LICENSEWARE
Qualys Metric

EDR endpoint

Catalog row in Vendor License Metrics · Cited

Unit
Endpoint
Aliases
Active EDR agent
Definition
Asset Definition and QLU Calculation (EDR): "QLU usage for Endpoint Detection & Response (EDR) is based on the total number of unique endpoints on which the EDR agent is installed and active."
Counting rules
Only endpoints with an active EDR agent count. Inactive or decommissioned endpoints stop counting only when the EDR agent is removed or the endpoint is de-registered. 15-day intervals, peak count recorded.
Floors / minimums
Example ratio 2.85:1 is illustrative.
Applies to products
  • Multi-Vector EDR
Related metrics
Esc