ConnectWise SIEM vs Datto Endpoint Detection and Response (EDR) comparison

ConnectWise SIEM vs. Datto Endpoint Detection and Response (EDR)

Download the complete report

Helped 902,988 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of July 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.6%, down from 3.9% compared to the previous year. The mindshare of ConnectWise SIEM is 0.8%, up from 0.2% compared to the previous year. The mindshare of Datto Endpoint Detection and Response (EDR) is 1.2%, down from 2.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.6%
Datto Endpoint Detection and Response (EDR)	1.2%
ConnectWise SIEM	0.8%
Other	94.4%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

reviewer2711757

Cyber Security Software Engineer at a tech services company with 11-50 employees

Automated alerting and reporting excel while cost and feature limitations remain

I find automation to be one of the best and most valuable features of the product. Machine learning is incorporated into the solution, though AI is a broader term that I wouldn't apply here. I haven't personally explored AI yet, but I will investigate it. Machine learning functions more as automation in my experience, as there's no training involved yet. I want to conduct R&D on another project with Wazuh to determine how to capture usage, for example, tracking user logins and time spent. This is where I need to implement machine learning. Additionally, the extraction of GeoIP adds complexity. The solution is effectively reducing incident response times in operations.

Read full review

reviewer2406663

Director at a computer software company with 11-50 employees

Effective risk response, easy deployment, and enhanced security

They use Datto EDR as part of the solutions that we supply Datto EDR has helped reduce overall security incident costs by fifteen percent. The ease of deployment has been good, and the responsiveness of the application to risks has been quite effective. The inclusion of web filtering would be…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"In one single alert, we are getting the network telemetry, endpoint telemetry, email security telemetry, and proxy telemetry all in one single ticket, making it very easy."

"I like the centralized console and the predictive analysis it does of malware. It is very stable and also scalable."

"The dashboard is customizable."

"Its interface and pricing are most valuable, and it is better than other vendors in terms of security."

"Cortex XDR lets us manage several clients from the same console, and its endpoint defense is more advanced than traditional antivirus."

"The initial setup isn't too bad."

"Palo Alto Networks Traps improves our security posture and lowers risk by providing next-gen methods to combat against modern threats on all the major platforms."

"The integrations are out-of-the-box, as are the playbooks."

More Cortex XDR by Palo Alto Networks pros

"One valuable feature of ConnectWise Fortify is the ability to add other teams and receive notifications when customers make changes or remove multi-factor authentication in Microsoft or SAP environments."

"We have found the solution has great functionality and it is easy to use."

"The integration capabilities of ConnectWise SIEM are off the shelf, making it easy to buy and use; you just unpack it and use it."

"Datto Endpoint Detection and Response is a perfect product for endpoint security."

"The ease of deployment has been good."

"The insight that the solution provides is the most valuable aspect. The security scanning they do is excellent."

"The most valuable feature of Datto EDR is the visibility of the endpoints."

Cons

"Currently, if you use Palo Alto endpoint protection as the only solution it's very complicated to remove pre-existing threats."

"We would also like to have advanced tech protection and email scanning."

"The solution lags to the real-time scenarios here and there."

"We have found that there are times Cortex XDR by Palo Alto Networks does not detect some of the viruses, we have to use another protection solution called Kaspersky."

"It's more focused on network communication. If a customer wants to increase the level of protection and start working with documents, it's impossible to integrate these features into the system. It's more of a communication-oriented system than a content security-oriented system."

"Being able to filter the events to see those that are related to the actual alert would save time spent by the engineer."

"They have the worst support, as a company, that I have ever worked with, as they are difficult to get a hold of and keep on the phone. They don't know what they are talking about when you get them on the phone. They don't like to respond to messages when you send them to them. They like to "research problems" for weeks on end, then pass you off to somebody else."

"A better pricing plan would make this product more competitive."

More Cortex XDR by Palo Alto Networks cons

"ConnectWise SIEM is primarily focused on notifications and is limited in that aspect, while Wazuh can automate the elimination process."

"ConnectWise Fortify could work on covering more areas, like phishing messages, which have become more complicated to detect."

"The manage portion of the solution is complicated and should be simplified by having different versions to meet the needs of different size companies."

"The inclusion of web filtering would be good."

"The deployment of the solution right now is terrible. We find it to be very bad. It could be improved enormously."

"The solution should allow the automation of playbooks."

"The solution could improve by having more deployment methods."

Pricing and Cost Advice

"The pricing is a little high. It is per user per year."

"The price of the product is not very economical."

"Cortex XDR's pricing is ok."

"Compared to CrowdStrike, Cortex XDR is an expensive solution."

"Very costly product."

"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."

"It is "expensive" and flexible."

"The tool's price is moderate."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"The solution is expensive."

"Datto Endpoint Detection and Response is not an expensive solution."

"There is an annual license to use this solution. The price of the solution can be expensive depending on the company."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

902,988 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

12%

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Computer Software Company

15%

Construction Company

12%

Comms Service Provider

10%

Financial Services Firm

Comms Service Provider

13%

Computer Software Company

Manufacturing Company

Retailer

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	46
Midsize Enterprise	21
Large Enterprise	53

No data available

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What needs improvement with ConnectWise Fortify?

I haven't utilized the advanced threat intelligence capabilities with ConnectWise SIEM. Advanced threat intelligence ...

What is your primary use case for ConnectWise Fortify?

I do not have experience with ConnectWise SIEM for RMM, as I mostly work on Wazuh, and I have a team that handles Con...

