Symantec does, and it works great but beware, Symantec does not provide Day 0 solutions. The only reason my Catalina Deployment was delayed was because I had to wait for Symantec to provide an application for Catalina.
Carbon Black Defense had a kext hiccup with Catalina support, but is quite solid for us now. I will be very happy to see kexts go away, but worry about Apple not providing proper support for the features we've come to expect from an endpoint protection agent. They just don't have a great track record for this sort of thing. The entire game will change with 10.16, and I wonder which players will still be effective.