Cisco Secure Endpoint vs Kaspersky Anti-Targeted Attack Platform comparison

Cisco and Kaspersky are both solutions in the Endpoint Detection and Response (EDR) category. Cisco is ranked #19 with an average rating of 8.3, while Kaspersky is ranked #55 with an average rating of 6.7. Cisco holds a 1.6% mindshare in EDR, compared to Kaspersky’s 0.2% mindshare. Additionally, 96% of Cisco users are willing to recommend the solution, compared to 66% of Kaspersky users who would recommend it.

Cisco Secure Endpoint

Read 49 Cisco Secure Endpoint reviews

6,037 Views
3,562 Comparison Views

96% willing to recommend

Kaspersky Anti-Targeted Att...

Read 6 Kaspersky Anti-Targeted Attack Platform reviews

451 Views
320 Comparison Views

66% willing to recommend

Cisco Secure Endpoint

Kaspersky Anti-Targeted Att...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Cisco Secure Endpoint and Kaspersky Anti-Targeted Attack Platform compete in the security solutions category. Kaspersky Anti-Targeted Attack Platform seems to have the upper hand due to its more robust feature set despite the higher cost.

Features: Cisco Secure Endpoint is integrated with other Cisco products, offers effective endpoint protection, and has comprehensive support. Kaspersky Anti-Targeted Attack Platform boasts advanced threat detection capabilities, a robust feature set, and higher accuracy in detection.

Room for Improvement: Cisco Secure Endpoint faces challenges with scalability, detailed reporting, and occasional user interface issues. Kaspersky Anti-Targeted Attack Platform needs better integration with third-party tools, enhanced user training resources, and an improved user interface.

Ease of Deployment and Customer Service: Cisco Secure Endpoint is recognized for a straightforward deployment process and reliable customer service. Kaspersky Anti-Targeted Attack Platform's deployment is more complex, but it benefits from highly responsive and knowledgeable customer service.

Pricing and ROI: Cisco Secure Endpoint comes with reasonable setup costs and satisfactory ROI. Kaspersky Anti-Targeted Attack Platform presents higher setup costs, but users find significant long-term benefits and substantial ROI due to its advanced features.

To learn more, read our detailed Cisco Secure Endpoint vs. Kaspersky Anti-Targeted Attack Platform Report (Updated: June 2025).

Buyer's Guide

Cisco Secure Endpoint vs. Kaspersky Anti-Targeted Attack Platform

June 2025

Download the complete report

Helped 861,803 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cisco Secure Endpoint

Ranking in Endpoint Detection and Response (EDR)

19th

Average Rating

8.6

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Endpoint Protection Platform (EPP) (25th), Cisco Security Portfolio (7th)

Kaspersky Anti-Targeted Att...

Ranking in Endpoint Detection and Response (EDR)

55th

Average Rating

6.6

Reviews Sentiment

6.1

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of July 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Cisco Secure Endpoint is 1.6%, down from 1.9% compared to the previous year. The mindshare of Kaspersky Anti-Targeted Attack Platform is 0.2%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR)

Featured Reviews

Ahmed-Dawood

Director of IT at Oriental Weavers

A tool that offers good performance and technical support along with great protection to endpoint devices

The vendor from Cisco takes care of the maintenance. We need three people to take care of the tool in case of crashes. From the dashboard, we come to know about everything related to the endpoint. You can take action unless it is not the physical hardware to which something wrong has happened, especially if something wrong happens to the operating system. I would definitely recommend the solution to those planning to use it. To provide endpoint protection, I feel the product should be speedy enough to detect malicious programs and trojans. There are a lot of tools that are not acting as signature-based but as behavior-based antivirus. Cisco Secure Endpoint is required, especially if the customers don't have a sandbox. Overall, I rate the product an eight out of ten.

Read full review

FarkhundAbbas

Security Engineer at adcb

The tool provides excellent sandboxing and email security features, but the backup and recovery features are not good

If my primary solution is down, no backup solution is available to restore it. It is one of the biggest weaknesses of the platform. If I need to update the solution, there is no option to pick the events and the logs from it and deploy it in another solution. The backup and recovery features of the product are not good. I need backup. If the tool is down for some time, I cannot get the logs at that particular time.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Real-time threat prevention using sandboxing, file trajectory, and retrospective security."

"It doesn't impact the devices. It is an agent-based solution, and we see no performance knock on cell phones. That was a big thing for us, especially in the mobile world. We don't see battery degradation like you do with other solutions which really drain the battery, as they're constantly doing things. That can shorten the useful life of a device."

"The visibility and insight this solution gives you into threats is pretty granular. It has constant monitoring. You can get onto the device trajectory to look at a threat, but you can also see what happened prior to the threat. You can see what happened after the threat. You can see what other applications were incorporated into the execution of the threat. For example, you have the event, but you see that the event was launched by Google Chrome, which was launched by something else. Then, after the event, something else was launched by whatever the threat was. Therefore, it gives you great detail, a timeline, and continuity of events leading up to whatever the incident is, and then, after. This helps you understand and nail down what the threat is and how to fix it."

"Device Trajectory is one of the most valuable features. We're able to dig in and really understand how things came to be and where to focus our efforts."

