# Do I need NDR if I already have EDR?

Often yes, because EDR and NDR fail in different places. EDR (endpoint detection and response) only sees machines where its agent runs and is healthy. It does not see printers, cameras, phones on the Wi-Fi, building systems, machines or a contractor's laptop, and attackers often switch it off first on the machine they take over. NDR (network detection and response) watches the traffic between devices, so it still sees a compromised host calling an outside server, scanning the network or copying data out, whatever happens to its endpoint agent. If your company is a handful of laptops with everything in the cloud, EDR and good backups may be enough for now. If you have a local network with servers and devices you cannot install anything on, NDR fills the gap. NetSenX raises beaconing, scanning, lateral movement and unusual outbound volume on every plan, Free included, so you can see what it adds on your own network before paying.

FAQ: [NDR, EDR, SIEM, XDR, MDR](https://netsenx.com/en/faq/tools) · https://netsenx.com/en/faq/do-i-need-ndr-if-i-already-have-edr

## Read next

- https://netsenx.com/en/what-is-ndr
- https://netsenx.com/en/blog/2026-09-24_ndr-vs-edr-vs-siem

## Related questions

- [EDR or NDR: which should a small company buy first?](https://netsenx.com/en/faq/edr-or-ndr-which-should-a-small-company-buy-first)
- [Is antivirus enough for a small business?](https://netsenx.com/en/faq/is-antivirus-enough-for-a-small-business)
- [What does network detection catch that antivirus misses?](https://netsenx.com/en/faq/what-does-network-detection-catch-that-antivirus-misses)
- [What gaps does EDR leave that only the network shows?](https://netsenx.com/en/faq/what-does-the-network-show-that-edr-misses)
- [What happens if attackers disable our EDR?](https://netsenx.com/en/faq/what-happens-if-attackers-disable-our-edr)