Cisco Secure Endpoint vs Stellar Cyber Open XDR comparison

Cisco and Stellar Cyber are both solutions in the Endpoint Detection and Response (EDR) category. Cisco is ranked #27 with an average rating of 8.5, while Stellar Cyber is ranked #58. Cisco holds a 1.3% mindshare in EDR, compared to Stellar Cyber’s 1.0% mindshare. Additionally, 96% of Cisco users are willing to recommend the solution.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Cisco Secure Endpoint and Stellar Cyber Open XDR based on real PeerSpot user reviews.

Find out in this report how the two Endpoint Detection and Response (EDR) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Cisco Secure Endpoint vs. Stellar Cyber Open XDR Report (Updated: August 2026).

Buyer's Guide

Cisco Secure Endpoint vs. Stellar Cyber Open XDR

August 2026

Download the complete report

Helped 909,948 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of August 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.7%, down from 3.8% compared to the previous year. The mindshare of Cisco Secure Endpoint is 1.3%, down from 1.6% compared to the previous year. The mindshare of Stellar Cyber Open XDR is 1.0%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.7%
Cisco Secure Endpoint	1.3%
Stellar Cyber Open XDR	1.0%
Other	94.0%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

JavedHashmi

Chief Technology Officer at Future Point Technologies

Reliable threat protection is achieved while integration and analysis capabilities need refinement

Cisco Secure Endpoint is very good in machine learning, which allows it to secure offline contents even if not connected to the internet. We haven't encountered a single breach after it's deployed. It controls USB devices and has a separate antivirus solution called Tetra, providing security even for real-time, day-zero attacks through its strong Talos threat intelligence platform.

Read full review

Hrishiraj Bhattacharjee

Founder & CEO at Team Karimganj

Correlates incidents, allows for quicker identification and helps prioritize investigations

The only challenge is, and that’s where we come into play, it’s a pretty high-tech platform. So, it’s difficult for small and medium-sized organizations to manage it on their own. It’s a very complex system. It requires a lot of expertise. All my guys who work on it have gone through certification from Stellar itself. There are three different certifications that you need to complete. Only then are you certified by Stellar to work on it. It’s a very complex platform. Not everyone can use it. A simple IT engineer or system admin won’t be able to handle it because it’s quite complex. You need to have an understanding of the industry, the subject, and the tool. So, just purchasing this tool or license and then using it on your own would be very difficult to configure and manage on a day-to-day basis. The pricing model is not suitable for small and medium companies, particularly small companies. The minimum pricing model they have is suitable for companies with more than one thousand users. So, if someone has 50 to 100 users, like typical small companies, it’s difficult for them because the cost involved is high. Stellar would charge you for those thousand users, but you do not need all those users. So what are they going to do? I guess Stellar does not want to target small companies directly and maybe relies on resellers and MSPs like us to sell it. So, that is something I would recommend changing. Otherwise, it’s a great tool, but because of the pricing model, small companies are unable to leverage the advantage of this beautiful tool. So, the pricing model should be suitable for small and medium businesses. The product currently has vulnerability monitoring and everything. But if they could also do something about vulnerability management and maybe patch management, that would be nice.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Overall, it's a great platform; it integrates very well with other solutions from Palo Alto and also with our vendors, the ease of use is excellent, I love the root cause analysis from Cortex, which is amazing, and in a few clicks you can have the full root cause."

"My advice for anybody who is considering Cortex XDR is that it is a complete solution, and has very good features."

"Cortex XDR by Palo Alto Networks has changed the way my security team detects, investigates, and responds to threats, as we are able to see the files, unwanted files, unsecured files, and unauthorized files, so we are quarantining them."

"It's a nice product that's stable and scalable."

"Palo Alto is the core of the security infrastructure in the environment."

"On a scale from one to ten, I would rate Cortex XDR by Palo Alto Networks a nine."

"Cortex XDR features advanced threat detection capabilities."

"The product is mostly automated, and we do not have to make decisions, because all the decisions are made by the product itself and we are not required to create any custom policies since the policies that are created are well defined in the product itself."

More Cortex XDR by Palo Alto Networks pros

"I am told that we get over 100 million emails a month. This filters them down and allows only somewhere about three million emails, which is a great help."

