Fidelis Elevate vs Microsoft Defender Experts for Hunting comparison

Fidelis Elevate vs. Microsoft Defender Experts for Hunting

Download the complete report

Helped 915,287 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Mostafa Ameen

Information Security Engineer at ICT Misr

Advanced threat detection capabilities with comprehensive incident response features providing robust cybersecurity for organizations

The initial aspect concerns two engines. The first one mentioned is available for searching behaviors directly. The second engine involves the Google Ade tool, which operates on the machine. The challenge arises when attempting to rectify protection rules, causing confusion. It would be beneficial to enhance Rigixs Query. I encounter difficulty removing certain entries in behavior or alerts; likewise, I am unable to add specific calls.

Read full review

Joe Cicero

Chief Marketing Officer at a computer software company with 201-500 employees

Proactive threat hunting has strengthened our defenses and provides expert support for incidents

Proactive threat hunting as well as the Ask an Expert feature, which is a button inside of the XDR portal that becomes available when the customer owns Microsoft Defender Experts for Hunting, are the best features it offers. If a customer or one of our analysts needs extra support or has a question about a Microsoft Defender Experts for Hunting notification, they can click on that button and chat directly with a Microsoft security analyst to get more information or fill in any gaps regarding the Ask an Expert feature. Improved detection rates are one of the specific outcomes that show the positive impact because Microsoft Defender Experts for Hunting is a second set of eyes or a second team looking for emerging threats within a shared customer's environment. For us, the proactive approach that Microsoft Defender Experts for Hunting is always running is valuable, and we see those alerts pop up inside of our incident queues in Microsoft Sentinel and we respond and acknowledge them. In many cases, Microsoft might see an alert from a zero-day that we aren't even aware of yet or the industry isn't aware of yet and we see that tagged within our incident queue, which allows us to follow up with it much sooner than had we had to search and detect for it ourselves. Microsoft Defender Experts for Hunting helps my customers detect or prevent emerging threats that are not yet published but Microsoft has visibility into. Microsoft Defender Experts for Hunting's reporting and analytics are clear and actionable, and the fact that it's tied to the MITRE framework puts it all in a common language. Microsoft Defender Experts for Hunting helps my customers comply with industry regulations or standards, though I am unsure how, but many have requirements for threat hunting and this checks that box. Microsoft Defender Experts for Hunting helps my team respond to incidents by providing a backstop, which does speed up the process and improve outcomes.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Cortex is a very good total solution on the endpoints."

"Cortex XDR by Palo Alto Networks has helped lighten the load of our security analysts because it was the major tool that we were using and the one we utilized most."

"Cortex XDR can integrate the firewalls and determine the tendencies of the attacks. It's a new generation antivirus, with protection endpoints and detection response. It is very easy to use and everybody can operate the solution."

"I recognize that Cortex XDR by Palo Alto Networks is one of the best products in its category regarding capabilities."

"Stability is one of the features we like the most."

"What I like about Cortex XDR by Palo Alto Networks is that it is a comprehensive solution that contains everything the organization may need when using endpoints."

"The stability of the solution is very good. We have about 100 users on it right now, and we use it twice a week."

"I can highlight that we have not faced any security incidents with Cortex XDR by Palo Alto Networks, and even though our environment is quite dynamic, we have not faced any security incident with Cortex XDR by Palo Alto Networks until now."

More Cortex XDR by Palo Alto Networks pros

"It is used as our primary in-line IDS/IPS system, replacing FireEye NX, and it catches more, looks at more ports than FireEye NX, and is a scalable appliance, unlike our NX which was saturated and shut itself down."

"The solution's technical support is perfect, so I rate the technical support a ten out of ten"

"What I like the most about this solution is the complexity. It covers a lot of areas, unlike other solutions."

"Compared to similar solutions, it's quite scalable. You just need to add more storage to scale-up."

"It ensures the stability of network behavior across various aspects of our network and offers responsive capabilities to address incidents promptly"

"There are many valuable features. The NDR gives very good network visibility, and the endpoint module has a great feature called "Live Connect" for remote connections. They also have "Tasks" that can be run on endpoints to gather specific information or retrieve logs."

"The initial setup is very straightforward. The deployment of the server doesn't take so long; about a day or two max."

"It has a rating system now so you can rate things up or down, depending on your environment. This means alerting can be customized, yet still pick up anomalies."

More Fidelis Elevate pros

"The solution helps to detect some suspicious items for us and our clients."

"Easy to use is what my customers say is the biggest benefit of Microsoft Defender Experts for Hunting for them."

"The best feature of this solution is that it is an integrated and comprehensive solution for the entire Microsoft ecosystem."

