No more typing reviews! Try our Samantha, our new voice AI agent.

Bitdefender GravityZone XDR vs Microsoft Defender for Cloud comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
112
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (6th), Extended Detection and Response (XDR) (4th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Bitdefender GravityZone XDR
Average Rating
9.0
Reviews Sentiment
7.2
Number of Reviews
6
Ranking in other categories
Extended Detection and Response (XDR) (29th)
Microsoft Defender for Cloud
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
89
Ranking in other categories
Vulnerability Management (5th), Container Management (7th), Container Security (4th), Cloud Workload Protection Platforms (CWPP) (1st), Cloud Security Posture Management (CSPM) (4th), Cloud-Native Application Protection Platforms (CNAPP) (4th), Data Security Posture Management (DSPM) (4th), Microsoft Security Suite (7th), Compliance Management (4th), Cloud Detection and Response (CDR) (3rd)
 

Mindshare comparison

Extended Detection and Response (XDR) Mindshare Distribution
ProductMindshare (%)
Bitdefender GravityZone XDR1.0%
CrowdStrike Falcon9.2%
SentinelOne Singularity Endpoint6.0%
Other83.8%
Extended Detection and Response (XDR)
Cloud Workload Protection Platforms (CWPP) Mindshare Distribution
ProductMindshare (%)
Microsoft Defender for Cloud13.2%
AWS GuardDuty10.4%
Wiz9.3%
Other67.1%
Cloud Workload Protection Platforms (CWPP)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Jörg Köhler - PeerSpot reviewer
Owner at AvalisNT AG
Setup is smooth and management is seamless, while improvements in email filtering transparency enhance efficiency
For data correlation, we just haven't worked long enough with it to assess its impact on our overall threat response strategy. We prefer a system that simply informs us when there is a problem; we don't want to engage too much in threat hunting. Therefore, we're not looking to create a SOC from this, which is also why we moved from XDR to MDR. There are areas for improvement, including the difficulty in getting the right handles on the applied email filters. It's sometimes unclear why one email is treated as spam and another is not, even if they contain similar content. Making the process of how emails are treated a bit more transparent would be beneficial.
RW
Head Of IT at Cirrus Response
Cloud security has cut investigation time and now reveals threats faster but needs simpler oversight
When deploying AI applications, my key security concerns with Microsoft Defender for Cloud are data loss, leakage of data, and guardrails around the actual AI, and I am hoping that this is going to help me put those guardrails in place and identify data exfiltration. Microsoft Defender for Cloud has not helped me manage and secure multi-cloud environments, as we are 100 percent Microsoft and have not really got it in any other environment at all. I am not yet using the unified AI-powered security feature offered by Microsoft Defender for Cloud, but that is coming. I am not yet using the integrated XDR feature of Microsoft Defender for Cloud, but that is coming. I am not yet utilizing the GenAI threat protection features of Microsoft Defender for Cloud. That is also coming and a lot of that will come from learning it here. I have enabled the agentless scanning in my cloud environment with Microsoft Defender for Cloud. Assessing the impact on my workload protection without needing to install agents with Microsoft Defender for Cloud makes it a lot easier, but it also identifies a lot more, which puts more load on me sometimes. I would advise another organization considering Microsoft Defender for Cloud that it is the most logical route to follow if their whole ecosystem is Microsoft. It is easy to implement and it is very self-explanatory when doing it, making sense to just follow the steps as it is too simple, really. I would rate this review a 7.5 out of 10.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Its interface and pricing are most valuable, and it is better than other vendors in terms of security."
"I can highlight that we have not faced any security incidents with Cortex XDR by Palo Alto Networks, and even though our environment is quite dynamic, we have not faced any security incident with Cortex XDR by Palo Alto Networks until now."
"Stability is a primary factor, and then there's the ease of distribution and policy management; Cortex XDR by Palo Alto Networks is very easy to work with, and we're quite happy with them."
"Traps is quite a stable product. Once it was properly deployed and configured, you have nothing to be worried about."
"It'll not slow down your system when compared to others."
"If any application performs suspicious activities, such as changing registries or modifying other applications, Cortex XDR detects and blocks the entire application."
"It can automatically correlate events and logs, which is very helpful for an IT administrator. It can correlate different kinds of malware activities over a network, agent, or host system. You do not need to do it manually. It is a good feature. It is also a user-friendly solution. We have deployed it on the cloud because our space does not provide any flexibility for on-premises deployment, but Palo Alto has added some flexibility to install it on-premises. It must be like the same Cortex XDR agent for all the VPN services, web filtering services, and everything else."
"One of the things that I enjoy the most is using policy extensions. It's like having host firewalls to control USB connections. I think it's a wonderful tool to restrict use when connecting to our computers. Another important tool is Home Insights. That is an add-on to the Cortex solution. I like that because we can see all the vulnerabilities in the environment and control what assets are connected to our network."
"It provides an in-depth analysis and gives recommendations, along with a historical search capability."
"I find that the auto-response capability is most valuable."
"Scalability is pretty easy. It's easy to increase the capacity. You can just add on licenses to the existing license, and the duration of the license can be adjusted. For example, you've already bought a license for a year, and you want to add some more users. We can just add on licenses for the remaining period so that the entire organization can have the same expiry date. That makes renewal easier."
"Since then, we are working with it, and so far, we have no problems; it's working smoothly with email security."
"The solution has an automatic patch management capability."
"I appreciate the overall utilization of AI to enhance security posture."
"I would rate GravityZone XDR more than nine out of ten."
"The HyperDetect feature in GravityZone XDR is effective."
"The solution has also simplified management of endpoints and servers and gives us visibility in a single pane of glass."
"The most valuable feature is that it's intuitive. It's very intuitive."
"I would rate Microsoft Defender for Cloud a nine out of 10."
"The pricing is good."
"In summary, if you would like to work with a product that addresses security in the cloud, or in a multi-cloud environment then this is exactly the product."
"The main feature is the security posture assessment through the security score. I find that to be very helpful because it gives us guidance on what needs to be secured and recommendations on how to secure the workloads that have been onboarded."
"The solution is used for risks, vulnerabilities, and compliance."
"The most valuable feature is the recommendations provided on how to improve security. It has made the cloud environment more secure, thanks to all the recommendations we can get."
 

