Kaspersky Endpoint Security for Business vs Open Source Tripwire

Kaspersky Endpoint Security for Business provides endpoint protection for small and medium-sized businesses. Its threat protection uses machine learning and threat intelligence against fileless threats, exploits and rootkits. Controls include endpoint protection, anti-ransomware, application, web and device controls, vulnerability and patch management, and encryption. Kaspersky Security Center offers MMC, web and cloud consoles for configuring, deploying, updating and managing security. Organizations can deploy the product in cloud, on-premise, hybrid or air-gapped environments; supported systems include Windows, Windows Server, Linux, macOS, Android and iOS. Windows protection includes AES-256 encryption, BitLocker management, and encryption identified as FIPS 140-2 and Common Criteria EAL2+ certified. Security Center can manage up to 100,000 physical, virtual and cloud-based endpoints through one server installation. Pricing is on request, and Kaspersky business products are sold through partners. Kaspersky states that Endpoint Security for Business Select has evolved into Kaspersky Next EDR Foundations and related Next solutions.

Open Source Tripwire is free file and directory integrity-monitoring software for Linux, macOS, BSD variants, Solaris, AIX, HP-UX, Minix, Haiku, GNU/Hurd, and Cygwin. It compares the current filesystem with a known baseline and reports differences. A policy file defines monitored paths and checked attributes such as hashes, permissions, and ownership. Policy, configuration, and database files are signed by default, while reports may also be signed. Email reports are available when enabled in configuration. The project suggests scheduling periodic checks with cron, but its install script does not create those jobs. RPM, Debian, and make-based installation use a setup script for initial keys and policy creation. It runs on the user’s own system rather than as a managed service. Windows builds through Cygwin lack Registry monitoring and Windows-specific file attributes. The software uses GNU GPL version 2 or any later version. Separate commercial Tripwire products are also offered.