Bitdefender GravityZone Extended Detection and Response (XDR) vs Cybereason Endpoint Detection &amp; Response comparison

Bitdefender GravityZone Extended Detection and Response (XDR) vs. Cybereason Endpoint Detection & Response

Download the complete report

Helped 885,311 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of March 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of Bitdefender GravityZone Extended Detection and Response (XDR) is 0.7%, up from 0.3% compared to the previous year. The mindshare of Cybereason Endpoint Detection & Response is 1.2%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.4%
Cybereason Endpoint Detection & Response	1.2%
Bitdefender GravityZone Extended Detection and Response (XDR)	0.7%
Other	94.7%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

reviewer2165952

Company Advisor

Automated protection has reduced our management time and keeps all client environments consistently secure

Reporting in Bitdefender GravityZone Extended Detection and Response (XDR) could be improved. It has some reporting in it, but it's a little cumbersome to work with, so the reporting that is there could be improved. The analytics dashboards of Bitdefender GravityZone Extended Detection and Response (XDR) are quite useful, and they are nice in that we can see an overview very quickly and drill down into specific issues or specific clients. The dashboards are quite good, though it would be nice if we had the same with automated reports. It would be much more useful for us to have that via email or having a report. The only downside that we find is that the product is a little bit slow.

Read full review

Ivan Burke

Head of Research Development and Innovation at CSIR

Offers useful threat hunting and response capabilities but struggles to justify cost for smaller deployments

I mostly work with incident response, so I work with a bunch of them interchangeably, but mostly with the EDR components; I also get involved with some of the XDR components, especially for the cloud. Regarding analysis features, such as deep behavioral detection, I do use it sometimes; I usually don't use the automated version of it, as I prefer threat hunting directly, depending on if the season is available. I know some of them have pretty good analytics engines, but I tend to do the threat hunting on my own. I manage incident response for a bunch of companies, so some of them have Cybereason Endpoint Detection & Response integrated into Sentinel, some into Fortinet, and others into various tools. When considering cost-effectiveness, their pricing structure works such that if you're a large organization with more than a thousand endpoints to deploy to, then Cybereason Endpoint Detection & Response is worthwhile. But for anything less than 300, it's too expensive; obviously, the more you buy, the better the price, making it cheaper for you. Cybereason Endpoint Detection & Response best fits enterprise-level businesses such as huge corporations; however, we are in the process of removing it from many of our endpoint clients because it's not really showing enough value for them at the moment. We're trying to see how we can improve it with some of our clients, but at the moment, it's struggling compared to other EDR solutions that we have deployed. On a scale of one to ten, I rate Cybereason Endpoint Detection & Response a six.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"One thing that I like about Cortex XDR is its ability to detect all the suspicious or malicious binaries, and it can integrate with Palo Alto Firewall."

"Cortex Xnor's playbooks predefine the workflow of the automation, such as response processes, alert triggering, and enriching the context, collecting relevant indicators such as hashes, IP addresses, or domains efficiently and can detect and block malicious attacks with firewalls."

"Threat identification and detection are the most valuable features of this solution."

"The stability of the solution is very good, we have about 100 users on it right now, and we use it twice a week."

"Overall, it's a great platform; it integrates very well with other solutions from Palo Alto and also with our vendors, the ease of use is excellent, I love the root cause analysis from Cortex, which is amazing, and in a few clicks you can have the full root cause."

"The policy configuration is great, the granularity of policies that are available is very helpful, it is straightforward to set up, and it has pretty much everything we need and works well within the Palo Alto ecosystem."

"It blocks malicious files, prevents attacks, and doesn't require many updates because it is a very light application."

"The multi-layered approach to the product gives you confidence that it will stop exploits, ransomware, worms, or viruses from compromising endpoints, essentially providing peace of mind."

More Cortex XDR by Palo Alto Networks pros

"We moved from Sophos antivirus to Bitdefender GravityZone Extended Detection and Response (XDR), and ever since then, we've been very happy with the product."

"The product is easy to use."

"The best features in the product, as a reseller, are the integrated SOC; integration with a SOC is one of the advantages."

"We are using Bitdefender GravityZone Ultra Plus for the threat protection and security of our network."

"I find Bitdefender GravityZone Ultra Plus to be a pretty good solution for the mid-level market, specifically for organizations with up to two hundred fifty users. I like that it is an averagely priced solution. It also has a straightforward installation that can be completed within three to five minutes. Its technical support is also good enough."

