No more typing reviews! Try our Samantha, our new voice AI agent.

CrowdStrike Falcon Insight XDR vs Kaspersky Next XDR Optimum comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 13, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Extended Detection and Response (XDR)
3rd
Average Rating
8.4
Reviews Sentiment
6.7
Number of Reviews
118
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (5th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
CrowdStrike Falcon Insight XDR
Ranking in Extended Detection and Response (XDR)
34th
Average Rating
9.6
Reviews Sentiment
7.0
Number of Reviews
3
Ranking in other categories
No ranking in other categories
Kaspersky Next XDR Optimum
Ranking in Extended Detection and Response (XDR)
14th
Average Rating
8.0
Reviews Sentiment
7.2
Number of Reviews
124
Ranking in other categories
Endpoint Protection Platform (EPP) (11th), Endpoint Compliance (2nd), Endpoint Detection and Response (EDR) (18th)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
reviewer2894520 - PeerSpot reviewer
Senior Manager at a consultancy with 11-50 employees
XDR telemetry has transformed threat hunting and now simplifies correlation across tools
The improvements I have observed in my process for detecting and investigating sophisticated attacks since adopting CrowdStrike Falcon Insight XDR is the quality of the telemetry that it collects. It collects all the right information you need to be able to detect threats and conduct threat hunting. The value I get from correlating activity across endpoints and other security domains with CrowdStrike Falcon Insight XDR ensures that I am actually getting value out of my full security tooling stack, bringing everything together into one spot. Every product has its own blind spots, but when you bring them all together, you get a better picture of what is going on. The detection capabilities of CrowdStrike Falcon Insight XDR have influenced my approach to identifying and addressing sophisticated threats by focusing on the correlation aspects and utilizing multiple data sources to detect those threats rather than having individual detections that utilize only one source. CrowdStrike Falcon Insight XDR has definitely reduced my mean time to detect and mean time to respond, though I could not give exact figures. The impact that CrowdStrike Falcon Insight XDR has had on alert volume and analyst investigation time is definitely reducing the volume of alerts by correlating data sources. Anytime you do that, you are speeding up or reducing the amount of work an analyst does and speeding up the time for them to do things. My experience with CrowdStrike Falcon Insight XDR's behavioral detections and Indicators of Attack has been good overall. I think it is hitting many of the points I have already mentioned in terms of correlating those data sources, making it easier to detect things and easier to investigate them. These detection methods integrate into my current security operations workflows by generally forming the centerpiece. I am actually a consultant, so I do not have a specific workflow myself, but I work with multiple clients, many of them using CrowdStrike Falcon Insight XDR, and it brings in a lot of information and stitches it all together.
SR
Group CIO at Thal Industries Corporation Ltd
Have maintained strong endpoint protection through behavioral analysis and daily monitoring
I previously mentioned that Kaspersky Endpoint Security for Business doesn't have built-in DLP, which was a concern. I think they could add it in the future; however, antivirus cannot provide a proper DLP solution, but they can offer a mix of DLP, similar to Trend Micro Apex One, which provides some sort of DLP file management. Nonetheless, we need a proper DLP solution such as Forcepoint or Symantec, whichever suits us. We'll be conducting performance evaluation in the next quarter while working on other projects. More value means a better GUI, user interface, and comprehensive reporting capabilities. In Sophos, we receive a daily system-generated report about what is happening, plus an alert system. The reporting system in Trend Micro is also excellent; I receive an email every day at 10:00 AM with a report for the last 24 hours.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The level of security I get for my endpoints and servers is extremely valuable."
"It can automatically correlate events and logs, which is very helpful for an IT administrator. It can correlate different kinds of malware activities over a network, agent, or host system. You do not need to do it manually. It is a good feature. It is also a user-friendly solution. We have deployed it on the cloud because our space does not provide any flexibility for on-premises deployment, but Palo Alto has added some flexibility to install it on-premises. It must be like the same Cortex XDR agent for all the VPN services, web filtering services, and everything else."
"The live terminal is probably the best thing ever. It gives you the access to get straight onto any machine."
"Cortex is the best solution for avoiding security breaches, malware attacks, and other kinds of security issues."
"The multi-layered approach to the product gives you confidence that it will stop exploits, ransomware, worms, or viruses from compromising endpoints, essentially providing peace of mind."
"I generally believe that Cortex XDR by Palo Alto Networks is probably the best in the market right now."
"It is an easy-to-use tool."
"The anti-exploit is impenetrable."
"CrowdStrike Falcon Insight XDR has positively impacted my organization by allowing us to understand behaviors and how our customers are suffering attacks, enabling us to anticipate those breaches."
"Without a doubt, CrowdStrike Falcon Insight XDR is making their lives easier."
"CrowdStrike Falcon Insight XDR gives us the overhead in terms of resources to make the most of what we have, and anytime I can free up myself to help my end users is a win."
"It's excellent at detecting viruses."
"The product's initial setup phase was easy."
"In EDR, they have a sandbox feature. Kaspersky's threat detection and response capability is very good, making it a strong feature."
"The most valuable features include the ability to upgrade and update all users from one console and to install the solution remotely."
"We have clients of different sizes and the solution works well for all of them."
"I can easily manage over 300 computers antivirus from my desk."
"The price per endpoint is excellent."
"One of the most valuable features is that it's quite secure. I'm satisfied with this solution."
 

