Understanding the Malwarebytes endpoint agents

Document created by rsullinger Employee on Jun 29, 2017Last modified by rsullinger Employee on Oct 19, 2017
Version 3Show Document
  • View in full screen mode

Malwarebytes protection is delivered to you as an install-able agent. Each agent serves a different purpose, and must be configured to provide proper functionality.


Available agents include:


  • Incident Response provides scheduled scanning of your endpoint based on specifications which you provide, as well as on-demand scanning of areas where a majority of malware is hidden. If a threat is detected, it is quarantined for later remediation. Asset management is also included in this product.


  • Endpoint Protection provides all of the functionality that Incident Response offers, and couples that with real-time protection against several types of threats (malware, exploits, ransomware, and malicious web controls). 


If you are an Endpoint Protection subscriber, you must remember the following:

  • Turning on Endpoint Protection will automatically turn Incident Response off.
  • Turning off Endpoint Protection followed by turning Incident Response on may require a reboot of affected endpoints.