"The threat Grid with the ability to observe the sandboxing, analyze, and perform investigations of different malicious files has been great."

"The most valuable feature is signature-based malware detection."

"Cisco has definitely improved our organization a lot. In terms of business, our company feels safer. We actually switched from legacy signature-based solutions to threat intelligence-based and machine learning-based solutions, which is Cisco Secure. This has improved our security significantly, from 10% of signature-based technology security to 99.9% of the current one which we are running. We were happy."

"It provides real-time visibility and control over endpoints, allowing its users to promptly respond to any security incidents and remediate any vulnerabilities."

More Cisco Secure Endpoint pros

"The email security feature is really good."

"The solution is very easy to use. Its interface is very simple, and you can build IOC's indicators. You can use your rules to detect these attacks because you can leverage threat intelligence. Y"

"I feel the anti-ransomware update is one of the tool's valuable features."

"Kaspersky Anti-Targeted Attack Platform is stable and runs all the time."

"The product's deployment phase is easy."

"The most valuable use is detailing metadata collection from the endpoint and network."

Cons

"We have had some problems with updates not playing nice with our environment. This is important, because if there is a new version, we need to test it thoroughly before it goes into production. We cannot just say, "There's a new version. It's not going to give us any problems." With the complexity of the solution using multiple engines for multiple tasks, it can sometimes cause performance issues on our endpoints. Therefore, we need to test it before we deploy. That takes one to three days before we can be certain that the new version plays nice with our environment."

"The one challenge that I see is the use of multiple endpoint protection platforms. For instance, we have AMP, but we also have Microsoft Windows Defender, System Center Endpoint Protection, and Microsoft Malware Protection Engine deployed. So, we have a bunch of different things that do the same thing. What winds up happening is, e.g., if I get an alert for a potential incident or malware and want to pull the file, I'll go to fetch the file to analyze it. But, one of these other programs has already gotten it, so the file has already been quarantined by another endpoint protection system. AMP doesn't realize that and the file fetch fails, then you're left wondering what's going on."

"On the firewall level, they were lagging a little bit behind, but they are running up again. I have full trust in the new 3000 series of firewalls where we would also be able to look more into the traffic that we're monitoring and get more security layers in our services. That would definitely be a big step."

"It cannot currently block URLs over websites."

"This product has issues with the number of false positives that it reports."

"In the next version of this solution, I would like to see the addition of local authentication."

"The technical support is very slow."

"One of the things that Cisco Secure Endpoint really needs is that it's not just Secure Endpoint, it's a point product, and I think we really need to move into solution-based selling, designing, and architecting. So that we're not worried about putting things on endpoints and selling 'x' amount of endpoints, but to provide a solution that covers all of the remote access and sell them as solutions that cover multiple things."

More Cisco Secure Endpoint cons

"Kaspersky Anti-Targeted Attack Platform is not a good product. We had problems with endpoints and the solution did not detect it. We didn't get any alerts about the attack."

"The blind spot or gap in the platform is network analysis functionality."

"The solution lacks cloud integrations."

"In some of the places I have come across, even though they use Kaspersky, the ransomware enters their system."

"The backup and recovery features of the product are not good."

"I think the tool is still not really good enough for integration compared to other products."

Pricing and Cost Advice

"The solution is highly affordable; I believe we pay $2 or $3 per endpoint. It's significantly cheaper than the competitors on the market."

"We had faced some license issues, but it has been improved. At the beginning of the implementation, we faced a lot of licensing issues, but now, we have EA licensing, which gives us an opportunity to grow."

"Whenever you are doing the licensing process, I would highly advise to look at what other Cisco solutions you have in your organization, then evaluate if an Enterprise Agreement is the best way to go. In our case, it was the best way to go. Since we had so many other Cisco products, we were able to tie those in. We were actually able to get several Cisco security solutions for less than if we had bought three or four Cisco security solutions independently or ad hoc."

"Because we do see the value of what it's bringing, I think they have priced it well."

"I rate the pricing a five or six on a scale of one to ten, where one is expensive, and ten is cheap."

"The solution's price is about the same as that of Palo Alto solutions."

"The costs of 50 licenses of AMP for three years is around $9,360."

"It is an expensive solution."

More Cisco Secure Endpoint pricing and cost advice

"The solution has competitive pricing."

"Kaspersky Anti-Targeted Attack Platform is cheap."

"Kaspersky is one of the cheaper solutions."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

861,803 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

23%

Manufacturing Company

Financial Services Firm

Government

Computer Software Company

23%

Financial Services Firm

12%

Government

12%

Educational Organization

10%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about Cisco Secure Endpoint?

The product's initial setup phase was very simple.

See all answers

What is your experience regarding pricing and costs for Cisco Secure Endpoint?

Cisco is aggressive in pricing, making it competitive and sometimes even cheaper than other good products like CrowdStrike, Microsoft Defender, or SentinelOne.

See all answers

What needs improvement with Cisco Secure Endpoint?

Cisco Secure Endpoint lacks features like DLP which other vendors offer. XDR is new, so integration capabilities with third-party tools need improvement. The forensic capabilities need enhancement,...

