Coro vs Symantec Endpoint Detection and Response comparison

Coro and Broadcom are both solutions in the Endpoint Detection and Response (EDR) category. Coro is ranked #57, while Broadcom is ranked #48 with an average rating of 7.0. Coro holds a 0.7% mindshare in EDR, compared to Broadcom’s 0.7% mindshare. Additionally, 86% of Broadcom users are willing to recommend the solution.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Coro and Symantec Endpoint Detection and Response based on real PeerSpot user reviews.

Find out what your peers are saying about CrowdStrike, SentinelOne, Microsoft and others in Endpoint Detection and Response (EDR).

To learn more, read our detailed Endpoint Detection and Response (EDR) Report (Updated: March 2026).

Buyer's Guide

Endpoint Detection and Response (EDR)

March 2026

Download the complete report

Helped 885,789 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of April 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of Coro is 0.7%, up from 0.5% compared to the previous year. The mindshare of Symantec Endpoint Detection and Response is 0.7%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.4%
Symantec Endpoint Detection and Response	0.7%
Coro	0.7%
Other	95.2%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Vignesh K

Practice Engineer at Cloudunicorn.in

Auto scanning and enhanced security but re-adding protections need improvement

At that time, we observed certain issues with the product. The functionalities could be improved, such as the isolation feature. If we remove our protection, we cannot easily add it back. If, in our organization, we need to remove a specific system for a particular time, we cannot add it back for security after doing so. This is one thing we have experienced. Scalability is also lacking. If we want to do the same thing repeatedly, there's not much the solution offers; it isn't very strong.

Read full review

Hamid Harroud

IT Director at Al Akhawayn University

A highly stable and affordable solution for detecting and preventing security threats

The solution needs to provide better integration. We may receive things from email, network, or the machine itself. So we need a centralized system to get alerts or messages which are not available in the product. The solution must provide features to centralize the alerts received. It should provide integration with other Symantec products.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It can automatically correlate events and logs, which is very helpful for an IT administrator. It can correlate different kinds of malware activities over a network, agent, or host system. You do not need to do it manually. It is a good feature. It is also a user-friendly solution. We have deployed it on the cloud because our space does not provide any flexibility for on-premises deployment, but Palo Alto has added some flexibility to install it on-premises. It must be like the same Cortex XDR agent for all the VPN services, web filtering services, and everything else."

"Cortex is the best solution for avoiding security breaches, malware attacks, and other kinds of security issues."

"The most valuable feature is that you can select remote access of any machine for sandboxing."

"One thing that I like about Cortex XDR by Palo Alto Networks, it is detecting all the suspicious or malicious binaries, and it has integration with Palo Alto Firewall."

"If you are looking to deploy a security solution as a whole, this is a good option."

"We use it for malicious connections from malicious websites, to identify payloads that might be inside the traffic, to identify malicious processes or bugs that are running on the network, and any activities that tend to lead to data infiltration."

"If the user leaves our premises or network, Palo Alto Traps will still be on that endpoint and will still apply our policies."

"The product's initial setup phase is very easy."

More Cortex XDR by Palo Alto Networks pros

"The auto-scanning feature is quite beneficial."

"The interface is quite easy to use."

"In Symantec, we have found that the most important feature is Application and Device Control."

"The most valuable features of the solution are that it is easy to use and has good support."

"Overall, I think that this product runs quite smoothly and I definitely can recommend it."

"There are times when Symantec Endpoint Detection and Response tags an executable as malicious when it is trying to get executed on the machine. In this case, it prevents the execution and it gives you a process view of things where you can look into what has happened and whether it is a genuine process trying to access some system activities, or it's a malicious one. Depending upon the process, it gives you a clear identification, and we can do the containment from the interface itself and isolate the machine from the network. The process review on network isolation is good."

"The solution does all that we expect it to do."

"The most valuable features are that it is easy to connect and global settings are good."

"I like Symantec EDR's device control and USB security features."

More Symantec Endpoint Detection and Response pros

Cons

"Currently, we are monitoring all USB drives and ports but we would like to improve our device control capabilities."