What advice do you have for others considering ConnectWise Fortify?

The review can be made anonymous if just my name and not the company name is used. I would assess the real-time visib...

What is your experience regarding pricing and costs for Infocyte HUNT?

The price is quite low. On a scale of one to ten, I would rate it a four, meaning it is quite cheap.

What needs improvement with Infocyte HUNT?

The inclusion of web filtering would be good.

What is your primary use case for Infocyte HUNT?

They use Datto EDR as part of the solutions that we supply.

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 11% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Check Point Harmony SASE (formerly Perimeter 81) vs ConnectWise SIEM

Compared 6% of the time

Zscaler Zero Trust Exchange Platform vs ConnectWise SIEM

Compared 6% of the time

CompassOne by Blackpoint Cyber vs ConnectWise SIEM

Compared 5% of the time

SentinelOne Wayfinder Threat Detection and Response vs ConnectWise SIEM

Compared 4% of the time

Wazuh vs ConnectWise SIEM

Compared 3% of the time

More ConnectWise SIEM Competitors

SentinelOne Singularity Endpoint vs Datto Endpoint Detection and Response (EDR)

Compared 12% of the time

CrowdStrike Falcon vs Datto Endpoint Detection and Response (EDR)

Compared 9% of the time

Microsoft Defender for Endpoint vs Datto Endpoint Detection and Response (EDR)

Compared 7% of the time

Malwarebytes Endpoint Detection and Response (EDR) vs Datto Endpoint Detection and Response (EDR)

Compared 5% of the time

TrendAI Vision One – Endpoint Security vs Datto Endpoint Detection and Response (EDR)

Compared 2% of the time

More Datto Endpoint Detection and Response (EDR) Competitors

Product Reports

Cortex XDR by Palo Alto Networks

Download Cortex XDR by Palo Alto Networks product report

Security Information and Event Management (SIEM)

Download ConnectWise SIEM product report

Endpoint Detection and Response (EDR)

Download Datto Endpoint Detection and Response (EDR) product report

Datto Endpoint Detection and Response (EDR) report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

ConnectWise Security Management, ConnectWise Fortify, Continuum Fortify, ConnectWise SIEM, ConnectWise SASE

Infocyte HUNT

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

ConnectWise SIEM is a cybersecurity platform designed to enhance threat detection and response capabilities, integrating seamlessly into sophisticated IT infrastructures.

Developed to address complex cybersecurity challenges, ConnectWise SIEM offers robust monitoring and analytics, enabling businesses to detect threats faster and with greater accuracy. It combines security information and event management with advanced intelligence to create a comprehensive security solution that supports real-time analysis and immediate action.

What are the most important features of ConnectWise SIEM?

Advanced Threat Detection: Leverages machine learning to identify potential threats quickly.
Real-Time Alerts: Provides instant notifications to ensure swift response to incidents.
Comprehensive Reporting: Delivers detailed insights to inform decision-making.
Scalability: Adapts to the growing needs of any organization.
Seamless Integration: Connects effortlessly with existing IT tools and platforms.

What benefits or ROI should users look for in reviews?

Reduced Downtime: Minimizes disruptions with proactive threat management.
Cost Efficiency: Lowers overall security expenditure through strategic resource allocation.
Improved Compliance: Assists in meeting industry regulations with comprehensive logs and reports.
Enhanced Security Posture: Strengthens defenses with continuous monitoring and analysis.

ConnectWise SIEM is widely implemented in industries such as finance, healthcare, and retail, where data security is crucial. These sectors benefit from its capability to handle large volumes of data while maintaining regulatory compliance. Its flexibility allows customization to meet specific industry requirements, providing targeted security solutions to protect sensitive information.

ConnectWise

Datto Endpoint Detection and Response (EDR) offers comprehensive cybersecurity capabilities, specifically designed to protect endpoints from potential threats. With features like real-time monitoring and automated threat response, it provides essential protection for IT infrastructures.

Datto EDR delivers an integrated approach to endpoint security, focusing on detecting threats in real time and providing automated response mechanisms. It efficiently safeguards systems by leveraging advanced threat intelligence and analytics. This EDR solution is instrumental for IT professionals seeking robust endpoint protection and seamless integration with existing systems, promoting a proactive security posture.

What Are the Key Features of Datto Endpoint Detection and Response?

Real-Time Monitoring: Continuously checks endpoints for suspicious activity.
Automated Threat Response: Instantly reacts to identified threats to minimize risk.
Threat Intelligence: Utilizes advanced data to preemptively manage threats.
Seamless Integration: Easily connects with current IT environments for smooth operation.

What Benefits and ROI Should Be Expected?

Enhanced Security: Protects against threats efficiently, reducing potential breach costs.
Time Savings: Automation reduces manual intervention, saving valuable time.
Cost-Effective: Lower overhead by minimizing security breaches and recovery efforts.
Improved Resilience: Strengthens defenses, ensuring business continuity.

Datto EDR implementation is prevalent in sectors like healthcare and finance, where security and compliance are critical. Its ability to integrate with industry-specific IT systems makes it a preferred choice to safeguard sensitive data and maintain operational integrity.

datto

Sample Customers

CBI Health Group, University Honda, VakifBank

Techvera, Syrex, Clark Integrated Technologies

Check Point Software, PwC, Grant Thornton, AT&T, DHL, U.S. Department of Defense

ConnectWise SIEM vs. Datto Endpoint Detection and Response (EDR)