Bitdefender GravityZone Extended Detection and Response (XDR) vs Kaspersky Endpoint Detection and Response Expert comparison

Bitdefender and Kaspersky are both solutions in the Endpoint Detection and Response (EDR) category. Bitdefender is ranked #29 with an average rating of 8.8, while Kaspersky is ranked #20 with an average rating of 8.0. Bitdefender holds a 0.7% mindshare in EDR, compared to Kaspersky’s 1.4% mindshare. Additionally, 85% of Bitdefender users are willing to recommend the solution, compared to 95% of Kaspersky users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Kaspersky Endpoint Detection and Response Expert and Bitdefender GravityZone Extended Detection and Response compete in the cybersecurity solutions category. Bitdefender generally has the upper hand due to its superior features, though Kaspersky excels in support and pricing.

Features: Kaspersky Endpoint Detection and Response Expert is recognized for its advanced threat detection, real-time incident response, and competitive pricing. Bitdefender GravityZone XDR stands out with robust anomaly detection, integration with security tools, and comprehensive threat intelligence.

Room for Improvement: Kaspersky Endpoint Detection and Response Expert can improve its reporting tools, flexibility in deployment options, and intuitive user experience. Bitdefender GravityZone XDR needs better documentation, more intuitive configuration settings, and enhanced user interface design.

Ease of Deployment and Customer Service: Kaspersky Endpoint Detection and Response Expert scores high for its streamlined deployment process and responsive customer support. Bitdefender GravityZone XDR is also praised for its ease of deployment, though its customer service is perceived as less responsive compared to Kaspersky.

Pricing and ROI: Kaspersky Endpoint Detection and Response Expert is praised for competitive pricing and good return on investment. Bitdefender GravityZone XDR is known for its higher initial costs, justified by its feature-rich offering and excellent return on investment.

To learn more, read our detailed Bitdefender GravityZone Extended Detection and Response (XDR) vs. Kaspersky Endpoint Detection and Response Expert Report (Updated: February 2026).

Buyer's Guide

Bitdefender GravityZone Extended Detection and Response (XDR) vs. Kaspersky Endpoint Detection and Response Expert

February 2026

Download the complete report

Helped 883,760 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of March 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of Bitdefender GravityZone Extended Detection and Response (XDR) is 0.7%, up from 0.3% compared to the previous year. The mindshare of Kaspersky Endpoint Detection and Response Expert is 1.4%, up from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.4%
Kaspersky Endpoint Detection and Response Expert	1.4%
Bitdefender GravityZone Extended Detection and Response (XDR)	0.7%
Other	94.5%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

reviewer2165952

Company Advisor

Automated protection has reduced our management time and keeps all client environments consistently secure

Reporting in Bitdefender GravityZone Extended Detection and Response (XDR) could be improved. It has some reporting in it, but it's a little cumbersome to work with, so the reporting that is there could be improved. The analytics dashboards of Bitdefender GravityZone Extended Detection and Response (XDR) are quite useful, and they are nice in that we can see an overview very quickly and drill down into specific issues or specific clients. The dashboards are quite good, though it would be nice if we had the same with automated reports. It would be much more useful for us to have that via email or having a report. The only downside that we find is that the product is a little bit slow.

Read full review

Ravi-Upadhyay

Founder at Inspira Enterprise

Provides strong threat detection and response through behavior analytics and network isolation

I have found the most valuable features of Kaspersky Endpoint Detection and Response Expert to be its ability to tackle the biggest challenges customers face when they have to mitigate any kind of a malware, ransomware attack, or online theft scenarios. The solution utilizes its HIPS, which is the host intrusion prevention system, behavior analytics system, and device control mechanism, making the antivirus capabilities of EDR quite strong. It is able to detect zero-day threats as well as historical or legacy malware, providing protection against current threats in the market and legacy malware. My opinion on the advanced threat detection algorithms in Kaspersky Endpoint Detection and Response Expert is that the ATP functionality is quite strong because it utilizes the behavioral analytics engine in the backend, which employs machine learning mechanisms to identify any kind of vulnerability or exploit running on the operating system level and the network level. If an attack is about to happen on the endpoint, it is able to protect over the network as well and checks for any illegitimate encryption activities. The machine learning capability within Kaspersky Endpoint Detection and Response Expert has contributed to improving detection accuracy and reducing false positives in my environment by helping me identify malicious activity and differentiate between any malicious activity on the operating system level and on the network level. I have seen customers with in-house developed applications that have no public signatures available. Once I whitelist a particular application, it intelligently whitelists not only the executable but also all the dependent services required to run that application. Furthermore, Kaspersky Endpoint Detection and Response Expert has successfully blocked network-level attacks on the endpoint. For example, during a recent DoS attack aimed at choking the entire network, Kaspersky detected the attack, isolated the device in a sandbox network, and alerted my SOC team via email for corrective action, thereby proactively helping me detect and protect devices from malicious attacks.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It integrates well into the environment."

