Endpoint Detection and Response, or EDR, is a security automation technology that protects enterprise workstations or endpoints against unauthorized access and use. The technology involves two key phases—a detection phase whose goal is to detect unusual, irregular, or prohibited access or activity, and a response phase in which appropriate actions are immediately taken to secure the workstation or endpoint once a threat has been detected.