Cons

"The solution needs better reports. I think they should let the customer go in and customize the reports."
"Previously, the endpoint would leave the environment, not being on our VPN, essentially unable to interact with the server to upload files. It was unable to retrieve new file verdicts. It was using a thing called "local analysis" to determine if something was a malicious file or not. There was no dynamic analysis."
"It's not an ideal choice for smaller businesses, as you need a minimum of 200 endpoints to even use the solution at all."
"Technology evolves every day, so it would be nice if it gets more secure. It can also have more integration with other platforms."
"Cortex XDR by Palo Alto Networks is not only pricey; it is extremely expensive."
"The solution could improve by providing better integration with their own products and others."
"There are some limitations on the Traps agents."
"The downsides of Cortex XDR by Palo Alto Networks are that in many incidents, when I enter the causality chain, there are numerous logs."
"Another area of improvement is CPU utilization. CPU utilization could be improved."
"The product could be improved by offering a single panel for the management of all Bitdefender products. Additionally, there might be a need to simplify the interface in the future."
"The solution’s pricing could be improved."
"It's not very mature, and additional costs are involved."
"There are areas for improvement, including the difficulty in getting the right handles on the applied email filters."
"The resource consumption is high for Bitdefender GravityZone XDR, nearly using one gigabyte of RAM, especially on Windows 10 and 11."
"Integration into other third-party products, particularly those from tier three vendors like ManageEngine and Hexcode, has proven difficult."
"Microsoft does a fairly good job, but many products are developed from an engineer's perspective rather than the end user perspective, making the intuitive flow of the interface sometimes less than optimal."
"Microsoft Defender for Cloud could be improved by adding capabilities for NetApp files and more PaaS resources from other vendors, not just Microsoft."
"You cannot create custom use cases."
"The product's advanced analytics and reporting features could be improved."
"Azure is a complex solution. You have so many moving parts."
"However, some Copilot features aren't available in the GCP environment. This is something we hope will be addressed in the future."
"Microsoft has much room for improvement regarding the support for Microsoft Defender for Cloud. Their competitors are much better regarding support."
 

