Unsure what is already built into / being used in the product but the DoubleYou project could be worth investigating and adding to the macOS EDR agent for an even stronger endpoint security agent - https://double-you.io/details.html

Our MSP has a good split of Mac and PC endpoints, so when it comes to macOS, we are always looking for something that takes advantage of the latest Apple Security Frameworks.