Cisco Secure Endpoint vs Tanium comparison

Why PeerSpot?

Cisco and Tanium are both solutions in the Endpoint Protection Platform (EPP) category. Cisco is ranked #28 with an average rating of 9.0, while Tanium is ranked #13 with an average rating of 8.3. Cisco holds a 1.3% mindshare in EPP, compared to Tanium’s 2.6% mindshare. Additionally, 96% of Cisco users are willing to recommend the solution, compared to 82% of Tanium users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 3, 2026

Tanium and Cisco Secure Endpoint are key players in the cybersecurity sector, specializing in endpoint protection solutions. Current data comparisons suggest Cisco Secure Endpoint holds a slight advantage due to its superior security features and integration capabilities.

Features: Tanium offers real-time data collection, comprehensive asset management, and patch management capabilities, providing precise control and visibility over endpoints. Cisco Secure Endpoint, on the other hand, delivers advanced threat protection, integration with other Cisco products like Talos, and centralized management via a user-friendly console, enhancing its value for organizations seeking robust security measures.

Room for Improvement: Tanium could enhance its ease of deployment and user interface to facilitate quicker onboarding, particularly for smaller IT teams. Additionally, its integration with third-party security tools could be expanded. Cisco Secure Endpoint could improve transparency in incident resolution times, refine the user experience for less tech-savvy users, and streamline its configuration process to reduce initial setup hurdles.

Ease of Deployment and Customer Service: Cisco Secure Endpoint is known for a straightforward deployment process and efficient customer service, which contributes to its rapid integration and effective support. In contrast, Tanium often requires more comprehensive setup and dedicated resources, which can pose challenges for organizations with limited IT staff.

Pricing and ROI: Tanium is perceived as cost-effective initially and offers substantial long-term ROI through its asset management capabilities, potentially reducing operational costs. Conversely, while Cisco Secure Endpoint may involve a higher initial setup cost, its security capabilities justify the investment, offering a satisfactory ROI for businesses focused on comprehensive security outcomes.

To learn more, read our detailed Cisco Secure Endpoint vs. Tanium Report (Updated: October 2026).

Buyer's Guide

Cisco Secure Endpoint vs. Tanium

October 2026

Download the complete report

Helped 920,769 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of November 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.6% compared to the previous year. The mindshare of Cisco Secure Endpoint is 1.3%, down from 1.5% compared to the previous year. The mindshare of Tanium is 2.6%, up from 2.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.8%
Tanium	2.6%
Cisco Secure Endpoint	1.3%
Other	92.3%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

JavedHashmi

Chief Technology Officer at Future Point Technologies

Reliable threat protection is achieved while integration and analysis capabilities need refinement

Cisco Secure Endpoint is very good in machine learning, which allows it to secure offline contents even if not connected to the internet. We haven't encountered a single breach after it's deployed. It controls USB devices and has a separate antivirus solution called Tetra, providing security even for real-time, day-zero attacks through its strong Talos threat intelligence platform.

Read full review

Sandeepraj Gatla

Dfir Analyst at a tech services company with 201-500 employees

Endpoint monitoring has strengthened incident response and provides rapid isolation and forensics

Tanium provides an endpoint which is isolated from the network and environment. We can easily search its logs and history and connect remotely directly to that particular device which has been isolated from the network. We can search for the history and logs, including audit logs and event logs. The complete activity of the user or owner of the device is visible to us. We can see the artifacts of particular USB transfers internally for official use. We can not only connect remotely but also see the device status and how many failures have occurred within the network so far. We can see the IP address, how many times it has changed its IP address, and how many times it was connected to VPN or external VPN or internal VPN and what has been searched while on VPN. We can block the IOCs or IP addresses as well. We can block domains, hashes, SHA values, SHA-256, SHA-1, SHA-5 and MD5. Although I am not completely involved in the automation team, we do have that team and I have worked in some CERT recently. Tanium is more useful while we are in the CERT because most of the times when we are on high alert, Tanium does play a main role for that particular incident or any high case. Tanium is a simple tool and we can easily integrate it to many devices and it is a mandatory tool to secure an endpoint. It is mandatory to give any RDP connection and the tool should be present in the particular device. It is completely mandatory and it is in the policy as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We have found in our test Cortex XDR by Palo Alto Networks to be a very good tool."

"My advice for anybody who is considering Cortex XDR is that it is a complete solution, and has very good features."

"The most valuable feature is that you can select remote access of any machine for sandboxing."

"Cortex XDR can integrate the firewalls and determine the tendencies of the attacks. It's a new generation antivirus, with protection endpoints and detection response. It is very easy to use and everybody can operate the solution."

"On a scale from one to ten, I would rate Cortex XDR by Palo Alto Networks a nine."

