No more typing reviews! Try our Samantha, our new voice AI agent.

Huntress Managed EDR vs Tanium comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Detection and Response (EDR)
5th
Average Rating
8.4
Reviews Sentiment
6.7
Number of Reviews
118
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Extended Detection and Response (XDR) (4th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Huntress Managed EDR
Ranking in Endpoint Detection and Response (EDR)
6th
Average Rating
9.2
Reviews Sentiment
7.5
Number of Reviews
66
Ranking in other categories
Managed Detection and Response (MDR) (1st)
Tanium
Ranking in Endpoint Detection and Response (EDR)
20th
Average Rating
7.8
Reviews Sentiment
6.2
Number of Reviews
23
Ranking in other categories
Vulnerability Management (26th), Endpoint Protection Platform (EPP) (12th), Unified Endpoint Management (UEM) (8th), Autonomous Endpoint Management (3rd)
 

Mindshare comparison

As of September 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.6%, down from 3.9% compared to the previous year. The mindshare of Huntress Managed EDR is 2.7%, down from 2.9% compared to the previous year. The mindshare of Tanium is 2.1%, down from 2.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.6%
Huntress Managed EDR2.7%
Tanium2.1%
Other91.6%
Endpoint Detection and Response (EDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Abhishek Saini - PeerSpot reviewer
Professional Services Engineer at Next7 IT
Managed detection has transformed incident response and now delivers faster, focused protection
Overall, my experience with Huntress Managed EDR has been very positive. If I were to suggest improvements, I would like to see more advanced customization and reporting capabilities, particularly for MSPs managing multiple clients. For example, additional dashboard customization, more granular alert filtering options, and enhanced executive level reporting would help teams present security insights more effectively to their clients. Deeper integrations with a broader range of third party security and IT management platforms could also streamline workflows and reduce the need to switch between multiple tools. Another area of improvement would be expanding automation options for common remediation tasks, allowing security teams to respond even more quickly to certain types of threats while maintaining appropriate control. These are more enhancements than shortcomings, as Huntress Managed EDR already provides strong threat detection, excellent SOC support, and an easy-to-manage platform that delivers significant value in day-to-day operations. A few additional enhancements would make the platform even stronger, especially for MSPs managing a large number of endpoints and clients. From a user interface perspective, I would like to see more customizable dashboards that allow engineers to tailor views based on the client's priorities, threat levels, or operational metrics. Another useful feature would be additional automation and authorization options for common response actions such as isolating devices, initiating remediation workflows, or integrating with ticketing systems and SIEM platforms. Overall, these would be valuable additions, but they do not take away from the core strength of Huntress Managed EDR.
Sandeepraj Gatla - PeerSpot reviewer
Dfir Analyst at a tech services company with 201-500 employees
Endpoint monitoring has strengthened incident response and provides rapid isolation and forensics
Tanium provides an endpoint which is isolated from the network and environment. We can easily search its logs and history and connect remotely directly to that particular device which has been isolated from the network. We can search for the history and logs, including audit logs and event logs. The complete activity of the user or owner of the device is visible to us. We can see the artifacts of particular USB transfers internally for official use. We can not only connect remotely but also see the device status and how many failures have occurred within the network so far. We can see the IP address, how many times it has changed its IP address, and how many times it was connected to VPN or external VPN or internal VPN and what has been searched while on VPN. We can block the IOCs or IP addresses as well. We can block domains, hashes, SHA values, SHA-256, SHA-1, SHA-5 and MD5. Although I am not completely involved in the automation team, we do have that team and I have worked in some CERT recently. Tanium is more useful while we are in the CERT because most of the times when we are on high alert, Tanium does play a main role for that particular incident or any high case. Tanium is a simple tool and we can easily integrate it to many devices and it is a mandatory tool to secure an endpoint. It is mandatory to give any RDP connection and the tool should be present in the particular device. It is completely mandatory and it is in the policy as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The best feature of Cortex XDR by Palo Alto Networks is that it collects logs from different sections such as the endpoint, the network, and the cloud, making it easy to investigate alerts, collect some of the investigation packages related to the infected machines, and provide live response."
"Being a cloud solution it is very flexible in serving internal and external connections and a broad range of devices."
"Palo Alto is the core of the security infrastructure in the environment."
"Cortex is the best solution for avoiding security breaches, malware attacks, and other kinds of security issues."
"The good thing about the product is that it's always scanning."
"I've found the solution to be highly scalable for enterprises."
"Since using Cortex XDR by Palo Alto Networks, our MTTR has reduced, which means the mean time to resolve any ticket has been reduced."
"We use it for malicious connections from malicious websites, to identify payloads that might be inside the traffic, to identify malicious processes or bugs that are running on the network, and any activities that tend to lead to data infiltration."
"Huntress helps by highlighting potential issues, allowing us to take proactive measures."
"Huntress Managed EDR has helped significantly reduce our workload so that our engineers can focus on other tasks at hand."
"Huntress Managed EDR provides that human in the loop, which means someone is always watching your back, and that's the main difference."
"Huntress is extremely well-written software. I used to be a developer, and I see how they've written it. It's excellent. I've never had an issue with it crashing a machine. It's small, tight code."
"The automatic remediation feature of Huntress Managed EDR is very effective because at midnight, around 2:00 AM, if there is an alert while I am sleeping, I know my organization remains safe."
"Huntress has improved our security significantly by 90 percent."
"Their SOC is super responsive and does a great job of catching incidences and being on top of any issues that arise."
"After deployment, it takes some time to scan and process everything. Huntress has effectively flagged issues such as password files on desktops, which it identifies as low-level alerts. It also handles more significant threats effectively."
"I'm not so familiar with the tool but I like the interaction of the console to the picture. Patching is the primary model I have been focusing on for the last couple of weeks. So I have created a proof of concept environment and have been checking the available features."
"For incident response tasks, all these tasks can get done in minutes with minimal disruption to the end-user."
"Tanium is a simple tool and we can easily integrate it to many devices and it is a mandatory tool to secure an endpoint."
"I find the inventory and compliance features of Tanium to be the most impressive."
"The solution is scalable and helps to understand how infrastructure works. It helps to improve the health of the organization."
"Tanium is used for endpoint management, specifically patching and configuration management."
"I like the tool's incident response and security patching."
"I like the fact that you can create patching campaigns depending on the area of your network that you want to address first. I like the ability it has to make several campaigns that work in parallel."
 

