No more typing reviews! Try our Samantha, our new voice AI agent.

CrowdStrike Falcon vs Sophos Cybersecurity as a Service comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
110
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (7th), Extended Detection and Response (XDR) (6th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
CrowdStrike Falcon
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
139
Ranking in other categories
Security Information and Event Management (SIEM) (5th), Endpoint Protection Platform (EPP) (1st), Threat Intelligence Platforms (TIP) (1st), Endpoint Detection and Response (EDR) (1st), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Identity Threat Detection and Response (ITDR) (1st), AI-Powered Cybersecurity Platforms (2nd)
Sophos Cybersecurity as a S...
Average Rating
9.0
Number of Reviews
1
Ranking in other categories
AWS Marketplace (56th)
 

Mindshare comparison

Extended Detection and Response (XDR) Mindshare Distribution
ProductMindshare (%)
CrowdStrike Falcon9.4%
Wazuh6.0%
SentinelOne Singularity Complete5.9%
Other78.7%
Extended Detection and Response (XDR)
AWS Marketplace Mindshare Distribution
ProductMindshare (%)
Sophos Cybersecurity as a Service0.2%
HZWTech Device Studio0.5%
WaitTime Gate Queue0.5%
Other98.8%
AWS Marketplace
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Waleed Omar - PeerSpot reviewer
Information Security Specialist at Arab Open University
Provides effective real-time threat detection with potential for cost optimization
Some features such as device control, firewall management, and file analysis are standalone products that we need to purchase separately. If these features came out of the box within the product, it would be much more beneficial for us. Other providers such as SentinelOne include these features in their base product. We attended a CrowdStrike Falcon event where they discussed some shallow AI features, but we cannot see these in our panel yet. We work with different solutions such as Darktrace and SocRadar, where AI features are automatically displayed in our dashboards after release. However, for CrowdStrike Falcon, we cannot see these features.
Vikas-Gupta - PeerSpot reviewer
Director at Eon Networks
Automated threat response has ensured uninterrupted operations and provides clear 24x7 security visibility
One feature which we would like to have in the product is the inventory. For example, if I have the agent installed on each machine and server, why can't we fetch the inventory details from the console? If you look at the competition products such as CrowdStrike, they give clear visibility into what software is installed, what legitimate tools are installed, and what software is not even licensed or may not be secure to install. Those things are reported back to the concerned team, maybe the systems teams, and they can use it brilliantly. Unfortunately, Sophos Cybersecurity as a Service doesn't provide that kind of visibility into what software or tools are installed on a particular system. There is a feature which requires running what you call an XG script to fetch those kinds of details. However, it is not on the GUI as other competitor companies are providing. That is the one feature we really miss. In terms of service and support, I don't think there is an issue because it is already a brilliant five-star service support. The visibility feature that I already mentioned is the only primary feature which we are missing. The rest is absolutely fine. I don't think there is anything else which should be there.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I like that the product has behavior-based detection which offers many benefits over signature-based detection."
"It is easy to use."
"One of the main benefits of the solution is its intelligence to correlate the events into an incident."
"The protection offered by this product is good, as is the endpoint reporting."
"The behavior-based detection feature is valuable."
"It's a perfect solution. It integrates well into the environment."
"Stability is one of the features we like the most."
"Cortex is a very good total solution on the endpoints."
"The product's deployment phase is easy."
"CrowdStrike Falcon's scalability is good. We have thousands of students using this solution."
"The initial setup is very simple."
"The CrowdStrike Falcon agent is very lightweight. Users never complain about their PCs getting stuck and things like that."
"It has definitely minimized resources. When everything was on-prem, there was a lot more work maintaining it. One of the big value tickets: I don't have lists of hundreds of exceptions for certain applications that I have to maintain, add, delete, and move. The very nature of the product has lessened my workload considerably."
"The primary way that CrowdStrike has improved the way our organization functions is visibility, and when we do have an issue, the ability to see what was happening before, during, and after the issue on the target laptop or server is far better than what we were used to."
"The solution has improved my organization by automating the detection and reporting of unwanted applications so we're aware of them and can respond appropriately."
"At this point what is most valuable is the interface, which is easy to navigate."
"Since the day we started using Sophos Cybersecurity as a Service MDR, there has not been a single incident."
 