"The most valuable aspect of Cortex XDR by Palo Alto Networks for me is its integration with AI detection, where we get to know the behavioral detection based on users, traffic patterns, and different services that we consume."

"The product is very good, it has caught a lot of exploits that most products would not."

"If the user leaves our premises or network, Palo Alto Traps will still be on that endpoint and will still apply our policies."

More Cortex XDR by Palo Alto Networks pros

"The biggest lesson that I have learned from using this product is that there is a lot more malware slipping through my email filters than I expected."

"The fact that I've been using it for five years already means that I believe I can trust it, and others can also trust it."

"The visibility and insight this solution gives you into threats is pretty granular. It has constant monitoring. You can get onto the device trajectory to look at a threat, but you can also see what happened prior to the threat. You can see what happened after the threat. You can see what other applications were incorporated into the execution of the threat. For example, you have the event, but you see that the event was launched by Google Chrome, which was launched by something else. Then, after the event, something else was launched by whatever the threat was. Therefore, it gives you great detail, a timeline, and continuity of events leading up to whatever the incident is, and then, after. This helps you understand and nail down what the threat is and how to fix it."

"The simplicity of use is its most valuable feature, where you can very clearly see things, go back in time and get details of where the malware started, what happened, and where it went from the minute it got in, with a good scope and a good ability to shut it down and then go back and see what happened."

"The entirety of our network infrastructure is Cisco and the most valuable feature is the integration."

"Cisco has definitely improved our organization a lot. In terms of business, our company feels safer. We actually switched from legacy signature-based solutions to threat intelligence-based and machine learning-based solutions, which is Cisco Secure. This has improved our security significantly, from 10% of signature-based technology security to 99.9% of the current one which we are running. We were happy."

"Its most valuable features are its scalability and advanced threat protection for customers."

"The Cisco suite of security solutions definitely gives us a great deal of comfort that we are doing that."

More Cisco Secure Endpoint pros

"Tanium has made the process of detecting threats more proactive with its detection. So, the process is easier and more efficient."

"I like the tool's incident response and security patching."

"The security features are very valuable."

"The solution is scalable and helps to understand how infrastructure works. It helps to improve the health of the organization."

"Tanium’s best features include support for any Windows, Linux, or Mac endpoint, regardless of where it is, and the ability to do IT operations and security operations."

"I find the inventory and compliance features of Tanium to be the most impressive."

"I like the fact that you can create patching campaigns depending on the area of your network that you want to address first. I like the ability it has to make several campaigns that work in parallel."

"For incident response tasks, all these tasks can get done in minutes with minimal disruption to the end-user."

More Tanium pros

Cons

"A little bit more automation would be nice."

"The dashboard could use some significant improvement, just making it more useful with more information. It has a limited amount of information right now. It is customizable, but I'd love to see a better out-of-box dashboard."

"Cortex XDR by Palo Alto Networks could improve by adding a sandbox feature to better compete with their competitors which have it."

"The solution lags to the real-time scenarios here and there."

"The solution lacks real-time, on-demand antivirus."

"The product's pricing needs improvement. They could provide more discounts. Additionally, the dashboard and control panel could be enhanced."

"In terms of areas of improvement, we have not completed our review of the product. We're also looking at other products. So, it's a little bit hard to tell what could be different because we have not completed the review of this product, but based on our experience so far, its implementation is quite complex."

"Cortex XDR by Palo Alto Networks is a very good product, but financially, it is very expensive, so the company should look into that area."

More Cortex XDR by Palo Alto Networks cons

"Cisco is good in terms of threat intelligence plus machine learning-based solutions, but we feel Cisco is lagging behind in using artificial intelligence in its systems."

"In terms of the user experience, if the UX design could be much simpler [that would improve things]... if they could make it more intuitive for someone who is not an engineer so that they still can read what's going on in their webpage and understand, that would be something."

"The thing I hate the most, which they have not fixed, is when it creates duplicate entries within a console. If you have a computer and you upgrade from Windows 7 to Windows 10, or you upgrade your agent from version 6 to 7, it creates a new instance in there instead of updating the information. Instead of paying a license for one computer, I have to license two computers until I manually go in, search for all the duplicate entries, and clean them out myself."

"The GUI needs improvement, it's not good."

"You need a certain level of technical experience because the console is not the easiest thing to look at."

"Previously, there were options to uninstall the agent without a password if you had admin access, and this could be improved."

"The initial setup of Cisco Secure Endpoint is complex."

"It is not very stable because we have new versions four times a year, which fixes bugs. We had some problems with some deployments."

More Cisco Secure Endpoint cons

"We set a policy to block USB access. The moment a device is being set up on the network, I apply the policy, but it does not come into effect immediately."

"The only improvement I can think of for Tanium would be a little faster access to the internet and to the cloud portion, as clients are reporting that while we are getting great data, we always need to have great data outputs."

