No more typing reviews! Try our Samantha, our new voice AI agent.

Cybereason XDR vs Kaspersky Next MXDR Optimum comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Extended Detection and Response (XDR)
4th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
113
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (6th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Cybereason XDR
Ranking in Extended Detection and Response (XDR)
24th
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
3
Ranking in other categories
No ranking in other categories
Kaspersky Next MXDR Optimum
Ranking in Extended Detection and Response (XDR)
38th
Average Rating
8.0
Reviews Sentiment
5.9
Number of Reviews
5
Ranking in other categories
Endpoint Protection Platform (EPP) (42nd), Managed Detection and Response (MDR) (28th)
 

Mindshare comparison

As of July 2026, in the Extended Detection and Response (XDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 4.6%, down from 5.1% compared to the previous year. The mindshare of Cybereason XDR is 1.0%, up from 0.7% compared to the previous year. The mindshare of Kaspersky Next MXDR Optimum is 0.3%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Extended Detection and Response (XDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks4.6%
Cybereason XDR1.0%
Kaspersky Next MXDR Optimum0.3%
Other94.1%
Extended Detection and Response (XDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Peter Nowak - PeerSpot reviewer
Business Development Manager for Cybereason at Bechtle
Integration of multiple firewalls enables advanced threat detection
The integration of data from firewalls and Active Directory is most valuable. Cybereason XDR facilitates two-way communication, where the firewall sends data to the Cybereason system, and it can communicate with the firewall to stop unwanted communication. Customers can deal with multiple types of firewalls with ease. The behavioral analytics help detect advanced threats when attackers use existing software. The multilayered protection approach, including NGAV, integrates XDR detection with antivirus to assess and counter threats effectively.
HM
General Manager at water company benisuef
Centralized protection has improved malware defense and simplifies on‑premises deployment
What I like in Kaspersky TOTAL Security for Business is that I tried the deployment on only the endpoint with no EDR, and it is easy to use. Kaspersky TOTAL Security for Business's anti-malware feature has a positive effect. Centralized security management in Kaspersky TOTAL Security for Business is good, but many errors appear in the software management.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Its interface and pricing are most valuable, and it is better than other vendors in terms of security."
"Palo Alto Networks Traps improves our security posture and lowers risk by providing next-gen methods to combat against modern threats on all the major platforms."
"Cortex is a very good total solution on the endpoints."
"Its ability to react to cyber data attacks is awesome."
"The interface is easy to use and it is more up to date than our previous solution."
"The solution's most valuable feature is its ability to rapidly detect certain hardware files."
"We've had a significant increase in blocking with a decrease in false positives, because it's looking at how the files work, not just a list of files that it's been told to look for."
"It detected stuff that other things wouldn't detect."
"The solution has an investigation feature, which is useful for building storylines."
"The integration of data from firewalls and Active Directory is most valuable."
"Cybereason XDR's most useful feature is the investigation."
"Kaspersky TOTAL Security for Business provides central management for protection of devices, mitigating attacks effectively."
"Kaspersky offers a large number of robust default policies, such as USB blockage. I really like this feature."
"The deployment and implementation of Kaspersky TOTAL Security for Business are easy to deploy with no difficulties."
"I like the inventory management. I also like behavior detection and exploit prevention."
"A good aspect of Kaspersky TOTAL Security for Business is that you can deploy it from the server to the end users, and you are able to manage and monitor each and every endpoint, including how it behaves and what things are coming in through a certain endpoint."
 

Cons

"The solution eats memory of the computer, unlike anything I've ever seen."
"Every 30 or 40 days, there's a new version and we need to go and make sure our customer's laptops are upgraded."
"The tool needs to be improved in terms of integration and interface."
"It'll help if customization was easier."
"Whenever the tool releases a new version when deploying the product across the organization, I feel like there are some disturbances in the CPU usage after upgrading the tool to the latest version."
"The solution can never really be an on-premises solution based simply on the way it is set up. It needs metadata to run and improve. Having an on-premises solution would cut it off from making improvements."
"Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth."
"Cortex XDR could be improved with more GUI features."
"Customer service is rated as a five out of ten. When they work and reach the right level, they are helpful, but getting to the right person can be time-consuming."
"There could be more integrations with other data sources like NDR systems."
"Cybereason's customer support could be better."
"The one thing we sometimes have issues with is its integration with other security applications like antiviruses."
"What could be improved about Kaspersky TOTAL Security for Business is that many errors appear on the console software, and sometimes I do not know why these errors appear on the console software."
"It's been good for months but bad on older endpoints. Only performance issues."
"One significant difference is the lack of on-site support from Kaspersky. Symantec has a local team in Pakistan with representatives I can contact directly for troubleshooting and support. On the other hand, Kaspersky doesn't provide the same level of local resources. If I have an issue, I need to draft an email and send it to a Kaspersky help center."
"The response time could be enhanced."
"The deployment process could be clarified, specifically around the ability to push the security application to clients from the central servers, as we faced issues with this."
 

Pricing and Cost Advice

"Traps pays for itself within the first 16 months of a three-year subscription. This is attributed to OPEX savings, as security teams spent less time trying to identify and isolate malware for analysis as a result of a reduction in malware incidents, false positives, and breach avoidance."
"It has a yearly renewal."
"Our license will require renewal in August, after which the maintenance will continue as usual."
"The price of the product is not very economical."
"I feel it is fairly priced."
"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."
"Our customers have expressed that the price is high."
"The price is on the higher side, but it's okay."
"The solution is cheaper than Microsoft Defender. It has a subscription and no standard license."
"The price is below average."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
902,988 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
12%
Financial Services Firm
11%
Manufacturing Company
10%
Comms Service Provider
9%
Manufacturing Company
12%
Computer Software Company
11%
Outsourcing Company
8%
Comms Service Provider
8%
Comms Service Provider
15%
Manufacturing Company
12%
Outsourcing Company
11%
Construction Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise21
Large Enterprise52
No data available
No data available
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What needs improvement with Cybereason XDR?
There could be more integrations with other data sources like NDR systems. Additionally, technical support has been s...
What is your primary use case for Cybereason XDR?
I use Cybereason XDR for customers who don't have a SOC or managed SOC yet and want to be protected on more than thei...
What advice do you have for others considering Cybereason XDR?
I rate Cybereason XDR a nine out of ten. I recommend having hands-on experience and doing some threat hunting to fami...
What needs improvement with Kaspersky TOTAL Security for Business?
The logs should be improved. The response time could be enhanced. To make Kaspersky TOTAL Security for Business close...
What is your primary use case for Kaspersky TOTAL Security for Business?
I still work with Kaspersky TOTAL Security for Business. I use Kaspersky TOTAL Security for Business and another prod...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
MOTOROLA MOBILITY
Information Not Available
Find out what your peers are saying about Cybereason XDR vs. Kaspersky Next MXDR Optimum and other solutions. Updated: June 2026.
902,988 professionals have used our research since 2012.