"The most valuable feature at this moment is that Cisco AMP or Cisco Secure Endpoint solution is delivering a lot of things, and I always say to a lot of customers that if we didn't have Cisco AMP, we probably would have had ransomware somewhere. So, it's protecting us very well from a lot of hackers, malware, and especially ransomware."

"The visibility and insight this solution gives you into threats is pretty granular. It has constant monitoring. You can get onto the device trajectory to look at a threat, but you can also see what happened prior to the threat. You can see what happened after the threat. You can see what other applications were incorporated into the execution of the threat. For example, you have the event, but you see that the event was launched by Google Chrome, which was launched by something else. Then, after the event, something else was launched by whatever the threat was. Therefore, it gives you great detail, a timeline, and continuity of events leading up to whatever the incident is, and then, after. This helps you understand and nail down what the threat is and how to fix it."

"Definitely, the best feature for Cisco Secure Endpoint is the integration with Talos. On the backend, Talos checks all the signatures, all the malware, and for any attacks going on around the world... Because Secure Endpoint has a connection to it, we get protected by it right then and there."

"The simplicity of use is its most valuable feature. You can very clearly see things."

"The most valuable feature is signature-based malware detection."

"The solution's integration capabilities are excellent. It's one of the best features."

"There are no issues or drops in the solution's performance...The solution's technical support was helpful."

More Cisco Secure Endpoint pros

"Stellar Cyber Open XDR offers these functionalities at a more affordable price, making it easier for me to position it with price-sensitive customers."

"It can integrate with almost any cybersecurity tool available in the market."

Cons

"The downsides of Cortex XDR by Palo Alto Networks are that in many incidents, when I enter the causality chain, there are numerous logs."

"It tends to do 99.9% of things. The only thing I'd like is single sign-on authentication into their cloud platform so that my users can be properly authenticated against it."

"Cortex XDR should have a lightweight agent, and the agent size should not be heavy."

"It is not easy to sell Cortex XDR, not because it isn't a good tool. Its marketing needs to be improved."

"When it comes to malware files, it should be a little quick because, at times, it would give a wrong result in the sense of what it might be on malware, even if it still might be a normal one."

"While using Cortex, I noticed some aspects that could be improved, such as increasing the synchronization speed between XDR and Xnor."

"The solution can never really be an on-premises solution based simply on the way it is set up. It needs metadata to run and improve. Having an on-premises solution would cut it off from making improvements."

"The connection to the internet has not performed as expected."

More Cortex XDR by Palo Alto Networks cons

"The GUI needs improvement, it's not good."

"It does not include encryption and decryption of local file shares."

"Cisco Meraki could benefit from AI assistance or intelligent assistance features. Compared to competitors like Juniper, Cisco Meraki currently lacks a digital network assistant, which is an area Cisco is reportedly working on."

"I would like them to add whatever makes filtering more advanced in scanning and blocking for malware in emails."

"An easier way to do deduplication of machines, or be alerted to the fact that there's more than one instance of a machine, would be useful... That way you could get a more accurate device count, so you're not having an inflated number."

"We have had some problems with updates not playing nice with our environment. This is important, because if there is a new version, we need to test it thoroughly before it goes into production. We cannot just say, "There's a new version. It's not going to give us any problems." With the complexity of the solution using multiple engines for multiple tasks, it can sometimes cause performance issues on our endpoints. Therefore, we need to test it before we deploy. That takes one to three days before we can be certain that the new version plays nice with our environment."

"On the firewall level, they were lagging a little bit behind, but they are running up again. I have full trust in the new 3000 series of firewalls where we would also be able to look more into the traffic that we're monitoring and get more security layers in our services. That would definitely be a big step."

"The thing I hate the most, which they have not fixed, is when it creates duplicate entries within a console."

More Cisco Secure Endpoint cons

"Support is an issue because they have a limited number of resources."

"I would rate the stability at about five to six. The platform requires some fine-tuning, especially when integrating data sources and creating connectors."

Pricing and Cost Advice

"Every customer has to pay for a license because it doesn't work with what you get from a managed services provider."

"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."

"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."

"I don't like that they have different types of licenses."

"Cortex XDR’s pricing is very reasonable."

"Our license will require renewal in August, after which the maintenance will continue as usual."

"I am using the Community edition."