See all answers

What do you like most about Kaspersky Anti-Targeted Attack Platform?

The solution is very easy to use. Its interface is very simple, and you can build IOC's indicators. You can use your rules to detect these attacks because you can leverage threat intelligence. Y

See all answers

What is your experience regarding pricing and costs for Kaspersky Anti-Targeted Attack Platform?

Its price is reasonable; it's neither very high nor very low, considering its capabilities.

See all answers

What needs improvement with Kaspersky Anti-Targeted Attack Platform?

I think the tool is still not really good enough for integration compared to other products. If you need to integrate with the ecosystem of the Kaspersky primary, and if we are going to the third p...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cisco Secure Endpoint

Compared 15% of the time

CrowdStrike Falcon vs Cisco Secure Endpoint

Compared 10% of the time

SentinelOne Singularity Complete vs Cisco Secure Endpoint

Compared 6% of the time

Cortex XDR by Palo Alto Networks vs Cisco Secure Endpoint

Compared 4% of the time

Check Point Harmony Endpoint vs Cisco Secure Endpoint

Compared 4% of the time

More Cisco Secure Endpoint Competitors

Darktrace vs Kaspersky Anti-Targeted Attack Platform

Compared 55% of the time

Trend Vision One vs Kaspersky Anti-Targeted Attack Platform

Compared 45% of the time

More Kaspersky Anti-Targeted Attack Platform Competitors

Product Reports

Buyer's Guide

Cisco Secure Endpoint

July 2025

Download Cisco Secure Endpoint product report

Buyer's Guide

Kaspersky Anti-Targeted Attack Platform

July 2025

Kaspersky Anti-Targeted Attack Platform report

Download Kaspersky Anti-Targeted Attack Platform product report

Also Known As

Cisco AMP for Endpoints

Kaspersky Anti Targeted Attack

Overview

Cisco Secure Endpoint is a comprehensive endpoint security solution that natively includes open and extensible extended detection and response (XDR) and advanced endpoint detection and response (EDR) capabilities. Secure Endpoint offers relentless breach protection that enables you to be confident, be bold, and be fearless with one of the industry’s most trusted endpoint security solutions. It protects your hybrid workforce, helps you stay resilient, and secures what’s next with simple, comprehensive endpoint security powered by unique insights from 300,000 security customers and deep visibility from the networking leader.

Cisco Secure Endpoint was formerly known as Cisco AMP for Endpoints.

Reviews from Real Users

Cisco Secure Endpoint stands out among its competitors for a number of reasons. Two major ones are its ability to enable developers to easily secure their endpoints with one single operation using its management console and its advanced alerting techniques.

Tim C., an IT manager at Van Der Meer Consulting, writes, "The solution makes it possible to see a threat once and block it everywhere across all endpoints and the entire security platform. It has the ability to block right down to the file and application level across all devices based on policies, such as, blacklisting and whitelisting of software and applications. This is good. Its strength is the ability to identify threats very quickly, then lock them and the network down and block the threats across the organization and all devices, which is what you want. You don't want to be spending time working out how to block something. You want to block something very quickly, letting that flow through to all the devices and avoiding the same scenario on different operating systems."

Wouter H., a technical team lead network & security at Missing Piece BV, notes, "Any alert that we get is an actionable alert. Immediately, there is information that we can just click through, see the point in time, what happened, what caused it, and what automatic actions were taken. We can then choose to take any manual actions, if we want, or start our investigation. We're no longer looking at digging into information or wading through hundreds of incidents. There's a list which says where the status is assigned, e.g., under investigation or investigation finished. That is all in the console. It has taken away a lot of the administration, which we would normally be doing, and integrated it into the console for us."

Cisco

Today’s cybercriminals constantly design unique and innovative methods of penetration and compromise. To avoid perimeter prevention technologies they use social engineering, non-malware and supply chain attacks to operate under the radar of security designed to catch ‘bad’ traces. It’s not enough to just ‘know’ what’s bad or dangerous – enterprises need to understand what’s normal, and use AI-driven techniques that simplify and automate this process. Targeted Attack Analyzer is a machine learning engine that involves self-learning to establish the baseline of normal, legitimate activities of an entire network. Through continuous network telemetry collection it finds deviations, detects suspicious activities and predicts further malicious actions at the initial stages of multilayered attacks.

Kaspersky

Sample Customers

Heritage Bank, Mobile County Schools, NHL University, Thunder Bay Regional, Yokogawa Electric, Sam Houston State University, First Financial Bank

Republic of Serbia, Goods.ru, Tael, Insolar

Buyer's Guide

Cisco Secure Endpoint vs. Kaspersky Anti-Targeted Attack Platform

June 2025

Free Report: Cisco Secure Endpoint vs. Kaspersky Anti-Targeted Attack Platform

Find out what your peers are saying about Cisco Secure Endpoint vs. Kaspersky Anti-Targeted Attack Platform and other solutions. Updated: June 2025.

DOWNLOAD NOW

861,803 professionals have used our research since 2012.

See our Cisco Secure Endpoint vs. Kaspersky Anti-Targeted Attack Platform report.

See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.