Cons

"If he is using a smaller company, he can depend on some other tools because Cortex XDR by Palo Alto Networks is a bit expensive."
"Whenever the tool releases a new version when deploying the product across the organization, I feel like there are some disturbances in the CPU usage after upgrading the tool to the latest version."
"The configuration could be simplified. I would like to see better protection, specifically to protect email applications."
"We had a problem with getting our older endpoints up to date, but their newest updates have been really good. I've been pleased with it in terms of what our needs are. It's doing what we want it to do."
"The connection to the internet has not performed as expected."
"A little bit more automation would be nice."
"The solution should add unwanted malicious hash values to a block list so that whenever the action is triggered, it will automatically prevent the malicious content."
"Cortex XDR by Palo Alto Networks could improve its user interface, which is more complicated compared to competitors such as SentinelOne."
"Regarding improvements for Huntress Managed EDR, there was an example yesterday where the UI had unclear directions and it caused the agent itself to be removed from the endpoint device during a critical moment."
"Using Huntress Managed EDR has not reduced our need for expensive security tools or hiring expensive security analysts, as we run redundancy and maintain all that in-house while Huntress serves as a partner, not a replacement."
"Not every time, but sometimes when we click on the remediation, the auto-resolution of the alert, the screen gets stuck, and I need to contact support so they can confirm the remediation was applied, and they have to close the ticket."
"The application control system could benefit from improvements in identifying and managing both whitelisted and blacklisted applications."
"The Huntress is not a standalone solution. It really needs to be used with something else such as Microsoft Defender or another antivirus solution. It would be nice to see the product fleshed out by the Huntress team and include the antivirus solution part as well. I want it to be a full-fledged XDR product. It would push the tool to a higher price range but it would be nice to see the fleshed out features. I want them to integrate more features from the XDR realm."
"The main reason it is not a perfect 10 is that I would like more customizations or integrations and deeper reporting and dashboard options."
"The integration with Autotask could be improved."
"The existing features are perfect. However, I think they could add a more robust set of security features like dark web scanning, penetration testing, and risk assessment for clients. We would have one tool for everything. We wouldn't have to go to multiple vendors to pull something together. That would be more beneficial for us."
"In my opinion, sometimes it takes a long time to give solutions or resolve the issue."
"The solution can give a lot of false positives."
"It is not really additional functions, or the features that are needed, rather the complexity would be reduced based on the number of modules required to put together a comprehensive operational security and risk compliance model."
"I would like to have more integrations and custom plugins to input. Integration is always a big deal in a lot of different environments."
"There are downsides and drawbacks in Tanium, and there is room for improvement from my perspective."
"The most painful thing is the interface. It's a bit unclear sometimes."
"Tanium’s scalability could be improved."
"Tanium required local admin or root rights on Mac devices, which did not comply with our security policies. This made the solution less suitable for our restrictive environment."
 