"It is present, but when compared to other competitive products, I would say it is not less expensive; however, when all of the other added values are considered, the price is reasonable."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"The pricing and licensing of the security solutions of Cisco are very good in comparison with the competitors, but sometimes, it's difficult to see all the discounts and other kinds of things. So, you have to be careful, but the pricing is good."

"Pricing can be more expensive than similar software that does less functionality, but not recognized by customers."

"It is a subscription-based product."

"The price is very fair to the customer."

"The pricing and licensing fees are okay."

"There are a couple of different consumption models: Pay up front, or if you have an enterprise agreement, you can do a monthly thing. Check your licensing possibilities and see what's best for your organization."

"We had faced some license issues, but it has been improved. At the beginning of the implementation, we faced a lot of licensing issues, but now, we have EA licensing, which gives us an opportunity to grow."

"We have a license for 3,000 users and if we get up to 3,100 users, it doesn't stop working, but on the next renewal date you're supposed to go in there and add that extra 100 licenses. It's really good that they let you grow and expand and then pay for it. Sometimes, with other products, you overuse a license and they just don't work."

More Cisco Secure Endpoint pricing and cost advice

"It’s a single license platform."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

909,948 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

12%

Outsourcing Company

10%

Comms Service Provider

10%

Financial Services Firm

10%

Manufacturing Company

10%

Construction Company

Financial Services Firm

Government

Manufacturing Company

14%

Comms Service Provider

10%

Computer Software Company

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	46
Midsize Enterprise	21
Large Enterprise	54

By reviewers
Company Size	Count
Small Business	21
Midsize Enterprise	15
Large Enterprise	21

No data available

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What is your experience regarding pricing and costs for Cisco Secure Endpoint?

Cisco is aggressive in pricing, making it competitive and sometimes even cheaper than other good products like CrowdS...

See all answers

What needs improvement with Cisco Secure Endpoint?

Cisco Secure Endpoint lacks features like DLP which other vendors offer. XDR is new, so integration capabilities with...

See all answers

What is your primary use case for Cisco Secure Endpoint?

We deployed Cisco Secure Endpoint for our customers two to three years back. The use case was to secure their endpoin...

See all answers

What is your experience regarding pricing and costs for Stellar Cyber Open XDR?

Pricing is a major benefit of Stellar Cyber Open XDR. I rate it between three and four on the cost scale. It offers f...

See all answers

What needs improvement with Stellar Cyber Open XDR?

I am currently evaluating Stellar Cyber Open XDR in terms of their support. I do not see any major areas for improvem...

See all answers

What is your primary use case for Stellar Cyber Open XDR?

I use Stellar Cyber Open XDR ( /products/stellar-cyber-open-xdr-reviews ) as a 24/7 security monitoring tool, especia...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 13% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Trellix Endpoint Security Platform vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

CrowdStrike Falcon vs Cisco Secure Endpoint

Compared 5% of the time

SentinelOne Singularity Endpoint vs Cisco Secure Endpoint

Compared 5% of the time

Microsoft Defender for Endpoint vs Cisco Secure Endpoint

Compared 5% of the time

Microsoft BitLocker vs Cisco Secure Endpoint

Compared 4% of the time

McAfee Total Protection for Data Loss Prevention vs Cisco Secure Endpoint

Compared 3% of the time

More Cisco Secure Endpoint Competitors

Wazuh vs Stellar Cyber Open XDR

Compared 7% of the time

SentinelOne Singularity Endpoint vs Stellar Cyber Open XDR

Compared 6% of the time

Microsoft Sentinel vs Stellar Cyber Open XDR

Compared 5% of the time

CrowdStrike Falcon vs Stellar Cyber Open XDR

Compared 4% of the time

Darktrace vs Stellar Cyber Open XDR

Compared 2% of the time

More Stellar Cyber Open XDR Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

August 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Cisco Secure Endpoint

August 2026

Download Cisco Secure Endpoint product report

Buyer's Guide

Extended Detection and Response (XDR)

August 2026

Download Stellar Cyber Open XDR product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Cisco AMP for Endpoints

No data available

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Cisco Secure Endpoint offers robust endpoint security with real-time threat prevention and cloud-based management. It is designed for seamless integration with Cisco products, delivering comprehensive protection and ease of use.