"I find Bitdefender GravityZone Ultra Plus to be a pretty good solution for the mid-level market, specifically for organizations with up to two hundred and fifty users."

"The best thing about Bitdefender is that it has got top-notch features and it is not tied to specific countries like some other antivirus tools."

"The quarantine computer functionality is very good for me."

More Bitdefender GravityZone Extended Detection and Response (XDR) pros

"The interface is user-friendly."

"To get my Cybereason instance up and running, I just install it; it takes less than a minute or two to actually install and run the installer."

"The most valuable feature is the capability of the command used by the machine so that we see the kind of performance that is running."

"The initial setup process is straightforward."

"Cybereason's threat hunting and investigation are the most valuable features. Threat hunting is a user-friendly feature that keeps you safe. Investigation offers an added value that I haven't seen with other EDR services. It allows you to find specific policy problems within your environment."

"The dashboard is very good and you can consider it as an interactive UI."

"Cybereason reduced our detection by 85%."

"We didn't have the visibility that we now have. It has increased our visibility by a lot. So, we put a lot more time into really looking at our environment and what is happening throughout our different networks. It has increased our visibility by around fivefold."

More Cybereason Endpoint Detection & Response pros

Cons

"Cortex XDR by Palo Alto Networks can improve mobile integration to allow access to the console."

"The server sometimes stops continuously to check things so it would be helpful to receive access updates or technical reasons."

"It tends to do 99.9% of things. The only thing I'd like is single sign-on authentication into their cloud platform so that my users can be properly authenticated against it."

"The solution should force customers to integrate with network traffic to see the full benefits of XDR."

"In general, the price could be more competitive."

"They have the worst support, as a company, that I have ever worked with, as they are difficult to get a hold of and keep on the phone."

"It should support more mobile operating systems. That is one of the cons of their infrastructure right now."

"It is an enterprise-level solution. Its price could be less expensive."

More Cortex XDR by Palo Alto Networks cons

"Some customers would like additional features that aren't available through the current GravityZone platform."

"Some customers would like additional features that aren't available through the current GravityZone platform. Some feedback has been about the deletion of other software not going smoothly during the installation of Bitdefender, particularly the removal of previous software like Sophos."

"Adding a feature like Data Loss Prevention would be beneficial."

"I would like automatic issue fixing for users without needing to physically open the PC. I'd prefer updates and fixes from the cloud to avoid headaches and save time."

"The solution seems to be pretty amateur for an EDR solution, and it should be more in sync in terms of features, with solutions such as FireEye and SentinelOne."

"Detection and response is a disadvantage that could be improved."

"Reporting in Bitdefender GravityZone Extended Detection and Response (XDR) could be improved."

"The solution seems to be pretty amateur for an EDR solution, and it should be more in sync in terms of features, with solutions such as FireEye and SentinelOne."

More Bitdefender GravityZone Extended Detection and Response (XDR) cons

"Compared to our previous endpoint, we have a lot more false positives and a lot more duplication of alerts. So we're chasing more alerts."

"While the product is very good, there are still some areas for improvement. The initial triage area could be a bit simpler."

"Cybereason does not have sandbox functionality."

"We are in the process of removing it from many of our endpoint clients because it's not really showing enough value for them at the moment."

"I feel it is a shame that I cannot create groups of groups with inheritance."

"Technical support needs to improve."

"There is room for improvement in the product features related to device control, particularly USB management."

"The graphics are a little lacking."

More Cybereason Endpoint Detection & Response cons

Pricing and Cost Advice

"The pricing is a little high. It is per user per year."

"I feel it is fairly priced."

"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."

"We pay about $50,000 USD per year for a bundle that includes Cortex XDR."

"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."

"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."

"Cortex XDR is a costly solution."

"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"We have purchased licenses for the use of Bitdefender GravityZone Ultra Plus. The price of the solution is reasonable but could be better."

"Bitdefender GravityZone Ultra Plus is pretty average, meaning it's not cheaper, but it's pretty good. It has average pricing."

"Though it is not the cheapest solution but it fits our budget. We pay an annual licensing fee."

"This product is somewhat expensive and should be cheaper."

"I had to go through a third-party to purchase it, which I wasn't really pleased about."

"The pricing is manageable."

"I do not have experience with the licensing of the product."

"In terms of pricing, it's a good solution."

"In terms of cost, this is a good choice for our needs."