"What really stands out about Microsoft Defender Experts for Hunting is that it's easy to use, the cost is clear, and the pricing is transparent, with straightforward onboarding in hybrid, cloud, or on-premise environments."

"Microsoft Defender Experts for Hunting helps my customers detect or prevent emerging threats that are not yet published but Microsoft has visibility into."

Cons

"The solution eats memory of the computer, unlike anything I've ever seen."

"There are some default policies which sometimes affect our applications and cause them to run around."

"On the pricing aspect, Cortex XDR by Palo Alto Networks needs to have a more reasonable rate, particularly for customers in Sri Lanka and Asian countries."

"While using Cortex, I noticed some aspects that could be improved, such as increasing the synchronization speed between XDR and Xnor."

"The price could be a little lower."

"If he is using a smaller company, he can depend on some other tools because Cortex XDR by Palo Alto Networks is a bit expensive."

"I think sometimes Cortex XDR agent automatically stops event capturing from the device, and then even the dashboard does not get any notifications from the agent."

"Impact on system performance is horrible, adding a lot of delays for users."

More Cortex XDR by Palo Alto Networks cons

"The interface bug needs to be squashed once and for all."

"The reports in the endpoint area of Elevate can be improved."

"Configuration, in terms of building the collector and communicating with endpoints, is complex."

"I encounter difficulty removing certain entries in behavior or alerts; likewise, I am unable to add specific calls."

"There is room for improvement in email security. It's a security issue. If you're aiming for XDR, covering the entire threat landscape is crucial."

"We position the solution as an antivirus, but this part of the solution needs improvement. They need to generally enhance the features that they have, rather than adding anything new."

"The interface bug needs to be squashed once and for all. This has been the predominant issue with an otherwise stellar product. It reboots itself unscheduled, about once a month, due to a memory buffer flaw in the interface."

"Fidelis Endpoint is an expensive product making it one of its shortcomings that needs improvement."

"We tried the proactive threat hunting feature, but it was not a good experience with Microsoft Defender Experts for Hunting. It created more trouble than expected with false positives and non-expected answers."

"The solution’s user interface could be improved."

"The price of the solution is costly, which I find significant."

"There is a lot of change in a small period. This might not be helpful for IT administrators and users."

"As a partner, Microsoft Defender Experts for Hunting could be improved by getting earlier threat detection signals so we could proactively research on our own end and help support a campaign to raise awareness as well as proactive response."

Pricing and Cost Advice

"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."

"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."

"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."

"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."

"Its pricing is kind of in line with its competitors and everybody else out there."

"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."

"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."

"This is an expensive solution."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"Fidelis Endpoint is an expensive product. My company makes yearly payments toward the licensing cost of the solution."

"It's quite expensive but we can customize it to reduce the price."

"It's somehow expensive. From one to ten, I would rate it a five. They need to improve the prices. It's very high."

"You license by the number of days of logs you need to maintain visibility for. Forty-five days is a good solid number for a company with around a 10k user base."

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.

See recommendations

915,287 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

12%

Comms Service Provider

12%

Construction Company

11%

Manufacturing Company

10%

Financial Services Firm

12%

Construction Company

12%

Comms Service Provider

12%

Manufacturing Company

10%

Computer Software Company

21%

Financial Services Firm

11%

Comms Service Provider

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	47
Midsize Enterprise	21
Large Enterprise	55

By reviewers
Company Size	Count
Small Business	6
Large Enterprise	2

No data available

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What needs improvement with Microsoft Defender Experts for Hunting?

Ask a question

Earn 20 points

As a partner, Microsoft Defender Experts for Hunting could be improved by getting earlier threat detection signals so...

What is your primary use case for Microsoft Defender Experts for Hunting?

As a working security partner, my main use case for Microsoft Defender Experts for Hunting is that many of our custom...

What advice do you have for others considering Microsoft Defender Experts for Hunting?

As a partner, there can be some concern that Microsoft Defender Experts for Hunting is taking away some of our busine...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 15% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

CrowdStrike Falcon vs Fidelis Elevate

Compared 8% of the time

Trellix Endpoint Security Platform vs Fidelis Elevate

Compared 5% of the time

VMware Carbon Black Endpoint vs Fidelis Elevate

Compared 4% of the time

SentinelOne Wayfinder Threat Detection and Response vs Fidelis Elevate

Compared 3% of the time

Cybereason Endpoint Detection & Response vs Fidelis Elevate

Compared 2% of the time

More Fidelis Elevate Competitors

SentinelOne Wayfinder Threat Detection and Response vs Microsoft Defender Experts for Hunting

