Try our new research platform with insights from 80,000+ expert users

Cortex XSIAM vs Huntress Managed EDR comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 15, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.4
Cortex XSIAM offers significant ROI and reduced staffing needs, though some businesses await full financial assessments.
Sentiment score
7.3
Huntress Managed EDR offers high ROI with cost savings and efficiency, boosting reputation security and enabling higher charges.
 

Customer Service

Sentiment score
6.9
Cortex XSIAM customer support varies, with mixed reviews ranging from inadequate responses to helpful, efficient resolutions across different tiers.
Sentiment score
8.0
Users commend Huntress Managed EDR for prompt, personalized, and friendly customer service, rating it highly despite occasional delays.
It is ineffective in terms of responding to basic queries and addressing future requirements.
The Palo Alto support team is fully responsive and helpful.
I felt it was important to raise awareness about this new technique where attackers use legitimate applications to gain remote access and control of computers.
They are thorough and ensure the problem is addressed without pushing responsibilities onto me unnecessarily.
For technical support, I would rate Huntress a ten out of ten, and in truth, they are better than that.
 

Scalability Issues

Sentiment score
7.3
Cortex XSIAM scales easily for enterprises, rated highly for scalability, despite integration reliance concerns, supporting numerous assets and users.
Sentiment score
8.5
Huntress Managed EDR offers effortless scalability for enterprises, supporting rapid addition of endpoints with reliable, cloud-based flexibility.
Without proper integration, scaling up with more servers is meaningless.
Cortex XSIAM is highly scalable.
I know other techs with thousands deployed, so scalability isn't an issue.
Scaling Huntress is simple; I can manage up to a thousand devices without issue.
I can easily scale from one machine to thousands without any fuss.
 

Stability Issues

Sentiment score
8.2
Cortex XSIAM is highly stable, cloud-based, and dependable, with minimal downtime, excellent reliability ratings, and rare intervention needs.
Sentiment score
8.4
Huntress Managed EDR is praised for stability, minimal issues, lightweight performance, with occasional minor compatibility concerns.
The product was easy to install and set up and worked right.
Overall, Cortex XSIAM is stable.
We have not experienced any issues with lagging, crashing, or downtime.
I never experienced issues, but once there was an instance with false positives with their Rio service, which was quickly resolved by customer service.
It barely takes up resources on the computer, and I have had no issues with lagging or crashing.
 

Room For Improvement

Cortex XSIAM needs improvements in integration, performance, usability, and support services, with enhanced automation and developer-friendliness.
Huntress Managed EDR needs better reporting, API access, Mac support, third-party integrations, and user-friendly interfaces and customizations.
Obtaining validation for integrations from Palo Alto takes around eight months, which is quite long.
Cortex XSIAM needs improvements in terms of data onboarding, parsers, and third-party integration supports.
Cortex could improve the detection and online resolution of security vulnerabilities.
A more transparent way for the support team at Huntress and our IT team to collaborate to make it faster and easier would be beneficial.
Since we support customers in different countries, expanding the language options for their training would be beneficial.
Their EDR is pretty mature in terms of what it does.
 

Setup Cost

Cortex XSIAM is competitively priced compared to Splunk and Microsoft Sentinel but involves complex licensing and additional costs.
Huntress Managed EDR provides cost-effective pricing with transparent billing, appealing to enterprises despite incremental price increases.
The first impression is that XSIAM would be more expensive than others we tried.
The product is very expensive.
Cortex XSIAM is pretty expensive, and the licensing process is not very comfortable.
The savings from utilizing the included Windows Defender offset the cost of Huntress Managed EDR, making it an affordable solution overall.
It is not too expensive or too cheap. It is just right.
It can get expensive for small to medium businesses if large license quantities are not purchased.
 

