Kaspersky Hybrid Cloud Security Enterprise Server Base

What is included in Kaspersky Hybrid Cloud Security Enterprise Server Base?

Multi-layer malware protection – File, process and memory protection with behavioural detection.
Anti-Cryptor for shared folders – Blocks remotely initiated encryption against shared network folders.
Application Control for servers – Default deny lockdown of software on server operating systems.
File Integrity Monitoring – Tracks changes to critical system files and directories.
Public cloud API integration – Discovers and protects workloads in AWS, Azure and Google Cloud.
Important – No EDR component; detection and response is a separate product.

What are the main benefits of Kaspersky Hybrid Cloud Security Enterprise Server Base?

Kaspersky Hybrid Cloud Security Enterprise, Server is the higher of two tiers of Kaspersky's workload protection for physical servers, virtual servers and public cloud instances, managed centrally from Kaspersky Security Center. The virtualization component is still shipped under the older Kaspersky Security for Virtualization (KSV) name that many buyers search for, and the product is now positioned as part of the Kaspersky Cloud Workload Security offering alongside Kaspersky Container Security.

Single management console – Physical, virtual and cloud servers under one policy set.
Lower virtualization overhead – Light agent uses a shared SVM for scanning verdicts.
Hardening with evidence – Default deny plus file integrity monitoring creates a documented baseline.
Log Inspection – Scans server log files for suspicious operational events.
SIEM connectors – Forwards security events into an existing SIEM system.
Migration flexibility – Server licences also activate Kaspersky Endpoint Security for Business applications.

Best antivirus? Why Windows Defender alone is not enough
Explains where the built-in Windows protection stops and which gaps a managed security product has to close.

Which company size is Kaspersky Hybrid Cloud Security Enterprise Server Base suitable for?

The deciding factor is not headcount but whether you run a server estate worth managing centrally. A company with two physical servers and no hypervisor layer gets little value from default deny, file integrity monitoring and SIEM export, and is better served by a standard endpoint product. From the point where virtual servers are created and destroyed regularly, or where workloads run in AWS, Azure or Google Cloud next to on-premises hardware, the console and the cloud API integration start saving real administration time.

Does Kaspersky Hybrid Cloud Security Enterprise Server Base meet the requirements of Swiss cybersecurity legislation?

The Swiss obligation applies to operators of critical infrastructure named in the revised Information Security Act, including energy and water suppliers, transport, health, telecommunications, finance, cantonal and municipal administrations, and manufacturers whose hardware or software is used by those operators. Since 1 April 2025 they must report a qualifying cyberattack to the Federal Office for Cybersecurity (BACS) within 24 hours of discovery, with missing details supplied within 14 days. This product supports the detection and evidence side of that deadline: log inspection and file integrity monitoring record what changed on a server and when, and the SIEM connectors push those events into a system where an initial report can be assembled quickly. What it does not do is classify an incident as reportable, produce the report, or reconstruct an attack path across the estate, because there is no EDR component and no managed monitoring service in this licence. It also covers servers only, so workstations, mobile devices and backup remain outside its scope and outside your evidence chain. This text is not legal advice; whether your organisation falls under the reporting obligation should be assessed with qualified legal counsel.

Does Kaspersky Hybrid Cloud Security Enterprise Server Base meet the requirements of European cybersecurity legislation?

No software product makes a company compliant with the NIS 2 Directive, which obliges essential and important entities to implement risk management measures and incident reporting and makes management accountable for them. The directive names measure categories including incident handling, business continuity and backup management, supply chain security, security in the acquisition and maintenance of systems including vulnerability handling, policies on cryptography, and access control with multi-factor authentication. This product maps to part of that list: vulnerability assessment and patch management for system maintenance, application control and file integrity monitoring for hardening and integrity, and central policy enforcement with role-based access in the console. It contributes nothing to backup and restore, encryption of data at rest, multi-factor authentication, supplier risk assessment, staff training, or the documented processes the directive expects. Treat it as one technical control inside a broader programme rather than as a compliance package.

What should you know about official assessments of Kaspersky?