"The most painful thing is the interface. It's a bit unclear sometimes."

"The solution lacks mobility."

"The solution can give a lot of false positives."

"I would like to have more integrations and custom plugins to input. Integration is always a big deal in a lot of different environments."

"When working with Tanium, there are some older devices that haven't been patched for a long time, and certain patches are not included in Tanium. I have to search outside to download patches, create bundles, and then perform the task."

"The main issues are the network connection because different customers have issues with their networks. It's difficult implementing this type of solution because the network is the main feature in the architecture for these types of solutions. Tanium could improve by creating some network optimization."

More Tanium cons

Pricing and Cost Advice

"Cortex XDR's pricing is ok."

"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."

"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."

"I feel it is fairly priced."

"The solution is expensive. It's pricing is on a yearly-basis."

"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."

"The pricing is okay, although direct support can be expensive."

"It's about $55 per license on a yearly basis."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"You must make monthly payments towards the licensing charges attached to the product. There are no extra charges apart from the standard licensing fees associated with the product."

"We have a license for 3,000 users and if we get up to 3,100 users, it doesn't stop working, but on the next renewal date you're supposed to go in there and add that extra 100 licenses. It's really good that they let you grow and expand and then pay for it. Sometimes, with other products, you overuse a license and they just don't work."

"We can know if something bad is potentially happening instantaneously and prevent it from happening. We can go to a device and isolate it before it infects other devices. In our environment, that's millions of dollars saved in a matter of seconds."

"Cisco's pricing is reasonable. We also do not need to opt for niche players, which would have charged us significantly more than Cisco for ecosystem solutions. We are highly satisfied with the pricing structure of Cisco's solutions they are reasonable."

"Whenever you are doing the licensing process, I would highly advise to look at what other Cisco solutions you have in your organization, then evaluate if an Enterprise Agreement is the best way to go. In our case, it was the best way to go. Since we had so many other Cisco products, we were able to tie those in. We were actually able to get several Cisco security solutions for less than if we had bought three or four Cisco security solutions independently or ad hoc."

"It is a subscription-based product."

"Pricing is a big issue."

"In our case, it is a straightforward annual payment through our Enterprise Agreement."

More Cisco Secure Endpoint pricing and cost advice

"The solution offers value for money."

"It's an expensive solution. It would be nice if the cost were lower."

"There is an annual license required to use this solution."

"It is higher than some competitors in the market."

"The product's pricing differs from region to region depending on negotiations and the number of endpoints."

"The solution is expensive but it's a good investment."

"Tanium is a more expensive solution in Latin America than some of the competitors, such as BigFix."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

920,769 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

14%

Outsourcing Company

12%

Construction Company

10%

Manufacturing Company

10%

Manufacturing Company

12%

Outsourcing Company

Financial Services Firm

Construction Company

Financial Services Firm

14%

Manufacturing Company

Government

Healthcare Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	50
Midsize Enterprise	21
Large Enterprise	57

By reviewers
Company Size	Count
Small Business	21
Midsize Enterprise	15
Large Enterprise	21

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	4
Large Enterprise	12

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What is your experience regarding pricing and costs for Cisco Secure Endpoint?

Cisco is aggressive in pricing, making it competitive and sometimes even cheaper than other good products like CrowdS...

See all answers

What needs improvement with Cisco Secure Endpoint?

Cisco Secure Endpoint lacks features like DLP which other vendors offer. XDR is new, so integration capabilities with...

See all answers

What is your primary use case for Cisco Secure Endpoint?

We deployed Cisco Secure Endpoint for our customers two to three years back. The use case was to secure their endpoin...

See all answers

What needs improvement with Tanium?

While there is always room for improvement, I am pleased with Tanium.

See all answers

What is your primary use case for Tanium?

The primary use case for Tanium ( /products/tanium-reviews ) is compliance, patching, and inventory as part of the co...

See all answers

What advice do you have for others considering Tanium?

For smaller companies, Tanium is quite a big investment, and one needs to have a considerable setup to make it econom...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 16% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

CrowdStrike Falcon vs Cisco Secure Endpoint

Compared 5% of the time

SentinelOne Singularity Endpoint vs Cisco Secure Endpoint

Compared 5% of the time

Microsoft BitLocker vs Cisco Secure Endpoint

Compared 4% of the time

Microsoft Defender for Endpoint vs Cisco Secure Endpoint

Compared 4% of the time

Fortinet FortiEDR vs Cisco Secure Endpoint

Compared 4% of the time

More Cisco Secure Endpoint Competitors

CrowdStrike Falcon vs Tanium

Compared 5% of the time

Microsoft Defender for Endpoint vs Tanium

Compared 4% of the time

BigFix vs Tanium

Compared 4% of the time

Microsoft Configuration Manager vs Tanium

Compared 3% of the time

Symantec Endpoint Security vs Tanium

Compared 3% of the time

More Tanium Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

October 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Cisco Secure Endpoint

October 2026

Download Cisco Secure Endpoint product report

Buyer's Guide

Tanium

October 2026

Download Tanium product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Cisco AMP for Endpoints

Tanium Inc Cloud, Tanium XEM

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Cisco Secure Endpoint offers robust endpoint security with real-time threat prevention and cloud-based management. It is designed for seamless integration with Cisco products, delivering comprehensive protection and ease of use.

