ManageEngine Endpoint Central

Features by Edition

Each edition includes everything in the one before it. ManageEngine's edition comparison lists more detail; these are the headline differences.

Professional

• Patch management
• Application distribution
• Asset management
• Remote troubleshooting
• BYOD management
• Kiosk mode

Enterprise

• Self-service portal
• USB device management
• Remote session auditing
• Licence management

UEM

• Remote data wipe
• OS deployment
• FileVault encryption

Security

• Vulnerability remediation
• Data loss prevention
• Endpoint privilege management
• Browser security

Add-ons

• EDR: Endpoint detection and response, for Endpoint Central Cloud.
• Malware Protection and Ransomware Protection: On-premises or Cloud.
• DEX Manager: Digital employee experience monitoring.
• Secure Private Access: Access to internal applications through identity and device verification, on-premises.
• OS Deployment: For Professional and Enterprise. If OS imaging is all you need, see OS Deployer for OS imaging and deployment.
• Additional technicians.

Supported platforms

Windows, macOS, Linux, iOS, iPadOS, Android, ChromeOS and tvOS, across desktops, laptops, servers, phones, tablets, rugged devices, TVs and IoT devices.

Endpoint Central EDR: The Detection-and-Response Add-On

Behavioural threat detection through the agent you're already running

Endpoint Central EDR is a paid add-on for Endpoint Central Cloud that layers endpoint detection and response onto your existing deployment. Because it extends the Endpoint Central agent your endpoints already have, you get behavioural threat detection, automated containment, and forensic investigation without deploying a second agent or standing up a separate console.

What EDR adds to Endpoint Central

• Continuous endpoint monitoring across processes, files, registry, memory, and network - with 30 days of activity history retained for investigation.
• Behavioural detection mapped to MITRE ATT&CK - alerts land in language your security team already speaks.
• Fileless attack and living-off-the-land technique detection for PowerShell, WMI, scheduled-task, and other legitimate-tool-abuse patterns.
• Ransomware detection using behavioural analytics that catch mass-encryption and pre-encryption indicators.
• AI-assisted alert triage via Zia to prioritize what actually needs human attention.
• Natural-language forensic querying - ask questions in plain English rather than write query syntax.
• Automated response - endpoint isolation, malicious process termination, and system rollback where the underlying platform supports it.
• Single-agent architecture - no second install, no reboot cycle for the module, no separate memory footprint.

How it's licensed and deployed

EDR is a paid add-on subscription; it's not bundled with any Endpoint Central edition (including Security Edition). It's currently a Cloud offering only. Endpoint OS coverage for the EDR module is Windows 8 through 11 on clients and Windows Server 2016 through 2025 on servers - macOS and Linux endpoints stay managed by the base Endpoint Central product but aren't in scope for EDR detections. Optrics quotes it per-endpoint in Canadian dollars alongside your existing Endpoint Central renewal.

View the vendor's EDR product page for the full capability rundown.

Endpoint Central Pricing in Canada

Endpoint Central is licensed per workstation and per server in four paid editions, on-premises or in the cloud, with a Free edition for up to 25 endpoints. As Canada's authorized ManageEngine partner since 2010, Optrics quotes in Canadian dollars at the daily RBC exchange rate, delivered on a Canadian invoice with local tax handling.

Editions

Add-ons

• EDR - endpoint detection and response, for Endpoint Central Cloud only. See the EDR tab.
• Malware Protection and Ransomware Protection - on-premises or Cloud.
• DEX Manager - digital employee experience monitoring.
• Secure Private Access - on-premises.
• OS Deployment - for Professional and Enterprise; included in UEM and Security.
• Additional technicians - each workstation slab includes one.

ManageEngine notes that DEX Manager and Malware Protection can also be bundled with Endpoint Central into one licence.

Licensing notes for Canadian buyers

• Workstations and servers: Workstation slabs run from 50 to 10,000 endpoints; server slabs from 10 to 5,000.
• Term: On-premises is an annual subscription, or a perpetual licence with annual maintenance at 20% of the invoice total. Cloud is billed monthly or annually.
• Standalone alternatives: If you need one capability rather than several, a standalone product such as Patch Manager Plus may cost less.
• MSPs: See Endpoint Central MSP.
• What Optrics includes in a Canadian quote: Edition, on-premises or Cloud, workstation, server and technician counts, add-ons, term, applicable Canadian taxes, and payment terms on a Canadian invoice.