Pricing and Cost Advice

"I am using the Community edition."
"Every customer has to pay for a license because it doesn't work with what you get from a managed services provider."
"This is an expensive solution."
"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."
"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."
"The pricing is a little bit on the expensive side."
"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."
"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a six out of ten."
"It's not the price of the software itself that makes it expensive. It's because you have to buy a VM; you have to buy additional hardware. All those things make it slightly costlier."
"Pricing depends on your workload size, but it is very cheap. If you're talking about virtual machines, it is $5 or something for each machine, which is minimal. If you go for some agent-based solution for every virtual machine, then you need to pay the same thing or more than that. For an on-premises solution like this, we were paying around $30 to $50 based on size. With Defender, Microsoft doesn't bother about the size. You pay based on the number of machines. So, if you have 10 virtual machines, and 10 virtual machines are being monitored, you are paying based on that rather than the size of the virtual machine. Thus, you are paying for the number of units rather than paying for the size of your units."
"While we pay for any additional features, the pricing seems competitive, though I am not involved in the specific cost details."
"This solution is more cost-effective than some competing products. My understanding is that it is based on the number of integrations that you have, so if you have fewer subscriptions then you pay less for the service."
"Pricing is difficult because each license has its own metrics and cost."
"I am not involved much with the pricing but the bundle offering is good."
"We are using the free version of the Azure Security Center."
"The pricing model for most plans is generally good, but the cost of the new Defender for Storage plan is high and should be revisited, as it could lead to disabling desirable security features due to cost."
"The pricing and licensing of Microsoft Defender for Cloud have been good for us. We appreciate the licensing approach based on employee count rather than a big enterprise license."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
900,051 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
12%
Financial Services Firm
11%
Manufacturing Company
10%
Comms Service Provider
9%
Computer Software Company
12%
Comms Service Provider
11%
Construction Company
9%
Outsourcing Company
7%
Financial Services Firm
12%
Computer Software Company
10%
Manufacturing Company
9%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business47
Midsize Enterprise20
Large Enterprise51
No data available
By reviewers
Company SizeCount
Small Business31
Midsize Enterprise12
Large Enterprise49
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What needs improvement with Bitdefender GravityZone XDR?
For data correlation, we just haven't worked long enough with it to assess its impact on our overall threat response ...
What is your primary use case for Bitdefender GravityZone XDR?
I am using SentinelOne not for MDR, only for EDR/XDR, because we wanted to use it for MDR, but the threshold for the ...
How is Prisma Cloud vs Azure Security Center for security?
Azure Security Center is very easy to use, integrates well, and gives very good visibility on what is happening acros...
What is your experience regarding pricing and costs for Microsoft Defender for Cloud?
My experience with pricing, setup costs, and licensing was that the license cost was the only consideration. Setup an...
What needs improvement with Microsoft Defender for Cloud?
To improve Microsoft Defender for Cloud, I think pricing-wise, the license price is a little bit higher from an inges...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
Microsoft Azure Security Center, Azure Security Center, Microsoft ASC, Azure Defender
 

Interactive Demo

Demo not available
Demo not available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Microsoft Defender for Cloud is trusted by companies such as ASOS, Vatenfall, SWC Technology Partners, and more.
Find out what your peers are saying about CrowdStrike, SentinelOne, TrendAI and others in Extended Detection and Response (XDR). Updated: June 2026.
900,051 professionals have used our research since 2012.