No more typing reviews! Try our Samantha, our new voice AI agent.

Datto Endpoint Detection and Response (EDR) vs Kandji comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Detection and Response (EDR)
7th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
108
Ranking in other categories
Endpoint Protection Platform (EPP) (5th), Extended Detection and Response (XDR) (6th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (2nd)
Datto Endpoint Detection an...
Ranking in Endpoint Detection and Response (EDR)
41st
Average Rating
7.6
Reviews Sentiment
7.0
Number of Reviews
4
Ranking in other categories
No ranking in other categories
Kandji
Ranking in Endpoint Detection and Response (EDR)
31st
Average Rating
8.0
Reviews Sentiment
7.6
Number of Reviews
2
Ranking in other categories
Vulnerability Management (43rd), Mobile Device Management (MDM) (7th), Enterprise Mobility Management (EMM) (14th)
 

Mindshare comparison

As of March 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of Datto Endpoint Detection and Response (EDR) is 1.5%, down from 2.2% compared to the previous year. The mindshare of Kandji is 0.5%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.4%
Kandji0.5%
Datto Endpoint Detection and Response (EDR)1.5%
Other94.6%
Endpoint Detection and Response (EDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
reviewer2406663 - PeerSpot reviewer
Director at a computer software company with 11-50 employees
Effective risk response, easy deployment, and enhanced security
They use Datto EDR as part of the solutions that we supply Datto EDR has helped reduce overall security incident costs by fifteen percent. The ease of deployment has been good, and the responsiveness of the application to risks has been quite effective. The inclusion of web filtering would be…
reviewer2795433 - PeerSpot reviewer
Cloud Ops Lead at a tech vendor with 10,001+ employees
Automated updates have strengthened security and save me time on daily device management
In my opinion, the best features Kandji offers are its UI, which is very clean and clear to use, not overly cluttered, allowing me to see the icon of all the different apps that I can install, and when I click on the little icon in my toolbar, it shows me any updates which I am able to install, making it very easy to use. The clean UI and ease of use definitely save me time, probably cutting the time in half for trying to figure out when to install updates myself, because the notifications are pushed to me, which is good since I want to keep my system up to date without interfering with my workflow. Kandji has impacted my organization positively by definitely increasing security because it notifies you when an update is ready to be installed, and if you do not install it within a reasonable time frame, it would automatically install it, which is good, and it probably has saved at least 30% of my time from manually having to look for updates since it just notifies me when the update is ready. Kandji's automatic installation feature ensures our team's compliance or security posture, as it makes sure we are up to date and all on the same version of a particular tool, which is very important for a technical IT team to avoid differences that might affect functionality.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Traps is quite a stable product. Once it was properly deployed and configured, you have nothing to be worried about."
"It can automatically correlate events and logs, which is very helpful for an IT administrator. It can correlate different kinds of malware activities over a network, agent, or host system. You do not need to do it manually. It is a good feature. It is also a user-friendly solution. We have deployed it on the cloud because our space does not provide any flexibility for on-premises deployment, but Palo Alto has added some flexibility to install it on-premises. It must be like the same Cortex XDR agent for all the VPN services, web filtering services, and everything else."
"Cortex XDR lets us manage several clients from the same console, and its endpoint defense is more advanced than traditional antivirus."
"Technical support is the best in class, in my opinion, because they have invested heavily in research and development."
"We think that this product will help us grow, as it meets our needs currently and we can grow with it over time."
"My advice for others looking into using Cortex is that it is very easy to use and very useful for the customer environment, whether it's a public or private one."
"It blocks malicious files, prevents attacks, and doesn't require many updates because it is a very light application."
"The stability of this product is very good."
"The insight that the solution provides is the most valuable aspect. The security scanning they do is excellent."
"Datto Endpoint Detection and Response is a perfect product for endpoint security."
"The most valuable feature of Datto EDR is the visibility of the endpoints."
"The insight that the solution provides is the most valuable aspect."
"The ease of deployment has been good."
"It's a very easy plug-and-play solution where you can just enroll the devices and choose the features you want."
"I highly recommend Kandji to others looking into using it since I have not seen any game-breaking issues; it is highly reliable, scalable, improves security, and reduces the time individuals need to spend on system configuration for security updates."
 

Cons

"We have found that there are times Cortex XDR by Palo Alto Networks does not detect some of the viruses, we have to use another protection solution called Kaspersky."
"Cortex XDR is trickier to configure than other Palo Alto products. This is one area where we are not so satisfied."
"Previously, the endpoint would leave the environment, not being on our VPN, essentially unable to interact with the server to upload files. It was unable to retrieve new file verdicts. It was using a thing called "local analysis" to determine if something was a malicious file or not. There was no dynamic analysis."
"The encryption is not up to the mark."
"Enhancing UI simplicity and playbook flexibility are areas that could benefit from more low-code automation options for smoother integrations."
"There's room for improvement with Mac device installations, which can be challenging."
"When it comes to core analysis, and security analysis, Cortex needs to provide more information."
"In an upcoming release, the solution could improve by providing hard disk encryption."
"The inclusion of web filtering would be good."
"The solution should allow the automation of playbooks."
"The deployment of the solution right now is terrible. We find it to be very bad."
"The deployment of the solution right now is terrible. We find it to be very bad. It could be improved enormously."
"The solution could improve by having more deployment methods."
"Kandji should give open customization."
 

Pricing and Cost Advice

"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."
"It has reasonable pricing for the use cases it provides to the company."
"It's about $55 per license on a yearly basis."
"Cortex XDR by Palo Alto Networks is quite an expensive solution."
"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."
"This is an expensive solution."
"I don't have any issues with the pricing. We are satisfied with the price."
"Very costly product."
"Datto Endpoint Detection and Response is not an expensive solution."
"There is an annual license to use this solution. The price of the solution can be expensive depending on the company."
"Users have to pay a yearly licensing fee for Kandji, which is expensive."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
885,311 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
13%
Manufacturing Company
8%
Computer Software Company
8%
Financial Services Firm
8%
Comms Service Provider
12%
Computer Software Company
12%
Manufacturing Company
7%
Retailer
7%
Financial Services Firm
11%
Computer Software Company
11%
Manufacturing Company
10%
Educational Organization
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise20
Large Enterprise47
No data available
No data available
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Infocyte HUNT?
The price is quite low. On a scale of one to ten, I would rate it a four, meaning it is quite cheap.
What needs improvement with Infocyte HUNT?
The inclusion of web filtering would be good.
What is your primary use case for Infocyte HUNT?
They use Datto EDR as part of the solutions that we supply.
What is your experience regarding pricing and costs for Kandji?
My experience with pricing, setup cost, and licensing is that their pricing structure is bucket-based, requiring lice...
What needs improvement with Kandji?
I have not been involved in the purchase process of Kandji, but I understand it is very Apple-centric and they have v...
What is your primary use case for Kandji?
My main use case for Kandji is that within my organization, I have a Mac as my work laptop, and Kandji is used for se...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Infocyte HUNT
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Check Point Software, PwC, Grant Thornton, AT&T, DHL, U.S. Department of Defense
Information Not Available
Find out what your peers are saying about Datto Endpoint Detection and Response (EDR) vs. Kandji and other solutions. Updated: March 2026.
885,311 professionals have used our research since 2012.