Product and packaging moves are the clearest signal of how endpoint-security vendors intend to win in the AI era. This tactic covers new product launches, module additions, tier restructuring, and delivery model shifts that change what customers buy and how they buy it. For product, marketing, and sales teams, these moves reveal competitive gaps, pricing pressure, and the features that will define the next sales cycle. Across the 19 companies tracked, the pace of packaging innovation is accelerating, with AI security, agentic capabilities, and MSP-friendly tiers dominating recent announcements.
Why it matters now: buyers are consolidating tools and demanding measurable outcomes, while vendors race to embed AI without alienating existing customers. Packaging decisions directly affect win rates, expansion revenue, and channel loyalty. Understanding these moves helps teams anticipate competitor positioning and refine their own roadmaps and go-to-market messages.
19
Product & Packaging Moves (companies, 90d)
IndustryLens
AI security becomes a packaged module, not a bolt-on: WithSecure launched Elements AI Security, ESET added an AI Security Module and renamed its AI Advisor to ESET LiveAI, and Heimdal announced an AI Control Module with early access. Bitdefender introduced AI Guardian, a free macOS beta for securing AI agents, while CrowdStrike launched an AI Kill Switch in Falcon Guardian. These moves show vendors treating AI security as a distinct, sellable capability rather than a feature buried in existing suites. The driver is customer demand for visibility and control over AI usage, plus a desire to create new upsell paths. Expect more vendors to follow with dedicated AI security SKUs, making it essential for sales teams to articulate AI risk in business terms.
Tiered packaging and modular portfolios simplify the buying decision: ESET launched a new PROTECT portfolio with Core, Premium, and Ultimate tiers, Sophos introduced CISO Advantage for organizations without a CISO, and Barracuda rolled out tiered support plans (Core, Plus, Pro). Kaspersky added an Advanced tier to its Automated Security Awareness Platform. This pattern reflects a shift toward packaging that meets customers at different maturity levels and budgets, reducing friction in the sales process. It also allows vendors to upsell advanced features without forcing a full platform migration. For product marketers, clear tier differentiation and value-based messaging become critical to avoid channel conflict and customer confusion.
Agentic and AI-assisted operations move from roadmap to release: Huntress announced an agentic platform wave with adversary infrastructure and lookback, SentinelOne unveiled Singularity ASOC and agentic detection and response, and ConnectWise made agentic RMM and voice, teams, and email agents generally available. N-able embedded an AI assistant (N-zo) in its platforms and launched AI-accelerated vulnerability and patch management. These releases signal that agentic automation is now a competitive battleground, promising to reduce analyst workload and speed response. The implication is that vendors must demonstrate tangible efficiency gains, not just AI branding, and sales teams should prepare ROI stories around headcount and mean time to respond.
MSP-focused packaging and free tools drive adoption and expansion: Barracuda launched an AI Data Security solution for MSPs and SMBs, Bitdefender introduced a Managed Subscription Platform for MSP orchestration, and Heimdal released an MSP Onboarding Wizard to automate customer setup. Trend Micro released a free PHP2Shell Exposure Checker, and Malwarebytes launched a free Scam Link Check. These moves show vendors using free tools and MSP-specific packaging to lower entry barriers and create upsell opportunities. For channel-focused sales teams, this means aligning with MSP business models and leveraging free tools as lead generators. Product teams should prioritize integration and automation that reduce MSP operational overhead.
What this means for security product, marketing and sales teams at endpoint-security vendors: Packaging is no longer just about features and price; it is about creating clear pathways for adoption, expansion, and differentiation in an AI-saturated market. Product teams must design modular, tiered offerings that address AI security and agentic operations without overwhelming buyers. Marketing and sales should lead with outcome-based messaging, leverage free tools as entry points, and equip channel partners with MSP-friendly packaging and support options to win in the midmarket and SMB segments.
Notable moves
- HuntressHuntress Announces Agentic Platform Wave With Adversary Infrastructure, Lookback
- SophosSophos Ships Firewall v23, New XGS 1U Appliances and Standalone NDR
- CrowdStrikeCrowdStrike Launches AI Kill Switch in Falcon Guardian
- SentinelOneSentinelOne Unveils Singularity ASOC and Agentic Detection and Response at OneCon
- ESETESET Launches New ESET PROTECT Portfolio With Core, Premium and Ultimate Tiers
- WithSecureWithSecure Launches Elements AI Security
- BarracudaBarracuda Introduces Tiered Support Plans: Core, Plus, Pro
- BitdefenderBitdefender Introduces AI Guardian, a Free macOS Beta for Securing AI Agents
- ConnectWiseConnectWise Makes Agentic RMM and Voice, Teams, Email Agents Generally Available
- N-ableN-able Launches AI-Accelerated Vulnerability and Patch Management in UEM
- Heimdal SecurityHeimdal Announces AI Control Module, Opens Early Access
- Trend MicroTrendAI Releases Free PHP2Shell Exposure Checker
All 51 tracked moves
Huntress
- Huntress Announces Agentic Platform Wave With Adversary Infrastructure, Lookback
- Huntress Begins Monitoring Service Principal Sign-In Logs Fleet-Wide
- Huntress launches iOS Mobile Application for Managed Security Platform Administrators
Sophos
- Sophos Ships Firewall v23, New XGS 1U Appliances and Standalone NDR
- Sophos Launches CISO Advantage for Organizations Without a CISO
- Sophos Opens Firewall v23 Early Access With 30+ Requested Features
CrowdStrike
- CrowdStrike Launches AI Kill Switch in Falcon Guardian
- CrowdStrike Introduces Falcon Platform Fall '26 Release and SafeMind AI
- CrowdStrike Makes Falcon Data Security for SaaS Generally Available
- CrowdStrike ships customized NVIDIA Nemotron 3.5 Lightning for Agentic SOC Workflows
Cynet
- Cynet Adds AI Security and Identity Security Capabilities in Beta
ConnectWise
- ConnectWise Makes Agentic RMM and Voice, Teams, Email Agents Generally Available
ESET
- ESET Details NeoCortex Cybersecurity World Model Inside LiveCortex
- ESET Adds AI Security Module, Renames AI Advisor to ESET LiveAI
- ESET Launches New ESET PROTECT Portfolio With Core, Premium and Ultimate Tiers
Trend Micro
- TrendAI Releases Free PHP2Shell Exposure Checker
- Trend Micro Opens Closed Preview of Autonomous Vulnerability Discovery
- Trend Micro Ships TrendLife Kaleida AI Service for Family Cybersecurity
SentinelOne
- SentinelOne Unveils Singularity ASOC and Agentic Detection and Response at OneCon
- SentinelOne adds Hyperautomation Snippets and LLM actions for August release
- SentinelOne releases Wayfinder Threat Hunting for Identity and previews MDR Workflows
See how IndustryLens stacks up, free
IndustryLens is a competitive intelligence platform built for B2B SaaS, covering pricing pages, changelogs, ads, reviews, social, Reddit, hiring and news, in one weekly cited briefing. Published pricing.