Cisco Secure Endpoint provides real-time threat detection, analytics, and rapid response capabilities. Its ease of use, integrated features like sandboxing and Device and File Trajectory, and its incorporation with Talos make it effective for threat hunting and endpoint protection. With strong machine learning and seamless integration with other tools, it addresses threat prevention and network visibility. However, there is room for improvement in AI features, SIEM API integration, user interface simplification, and cost reduction. Enhanced dashboards, reporting, and support are also areas for potential enhancement.

What are the primary features of Cisco Secure Endpoint?

Integration with Cisco Products: Seamlessly connects with Cisco's offerings like Umbrella and Firepower, providing extended security measures.
Real-Time Threat Prevention: Delivers live threat detection and rapid response, ensuring immediate protection against threats.
Cloud-Based Management: Offers ease of deployment and management through cloud infrastructure, enhancing accessibility and efficiency.
Sandboxing: Provides an isolated environment to safely execute and monitor untrusted applications, preventing potential threats.
Device and File Trajectory: Tracks the actions of devices and files over time, offering valuable insight into their behavior and impact.
Talos Integration: Leverages intelligence from Cisco Talos for enhanced threat intelligence and response capabilities.

What benefits are highlighted in reviews of Cisco Secure Endpoint?

Improved Threat Detection: Users highlight its powerful analytics for identifying and neutralizing threats promptly.
Enhanced Network Visibility: Allows for comprehensive monitoring of network activities, benefiting security operations.
User-Friendly Interface: Valued for its intuitive navigation and ease of use, streamlining security management.
Scalable Integration: Reviews emphasize the ease of integrating with existing tools and platforms, providing flexibility.
Rapid Threat Response: Known for its quick reaction to threats, minimizing potential damage and downtime.

In industries such as finance, healthcare, and manufacturing, Cisco Secure Endpoint is vital for maintaining endpoint security and malware protection. Organizations use it within managed security services, integrating with tools like Umbrella for DNS security. It provides visibility into malware activities and supports threat hunting for devices beyond corporate networks. Deployed on workstations, servers, and laptops, it efficiently logs and blocks malicious actions, ensuring a secure environment.

Cisco

Stellar Cyber Open XDR delivers an advanced, unified security solution designed for real-time threat detection and intelligent response, reducing complexity by integrating multiple tools into a single interface.

Stellar Cyber Open XDR aggregates security data from many sources to provide comprehensive threat detection and response capabilities. It offers a streamlined, user-friendly experience, allowing teams to efficiently manage incidents. By automating routine security tasks, it enhances operational efficiency and increases visibility across the entire network infrastructure.

What are the key features of Stellar Cyber Open XDR?

Open Integration: Connects with existing security tools for seamless data aggregation and correlation.
AI-Powered Analytics: Uses artificial intelligence to predict, detect, and respond to threats with high accuracy.
Automated Incident Response: Accelerates the fighting-back process through intelligent automation.
Comprehensive Dashboards: Offers clear visibility into security metrics through customizable dashboards.

What benefits or ROI should users expect?

Improved Threat Detection: Recognizes threats faster, allowing quick response to reduce potential damage.
Increased Efficiency: Reduces manual work by automating repetitive tasks, saving time for IT teams.
Cost Reduction: Consolidates security tools, decreasing overall expenditure on multiple solutions.
Enhanced Collaboration: Allows diverse security teams to work together more effectively with shared insights.

Stellar Cyber Open XDR is implemented across various industries, including finance, healthcare, and retail, offering tailored security strategies suited to industry-specific challenges. Organizations can take advantage of this integrated approach to align security operations with industry regulations efficiently.

Stellar Cyber

Sample Customers

CBI Health Group, University Honda, VakifBank

Heritage Bank, Mobile County Schools, NHL University, Thunder Bay Regional, Yokogawa Electric, Sam Houston State University, First Financial Bank

Sumitomo Chemical USA, PlastiPak Packaging, University of Denver, Large California State Agency, Large Midwestern American City

Buyer's Guide

Cisco Secure Endpoint vs. Stellar Cyber Open XDR

August 2026

Free Report: Cisco Secure Endpoint vs. Stellar Cyber Open XDR

Find out what your peers are saying about Cisco Secure Endpoint vs. Stellar Cyber Open XDR and other solutions. Updated: August 2026.

DOWNLOAD NOW

909,948 professionals have used our research since 2012.

See our Cisco Secure Endpoint vs. Stellar Cyber Open XDR report.

See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.