The EDR-XDR Visibility & Correlation Assessment evaluates how effectively a security solution provides visibility into attack activity, collects and correlates telemetry, reconstructs attack chains, and delivers actionable context to security analysts.
LEVEL 1 – Validated Visibility certification confirms that the solution meets the required criteria for attack visibility, essential telemetry and single-host event correlation.
LEVEL 2 – Advanced Visibility & Correlation certification recognises solutions that meet the more stringent requirements of extended telemetry, cross-host correlation, attack-chain reconstruction and analytical context to support investigation and response.
Telemetry Visibility & Two-Level Certification
We test EDR, XDR, and SIEM solutions using real attack scenarios and review the telemetry available to the analyst. The assessment covers attack visibility, process and command-line data, event correlation, and reconstruction of the attack chain.
Certification is available at two levels, depending on the scope of telemetry and correlation demonstrated during the test.
We invite security vendors to participate in the EDR-XDR Visibility & Correlation Assessment and independently validate their solutions in real-world attack scenarios. Contact us to learn more about testing, certification, and cooperation opportunities.
Vendors can participate directly in the Advanced In-The-Wild Malware Test or obtain a Certification-Only Package for a product independently tested by AVLab. Paid participation provides access to extended technical services, test data, and custom configuration options, while result review and verification remain available to all tested vendors.
Advanced In-The-Wild Malware Test - What Is Included?
Paid Assessment Participation
Certification-Only Package
GENERAL
Advanced In-The-Wild Malware Test
Previously performed by AVLab
Public test results
Certification, if criteria are met
Annual awards, if eligible
RESULT REVIEW & TRANSPARENCY
Result review and clarification
Available to all tested vendors
Available to all tested vendors
Evidence necessary to verify a disputed result
Available to all tested vendors
Available to all tested vendors
Vendor commentary and response
Available to all tested vendors
Available to all tested vendors
TEST PREPARATION & CUSTOM CONFIGURATION
Product onboarding and configuration review
Not applicable
Vendor-recommended product configuration
Not applicable
Custom logging configuration
Not applicable
Vendor-requested technical logs
Not available retroactively
TECHNICAL SERVICES AND DATA
Detailed technical analysis
Available separately
Detailed test data
Available separately
API access to test data
Available separately
Evidence & technical logs
Available separately
Additional validation and retesting
Depending on scope
Available separately
Technical consultation with AVLab
Available separately
CERTIFICATION & MARKETING RIGHTS
Official certificate issued by AVLab
Certification badge
Use on vendor website
Use in social media and PR
Use in sales and marketing materials
Annual award materials, if eligible
Commercial use of AVLab certificates, certification badges, and award materials by independently tested vendors requires either Paid Assessment Participation or a Certification-Only Package. Independently tested vendors without either option may be listed in AVLab results and certification records but are not granted the right to use AVLab certification materials in their own marketing or communications.