Sangfor NGES (深信服)
Sangfor's next-generation endpoint security (NGES) recorded 0 false positives in AV-Comparatives EDR testing — one of the few Chinese vendors through that bar.
Global service map
. Regenerated with each Chinaready Landscape publish.
Quick answer: CrowdStrike is Unavailable for mainland China. CrowdStrike does not sell or support the China market, and Xinchuang / national-security reviews have pushed domestic enterprises off foreign cybersecurity software. Map China endpoint security to Sangfor NGES (深信服), ThreatBook OneSEC (微步在线), 360 Digital Security (360数字安全), Qi-Anxin Tianqing EDR (奇安信天擎). Availability in China: Unavailable.
Availability in China: Unavailable
Mainland EDR is mature. Several leading vendors are already in the global first tier for government, SOE, and large private-enterprise endpoint security.
Also commonly evaluated: Anheng (安恒信息), Venustech (启明星辰), NSFOCUS (绿盟科技), and Topsec (天融信). Candidates on this page are orientation options — Chinaready does not add them as Explore / Landscape product tiles from this rewrite. Confirm Xinchuang OS/CPU fit, procurement rules, and operating constraints before production adoption.
Mapped China-ready candidates
Sangfor's next-generation endpoint security (NGES) recorded 0 false positives in AV-Comparatives EDR testing — one of the few Chinese vendors through that bar.
ThreatBook OneSEC is a native EDR. 2026 China EDR market assessments place it among leaders on growth and innovation; it is strong at chaining attack behavior into a graph for investigation.
360 Digital Security uses a cloud-ground architecture and EB-scale security data for large-scale endpoint management and second-level automated response — a common path for large government and enterprise fleets.
Qi-Anxin Tianqing EDR uses a cloud-pipe-end distributed architecture and fits Kylin, UnionTech UOS, and domestic CPU lines — strong in government and Xinchuang ecosystems.
No. Chinaready labels CrowdStrike as Unavailable. CrowdStrike does not sell or support mainland China, and Xinchuang plus national-security reviews have pushed domestic enterprises to replace foreign cybersecurity software with domestic EDR.
Two constraints. CrowdStrike maintains an official mainland sales ban with no official support. Separately, Xinchuang policy and national-security reviews have directed domestic enterprises to stop using CrowdStrike and similar foreign cybersecurity products and switch to domestic schemes.
Chinaready currently maps mainland EDR options for CrowdStrike to Sangfor NGES (深信服), ThreatBook OneSEC (微步在线), 360 Digital Security (360数字安全), Qi-Anxin Tianqing EDR (奇安信天擎). Prefer Sangfor NGES when AV-Comparatives-class detection quality matters; ThreatBook OneSEC for native EDR investigation graphs; 360 Digital Security for large-scale government/enterprise fleets; Qi-Anxin Tianqing EDR for Xinchuang OS/CPU ecosystems. Anheng, Venustech, NSFOCUS, and Topsec are additional mainland EDR vendors. Treat this as a research shortlist rather than a one-to-one endorsement.
No one-to-one Falcon swap. Domestic EDR products cover detection, response, and endpoint control, but architecture, telemetry, and Xinchuang OS/CPU support differ. Evaluate against your endpoint mix and procurement rules before migrating.
Match the EDR to endpoint OS (including Kylin / UnionTech UOS), CPU architecture, and government vs commercial procurement. Use the interactive Chinaready Landscape for adjacent security choices, then read Chinaready's main site for launch operating guidance. If the path remains unclear, book a call with Chinaready.