ManageEngine Ransomware Protection Plus detects ransomware, isolates affected endpoints, and supports restoring them to a pre-attack state. Its behavioural detection examines process and file activity for unusual changes, while edge-based detection is designed to protect endpoints in low- or no-network conditions without regular definition updates. For investigation, it can map attack lifecycles, provide root cause analysis and MITRE ATT&CK mapping, and identify indicators of compromise. Real-time device isolation can quarantine an infected endpoint. Recovery uses Microsoft VSS to create endpoint file copies every three hours, with rollback available. The product supports Windows and hybrid deployment and can coexist with an existing security stack. The free edition supports up to 25 endpoints. Enterprise Edition is 6.99 USD per year per endpoint and supports unlimited endpoints. A free 30-day trial includes all features, with cloud and on-premises download options. Deployments above 35,000 computers require contacting support about a customized server setup.
Who it is for
It suits organizations seeking Windows endpoint ransomware detection, containment, investigation, and recovery. The free edition is sized for up to 25 endpoints; larger deployments may need a customized server setup.
What is good
- Detects unusual process and file behaviour
- Supports offline edge-based detection
- Isolates infected endpoints in real time
- Creates endpoint file copies every three hours
- Offers a free 30-day trial
What to know first
- Free edition limited to 25 endpoints
- Windows operating system coverage
- Deployments above 35,000 computers require support contact
Verdict
The product combines behavioural detection, endpoint isolation, forensic tools, and rollback features. Compare the endpoint limits and deployment options with your needs, especially for installations above 35,000 computers.
ManageEngine Ransomware Protection Plus plans and pricing
All plansCompared on ransomware protection software
- Free plan
- Yes
- Rollback or recovery
- Yes
- Behavioral detection
- Yes
- Automatic isolation
- Yes
- Immutable recovery copy
- Yes
- Deployment
- hybrid
- Operating system coverage
- windows