"We considered a few other solutions. Some were ridiculously overpriced, while others didn't have solutions for Mac endpoints. That was a deal-breaker because most of our organization is on Mac. It came down to two vendors: Cybereason and another. They had similar pitches and almost identical approaches, but in the end, Cybereason gave us the best value for our money."

More Cybereason Endpoint Detection & Response pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

885,311 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

13%

Manufacturing Company

Computer Software Company

Financial Services Firm

Comms Service Provider

13%

Construction Company

13%

University

Computer Software Company

Financial Services Firm

12%

Computer Software Company

11%

Manufacturing Company

10%

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	47

By reviewers
Company Size	Count
Small Business	6
Large Enterprise	1

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	4
Large Enterprise	13

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What is your experience regarding pricing and costs for Bitdefender GravityZone Ultra Plus?

The pricing and licensing of Bitdefender GravityZone Extended Detection and Response (XDR) is reasonable. We moved fr...

What needs improvement with Bitdefender GravityZone Ultra Plus?

Reporting in Bitdefender GravityZone Extended Detection and Response (XDR) could be improved. It has some reporting i...

What is your primary use case for Bitdefender GravityZone Ultra Plus?

Our customers typically use Bitdefender GravityZone Extended Detection and Response (XDR) primarily as an antivirus s...

What is your primary use case for Cybereason Endpoint Detection & Response?

My main use case for Cybereason Endpoint Detection & Response is mostly for incident response.

What needs improvement with Cybereason Endpoint Detection & Response?

When it comes to advanced threats, it sometimes helps me with finding them and hunting them down with threat detectio...

What advice do you have for others considering Cybereason Endpoint Detection & Response?

I mostly work with incident response, so I work with a bunch of them interchangeably, but mostly with the EDR compone...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 9% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Darktrace vs Bitdefender GravityZone Extended Detection and Response (XDR)

Compared 11% of the time

TrendAI Vision One vs Bitdefender GravityZone Extended Detection and Response (XDR)

Compared 7% of the time

Huntress Managed ITDR vs Bitdefender GravityZone Extended Detection and Response (XDR)

Compared 6% of the time

Kaspersky Endpoint Detection and Response Expert vs Bitdefender GravityZone Extended Detection and Response (XDR)

Compared 5% of the time

Wazuh vs Bitdefender GravityZone Extended Detection and Response (XDR)

Compared 5% of the time

More Bitdefender GravityZone Extended Detection and Response (XDR) Competitors

CrowdStrike Falcon vs Cybereason Endpoint Detection & Response

Compared 9% of the time

SentinelOne Singularity Complete vs Cybereason Endpoint Detection & Response

Compared 7% of the time

Fortinet FortiEDR vs Cybereason Endpoint Detection & Response

Compared 4% of the time

Intercept X Endpoint vs Cybereason Endpoint Detection & Response

Compared 4% of the time

Bitdefender GravityZone EDR vs Cybereason Endpoint Detection & Response

Compared 3% of the time

More Cybereason Endpoint Detection & Response Competitors

Product Reports

Cortex XDR by Palo Alto Networks

Download Cortex XDR by Palo Alto Networks product report

Bitdefender GravityZone Extended Detection and Response (XDR)

Download Bitdefender GravityZone Extended Detection and Response (XDR) product report

Bitdefender GravityZone Extended Detection and Response (XDR) report

Cybereason Endpoint Detection & Response

Download Cybereason Endpoint Detection & Response product report

Cybereason Endpoint Detection & Response report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

GravityZone Ultra Plus

Cybereason EDR, Cybereason Deep Detect & Respond

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Bitdefender GravityZone XDR enhances network security via advanced threat detection, offers centralized incident response, and comprehensive endpoint protection. Users value the user-friendly interface, robust analytics, and streamlined management, significantly boosting organizational efficiency and productivity.

Bitdefender

Cybereason's Endpoint Detection and Response platform detects in real-time both signature and non-signature-based attacks and accelerates incident investigation and response. Cybereason connects together individual pieces of evidence to form a complete picture of a malicious operation.

LevelBlue

Sample Customers

CBI Health Group, University Honda, VakifBank

Archdiocese, Northstar, SeSa, W&W Informatik, Yamaha Motor Europe

Lockheed Martin, Spark Capital, DocuSign, Softbank Capital

Bitdefender GravityZone Extended Detection and Response (XDR) vs. Cybereason Endpoint Detection & Response