"The most valuable aspect of Cortex XDR by Palo Alto Networks for me is its integration with AI detection, where we get to know the behavioral detection based on users, traffic patterns, and different services that we consume."

"If any application performs suspicious activities, such as changing registries or modifying other applications, Cortex XDR detects and blocks the entire application."

"One of the main benefits of the solution is its intelligence to correlate the events into an incident."

"Stability is a primary factor, and then there's the ease of distribution and policy management."

"Implementing Cortex XDR by Palo Alto Networks has had a significant impact on my security analyst workload because it becomes much easier."

"Cortex XDR features advanced threat detection capabilities."

"The main benefit of using Cortex XDR by Palo Alto Networks while employing Palo Alto Firewall at the internet edge is that it improves security on our endpoint devices, integrating seamlessly with Palo Alto Firewalls to deliver comprehensive network, analyst, and security details all in a single dashboard, which allows us to manage everything from our network devices."

More Cortex XDR by Palo Alto Networks pros

"The solution has best-in-breed technology and scores very highly on efficacy rates."

"Bitdefender GravityZone Ultra Plus is highly stable."

"The product is easy to use."

"The threat detection rates are exceptionally good, better than most of the competition."

"I find Bitdefender GravityZone Ultra Plus to be a pretty good solution for the mid-level market, specifically for organizations with up to two hundred fifty users. I like that it is an averagely priced solution. It also has a straightforward installation that can be completed within three to five minutes. Its technical support is also good enough."

"The best features in the product, as a reseller, are the integrated SOC; integration with a SOC is one of the advantages."

"The best thing about Bitdefender is that it has got top-notch features and it is not tied to specific countries like some other antivirus tools."

"We moved from Sophos antivirus to Bitdefender GravityZone Extended Detection and Response (XDR), and ever since then, we've been very happy with the product."

More Bitdefender GravityZone Extended Detection and Response (XDR) pros

"We've found the solution to be stable."

"It is a scalable solution...It is a stable solution."

"The integration with our hypervisor is quite smooth, especially within the Kaspersky Enterprise environment. We have many virtual machines, and the integration is helpful."

"The performance for Kaspersky is good, and it's not impacted our client performance."

"Kaspersky Endpoint Detection and Response Expert offers centralized monitoring where we can monitor everything from a single point. I also like its security and network traffic features."

"The most valuable feature of Kaspersky Endpoint Detection and Response is security. It has better security than other solutions, such as Symantec."

"EDR's most valuable feature is its basic protection from malware and viruses."

"We have a central console and from there you can monitor all workstations via an agent."

More Kaspersky Endpoint Detection and Response Expert pros

Cons

"Impact on system performance is horrible, adding a lot of delays for users."

"Data privacy is a matter of concern. You have to be careful with data privacy, it can be sensitive and Cortex can have most of your access."

"I would like to see better protection, specifically to protect email applications."

"I think sometimes Cortex XDR agent automatically stops event capturing from the device, and then even the dashboard does not get any notifications from the agent."

"The setup is quite easy. We had appropriate support from the manager. One thing that was missing was the integration part."

"I recommend adding a data loss prevention (DLP) solution to Cortex XDR by Palo Alto Networks. The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products."

"There are some default policies which sometimes affect our applications and cause them to run around. In the hotel industry, we use a different type of data versus Oracle and SQL. By default, there are some policies which stop us from running properly. Because of this, the support level is also not that strong. We have to wait to get a results."

"While using Cortex, I noticed some aspects that could be improved, such as increasing the synchronization speed between XDR and Xnor."