Cons

"The connection to the internet has not performed as expected."
"There is a severe gap in functionality between Windows, Linux, and Mac versions. For example all folder restriction settings are Windows only. Traps 5.0+ does not have SAML / LDAP integration."
"Palo Alto Networks Cortex XDR does not detect malicious activity like in other anti-virus solutions like Trend Micro and Windows with Cisco."
"The dashboard could use some significant improvement, just making it more useful with more information. It has a limited amount of information right now. It is customizable, but I'd love to see a better out-of-box dashboard."
"Cortex XDR should have a lightweight agent, and the agent size should not be heavy."
"The onboarding process could be better."
"Basically, they don't provide customer support tools just to investigate the logs."
"There are some default policies which sometimes affect our applications and cause them to run around. In the hotel industry, we use a different type of data versus Oracle and SQL. By default, there are some policies which stop us from running properly. Because of this, the support level is also not that strong. We have to wait to get a results."
"My experience with pricing, setup cost, and licensing could be better."
"CrowdStrike Falcon Insight XDR can be improved by expanding the number of built-in integrations."
"The deployment could be better. Recently when I try to deploy it I received a large number of failures."
"I'd like Kaspersky to be more stable and secure."
"We have zero-day detection of malware but it cannot detect other types of unknown intrusions."
"Kaspersky and most other security products have a lot of modules. They recently added several new ones. You find yourself buying and deploying so many things. There are some modules that everyone uses, like, for example, the orchestration module. Instead of selling them separately, it would be better to have bundles or an all-in-one license."
"I would like the solution to be able to allow to have end to end security services from the final user to the server."
"Kaspersky Endpoint Security for Business could improve the flexibility of use."
"The solution could use better reporting."
"The product needs to incorporate training programs or webinars for users. The solution needs to improve its support as well. It also needs to detect ransomware."
 

Pricing and Cost Advice

"It is present, but when compared to other competitive products, I would say it is not less expensive; however, when all of the other added values are considered, the price is reasonable."
"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."
"Very costly product."
"I don't like that they have different types of licenses."
"I don't recall what the cost was, but it wasn't really that expensive."
"This is an expensive solution."
"The pricing is okay, although direct support can be expensive."
"I am using the Community edition."
Information not available
"The solution is comparatively priced."
"Kaspersky is priced well."
"We have an annual license and there is a fee per device used. The price is fair compared to the latest EDR solution."
"The solution is available at a highly affordable price"
"Licensing fees are paid annually."
"The tool is too expensive compared to other products."
"For licensing, we pay a yearly subscription."
"Licensing fees are paid on a yearly basis."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
12%
Comms Service Provider
12%
Construction Company
11%
Manufacturing Company
10%
No data available
Outsourcing Company
18%
Construction Company
9%
Manufacturing Company
9%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business47
Midsize Enterprise21
Large Enterprise55
No data available
By reviewers
Company SizeCount
Small Business63
Midsize Enterprise27
Large Enterprise33
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for CrowdStrike Falcon Insight XDR?
My experience with pricing, setup cost, and licensing for CrowdStrike Falcon Insight XDR is that it is very manageabl...
What needs improvement with CrowdStrike Falcon Insight XDR?
CrowdStrike Falcon Insight XDR can be improved with a little more positive press about how good you are.
What needs improvement with Kaspersky Endpoint Security?
Kaspersky Endpoint Security for Business does not have encryption tools. It uses the Windows BitLocker tool, which is...
What is your experience regarding pricing and costs for Kaspersky Endpoint Security for Business?
The pricing and licensing cost of Kaspersky Endpoint Security is cheaper compared to Trend Micro.
What is your primary use case for Kaspersky Endpoint Security for Business?
I have good experience in the sales part of Kaspersky Endpoint Security for Business, not the technical side. I am no...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
Kaspersky Work Space Security, Kaspersky Endpoint Security
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
ACMS, Arqiva, Pakistan International Airlines, RAO UES
Find out what your peers are saying about CrowdStrike Falcon Insight XDR vs. Kaspersky Next XDR Optimum and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.