Cisco Secure Endpoint provides real-time threat detection, analytics, and rapid response capabilities. Its ease of use, integrated features like sandboxing and Device and File Trajectory, and its incorporation with Talos make it effective for threat hunting and endpoint protection. With strong machine learning and seamless integration with other tools, it addresses threat prevention and network visibility. However, there is room for improvement in AI features, SIEM API integration, user interface simplification, and cost reduction. Enhanced dashboards, reporting, and support are also areas for potential enhancement.

What are the primary features of Cisco Secure Endpoint?

Integration with Cisco Products: Seamlessly connects with Cisco's offerings like Umbrella and Firepower, providing extended security measures.
Real-Time Threat Prevention: Delivers live threat detection and rapid response, ensuring immediate protection against threats.
Cloud-Based Management: Offers ease of deployment and management through cloud infrastructure, enhancing accessibility and efficiency.
Sandboxing: Provides an isolated environment to safely execute and monitor untrusted applications, preventing potential threats.
Device and File Trajectory: Tracks the actions of devices and files over time, offering valuable insight into their behavior and impact.
Talos Integration: Leverages intelligence from Cisco Talos for enhanced threat intelligence and response capabilities.

What benefits are highlighted in reviews of Cisco Secure Endpoint?

Improved Threat Detection: Users highlight its powerful analytics for identifying and neutralizing threats promptly.
Enhanced Network Visibility: Allows for comprehensive monitoring of network activities, benefiting security operations.
User-Friendly Interface: Valued for its intuitive navigation and ease of use, streamlining security management.
Scalable Integration: Reviews emphasize the ease of integrating with existing tools and platforms, providing flexibility.
Rapid Threat Response: Known for its quick reaction to threats, minimizing potential damage and downtime.

In industries such as finance, healthcare, and manufacturing, Cisco Secure Endpoint is vital for maintaining endpoint security and malware protection. Organizations use it within managed security services, integrating with tools like Umbrella for DNS security. It provides visibility into malware activities and supports threat hunting for devices beyond corporate networks. Deployed on workstations, servers, and laptops, it efficiently logs and blocks malicious actions, ensuring a secure environment.

Cisco

Tanium offers robust endpoint protection, patching, and inventory management, consolidating the functions of tools like BigFix with capabilities in incident response, network security, and cloud or on-premise deployments.

Known for real-time capabilities, Tanium provides detailed analytics, security features, and device management. Users benefit from quick implementation, real-time updates, and patching campaigns. Despite its strengths, integration and custom plugin expansion remain areas to improve, along with data visualization and network optimization. Reporting enhancements and user training could advance its usability, and some UI elements may require updates for clarity and security.

What are the essential features of Tanium?

Detailed Analytics: Provides actionable insights for better decision-making.
Security Capabilities: Offers strong defense measures against threats.
Real-Time Queries: Facilitates immediate information access.
Patch Management: Streamlines software updates across devices.
Device Management: Efficiently handles comprehensive inventory and monitoring tasks.

What benefits should users expect?

Ease of Use: Simplifies complex IT tasks.
Scalability: Adapts to growing IT infrastructure needs.
Integration Flexibility: Merges with existing systems effortlessly.
Real-Time Updates: Ensures current data availability for informed actions.

Tanium's deployment spans industries focusing on endpoint protection and compliance, ensuring reliable device and server management in settings where safety and quick adaptation are critical. Organizations use it for application deployment, compliance checks, and integrating it as an EDR solution, enhancing overall security and operational efficiencies.

Tanium

Sample Customers

CBI Health Group, University Honda, VakifBank

Heritage Bank, Mobile County Schools, NHL University, Thunder Bay Regional, Yokogawa Electric, Sam Houston State University, First Financial Bank

JPMorgan Chase, eBay, Amazon, US Bank, MetLife, pwc, Cerner, Delphi, MGM Grand, New York Life

Buyer's Guide

Cisco Secure Endpoint vs. Tanium

October 2026

Free Report: Cisco Secure Endpoint vs. Tanium

Find out what your peers are saying about Cisco Secure Endpoint vs. Tanium and other solutions. Updated: October 2026.

DOWNLOAD NOW

920,769 professionals have used our research since 2012.

See our Cisco Secure Endpoint vs. Tanium report.

See our list of best Endpoint Protection Platform (EPP) vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.