Webroot pricing — endpoint, DNS & awareness training
Reseller-observed USD reference pricing for Webroot's business lineup. Rebranded OpenText™ Core Endpoint Protection in October 2025 — webroot.com now redirects there; we keep the Webroot name since that's still what most buyers search for.
How Webroot works
Webroot runs on an unusually small (~750KB) local agent that offloads scanning to the cloud, keeping endpoint overhead minimal. It relies on the Webroot Intelligence Network for real-time cloud threat intelligence, and on a journaling-based rollback mechanism — Webroot records every file and registry change an unknown process makes, so if that process is later judged malicious, its changes can be reversed without a full reimage. (Sources: the original PR Newswire product announcement; independent reviews from Comparitech and DNSFilter.)
What each product does
Endpoint Protection
The base lightweight agent — real-time shielding and cloud threat intelligence, with rollback remediation if something slips through.
+ EDR
Same agent, adds behavioral monitoring and incident-timeline visibility for the attacks a signature-based scan alone would miss.
DNS Protection
Blocks malicious domains at the DNS layer, before a connection is ever made — works standalone or alongside Endpoint Protection.
Awareness Training
Phishing simulations and security-awareness campaigns for staff — the only one of the four aimed at human behavior, not software.
Endpoint — lightweight agent, with and without EDR
Webroot Endpoint Protection
$26.8 / seat / year
Reseller reference · Genesis Technologies, 1-yr term
Per seat · 1-year term
The base 750KB lightweight agent — real-time shielding, cloud-driven threat intelligence via the Webroot Intelligence Network, and journaling-based rollback remediation that reverses file/registry changes from malware later judged malicious, without reimaging.
Get a quote →Webroot Endpoint Protection + EDR
Most popular$96 / seat / year
Reseller reference · Genesis Technologies, 1-yr term
Per seat · 1-year term
The same lightweight agent, no separate install — adds behavioral monitoring, rollback remediation, and incident-timeline visibility for novel and targeted attacks.
Get a quote →DNS protection & security awareness training
Webroot DNS Protection
$26.8 / seat / year
Reseller reference · Genesis Technologies, 1-yr term
Per seat · 1-year term
DNS-layer web filtering that blocks malicious domains before a connection is ever made — deployable standalone or layered under Endpoint Protection.
Get a quote →Webroot Security Awareness Training
$17.8 / seat / year
Reseller reference · Genesis Technologies, 1-yr term
Per seat · 1-year term
Phishing-simulation and security-awareness training campaigns for staff — closes the human-click risk gap the other three products don't address.
Get a quote →FX moves; USD figures are for comparison only.
Public list prices observed 2026-07-05. Subject to change by the vendor / operator without notice.
About these prices
These figures are observed from a named authorized reseller, Genesis Technologies, on a 1-year term — not an OpenText/Webroot-published list price (their own site is quote/cart-only, with no public per-seat table). For a second reference point, Vendr's buyer-side marketplace independently estimates a broadly consistent $15–35/endpoint/year band for Webroot endpoint pricing.
Which product fits
Already have EDR elsewhere
Endpoint Protection alone still covers the antivirus/rollback layer without duplicating an EDR you're already paying for elsewhere.
No in-house SOC
Pair Endpoint Protection + EDR with Brocent's managed detection & response service, so the incident-timeline data EDR surfaces is actually watched and acted on.
Worried about phishing, not malware
Awareness Training targets the human-click risk that antivirus and EDR can't — pair it with either endpoint tier for the fullest coverage.
Webroot pricing FAQ
Is Webroot still the right name to search for?
Yes, for now. In October 2025 the product was officially rebranded "OpenText™ Core Endpoint Protection" and webroot.com now redirects to cybersecurity.opentext.com — but "Webroot" is still what most buyers search for, so this page keeps that name while noting the rebrand.
Do I need the +EDR tier, or is Endpoint Protection enough?
Endpoint Protection alone covers real-time antivirus and rollback remediation, which is enough for most small teams with a low-risk profile. Add EDR if you need behavioral monitoring and incident-timeline visibility for novel or targeted attacks, or if compliance requires it — pairing it with a managed detection & response service gets the most value out of that visibility.
Rolling out Webroot across your fleet?
We size the right product mix, get you a firm quote through our reseller channel, deploy the agents and (if you add EDR) run detection & response. Tell us your seat count to get started.