ThreatLocker is listed under EDR and XDR by ThreatLocker. The 12 alternatives below are listed in the same category and are compared on starting price, features and reviews from other MSPs.
Updated .
Blackpoint Cyber Channel-only MDR with an autonomous 24/7 SOC and its own CompassOne platform. 
CrowdStrike Falcon Cloud-native EDR with behavioral detection, threat hunting and managed response via OverWatch. ThreatLocker vs CrowdStrike Falcon
Sophos Endpoint AI-powered EDR with behavioural detection and ransomware rollback on Windows, macOS and Linux. 
Microsoft Defender for Business Endpoint security for small businesses, from $3 per user per month or included in Microsoft 365. ThreatLocker vs Microsoft Defender for Business Microsoft Defender for Endpoint Enterprise EDR bundled with Microsoft 365 E5, with multi-tenant management for MSPs via Lighthouse. ThreatLocker vs Microsoft Defender for Endpoint
SentinelOne Autonomous endpoint detection and response with one-click rollback, per-endpoint annual pricing. ThreatLocker vs SentinelOne
Trend Vision One Endpoint Security Endpoint protection with EDR, XDR and threat hunting under credit-based licensing. 
FortiEDR Endpoint detection and response integrated with the Fortinet Security Fabric, quote-only pricing. 
Coro A consolidated SMB and MSP cybersecurity platform sold via partners on quote-only, per-user pricing. 
Bitdefender GravityZone Unified EDR, XDR and MDR in one cloud console with consumption-based MSP pricing. 
Acronis Cyber Protect Cloud Backup, disaster recovery, and security in one multi-tenant cloud platform priced by commitment tier. 
ESET PROTECT Prevention-focused endpoint detection and response with cloud or on-premises deployment. | Feature | ThreatLocker | Blackpoint Cyber | CrowdStrike Falcon | Sophos Endpoint | Microsoft Defender for Business | Microsoft Defender for Endpoint | SentinelOne |
|---|---|---|---|---|---|---|---|
| Behavioural detection | no | unknown | yes | yes | yes | yes | yes |
| Automated remediation | yes | yes | yes | yes | yes | yes | yes |
| Rollback to pre-attack state | no | unknown | unknown | yes | unknown | unknown | yes |
| USB and device control | yes | unknown | yes | yes | yes | yes | yes |
| Application allow-listing | yes | yes | yes | yes | yes | yes | yes |
| Offline protection | unknown | unknown | unknown | yes | no | unknown | yes |
| Threat hunting console | unknown | unknown | yes | no | no | yes | yes |
| Managed MDR add-on | yes | yes | yes | yes | no | no | yes |
| SIEM and SOAR integration | unknown | unknown | yes | unknown | yes | yes | yes |
| RMM integration | yes | unknown | yes | yes | no | yes | yes |
| macOS support | yes | yes | yes | yes | yes | yes | yes |
| Linux support | unknown | no | yes | yes | no | yes | yes |
Blackpoint Cyber, which matches 4 of the 6 features ThreatLocker supports.
