1. Executive Summary Symantec, now operating under Broadcom’s Enterprise Security Group, has transitioned its flagship endpoint protection platform (Symantec Endpoint Security, or SES) into a broader XDR offering. Unlike cloud-native XDRs (e.g., CrowdStrike, Microsoft), Symantec’s XDR leverages a hybrid architecture and deep heritage in endpoint, network, and email security. Its strengths lie in enterprise-scale telemetry ingestion , cross-product correlation (especially with its own DLP and Web Security Service), and mature deception technology . However, criticisms include slower feature velocity post-acquisition, complex licensing , and less seamless third-party integration compared to open XDR platforms.