Frequently Asked Questions

What is ManageEngine Endpoint Central?

Endpoint Central is ManageEngine's unified endpoint management and security platform. One console and one agent cover patch management, software deployment, asset management, remote troubleshooting, mobile device management and endpoint security across desktops, laptops, servers and mobile devices, on-premises or in the cloud.

What is Unified Endpoint Management (UEM)?

UEM is the practice of managing and securing every device an organization uses - Windows, Mac and Linux computers, servers, and iOS, Android and ChromeOS devices - from a single console, with a shared approach to patching, configuration, security and reporting. Endpoint Central is ManageEngine's UEM platform.

What are the four editions - Professional, Enterprise, UEM and Security?

Professional covers patch management, application distribution, asset management, remote troubleshooting, BYOD management and kiosk mode. Enterprise adds a self-service portal, USB device management, remote session auditing and licence management. UEM adds remote data wipe, OS deployment and FileVault encryption. Security adds vulnerability remediation, data loss prevention, endpoint privilege management and browser security. Each edition includes everything in the one before it.

Is there a free edition of Endpoint Central?

Yes. The Free edition covers up to 25 endpoints with a single technician, on-premises or in the Cloud. For more endpoints or technicians, the paid editions start at 50 workstations, and a 30-day free trial shows the full product.

How is Endpoint Central licensed in Canada?

Per workstation and per server. Workstation slabs run from 50 to 10,000 endpoints, each including one technician, and server slabs from 10 to 5,000, with additional technicians available. On-premises licences are an annual subscription or a perpetual licence with annual maintenance at 20% of the invoice total; the Cloud edition is billed monthly or annually. Optrics quotes and invoices in Canadian dollars at the daily RBC rate.

What is the difference between EDR and Endpoint Central Security?

The Security edition includes vulnerability remediation, data loss prevention, endpoint privilege management and browser security. EDR (endpoint detection and response) is a separate paid add-on, currently for Endpoint Central Cloud only, that adds continuous endpoint monitoring with 30 days of history, behavioural detection mapped to MITRE ATT&CK, AI-assisted investigation with Zia, and automated response such as isolating an endpoint. See the EDR tab on this page for details.

Should I buy Endpoint Central or a standalone product like Patch Manager Plus?

If you only need one capability - just patching, just mobile device management, just vulnerability management - a standalone product such as Patch Manager Plus, Mobile Device Manager Plus or Vulnerability Manager Plus may be the better fit. If you need several of these capabilities together, Endpoint Central brings them into one console and one agent. Optrics can quote either way.

What add-ons are available for Endpoint Central?

EDR (Cloud only), Malware Protection, Ransomware Protection, DEX Manager for digital employee experience, Secure Private Access (on-premises), OS Deployment for the Professional and Enterprise editions (UEM and Security include it), and additional technicians. ManageEngine notes that DEX Manager and Malware Protection can also be bundled with Endpoint Central into one licence.

What devices and operating systems does Endpoint Central support?

Windows, macOS, Linux, iOS, iPadOS, Android, ChromeOS and tvOS, across desktops, laptops, servers, phones, tablets, rugged devices, TVs and IoT devices. Patching covers Windows, Mac and Linux plus more than 1,100 third-party applications.

Documentation

Endpoint Central guides. For the current version, use ManageEngine's online resources. If you have any questions, please contact us.

• System Requirements (current, online) - ManageEngine
• Top 10 Reasons (2023) - PDF
• Anti-Ransomware FAQs (2024) - PDF

Top 5 Reasons to Choose ManageEngine Endpoint Central

Separate tools for patching, software, inventory, remote support and mobile devices leave gaps between them and more agents on every machine. Endpoint Central covers all of it from one console.

1. Patching That Covers Third-Party Apps

Automate patches for Windows, Mac and Linux and more than 1,100 third-party applications, the software attackers target as often as the operating system.

2. OS Imaging and Deployment

Image and deploy Windows with the right drivers and applications, included in UEM and Security and available as an add-on for Professional and Enterprise.

3. Software Deployment and Self-Service

Push applications across the network, and on Enterprise and above let users install approved software themselves from a self-service portal.

4. Remote Troubleshooting

Connect to users' machines to fix problems in real time, with session auditing on Enterprise and above.

5. Mobile Device Management

Manage corporate and personal mobile devices, with BYOD and kiosk mode from Professional and remote wipe from UEM.