Cortex XDR by Palo Alto Networks delivers comprehensive endpoint security, integrating well with other systems to offer robust threat detection and real-time protection through AI-driven analytics.
| Product | Market Share (%) |
|---|---|
| Cortex XDR by Palo Alto Networks | 3.7% |
| CrowdStrike Falcon | 10.5% |
| Microsoft Defender for Endpoint | 10.2% |
| Other | 75.6% |
| Type | Title | Date | |
|---|---|---|---|
| Category | Endpoint Protection Platform (EPP) | Aug 27, 2025 | Download |
| Product | Reviews, tips, and advice from real users | Aug 27, 2025 | Download |
| Comparison | Cortex XDR by Palo Alto Networks vs Microsoft Defender for Endpoint | Aug 27, 2025 | Download |
| Comparison | Cortex XDR by Palo Alto Networks vs CrowdStrike Falcon | Aug 27, 2025 | Download |
| Comparison | Cortex XDR by Palo Alto Networks vs SentinelOne Singularity Complete | Aug 27, 2025 | Download |
| Title | Rating | Mindshare | Recommending | |
|---|---|---|---|---|
| CrowdStrike Falcon | 4.3 | 10.5% | 96% | 132 interviewsAdd to research |
| Wazuh | 3.7 | N/A | 80% | 48 interviewsAdd to research |
| Company Size | Count |
|---|---|
| Small Business | 39 |
| Midsize Enterprise | 18 |
| Large Enterprise | 30 |
| Company Size | Count |
|---|---|
| Small Business | 822 |
| Midsize Enterprise | 501 |
| Large Enterprise | 1550 |
Cortex XDR by Palo Alto Networks offers advanced endpoint protection and threat detection through AI and behavior-based analytics. Its user-friendly design simplifies integration with firewalls, delivering multi-layered protection with low resource consumption. Valued for policy management, USB control, and incident correlation, Cortex XDR enhances threat management and real-time threat hunting capabilities. However, users note challenges with third-party integration, reporting, and dashboard automation. Agent performance across operating systems and memory consumption are areas for improvement, alongside reducing false positives and simplifying endpoint management and setup.
What features does Cortex XDR offer?Cortex XDR is crucial in industries requiring robust endpoint protection, such as finance, healthcare, and technology. It supports malware detection, behavioral analysis, and ransomware mitigation across endpoints, including remote work environments, providing comprehensive threat visibility and security policy management. The solution's integration with firewalls and specialized industry requirements enhances security posture in diverse operational settings.
Cortex XDR by Palo Alto Networks was previously known as Cyvera, Cortex XDR, Palo Alto Networks Traps.
CBI Health Group, University Honda, VakifBank
| Author info | Rating | Review Summary |
|---|---|---|
| Cyber Security Manager at Welab bank | 4.5 | As a cybersecurity manager with experience in Cortex XDR by Palo Alto Networks, I value its advanced threat detection and user-friendly GUI. While it offers a good ROI, improvements in sales support and expanded AI features would enhance its effectiveness. |
| Cyber Security Information Security Specialist at MHM Holding GmbH | 4.5 | I've found Cortex XDR effective for advanced threat detection, especially its behavioral engine and logging. It's stable, easy to deploy, integrates well, and offers good ROI, though the NTA pricing could be improved. |
| Pre-Sales Architect at network techlab | 4.5 | I work with Cortex XDR by Palo Alto Networks for its next-gen antivirus and threat prevention. It offers valuable automation and analytics but needs improvements like data loss prevention and multi-tenancy features. Its compliance capabilities enhance cost-saving returns. |
| Technical Specialist at HCL Technologies | 4.5 | I use Cortex XDR in my company to protect clients from unknown malware as an antivirus, EDR, and XDR solution. It excels in threat detection but needs improvement, as new versions sometimes cause CPU usage issues during deployment. |
| Cyber Security Analyst at HALA INFOSEC | 4.0 | We utilize Cortex XDR to monitor network and endpoint security, finding it valuable for its detailed information and ability to connect with host servers, networks, and proxies. It compares favorably with CrowdStrike, though improvements are needed in blocklisting malicious content. |
| Head Of Information Technology at Diha Travels and Tours Limited | 4.5 | I use Cortex XDR for incident detection and response at my company. Its real-time network visibility helps detect threats early, though it could improve in managing alerts and reporting. A built-in compliance framework would enhance its value. |
| Lead Security Engineer at AeoLogic Technologies | 4.5 | I use Cortex XDR for endpoint security to capture logs and events. Its integration with Palo Alto Networks products and advanced behavior analytics are valuable. However, the agent sometimes stops event capturing, indicating a need for improved real-time monitoring. |
| Senior Security Consultant at helpag | 5.0 | Our company uses Cortex XDR for endpoint protection and compliance, integrating with Palo Alto's firewall for enhanced visibility. It's effective but needs mandatory network integration and an on-premises option for full XDR benefits and broader vendor compatibility. |