In June 2024 the U.S. Department of Commerce Bureau of Industry and Security issued a Final Determination prohibiting new sales of Kaspersky software in the United States; sales stopped on 20 July 2024 and updates for US customers ended on 29 September 2024. Germany's Federal Office for Information Security (BSI) published a warning against Kaspersky antivirus software on 15 March 2022 recommending replacement products; it is a warning and not a sales ban, it remains in force, and since December 2025 it rests on Section 13 of the amended BSI Act, with Kaspersky publicly pressing for its withdrawal in early 2026. Kaspersky's position is that these decisions are political rather than the result of a technical assessment of its products, and that it is a private company without ties to any government. Independent testing has continued regardless: Kaspersky business endpoint products were part of the AV-Comparatives Business Security Test for the first half of 2026 and hold current AV-TEST certifications for corporate Windows clients. Practically, this affects buyers with US entities or US federal supply chain requirements, public sector procurement in the countries that restrict it, and any company whose large customers ask about vendor country of origin; commercial sale and updates in Switzerland and the European Union are not restricted.

Norton vs. Kaspersky – Which antivirus program offers the best protection in 2025?
Compares detection results and functionality of both vendors for buyers weighing up an alternative.

Does Kaspersky Hybrid Cloud Security Enterprise Server Base help with security questionnaires from large customers?

Partly, and mostly in the server hardening and change control sections. It gives you a documented answer for malware protection on physical, virtual and cloud servers, for application allowlisting in default deny mode, for file integrity monitoring on critical system files, for log inspection, for vulnerability and patch status, and for central policy management with role-based access and SIEM export. It answers nothing in the sections on endpoint detection and response, telemetry retention, 24/7 monitoring, disk encryption, mobile device management, multi-factor authentication, identity governance, backup and restore testing, or penetration testing, and it will not answer the country-of-origin question that increasingly appears in supplier questionnaires. The cheapest way to close the technical gaps is usually inside the same vendor family, since Kaspersky Container Security, Kaspersky Next EDR Expert and the Kaspersky SIEM platform share the same management approach, but the origin question is a procurement decision rather than a product decision. Answer honestly what the product covers and name the compensating controls for the rest; auditors accept a documented gap far more readily than an overstated capability.

What is the difference between Kaspersky Hybrid Cloud Security Standard and Kaspersky Hybrid Cloud Security Enterprise?

The single decisive difference is server hardening: Application Control for server operating systems, which enables default deny, exists only in the Enterprise tier. Around it sit the three capabilities that auditors ask about, file integrity monitoring, log inspection and NextGen IDS/IPS for VMware NSX, all Enterprise only. The Standard tier delivers the protection engine itself for physical, virtualized and cloud workloads, so if your requirement is malware protection rather than lockdown and evidence, Standard is the honest answer. Neither tier is sold or updated in the United States.

Which limitations should you know before buying?

Kaspersky Security for Virtualization Agentless has reached end of life: technical support ended on 31 July 2026, only database updates are available between 1 August 2026 and 1 February 2027, and from 2 February 2027 no support of any kind is provided, while new licences include KSV Light Agent only. The product is not sold or updated in the United States, which is the single most important regional restriction for groups with American subsidiaries or American supply chain requirements. Container and Kubernetes protection is not part of this licence; that is Kaspersky Container Security, a separate product within the Kaspersky Cloud Workload Security offering. There is no EDR component, no encryption management and no backup function, so investigation of an incident, notebook encryption and restore capability all require additional products. The Server licensing object covers physical and virtual servers, virtual desktops belong to the Desktop object, and combining Standard and Enterprise licences requires approval from the vendor.

Data loss is expensive: How backups help you avoid outages
Shows why server protection without a working backup strategy leaves the most expensive gap open.

Frequently asked questions about Kaspersky Hybrid Cloud Security Enterprise Server Base

Is this a new licence or a renewal?

Base denotes the standalone new licence for the Enterprise tier with the Server licensing object. Kaspersky uses a separate Renewal licence type for existing customers, including customers who move between the Standard and Enterprise tiers at renewal.

Does the Server licensing object also cover virtual desktops?

No. The Server object covers physical servers and virtual servers, both persistent and non-persistent. Virtual desktops are covered by the Desktop object, and environments where you control the hypervisor can alternatively be licensed per CPU or core.

Which management console does it use?

Management runs through Kaspersky Security Center, which handles policy assignment, agent rollout, role-based access and reporting for on-premises, virtualized and public cloud workloads in one place. The cloud API integration discovers workloads in AWS, Azure and Google Cloud so that agents can be deployed and policies applied without maintaining a separate inventory.