Report

Comparison of Tanium Core and 1E Tachyon

The Difference a Future Proof EDR Architecture Makes

Enterprise Management Associates (EMA) published the findings of their evaluation of two of the leading endpoint detection and response (EDR) platforms currently available: Tanium and 1E Tachyon.

Future proof architecture delivers Speed and Scalability

While Tanium enjoys broad recognition for its approach to endpoint communication using peer-to-peer (P2P) networking, it’s important to keep in mind that Tanium’s development predates the mobile revolution. This is why Tanium’s architecture is best suited for static environments supporting non-moving PCs on dedicated LANs.

Recognizing today’s more dynamic end user computing environments, 1E architected its Tachyon solution to provide high-speed responses that are also much faster than traditional approaches to endpoint monitoring but without the need for linking endpoints in unmovable chains.

–EMA research paper: Adopting Effective Solutions in Endpoint Detection and Response (June 2018)

According to the EMA report, Tachyon’s underlying architecture offers a lower friction approach, delivering faster overall performance than what is possible by negotiating through a Tanium P2P chain. This means that more enterprise devices can be supported regardless of location, but also enables support for portable endpoints such as laptops, tablets, smartphones, and IoT devices that would otherwise have to be managed separately. If your organization needs to manage a mixture of remote/mobile and static devices, and do it fast, Tachyon provides a modern architecture for simplifying the job, cost effectively.

TaniumTachyon
Scalability
Maximum number of supported endpoints per implementation400,0001,500,000
Server Hardware Cost (supporting 50000 endpoints)-$17600-$5400
Server-Client Connectivity
Connection ArchitecturePeer to PeerOne to one
Mobile & Other Devices
Android
Application Programming Interface (APIs)
Representational State Transfer (REST) API

Extensibility to support the way modern business works

Tachyon was also designed to provide greater extensibility than Tanium. This is particularly evident in the platform’s orchestration capabilities that enables process automation of resources beyond just basic shell scripts. Additionally, Tachyon’s REST API and broader points of integration provide easier and more reliable connections to third-party management solutions.

Design Excellence for Tachyon – Report Key Findings

  • Modern Architecture: Tanium’s architecture predates the mobile revolution.
  • Support for mobile working: Tanium’s architecture is only ideally suited for static environments supporting non-moving PCs on dedicated LANs.
  • Faster Response Speed: Tachyon offers a lower friction approach with faster performance than what is possible with Tanium’s peer-to-peer chain.
  • Lower resource impact on endpoint: Tanium’s approach sequentially executes scripts locally on each endpoint, adding to network and CPU load.
  • Extensibility beyond scripting: Tachyon’s process automation goes beyond Tanium’s support for just basic shell scripts (using SCALE).
  • Broader Integration: Tachyon’s REST API provide easier, more reliable connections to third-party management solutions.

While both Tanium and Tachyon can be extended for multiple use cases, Tachyon is significantly faster and cheaper to operate at scale thanks to its innovative modern architecture. Tachyon works well with remote endpoints outside your office network and is easier to interoperate with, thanks to the RESTful API approach. As such, it is, in our opinion, the better EDR tool choice in the areas that really matter to modern business (scalability, performance, cost) looking for a future proof EDR solution.

Fill in the form to download the report

Share this post

Share this post on your favourite social media platform.

Find this resource useful?

If so please click here

Related Content

On-demand Webinar

Improving the Incident Response Function: SANS 2018 Incident Response Survey Results Part 2

Incident responders are catching and remediating threats faster than ever, according to past SANS surveys. Much of their success can be attributed to improving technologies, such as threat intelligence--73 percent of respondents to last year's survey said they were using…

On-demand Webinar

How Are You Responding to Threats: SANS 2018 Incident Response Survey Results Part 1

What new and continuing threats are responders uncovering in investigations, and how are they dealing with those threats? This webcast will release results from the SANS 2018 Incident Response Survey, developed by Matt Bromiley, SANS Digital Forensics and Incident Response…

Case Study

Uncle SAM: How AppClarity saved the US taxpayer millions at a leading federal agency

This US federal agency lacked the insight into their software estate required to manage their licenses. AppClarity was the answer to their troubles.

Case Study

Tachyon & ServiceNow: Driving full IT automation (with Nathan Dornbrook, ECS Security)

ServiceNow is an incredible orchestration and automation tool, while Tachyon enables users to execute almost any process on any endpoint. The integration of the two, therefore, is extremely powerful.

About 1E

Cyber security is critical. One breach could destroy your organization’s reputation and cost millions of dollars. We take that threat seriously. 1E gives you unprecedented control and visibility over your full digital estate, delivered at speed and at scale. We’re working towards a world of proactive cyber security, a world where CIOs and CISOs work together to ensure that no threat can bring down their systems.