard Endpoint Security 360 |
| WatchGuard EPDR | WatchGuard Endpoint Security 360 |
| WatchGuard Advanced EPDR | WatchGuard Endpoint Security Elite |
| WatchGuard EPP | WatchGuard Endpoint Security Basic |
A renewal is also a good moment to check whether the edition still fits. Some organisations on EPDR have no one acting on detections and would get more from adding WatchGuard's Core MDR module; others find Prime covers what they use. Modules such as Patch Management, Full Encryption and Advanced Reporting Tool carry on as add-ons. We confirm the like-for-like renewal and any alternatives at quote.
Platforms and licensing
Endpoint Security 360 uses the same WatchGuard agent as the other editions: Windows, macOS (Intel and Apple silicon) and Linux workstations and servers, with Android and iOS device protection. Not every feature is available on every platform, so we check your estate against WatchGuard's current support list.
It is licensed per endpoint, on a term licence or a monthly subscription, and managed in WatchGuard Cloud. WatchGuard requires extra server licences if servers make up more than a tenth of your endpoints. A WatchGuard Cloud account for one organisation holds one edition at a time. For a quote, ask us; see also WatchGuard Endpoint Security licensing on our licensing site.
How we help
We can map your Panda or EPDR renewal to the current edition, recommend whether 360, Prime or Elite fits how you work, plan the Zero-Trust Application Service roll-out so legitimate software keeps running, and handle licences and renewals on your Forever Systems account. If you would rather someone else watched detections, WatchGuard's Core MDR is a vendor-run option, and our managed antivirus page explains what we can take on; scope is confirmed at quote.
Contact us with your current licence details and renewal date.
How Forever Systems helps with endpoint protection
We are an independent UK IT and cyber security provider. We supply business antivirus and endpoint protection from several vendors, so we can recommend what fits your devices, your team and your budget rather than pushing one product.
- Review what you have: we look at your current antivirus, your Microsoft licences and the devices you need to cover before suggesting anything new
- Compare the options: next-generation antivirus, EDR and managed services from vendors including CrowdStrike, SentinelOne, ThreatDown, Bitdefender, Trend Micro, Sophos, Check Point, WatchGuard and Acronis
- Licensing and quotes: the right edition and licence count for your Windows, Mac, Linux, server and mobile devices, with pricing confirmed at quote
- Deployment and migration: we can help roll out agents, set policies and remove the old product cleanly
- Support after go-live: help with policy tuning, alerts and renewals, with the scope agreed at quote
We can also help with the rest of your security, from endpoint security and EDR to Cyber Essentials and security awareness training.
Frequently asked questions
What is WatchGuard EPDR called now?
WatchGuard EPDR is now WatchGuard Endpoint Security 360, following WatchGuard's April 2026 renaming. Advanced EPDR is now Endpoint Security Elite and EPP is now Endpoint Security Basic. Existing agents carry on working.
Is Panda Adaptive Defense 360 still available?
The product continues as WatchGuard Endpoint Security 360. Panda Adaptive Defense 360 became WatchGuard EPDR after WatchGuard acquired Panda Security, and Panda's old product page now redirects to WatchGuard Endpoint Security.
What is WatchGuard EPDR?
EPDR stands for endpoint protection, detection and response. It combined next-generation prevention with detection and response and the Zero-Trust Application Service in one agent. It is now sold as WatchGuard Endpoint Security 360.
What does Endpoint Security 360 add over Prime?
The Zero-Trust Application Service, which blocks applications by default until they are classified as safe and monitors trusted applications for compromise, plus lateral movement detection and containment.
What is the difference between Endpoint Security 360 and Elite?
Elite, formerly Advanced EPDR, adds advanced investigation tools: correlated attack timelines, process trees, lateral movement maps, natural-language searching of telemetry, granular policy controls and remote shell access to affected endpoints.
Does Endpoint Security 360 include MDR?
No. 360 is compatible with WatchGuard's Core MDR service, which is licensed as a separate module per endpoint and run by WatchGuard. We confirm the options at quote.
Still have a question about WatchGuard Endpoint Security 360?
Ask us and a member of our team will reply by email.
More endpoint protection guides
WatchGuardWatchGuard Endpoint Security Basic, Prime, 360 and Elite compared, with the old EPP and EPDR names and modules.EPP vs EDRThe difference between endpoint protection (EPP) and EDR, which products bundle both, and when EPP alone is reasonable.Ransomware protectionHow endpoint protection, dedicated anti-ransomware, backup and agent resilience fit together against ransomware.Managed antivirusAntivirus deployed, configured and kept in order for you, with vendor-run MDR options.Vendors comparedThe endpoint protection vendors we supply compared on platforms, licence unit, EDR upgrade path and managed options.