Cons

"Cortex XDR could improve its sales support team, including better commission structures and referral programs."
"Traps doesn't work with McAfee. You need to remove McAfee to install Traps. This is very common, and its nothing that should be an issue. Some antivirus engines recognize Traps as an threat component, so maybe they need to shake hands somewhere."
"We have found that there are times Cortex XDR by Palo Alto Networks does not detect some of the viruses, we have to use another protection solution called Kaspersky."
"We would also like to have advanced tech protection and email scanning."
"The product's pricing needs improvement. They could provide more discounts. Additionally, the dashboard and control panel could be enhanced."
"I recommend adding a data loss prevention (DLP) solution to Cortex XDR by Palo Alto Networks. The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products."
"Every 30 or 40 days, there's a new version and we need to go and make sure our customer's laptops are upgraded."
"We would also like to have advanced tech protection and email scanning."
"There are some aspects of the UI that could use some improvement, e.g., working in groups. I build a group, then I have to manually assign prevention policies, update policies, etc., but there is no function to copy that group. So, if I wanted to make a subgroup for troubleshooting or divide workstations into groups of laptops and desktops, then I have to manually build a brand new group. I can't just copy a build from one to another. Additionally, in order to do any work within a group, I have to first do the work on the respective prevention policy page or individual policy page, then remove the group if the group is assigned to a different prevention policy, remove the prevention policy, and then add the new one in. So, it can get a little hectic. It would be easier if I could add and remove things from the group page rather than having to go into the policy pages to do it."
"When comparing to Microsoft, CrowdStrike Falcon is more expensive."
"The solution could improve by providing more types of reports because it's in the detection span you cannot re-export anything."
"I have worked with their technical support on several problems that were never fully resolved."
"CrowdStrike should provide better visibility in its reporting. There should be more forensic details about detected threats."
"One thing that is not yet available is attack simulation."
"CrowdStrike Falcon could improve if it became an XDR. When we look only to an end-point, we lost the context of the environment. I know it's another line of design of the product. However, if CrowdStrike becomes an XDR, it could be very good."
"CrowdStrike Falcon could improve by having an easier way to search and use the interface for extracting queries from the data."
"Unfortunately, Sophos Cybersecurity as a Service doesn't provide that kind of visibility into what software or tools are installed on a particular system."
 

Pricing and Cost Advice

"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."
"I don't recall what the cost was, but it wasn't really that expensive."
"Cortex XDR is a costly solution."
"The pricing is a little bit on the expensive side."
"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."
"It's about $55 per license on a yearly basis."
"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."
"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."
"The more endpoints an organization adds the cheaper the cost."
"CrowdStrike Falcon offers excellent value for the money for our organization, particularly given our lean IT team."
"It has an annual license, and it is not that expensive."
"The price is high in comparison to similar brands."
"When it comes to licensing, customers can choose a bundle or select licences based on the specific features they would like access to. This solution comes with premium pricing. It is approximately 20 to 30% more expensive than competing solutions."
"The solution isn't very costly; it's affordable."
"I would like them to further reduce the price, because it is quite pricey at the moment."
"The pricing and licensing are fairly good. It is definitely not a cheap product, but I have felt that it is worth the money that we spent. So, we have discussed it in the past, and were like, "Yes, it is probably pricier than some other solutions, but we also feel they really are the leader. We are very comfortable with their level of expertise. So, it's kind of worth the price that we pay.""
Information not available
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
886,576 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
13%
Financial Services Firm
13%
Comms Service Provider
8%
Manufacturing Company
7%
Financial Services Firm
11%
Computer Software Company
10%
Manufacturing Company
9%
Government
6%
Construction Company
45%
Comms Service Provider
11%
Insurance Company
8%
Healthcare Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise20
Large Enterprise48
By reviewers
Company SizeCount
Small Business51
Midsize Enterprise33
Large Enterprise62
No data available
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing u...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never pu...
Is Crowdstrike Falcon better than Trend Micro Deep Security?
I like that Crowdstrike allows me to easily correlate data between my firewalls. What’s most useful for my needs is t...
What needs improvement with Sophos Cybersecurity as a Service?
One feature which we would like to have in the product is the inventory. For example, if I have the agent installed o...
What is your primary use case for Sophos Cybersecurity as a Service?
Sophos Cybersecurity as a Service product name is MDR, and we started using it from last year only. It has been one y...
What advice do you have for others considering Sophos Cybersecurity as a Service?
The enhanced threat hunting and forensics provided by Sophos Cybersecurity as a Service have significantly helped my ...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface, CrowdStrike Falcon Platform
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Information Not Available
Find out what your peers are saying about CrowdStrike, SentinelOne, TrendAI and others in Extended Detection and Response (XDR). Updated: April 2026.
886,576 professionals have used our research since 2012.