Cybereason Endpoint Detection & Response vs Stormshield Endpoint Security comparison

LevelBlue and Stormshield are both solutions in the Endpoint Protection Platform (EPP) category. LevelBlue is ranked #36 with an average rating of 7.7, while Stormshield is ranked #56. LevelBlue holds a 1.0% mindshare in EPP, compared to Stormshield’s 0.6% mindshare. Additionally, 85% of LevelBlue users are willing to recommend the solution, compared to 100% of Stormshield users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Stormshield Endpoint Security and Cybereason Endpoint Detection & Response compete in the endpoint security landscape. While users appreciate the support and cost-effectiveness of Stormshield, Cybereason gains the upper hand with its advanced features.

Features: Stormshield Endpoint Security is valued for its robust firewall, real-time threat detection, and comprehensive application control. Cybereason Endpoint Detection & Response stands out with advanced threat hunting, automation of incident responses, and extensive behavior analysis.

Room for Improvement: Users have identified areas for improvement in Stormshield Endpoint Security, particularly in enhancing integration capabilities and improving performance speed under heavy loads. For Cybereason Endpoint Detection & Response, users suggest refining alert accuracy and reducing occasional false positives.

Ease of Deployment and Customer Service: Deploying Stormshield Endpoint Security is generally straightforward, with users noting efficient initial setup and reliable customer support. Cybereason Endpoint Detection & Response, while occasionally requiring more initial configuration, benefits from a highly responsive and supportive customer service team.

Pricing and ROI: Stormshield Endpoint Security is recognized for being cost-effective, with an attractive pricing model and decent return on investment. Cybereason Endpoint Detection & Response, although potentially more expensive, is seen as delivering higher ROI due to its advanced capabilities.

To learn more, read our detailed Cybereason Endpoint Detection & Response vs. Stormshield Endpoint Security Report (Updated: April 2026).

Buyer's Guide

Cybereason Endpoint Detection & Response vs. Stormshield Endpoint Security

April 2026

Download the complete report

Helped 894,738 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of May 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.6%, down from 3.9% compared to the previous year. The mindshare of Cybereason Endpoint Detection & Response is 1.0%, up from 0.8% compared to the previous year. The mindshare of Stormshield Endpoint Security is 0.6%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.6%
Cybereason Endpoint Detection & Response	1.0%
Stormshield Endpoint Security	0.6%
Other	94.8%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Ivan Burke

Head of Research Development and Innovation at CSIR

Offers useful threat hunting and response capabilities but struggles to justify cost for smaller deployments

I mostly work with incident response, so I work with a bunch of them interchangeably, but mostly with the EDR components; I also get involved with some of the XDR components, especially for the cloud. Regarding analysis features, such as deep behavioral detection, I do use it sometimes; I usually don't use the automated version of it, as I prefer threat hunting directly, depending on if the season is available. I know some of them have pretty good analytics engines, but I tend to do the threat hunting on my own. I manage incident response for a bunch of companies, so some of them have Cybereason Endpoint Detection & Response integrated into Sentinel, some into Fortinet, and others into various tools. When considering cost-effectiveness, their pricing structure works such that if you're a large organization with more than a thousand endpoints to deploy to, then Cybereason Endpoint Detection & Response is worthwhile. But for anything less than 300, it's too expensive; obviously, the more you buy, the better the price, making it cheaper for you. Cybereason Endpoint Detection & Response best fits enterprise-level businesses such as huge corporations; however, we are in the process of removing it from many of our endpoint clients because it's not really showing enough value for them at the moment. We're trying to see how we can improve it with some of our clients, but at the moment, it's struggling compared to other EDR solutions that we have deployed. On a scale of one to ten, I rate Cybereason Endpoint Detection & Response a six.

Read full review

it_user745593

Senior Project Manager, PMP at a transportation company with 10,001+ employees

Protects the global station and has good stability

The feature I find most valuable is that it protects the global station The solution's integration with the Windows environment could be better. The solution needs better integration with products, if it did, it would have the assumption of better security. I've been using the solution since…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The product's most valuable features are massive user and feature intelligence exploit detection."

"Palo Alto is one of the tech vendors that always provides top-of-the-line products."

"The integrations are out-of-the-box, as are the playbooks."

"WildFire AI is the best option for this product."

"I like that the product has behavior-based detection which offers many benefits over signature-based detection."

"On a scale from one to ten, I would rate Cortex XDR by Palo Alto Networks a nine."

"There are a lot of lead solutions in this space, however, Palo Alto is number one."

"Based on my experience, I would recommend Cortex XDR by Palo Alto Networks to other people."

More Cortex XDR by Palo Alto Networks pros

"Immediately we can pick up the computers in the network if any malicious operation that is triggered."

"Cybereason absolutely enables us to mitigate and isolate on the fly. Our managed detection response telemetry has dropped dramatically since we began using it. It's very top-of-mind. We were running some tabletop exercises and none of the detections were getting triggered by the managed security services provider. So we needed to find a solution that would trigger high-fidelity alerts. That was Cybereason and it dramatically changed our landscape from the detection and response perspective."