"This is a very costly product."

"The downsides of Cortex XDR by Palo Alto Networks are that in many incidents, when I enter the causality chain, there are numerous logs."

"Cortex XDR by Palo Alto Networks is a very good product, but financially, it is very expensive, so the company should look into that area."

"The solution lags to the real-time scenarios here and there."

"Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth."

"The setup is quite easy. We had appropriate support from the manager. One thing that was missing was the integration part."

"It is not very strong in terms of endpoint management. It should have additional features like DLP, encryption, or advanced device control."

More Cortex XDR by Palo Alto Networks cons

"Scalability is lacking. If we want to do the same thing repeatedly, there's not much the solution offers; it isn't very strong."

"The functionalities could be improved, such as the isolation feature."

"The solution can always be more stable and more secure."

"The Symantec portfolio is not big enough to cover the organization in all 360 degrees."

"I think we have experienced some technical issues because the company focuses mainly on bigger clients."

"The interface has many issues."

"One potential area for improvement in Symantec EDR is the reporting engine."

"In the future, it would be nice to have playbooks in the tool, to allow for some of the common activities to be automated. For example, some of the scannings of the malware can be too manual for a specific device. Additionally, a vulnerability manager would be beneficial."

"The solution needs to provide better integration."

"The technical support is very bad. It's been outsourced."

More Symantec Endpoint Detection and Response cons

Pricing and Cost Advice

"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."

"The price of the solution is high for the license and in general."

"Cortex XDR’s pricing is very reasonable."

"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."

"The price was fine."

"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."

"Our license will require renewal in August, after which the maintenance will continue as usual."

"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."

More Cortex XDR by Palo Alto Networks pricing and cost advice

Information not available

"We pay around $100,000 for 5000 licenses every year."

"Compared to the tools of competitors, Symantec Endpoint Detection and Response is a cheaply priced product."

"We are satisfied with the pricing."

"It's a yearly subscription."

"The price is really high and it should be lower."

"Symantec Endpoint Detection and Response is expensive."

"It is an expensive solution."

"The more devices we have the more expensive it becomes, which is where the challenge is."

More Symantec Endpoint Detection and Response pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

885,789 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

14%

Financial Services Firm

10%

Comms Service Provider

Manufacturing Company

Construction Company

11%

Computer Software Company

Manufacturing Company

Comms Service Provider

Financial Services Firm

11%

Manufacturing Company

Comms Service Provider

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	48

No data available

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	7
Large Enterprise	9

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What is your experience regarding pricing and costs for Coro?

The cost is reasonable because it is aimed at SMB customers, not enterprise customers. The prices are reasonable. We ...

See all answers

What needs improvement with Coro?

At that time, we observed certain issues with the product. The functionalities could be improved, such as the isolati...

See all answers

What is your primary use case for Coro?

We have not sold the product to any customers as of now. We are still in the testing phase, which means we, along wit...

See all answers

What is your experience regarding pricing and costs for Symantec Endpoint Detection and Response?

I am not aware of the pricing details, as that falls under the management's responsibility.

See all answers

What needs improvement with Symantec Endpoint Detection and Response?

While the prices for technical issues in Symantec Endpoint Detection and Response are good, as a partner of Symantec,...

See all answers

What is your primary use case for Symantec Endpoint Detection and Response?

Different companies such as banks and local government in Poland use Symantec Endpoint Detection and Response because...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 8% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Guardz vs Coro

Compared 13% of the time

Kaspersky Endpoint Security for Business vs Coro

Compared 10% of the time

Huntress Managed EDR vs Coro

Compared 8% of the time

SentinelOne Singularity Complete vs Coro

Compared 7% of the time

Microsoft Defender for Endpoint vs Coro

Compared 4% of the time

More Coro Competitors

Kaspersky Endpoint Detection and Response Expert vs Symantec Endpoint Detection and Response

