Datto EDR is priced per endpoint per month and is sold through the MSP channel rather than a public store. Standalone Datto EDR starts at roughly $2.99/endpoint/month (about $36/endpoint/year), which makes it one of the cheaper genuine EDR tools, and it includes ransomware rollback plus 65+ automated response actions. More commonly it is bought inside Kaseya 365 Endpoint: the Express tier lists at $2.25/endpoint/month (RMM, AV, EDR, patching, backup; no managed detection) and the Pro tier at $5.25/endpoint/month (adds MDR and a managed SOC). Because pricing runs through Kaseya and MSP resellers, treat these as aggregated reference figures, not a self-serve list price.
Datto EDR pricing tiers
| Tier | Price | Real EDR? | Notes |
|---|---|---|---|
| Datto EDR (standalone) | ~$35.88/endpoint/yr~$2.99/mo | Yes | Real EDR: ransomware rollback, 65+ automated responses, deep memory analysis. Volume discounts apply. |
| Kaseya 365 Endpoint Express | ~$27/endpoint/yr$2.25/mo list | Yes | RMM + AV + EDR + patching + backup. No MDR or managed SOC. Promo pricing was $1.75/mo. |
| Kaseya 365 Endpoint Pro | ~$63/endpoint/yr$5.25/mo list | Yes | Express plus MDR and a managed SOC. Promo pricing was $3.99/mo. |
| Datto Endpoint + Security Bundle | ~$191.88/endpoint/yr~$15.99/mo | Yes | EDR + Datto AV + ransomware rollback + endpoint backup + RMM + RocketCyber MDR (a la carte bundle). |
The entry tier that delivers genuine EDR (continuous telemetry, behavioural detection, threat hunting, and response actions) is Datto EDR standalone (~$2.99/endpoint/month) or any Kaseya 365 Endpoint tier (all include EDR). Cheaper tiers in the table are NGAV or prevention-only and do not give you the post-incident investigation trail that defines EDR.
What it costs at your size
Worked annual figures at the entry EDR tier, before negotiation. Use these to size the budget line, then run your own numbers in the budget calculator, which layers deployment, tuning, and internal operating cost on top of the licence.
| Organisation | Endpoints | Tier | Annual licence | Per endpoint / mo |
|---|---|---|---|---|
| Micro / SMB | 50 | Standalone EDR | ~$1,800 | ~$2.99 |
| Small business | 200 | Standalone EDR | ~$7,200 | ~$2.99 |
| Mid-market | 1,000 | Standalone EDR | ~$33,600 | ~$2.80 |
| Upper mid-market | 5,000 | Standalone EDR | ~$156,000 | ~$2.60 |
| MSP / managed | 2,500 | Kaseya 365 Pro | ~$157,500 | $5.25 |
Licence only. Deployment, tuning, IR retainer, and internal operating cost sit on top: see the five TCO categories. At SMB scale the licence is roughly half of true all-in cost.
Four ways to bring the Datto EDR number down
Buy standalone EDR if EDR is all you need
Standalone Datto EDR at roughly $2.99/endpoint/month is among the cheapest genuine EDR on the market. If you already run your own RMM, AV, and backup, do not pay for the full Kaseya 365 Endpoint bundle just to get EDR.
Run the Kaseya 365 bundle math honestly
If you also need RMM, AV, patching, and backup, the Kaseya 365 Endpoint Express ($2.25/endpoint/month list) or Pro ($5.25 with MDR) bundle is usually cheaper than buying those tools separately. Price your actual tool stack before comparing.
Check the high-watermark billing change
Kaseya ended its high-watermark billing policy in December 2025, so your bill should now reflect actual endpoint counts rather than peak usage. Confirm your contract reflects the new model, especially if your endpoint count is seasonal.
Negotiate through the channel
Datto and Kaseya 365 pricing comes through Kaseya account reps and MSP resellers, and promotional rates (Express $1.75, Pro $3.99) have run below list. Get the rate, term, and renewal escalation in writing before you commit.
When Datto EDR is the right pick, and when it is not
- + You are an MSP, or run an MSP-style stack, and want EDR bundled with RMM, AV, patching, and backup in one console.
- + Budget is the hard constraint and you want genuine EDR with ransomware rollback at the low end of the market.
- + You already use Datto or Kaseya products and want single-vendor billing and integration.
- + You want managed detection (MDR) and a SOC bolted on without adding a separate vendor (Kaseya 365 Pro).
- − You need a published self-serve list price and a single per-seat number: Datto is channel-sold, not on a public store.
- − You are on Microsoft 365 E5: Defender for Endpoint P2 is already included at no incremental licence cost.
- − You require a vendor that leads independent MITRE ATT&CK detection evaluations: CrowdStrike and SentinelOne score higher.
- − You do not want to buy through an MSP or the Kaseya channel.