More Cortex XDR by Palo Alto Networks cons

"Detection and response is a disadvantage that could be improved."

"Adding a feature like Data Loss Prevention would be beneficial."

"Some customers would like additional features that aren't available through the current GravityZone platform."

"I would like automatic issue fixing for users without needing to physically open the PC. I'd prefer updates and fixes from the cloud to avoid headaches and save time."

"Some customers would like additional features that aren't available through the current GravityZone platform. Some feedback has been about the deletion of other software not going smoothly during the installation of Bitdefender, particularly the removal of previous software like Sophos."

"Reporting in Bitdefender GravityZone Extended Detection and Response (XDR) could be improved."

"The solution must improve its management features."

"The solution seems to be pretty amateur for an EDR solution, and it should be more in sync in terms of features, with solutions such as FireEye and SentinelOne."

"If a customer wants to use Kaspersky on-prem, they'll need to spend a lot on the hardware. Their server must be strong because EDR is a heavy product. You need excellent hardware to run it. It might make sense to deploy the solution in the cloud. If they add features, it will only make the product heavier and increase the hardware costs."

"It does not cover all of our security issues."

"An area for improvement in Kaspersky Endpoint Detection and Response is its technical support because currently, technical support is delayed."

"There's room for improvement in customer service and support. The response time when I open a ticket or communicate with the vendor could be faster."

"Kaspersky Endpoint Detection and Response Expert needs to include a traffic interface."

"The technical support team should respond in a more timely manner."

"There are some cases that take three days to deal with. It's too long."

"The main problem with Endpoint is that Kaspersky is a Russian company, and my clients prefer not to use it."

More Kaspersky Endpoint Detection and Response Expert cons

Pricing and Cost Advice

"Traps pays for itself within the first 16 months of a three-year subscription. This is attributed to OPEX savings, as security teams spent less time trying to identify and isolate malware for analysis as a result of a reduction in malware incidents, false positives, and breach avoidance."

"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."

"I feel it is fairly priced."

"I am using the Community edition."

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."

"Cortex XDR by Palo Alto Networks is an expensive solution."

"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."

"The solution is expensive. It's pricing is on a yearly-basis."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"Bitdefender GravityZone Ultra Plus is pretty average, meaning it's not cheaper, but it's pretty good. It has average pricing."

"We have purchased licenses for the use of Bitdefender GravityZone Ultra Plus. The price of the solution is reasonable but could be better."

"There is an annual license to use Kaspersky Endpoint Detection and Response. The price overall is a bit expensive when compared to other solutions. There are not any additional fees other than the license."

"We were on a three-year license to use Kaspersky Endpoint Detection and Response. The price could be better."

"The solution's cost is reasonable compared to other vendors."

"The license for EDR costs about 1,000 pesos per user. I would rate the pricing as four out of five."

"We have been satisfied with the license of the solution."

"The solution is worth its cost so I rate pricing a ten out of ten."

"EDR is priced on the cheaper side. Licensing for EDR is available on a yearly basis for around 80 SAR a year."

"The price of Kaspersky Endpoint Detection and Response is in the middle range compared to competitors. The pricing model is based on the users using the solutions. The cost for us is approximately 2200 Algerian dinars. The price of the solution could be reduced."

More Kaspersky Endpoint Detection and Response Expert pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

883,760 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

10%

Financial Services Firm

Manufacturing Company

Comms Service Provider

14%

Computer Software Company

12%

University

Media Company

Computer Software Company

10%

Manufacturing Company

Financial Services Firm

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	47

By reviewers
Company Size	Count
Small Business	6
Large Enterprise	1

By reviewers
Company Size	Count
Small Business	30
Midsize Enterprise	4
Large Enterprise	18

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What is your experience regarding pricing and costs for Bitdefender GravityZone Ultra Plus?

The pricing and licensing of Bitdefender GravityZone Extended Detection and Response (XDR) is reasonable. We moved fr...

See all answers

What needs improvement with Bitdefender GravityZone Ultra Plus?

Reporting in Bitdefender GravityZone Extended Detection and Response (XDR) could be improved. It has some reporting i...

See all answers

What is your primary use case for Bitdefender GravityZone Ultra Plus?