Compared 7% of the time

CrowdStrike Falcon vs Symantec Endpoint Detection and Response

Compared 7% of the time

Microsoft Defender for Endpoint vs Symantec Endpoint Detection and Response

Compared 7% of the time

TrendAI Vision One vs Symantec Endpoint Detection and Response

Compared 6% of the time

Trellix Endpoint Security Platform vs Symantec Endpoint Detection and Response

Compared 6% of the time

More Symantec Endpoint Detection and Response Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

April 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Email Security

April 2026

Download Coro product report

Buyer's Guide

Symantec Endpoint Detection and Response

March 2026

Symantec Endpoint Detection and Response report

Download Symantec Endpoint Detection and Response product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

No data available

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Coro Email Protection is an email security solution hosted in the cloud that enables businesses to guard their email against threats like malware, phishing attacks, and more. Coro offers advanced threat protection where various methods are utilized to flag malicious emails. For instance, Coro uses signature-based detection, which leverages a database of known harmful email signatures to identify and stop spam and phishing emails. The service employs artificial intelligence, machine learning, and human analysis to detect and halt malicious emails.

Coro uses behavioral analysis to examine the behavior of emails, thereby detecting suspicious activity. This can include emails sent from unverified senders or emails containing links to harmful websites. Coro utilizes machine learning to learn the behavior of legitimate emails and spot suspicious ones that may not correspond to any known signatures. The service also offers training to help users recognize and avoid phishing attacks. Coro provides comprehensive reporting on email security threats, allowing businesses to monitor their progress and ensure the effectiveness of their email security.

Notably, the platform is user-friendly and does not require specialized knowledge for setup or management, making it a suitable and affordable email security solution for businesses of all sizes. Pricing plans for Coro Email Protection include a free plan with basic features, a flexible plan with advanced threat protection, and an annual plan with all features from the flexible plan, alongside user training and reporting.

Coro

Symantec Endpoint Detection and Response (EDR) is a powerful security solution designed to help organizations proactively detect, investigate, and mitigate advanced threats across their endpoint environments. As part of Broadcom's cybersecurity portfolio, Symantec EDR provides comprehensive visibility into endpoint activities, enabling security teams to quickly identify and respond to threats that evade traditional defenses.

Symantec EDR leverages machine learning, behavioral analysis, and global threat intelligence from Symantec's vast network to detect sophisticated threats, including zero-day attacks, ransomware, and advanced persistent threats (APTs). This allows organizations to identify malicious activities early and respond swiftly to mitigate potential damage. The solution offers automated response options that enable security teams to contain and remediate threats quickly.

Symantec EDR provides detailed forensic capabilities, allowing security analysts to dive deep into endpoint data, investigate incidents thoroughly, and understand the scope and impact of attacks. Features such as timeline analysis, incident graphing, and the ability to isolate endpoints enhance investigative efforts and support effective remediation strategies.

With its centralized management console, Symantec EDR offers visibility across the entire endpoint environment, regardless of the operating systems or whether endpoints are on-premise or remote. Symantec EDR seamlessly integrates with other Symantec security solutions, enhancing its detection capabilities and enabling a unified approach to threat management. Its scalable architecture ensures that businesses of all sizes can benefit from its advanced security features without compromising performance.

Quickly discover and resolve threats with deep endpoint visibility and superior detection analytics, reducing mean time to remediation. Overcome cyber security skills shortages and streamline SOC operations with extensive automation and built-in integrations for sandboxing, SIEM, and orchestration.

Fortify security teams with the unmatched expertise and global scale of Symantec Managed Endpoint Detection and Response services.
Roll out Endpoint Detection and Response (EDR) across Windows, macOS, and Linux devices using Symantec Endpoint Protection (SEP)-integrated EDR or a dissolvable agent.

Broadcom

Sample Customers

CBI Health Group, University Honda, VakifBank

Lenovo, Dropbox, T-Systems

Information Not Available

Buyer's Guide

Endpoint Detection and Response (EDR)

March 2026

Download Free Report

Find out what your peers are saying about CrowdStrike, SentinelOne, Microsoft and others in Endpoint Detection and Response (EDR). Updated: March 2026.

DOWNLOAD NOW

885,789 professionals have used our research since 2012.

See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.