ESET PROTECT portfolio targets shadow AI risk for channel partners
ESET has unveiled a restructured PROTECT portfolio aimed at channel partners serving businesses of all sizes, positioning the suite as an end-to-end response to the security risks created by widespread, often ungoverned, adoption of AI tools in the workplace. The launch, announced on 30 September 2026, makes AI security capabilities standard across all tiers rather than optional extras, and introduces new pricing intended to open the portfolio to smaller organisations.
The Slovak cybersecurity vendor is framing the release as a structural shift toward a cybersecurity-as-a-service model. Ryan Grant, Country Manager for the US and Canada at ESET North America, said the new portfolio was designed to help partners "transform their businesses into trusted security advisors, driving recurring revenue, stronger customer relationships, and long-term growth." The release describes three tiers: PROTECT Core, available from five seats, focused on AI-stack protection alongside ransomware and phishing defences; PROTECT Premium, available from ten seats, adding autonomous managed detection and response (MDR) with 24/7 expert supervision; and PROTECT Ultimate, also from ten seats, adding live access to ESET's threat-hunting team and enterprise-grade remediation.
What is new in the portfolio
Beyond the three-tier structure, ESET has bundled several adjacent capabilities. Optional "Plus" packages at each tier add mail security, multi-factor authentication, and vulnerability and patch management. A guided MDR onboarding service promises faster time-to-protection. An online cybersecurity awareness training module is designed to meet a range of compliance frameworks including NIS2, HIPAA, PCI DSS, SOX, GDPR and CCPA, reflecting the growing role of staff training in cyber-insurance underwriting. A cyber warranty scheme, delivered in partnership with insurtech firm Cysurance, offers financial coverage of up to one million US dollars per customer.
The initial rollout covers the United States, Italy and Slovakia, with other markets to follow in a phased plan. ESET has not published pricing for any tier or disclosed the number of channel partners already enrolled.
Market context
The launch arrives at a moment when shadow AI, the proliferation of AI-powered tools adopted by employees without IT sanction, is generating real concern among security and compliance teams. Analysts and CISOs have flagged the category as a meaningful extension of the attack surface, particularly because many AI SaaS tools integrate with corporate data stores by design.
ESET is one of several established endpoint-security vendors retooling channel programmes around this theme. Competitors including CrowdStrike, SentinelOne, Sophos and WithSecure have each positioned MDR-led, partner-delivered models as a growth strategy for the SMB and mid-market segments. The shift from perpetual-licence endpoint products to recurring managed-service revenue is broadly consistent with how the market has evolved over the past three to four years, and ESET's three-tier structure mirrors approaches already deployed by rivals.
Regulatory backdrop
The compliance-framework list embedded in the awareness training module is a telling signal of where ESET sees commercial traction. NIS2, which came into force across EU member states in late 2024, imposes incident-reporting and supply-chain security obligations on a significantly wider set of organisations than its predecessor directive. GDPR enforcement remains active. In the US, the SEC's cybersecurity disclosure rules, alongside HIPAA and PCI DSS, are driving boards to scrutinise security posture more carefully. Cyber-insurance underwriters are increasingly requiring documented training programmes and MDR coverage as conditions of policy renewal, which makes ESET's bundled warranty and training offer commercially coherent.
The phased global rollout and the absence of published pricing or named launch customers mean partners will need to engage ESET directly to model the economics. The company says it will publish further details on global availability separately.