Personally, I went for Fuse because of Mosyle Auth and I don’t think I would want to shell out much for the compliance&security. Mosyle Fuse with the compliance and security aspects seems a bit for the dashboard and a good conscience. Some of the big ones like Crowdstrike have a lot of experience from the Windows world, but I sometimes doubt their ability to deliver on-par software on Macs. I’m also confident Protect will always work on day 1 of a new OS release. IMO Protect is a good solution for people that know or want to get to know how security on Macs actually works. Protect in turn was developed from scratch for Macs using on-board tools.

Protect seems like a great solution but it’s different from Mosyle Fuse or even full AV solutions like Crowdstrike or Sentinel One: These often employ custom tools that were adapted from the Windows world and sometimes some of these companies did a lousy job adapting to new macOS/frameworks (e.g when they kinda just ignored the demise of KEXTs and the upcoming of the new network and security frameworks). Regarding Jamf Protect: From what I have read and seen in presentations (both from Jamf but also Patrick Wardle who worked for them and helped developing Protect), Jamf Protect uses mostly native tools and frameworks that macOS provides to find threats - also unknown threats. Some rules seem to be to please managers only tbh. Regarding the compliance: Some rules certainly make sense but you can easily enforce them manually in Mosyle. ClamAV is alright and you can certainly detect some malware, but I wouldn’t bet on finding unknown threats this way.

Tbh I think it’s a bit glorified Year 2000 technology. AFAIK Mosyle Fuse (which we are using) is using a) rulesets with pre-configured (e.g CIS) or custom rules to assess compliance, b) ClamAV to scan for threats on the endpoints/Macs. The most powerful & intuitive all-purpose Endpoint Manager in its class, Comodo Advanced Endpoint Protection 3.0 manages not only the security of your workstations, laptops and netbooks through Comodo Internet Security but now also manages their system status.

Endpoint protection for mac 2.3