Questions? We've got answers

How does Stairwell differ from my EDR? Does it offer endpoint protection?

Stairwell is a complement – not a replacement – to your endpoint detection and response (EDR) tool. EDR is built to stop threats as they come in, but it can only catch what it knows.

Stairwell treats every file – good or bad – the same, giving you a look at everything that is or was on your endpoint. It’s constantly enriching your environment with new intel, finding malware that snuck past your EDR because it didn’t know to look for it at the time.

Read more about Stairwell vs. EDR.

Does Stairwell provide malware protection or stop breaches?

Stairwell is one part of your malware prevention strategy, powering your prevention controls. It generates threat intelligence to show you where malware got past your security controls and how long it’s been there (or how long it was there before it removed itself), but it won’t stop malware from entering your environment. You can then use that information to further strengthen your security posture.

Can Stairwell replace any of my current tools?

Stairwell can replace any malware analysis tools or sandboxes you currently use, and even goes a step beyond what others currently offer – like large-scale automated file ingestion, permanent retention, private environments, integrations, and more.

Can I choose what files Stairwell ingests? Is it just executables?

Stairwell has a file intake filter that you can adjust to include or exclude any file extension you want – executables and beyond.

How does Stairwell handle personally identifiable information (PII)?

The default file intake list includes only file types that rarely have PII – files that contain or compile code, like executables, binaries, and scripts. While you’re able to adjust the file intake to include documents, PDFs, and text files, we do not include them in the default intake filter so that we reduce the amount of PII ingested without user input.

How does file ingestion work?

You have a few options. We have lightweight file forwarders for both Windows and macOS that you can deploy across your environment. You can also choose to have Stairwell ingest files through your EDR. In other instances, you can also upload single files through the Stairwell UI if you have a particular file you’re researching.

Is Stairwell multi-tenant?

Stairwell is multi-tenant, so MSSPs can manage multiple organizations from within one private environment.