"Cybereason EDR helps us isolate and mitigate on the fly, which is essential because we're a small team, and we don't always have a spare IT person waiting to work."

"If one supports the notion that layered security needs to focus on inside out risk instead of trying to securing the perimeter - a very compelling tool for where to focus your infosec/forensic brain power."

"Please go for it as this is an efficient product in the cyber security space."

"We are monitoring it by ourselves as well, however, their SOC team is monitoring and pre-alerting us all the time, every day."

"What I find most valuable is the clarity of the platform."

"If a file was infected on somebody's laptop or workstation, then it is now easier for us to understand what the impact is on the environment, as the Cybereason product enables me to go directly into the software, look up the process, see who were the dealers, what were the websites, what were the IP addresses which were contacted, and detect if there were other systems which were impacted or if my environment was compromised."

More Cybereason Endpoint Detection & Response pros

"The feature I find most valuable is that it protects the global station."

"It is very good for preventing cryptolocker attacks."

"If you need a Windows based multi-functional end-point security solution then this product is for you."

"The feature I find most valuable is that it protects the global station."

Cons

"Managing the product should be easier."

"It tends to do 99.9% of things. The only thing I'd like is single sign-on authentication into their cloud platform so that my users can be properly authenticated against it."

"It's not an ideal choice for smaller businesses, as you need a minimum of 200 endpoints to even use the solution at all."

"It would be good to have a better way to search for a file within the UI."

"The solution should add unwanted malicious hash values to a block list so that whenever the action is triggered, it will automatically prevent the malicious content."

"It should support more mobile operating systems. That is one of the cons of their infrastructure right now."

"Cortex XDR could improve its sales support team, including better commission structures and referral programs."

"There are some false positives."

More Cortex XDR by Palo Alto Networks cons

"I feel it is a shame that I cannot create groups of groups with inheritance."

"We are in the process of removing it from many of our endpoint clients because it's not really showing enough value for them at the moment."

"The deployment on individual endpoints is more geared toward larger organizations."

"They need to improve their technical support services."

"The technical support will need to be improved."

"The deployment on individual endpoints is more geared toward larger organizations. It might prove to be a bit too complicated for a smaller organization. You need to know what you're doing when you're deploying the sensor."

"The network coverage becomes an issue most of the time."

"The reporting feature needs improvement."

More Cybereason Endpoint Detection & Response cons

"The solution's integration with the Windows environment could be better."

"Release speed for newer versions. When a new OS is released, you've got to wait half year to get the new version that covers the new Windows OS."

"Only Windows based. Dependence on MS updates and service start-up priority."

Pricing and Cost Advice

"I don't have any issues with the pricing. We are satisfied with the price."

"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."

"Compared to CrowdStrike, Cortex XDR is an expensive solution."

"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."

"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."

"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."

"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."

"It is "expensive" and flexible."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"This product is somewhat expensive and should be cheaper."

"Though it is not the cheapest solution but it fits our budget. We pay an annual licensing fee."

"We considered a few other solutions. Some were ridiculously overpriced, while others didn't have solutions for Mac endpoints. That was a deal-breaker because most of our organization is on Mac. It came down to two vendors: Cybereason and another. They had similar pitches and almost identical approaches, but in the end, Cybereason gave us the best value for our money."

"On a scale of one to ten, where one is cheap and ten is expensive, I rate the pricing an eight."

"I do not have experience with the licensing of the product."

"I had to go through a third-party to purchase it, which I wasn't really pleased about."

"In terms of cost, this is a good choice for our needs."

"The pricing is manageable."

More Cybereason Endpoint Detection & Response pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

894,738 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

12%

Construction Company

12%

Comms Service Provider

Manufacturing Company

Financial Services Firm

13%

Computer Software Company

10%

Manufacturing Company

10%

Outsourcing Company

Comms Service Provider

17%

Financial Services Firm

11%

Construction Company

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	46
Midsize Enterprise	20
Large Enterprise	49

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	5
Large Enterprise	12

No data available

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What is your primary use case for Cybereason Endpoint Detection & Response?

My main use case for Cybereason Endpoint Detection & Response is mostly for incident response.

See all answers

What needs improvement with Cybereason Endpoint Detection & Response?

When it comes to advanced threats, it sometimes helps me with finding them and hunting them down with threat detectio...

See all answers

What advice do you have for others considering Cybereason Endpoint Detection & Response?

I mostly work with incident response, so I work with a bunch of them interchangeably, but mostly with the EDR compone...