Valuable Features

Cortex XSIAM provides advanced threat detection with machine learning, seamless third-party integration, and comprehensive network and endpoint protection.
Huntress Managed EDR offers 24/7 threat-hunting, easy deployment, and robust protection, effectively replacing traditional antivirus solutions.
One of the valued aspects of the product is its use of artificial intelligence to detect security vulnerabilities.
The flexibility for creating manual workflows stands out.
Its signature-less subscriptions and robust detection power stand out in improving threat detection.
What stands out most is their human element: when faced with an unknown threat, real people, not just automated processes, are investigating it, and they're people we trust.
They provide detailed remediation steps, explaining why an issue is a problem and what steps to take.
Previously, I could not modify it unless I had special Microsoft licensing, so it was beneficial to control Windows Defender through a central console to add policies and things like that.
 

Categories and Ranking

Cortex XSIAM
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
12
Ranking in other categories
Security Information and Event Management (SIEM) (15th), Identity Threat Detection and Response (ITDR) (5th), AI-Powered Cybersecurity Platforms (8th)
Huntress Managed EDR
Average Rating
9.4
Reviews Sentiment
7.7
Number of Reviews
34
Ranking in other categories
Endpoint Detection and Response (EDR) (6th), Managed Detection and Response (MDR) (2nd)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Cortex XSIAM is designed for Security Information and Event Management (SIEM) and holds a mindshare of 2.8%, up 1.2% compared to last year.
Huntress Managed EDR, on the other hand, focuses on Managed Detection and Response (MDR), holds 10.5% mindshare, up 8.3% since last year.
Security Information and Event Management (SIEM)
Managed Detection and Response (MDR)
 

Featured Reviews

AKASH MAJUMDER - PeerSpot reviewer
Incident response times have significantly reduced with efficient device integration and log parsing capabilities
Cortex XSIAM needs improvements in terms of data onboarding, parsers, and third-party integration supports. Additionally, a future update request is to enable tagging of endpoints in groups, similar to a feature available in Cortex XDR. The AI analytics need fine-tuning because some use cases are not working from my side.
Anto Baharian - PeerSpot reviewer
Never misses anything and has an attractive price point and a simple interface
One thing they could improve is evolving from an EDR to an MDR, like Blackpoint. This transition would enable automatic remediation of anything that looks dangerous, including within Microsoft 365. For instance, when one of my clients' Microsoft 365 account was breached, Blackpoint identified suspicious activity and disabled the account. It was in Dallas, and we are in California. Blackpoint knew something was wrong there, and they went in and disabled the account. Developing more automated remediation features would elevate them to an MDR level, but I understand that it might affect pricing. They are trying to keep it at a good price point because once they go to MDR, it is probably going to double the price. For now, I find the current features satisfactory, as they continue to add improvements. They have added security awareness training and then log collectors. They are adding pillars as they move along, and I assume they are going to have an option for MDR.
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
863,429 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Manufacturing Company
10%
Financial Services Firm
10%
Government
7%
Computer Software Company
16%
Manufacturing Company
9%
Insurance Company
7%
Retailer
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Cortex XSIAM?
It is an effective solution in terms of performance and functionalities.
What is your experience regarding pricing and costs for Cortex XSIAM?
The licensing cost of Cortex XSIAM is more or less the same as Splunk, making it quite expensive compared to other tools. There are additional expenses for more functionalities.
What needs improvement with Cortex XSIAM?
Cortex XSIAM needs improvements in terms of data onboarding, parsers, and third-party integration supports. Additionally, a future update request is to enable tagging of endpoints in groups, simila...
What do you like most about Huntress?
It is very easy to use. It is a great solution. They are one of the better vendors that I have ever worked with since I have been in the industry.
What needs improvement with Huntress?
We would love for Huntress Managed EDR to ingest logs from Microsoft Sentinel. Microsoft Sentinel is another SIM tool that produces logs, and we would want Huntress to be able to ingest those so th...
What is your primary use case for Huntress?
We use Huntress Managed EDR for threat hunting with our clients to try to keep their environment safe and make sure that if there's any kind of bad activity going on, we can try to find out about i...
 

Overview

Find out what your peers are saying about Cortex XSIAM vs. Huntress Managed EDR and other solutions. Updated: November 2024.
863,429 professionals have used our research since 2012.