Pricing and Cost Advice

"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."
"I feel it is fairly priced."
"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."
"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."
"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."
"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."
"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."
"The price is on the higher side, but it's okay."
"Huntress Managed EDR offers a fair pricing model."
"It is very fair. I started at $2.50 and now I am at $3.50. When I signed up, I thought it was too cheap. It now reflects the price. It is very fair. I do not think you can find anything better."
"Regarding the pricing for Huntress Managed EDR, I was amazed when I heard the price; I thought it was going to be way more than what it is based on the quality."
"Huntress is priced fairly for the services and value it provides."
"I rate the product's price a five or six on a scale of one to ten, where one is cheap, and ten is expensive since it is a fairly priced product."
"I rate the product pricing six out of ten for the Malaysian market. However, I would rate it a three out of ten for the Australian, New Zealand, or Singapore markets."
"While other options have emerged since Huntress' arrival, I believe it still offers the best value for the features and services it provides."
"The Huntress pricing is an excellent value for what the product provides."
"There is an annual license required to use this solution."
"The product's pricing differs from region to region depending on negotiations and the number of endpoints."
"It is higher than some competitors in the market."
"Tanium is a more expensive solution in Latin America than some of the competitors, such as BigFix."
"The solution is expensive but it's a good investment."
"It's an expensive solution. It would be nice if the cost were lower."
"The solution offers value for money."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
913,806 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
12%
Comms Service Provider
12%
Construction Company
11%
Financial Services Firm
9%
Computer Software Company
10%
Manufacturing Company
10%
Outsourcing Company
8%
Comms Service Provider
7%
Financial Services Firm
13%
Government
9%
Manufacturing Company
9%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business47
Midsize Enterprise21
Large Enterprise55
By reviewers
Company SizeCount
Small Business64
Midsize Enterprise6
Large Enterprise2
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise4
Large Enterprise12
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What needs improvement with Huntress?
I would like to see more customization and deeper integration with SIEM and other security tools for Huntress Managed...
What is your primary use case for Huntress?
My main use case for Huntress Managed EDR is endpoint monitoring and threat detection, which I use to investigate sus...
What advice do you have for others considering Huntress?
I would rate Huntress Managed EDR a nine out of 10 because it gives strong endpoint visibility, reliable threat detec...
What needs improvement with Tanium?
While there is always room for improvement, I am pleased with Tanium.
What is your primary use case for Tanium?
The primary use case for Tanium ( /products/tanium-reviews ) is compliance, patching, and inventory as part of the co...
What advice do you have for others considering Tanium?
For smaller companies, Tanium is quite a big investment, and one needs to have a considerable setup to make it econom...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
Tanium Inc Cloud, Tanium XEM
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
JPMorgan Chase, eBay, Amazon, US Bank, MetLife, pwc, Cerner, Delphi, MGM Grand, New York Life
Find out what your peers are saying about Huntress Managed EDR vs. Tanium and other solutions. Updated: September 2026.
913,806 professionals have used our research since 2012.