Our customers typically use Bitdefender GravityZone Extended Detection and Response (XDR) primarily as an antivirus s...

See all answers

What do you like most about Kaspersky Endpoint Detection and Response Expert?

The integration with our hypervisor is quite smooth, especially within the Kaspersky Enterprise environment. We have ...

See all answers

What is your experience regarding pricing and costs for Kaspersky Endpoint Detection and Response Expert?

The price of the solution is economical.

See all answers

What needs improvement with Kaspersky Endpoint Detection and Response Expert?

The user interface of Kaspersky Endpoint Detection and Response Expert could be more intuitive, and I would appreciat...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 9% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Darktrace vs Bitdefender GravityZone Extended Detection and Response (XDR)

Compared 12% of the time

TrendAI Vision One vs Bitdefender GravityZone Extended Detection and Response (XDR)

Compared 7% of the time

Huntress Managed ITDR vs Bitdefender GravityZone Extended Detection and Response (XDR)

Compared 7% of the time

Wazuh vs Bitdefender GravityZone Extended Detection and Response (XDR)

Compared 6% of the time

Kaspersky Endpoint Security for Business vs Bitdefender GravityZone Extended Detection and Response (XDR)

Compared 4% of the time

More Bitdefender GravityZone Extended Detection and Response (XDR) Competitors

Fortinet FortiEDR vs Kaspersky Endpoint Detection and Response Expert

Compared 17% of the time

TrendAI Vision One vs Kaspersky Endpoint Detection and Response Expert

Compared 14% of the time

Check Point Harmony Endpoint vs Kaspersky Endpoint Detection and Response Expert

Compared 6% of the time

Cynet vs Kaspersky Endpoint Detection and Response Expert

Compared 4% of the time

Microsoft Defender for Endpoint vs Kaspersky Endpoint Detection and Response Expert

Compared 3% of the time

More Kaspersky Endpoint Detection and Response Expert Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

March 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Bitdefender GravityZone Extended Detection and Response (XDR)

March 2026

Bitdefender GravityZone Extended Detection and Response (XDR) report

Download Bitdefender GravityZone Extended Detection and Response (XDR) product report

Buyer's Guide

Kaspersky Endpoint Detection and Response Expert

February 2026

Kaspersky Endpoint Detection and Response Expert report

Download Kaspersky Endpoint Detection and Response Expert product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

GravityZone Ultra Plus

Kaspersky EDR

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Bitdefender GravityZone XDR enhances network security via advanced threat detection, offers centralized incident response, and comprehensive endpoint protection. Users value the user-friendly interface, robust analytics, and streamlined management, significantly boosting organizational efficiency and productivity.

Bitdefender

Kaspersky Endpoint Detection and Response Expert is a comprehensive cybersecurity solution designed to detect and respond to advanced threats in real time. It combines advanced threat intelligence, machine learning algorithms, and behavioral analysis to provide proactive protection against sophisticated attacks.

With its centralized management console, security teams can easily monitor and investigate incidents, while automated response capabilities enable quick remediation. This solution offers deep visibility into endpoint activities, allowing organizations to identify and mitigate potential risks effectively. Kaspersky Endpoint Detection and Response Expert is a powerful tool for enhancing the overall security posture of businesses, ensuring the protection of critical assets and sensitive data.

Kaspersky

Sample Customers

CBI Health Group, University Honda, VakifBank

Archdiocese, Northstar, SeSa, W&W Informatik, Yamaha Motor Europe

Ferrari, Insolar, Tael, Republic of Serbia

Buyer's Guide

Bitdefender GravityZone Extended Detection and Response (XDR) vs. Kaspersky Endpoint Detection and Response Expert

February 2026

Free Report: Bitdefender GravityZone Extended Detection and Response (XDR) vs. Kaspersky Endpoint Detection and Response Expert

Find out what your peers are saying about Bitdefender GravityZone Extended Detection and Response (XDR) vs. Kaspersky Endpoint Detection and Response Expert and other solutions. Updated: February 2026.

DOWNLOAD NOW

883,760 professionals have used our research since 2012.

See our Bitdefender GravityZone Extended Detection and Response (XDR) vs. Kaspersky Endpoint Detection and Response Expert report.

See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.