Panda Security

Panda today: part of WatchGuard, the same endpoint protection

Panda Security has been part of the WatchGuard group since 2020: the behavioural detection technology we use to protect email and workstations is now marketed under the WatchGuard EPDR and Panda Adaptive Defense brands, depending on the channel. For the businesses we support, little changes in substance: the management console stays centralised in the cloud, with no dedicated server to maintain on-site, and protection covers both email attachments and links and the behaviour of every running process on each device.

We deploy Panda as a second analysis engine on top of the native protections already in your infrastructure, especially Microsoft 365: where Microsoft's spam filter classifies a message as safe, Panda applies an additional check on attachments, links and anomalous behaviour, cutting down the false negatives a single layer of protection can let through.

• Behavioural detection on every running process, not just antivirus signatures
• Centralised cloud management console, no dedicated on-site server
• Protection for business email attachments and links
• A second layer of control on top of Microsoft 365's native protection

When to add it, and when native protection is enough

Adding Panda makes sense when a business handles sensitive data or faces stricter security obligations from clients or suppliers, when it needs a single console to monitor every device, or when native email protection isn't enough for the level of risk the business runs. We often propose it to companies that need to demonstrate a documented level of protection to their own clients or partners, not just a declared one.

If a business has very few devices and limited risk exposure, Microsoft 365's native protection combined with proper access policies can be enough, at least as a first step: we work this out together during the initial analysis, without proposing a level of protection the business wouldn't actually use.

How we work: rollout, testing and alert management

We deploy the Panda agent across every business device, from PCs to servers, and configure detection policies around the type of business activity, to cut false positives on management software already in use. The initial testing phase includes an observation period where we confirm protection doesn't block legitimate processes before switching on automatic blocking in production.

After activation we keep an eye on the centralised management console to catch alerts and act on them, instead of leaving the platform generating notifications nobody checks. Ongoing maintenance also includes periodically checking that policies stay aligned with how the business actually uses its devices, which changes over time.

Updates, licensing and integration with the rest of your security

Panda licences renew periodically alongside the number of devices covered: we monitor and adjust them as the business grows or shrinks its device fleet, avoiding both uncovered devices and unused licences. Detection engine updates happen automatically in the cloud, with no manual work on individual devices.

Panda protects email and workstations, but it doesn't replace a perimeter firewall or a backup strategy: we integrate it into the overall security project alongside WatchGuard or pfSense on the perimeter and an independent data backup, so each layer covers a different risk instead of overlapping the others.