Compared 18% of the time

Arctic Wolf Managed Detection and Response vs Microsoft Defender Experts for Hunting

Compared 8% of the time

Managed XDR vs Microsoft Defender Experts for Hunting

Compared 6% of the time

Sophos MDR vs Microsoft Defender Experts for Hunting

Compared 5% of the time

More Microsoft Defender Experts for Hunting Competitors

Product Reports

Cortex XDR by Palo Alto Networks

Download Cortex XDR by Palo Alto Networks product report

Fidelis Elevate

Download Fidelis Elevate product report

Microsoft Defender Experts for Hunting

Download Microsoft Defender Experts for Hunting product report

Microsoft Defender Experts for Hunting report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Fidelis Elevate Platform, Fidelis Enterprise, Fidelis Cloud, Fidelis Managed Detection and Response, Fidelis Deception, Fidelis Decryption, Fidelis Endpoint, Fidelis Network

No data available

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Fidelis Elevate offers advanced network and endpoint detection with valuable features such as anomaly detection for reduced false positives, customizable alerts, and efficient reporting, providing comprehensive threat response capabilities across multiple platforms.

Fidelis Elevate is trusted for its robust network visibility and remote connection capabilities. It integrates data across network security platforms, supporting endpoint threat response. Businesses rely on it for in-line IDS/IPS systems that exceed competitors by examining more ports. Its use in anomaly detection and fast data searches is appreciated by those seeking complex solutions covering multiple areas, with endpoint script execution and tools for incident response enhancing its offering.

What important features does Fidelis Elevate offer?

NDR for network visibility: Enhances monitoring and threat detection with deep insights.
Live Connect: Facilitates secure remote connections for troubleshooting and support.
Tasks for information gathering: Streamlines endpoint data collection to support analysis.
Anomaly detection: Minimizes false positives, increasing detection accuracy.
Customizable alerts: Tailors notifications for specific threat scenarios.
Efficient reporting: Enables rapid and detailed data searches.

What benefits and ROI can Fidelis Elevate provide?

Comprehensive threat view: Integrates data for a holistic security perspective.
Enhanced endpoint security: Prevents fileless attacks and provides essential evidence.
Efficient incident response: Offers tools aiding quick response across environments.

Fidelis Elevate is implemented across industries for its comprehensive monitoring capabilities. Companies leverage its network visibility and remote connectivity in endpoint and network detection, effectively preventing threats within complex environments. Its holistic integration serves as an essential asset for security analysts focused on incident response.

Fidelis Security

Microsoft Defender Experts for Hunting empowers businesses with advanced threat detection and incident response capabilities, leveraging proactive threat hunting and expert consultation to enhance cybersecurity posture across diverse environments.

Microsoft Defender Experts for Hunting provides a comprehensive cybersecurity solution that integrates well with Microsoft tools, enabling organizations to detect, explain, and manage threats efficiently. It uses the MITRE framework for reporting, enhancing detection strategies and regulatory compliance efforts, offering increased protection against nation-state and financially motivated cyber threats. With tools like KQL query capability, direct access to security analysts via the Ask an Expert button, and automation features, it enhances threat intel updates and saves significant man-hours for security teams.

What key features set Microsoft Defender Experts for Hunting apart?

KQL Query Capability: Provides powerful data querying to identify potential threats.
Proactive Threat Hunting: Enables security teams to detect threats before they cause harm.
Ask an Expert Button: Allows direct chat with security analysts for expert insight.
Improved Detection Rates: Utilizes advanced algorithms to enhance threat detection accuracy.
Integration with MITRE Framework: Utilizes a robust framework for thorough threat identification.
Strategic Ecosystem Integration: Compatible with Microsoft tools for a cohesive cybersecurity strategy.

What benefits should organizations expect from using Microsoft Defender Experts for Hunting?

Increased Threat Detection Precision: Provides reliable detection backed by Microsoft's extensive data.
Enhanced Operational Efficiency: Saves manpower through automation, allowing teams to focus on impactful tasks.
Regulatory Compliance Support: Assists in meeting compliance requirements through structured reporting.
Streamlined Incident Response: Reduces incident handling time with expert insights and integrated tools.

Industries employing Microsoft Defender Experts for Hunting integrate it with Azure Sentinel and other cybersecurity tools to bolster threat response strategies. Entities benefit from advanced threat signals, enhancing protection against sophisticated cyber threats, particularly useful for sectors facing threats from nation-state and financially supported actors.

Microsoft

Sample Customers

CBI Health Group, University Honda, VakifBank

First Midwest Bank

Information Not Available

Fidelis Elevate vs. Microsoft Defender Experts for Hunting