See all answers

Ask a question

Earn 20 points

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 9% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

CrowdStrike Falcon vs Cybereason Endpoint Detection & Response

Compared 8% of the time

SentinelOne Singularity Endpoint vs Cybereason Endpoint Detection & Response

Compared 6% of the time

Fortinet FortiEDR vs Cybereason Endpoint Detection & Response

Compared 4% of the time

Intercept X Endpoint vs Cybereason Endpoint Detection & Response

Compared 3% of the time

Bitdefender GravityZone EDR vs Cybereason Endpoint Detection & Response

Compared 3% of the time

More Cybereason Endpoint Detection & Response Competitors

Symantec Endpoint Security vs Stormshield Endpoint Security

Compared 17% of the time

Sophos Endpoint vs Stormshield Endpoint Security

Compared 12% of the time

Trellix Endpoint Security Platform vs Stormshield Endpoint Security

Compared 12% of the time

Fortinet FortiClient vs Stormshield Endpoint Security

Compared 8% of the time

CrowdStrike Falcon vs Stormshield Endpoint Security

Compared 7% of the time

More Stormshield Endpoint Security Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

May 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Cybereason Endpoint Detection & Response

May 2026

Cybereason Endpoint Detection & Response report

Download Cybereason Endpoint Detection & Response product report

Buyer's Guide

Endpoint Protection Platform (EPP)

May 2026

Download Stormshield Endpoint Security product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Cybereason EDR, Cybereason Deep Detect & Respond

SkyRecon Systems StormShield Security Suite

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Cybereason Endpoint Detection & Response offers advanced threat hunting, investigation, and malicious operation visualization. Its intuitive interface and AI-driven Malop engine enhance threat detection efficiency across multiple platforms.

Focused on providing detailed real-time insights, Cybereason Endpoint Detection & Response is crucial for cybersecurity operations by offering comprehensive dashboards and managed detection and response services. It ensures efficient threat isolation, supports Windows, Linux, and Mac environments, and improves network activity visibility. While its AI engine enhances threat analysis clarity, technical support and deployment complexity can be improved, particularly for smaller organizations. Some challenges include integration with Microsoft, high CPU usage, minimal dashboards, and graphics. Additionally, deployment processes need refinement for stability with new OS versions.

What are the key features of Cybereason Endpoint Detection & Response?

Threat Hunting: Actively searches for potential threats before they can cause harm.
Malop Engine: Uses AI to clearly visualize and analyze malicious operations.
Real-Time Visualization: Monitors malicious activities with intuitive dashboards.
Automation: Streamlines security processes by automating routine tasks.
Cross-Platform Support: Compatible with Windows, Linux, and Mac systems.

What benefits can users expect from using Cybereason Endpoint Detection & Response?

User-Friendly Interface: Simplifies monitoring and managing network security activities.
Operational Efficiency: Supports lightweight operations reducing resource usage.
Improved Visibility: Enhances clarity in threat detection and response.
Reduced False Positives: Accurate detections minimize unnecessary alerts.

Cybereason Endpoint Detection & Response is widely implemented to safeguard endpoints, particularly in fields requiring rigorous security measures. Many employ it for its robust incident response capabilities in finance, healthcare, and government sectors to tackle malware, malicious operations, and unusual process detection, supporting security operations centers with powerful monitoring tools.

LevelBlue

Stormshield Endpoint Security provides robust protection, safeguarding critical business operations against evolving threats. It addresses security needs with advanced solutions that ensure comprehensive threat management and mitigation.

Stormshield Endpoint Security is tailored for a tech-savvy audience seeking reliable defense mechanisms to protect sensitive data. It combines cutting-edge technologies to provide a high level of security. Whether dealing with targeted attacks or generic malware, businesses trust its versatile approach, running seamless operations while mitigating risks. It supports endpoints with minimal impact on performance, ensuring continuous productivity.

What are the key features of Stormshield Endpoint Security?

Behavioral Analysis: Detects potential threats by analyzing activity patterns, ensuring proactive security measures.
Application Control: Restricts unwanted applications, allowing only approved programs to run, reducing vulnerability.
Network Protection: Secures data in transit by monitoring network traffic and preventing unauthorized access.
Advanced Threat Intelligence: Utilizes threat intelligence to anticipate attacks and respond swiftly to new security challenges.

What benefits should users expect when evaluating Stormshield Endpoint Security?

Cost-Efficiency: Reduces potential losses from security breaches, justifying investment with strong threat prevention.
Scalability: Adapts to business growth, offering consistent protection without requiring constant upgrades.
Easy Deployment: Provides straightforward installation and configuration, allowing quick adoption and minimal downtime.
Compliance Support: Helps meet industry standards, ensuring regulatory adherence for enhanced trust and credibility.

In sectors like finance and healthcare, Stormshield Endpoint Security is implemented to safeguard sensitive client data and meet compliance standards. In manufacturing, it secures networks from industrial espionage, addressing unique challenges by providing tailored security enhancing business resilience.

Stormshield

Sample Customers

CBI Health Group, University Honda, VakifBank

Lockheed Martin, Spark Capital, DocuSign, Softbank Capital

Arkoon, Netasq

Buyer's Guide

Cybereason Endpoint Detection & Response vs. Stormshield Endpoint Security

April 2026

Free Report: Cybereason Endpoint Detection & Response vs. Stormshield Endpoint Security

Find out what your peers are saying about Cybereason Endpoint Detection & Response vs. Stormshield Endpoint Security and other solutions. Updated: April 2026.

DOWNLOAD NOW

894,738 professionals have used our research since 2012.

See our Cybereason Endpoint Detection & Response vs. Stormshield Endpoint Security report.

See our list of best Endpoint Protection Platform (EPP) vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.