No more typing reviews! Try our Samantha, our new voice AI agent.

Huntress Managed EDR vs Zscaler Client Connector comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Detection and Response (EDR)
5th
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Huntress Managed EDR
Ranking in Endpoint Detection and Response (EDR)
6th
Average Rating
9.2
Reviews Sentiment
7.3
Number of Reviews
80
Ranking in other categories
Managed Detection and Response (MDR) (3rd)
Zscaler Client Connector
Ranking in Endpoint Detection and Response (EDR)
23rd
Average Rating
8.8
Reviews Sentiment
5.9
Number of Reviews
6
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, down from 3.8% compared to the previous year. The mindshare of Huntress Managed EDR is 2.7%, down from 3.2% compared to the previous year. The mindshare of Zscaler Client Connector is 0.7%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.8%
Huntress Managed EDR2.7%
Zscaler Client Connector0.7%
Other92.8%
Endpoint Detection and Response (EDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Adam Knubley - PeerSpot reviewer
Head Of IT at EA Gibson, Shipbrokers
Managed detection has improved visibility and response but still needs broader integrations
The best features Huntress Managed EDR offers do not really include any other features outside what other providers are doing; it was more about integrating with other tools that we already had with them. I find it easy to use Huntress Managed EDR; we don't operate within Huntress Managed EDR portal for EDR but have it work on our Defender data and through SIEM, which means we use a different interface and a different kind of portal to manage it. My impression of Huntress Managed EDR's ability to detect persistent footholds on our endpoints is adequate. I have the threat containment feature turned on, but we haven't seen any usage of it yet. I make use of Huntress Managed EDR's ability to automatically remediate low-severity threats; this automatic remediation affects my workload and security by purely blocking people trying to install applications, thereby stopping people from creating a bigger attack surface. The availability of Huntress Managed EDR for all major operating systems does not affect my organization's cybersecurity strategy.
DA
IT Support Admin at Kuehne & Nagel Inc.
Client activity has been monitored efficiently through in-depth log analysis and traffic filtering
I use the Zscaler speed test, and it is very nice. We use some logs from Zscaler Client Connector to collect data and see what is happening, such as if there is an interruption or something. There is a specific tunnel version that we have to use because, depending on the internet provider, some of them have lower speed, so we have some issues. This is because of the provider, not from Zscaler. We use Office 365 services and Office applications, and because some connections are slow and they do not have full coverage from the internet provider, we have some issues. If the speed is slow for Zscaler Client Connector connection, then we have issues because if the speed is not good, then Zscaler Client Connector goes down. This may be because they put some policy. Of course, if you use Office 365 services such as Outlook, the minimum bandwidth is 5 megabits and more, so this causes issues if the users do not have a good remote connection. This depends on the companies and the users, so they need to fix it. This is not from us or our company. It is very useful, and the logs are very helpful. When we go to logs, we understand what is happening.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"They did what they said, and this solution could apply to any scenario."
"The most valuable aspect of Cortex XDR by Palo Alto Networks for me is its integration with AI detection, where we get to know the behavioral detection based on users, traffic patterns, and different services that we consume."
"Cortex XDR by Palo Alto Networks is specifically designed to prevent zero-day attacks and is part of an ecosystem of Palo Alto, providing customers with a long-term vision to modify and redesign how security is applied in their company."
"The anti-exploit is impenetrable. We chose Traps because it is the only product that we were not able to get anything past."
"We can visualize and control the activities in the environment from anywhere."
"It's a nice product that's stable and scalable."
"Traps is quite a stable product. Once it was properly deployed and configured, you have nothing to be worried about."
"One major outcome our organization achieved with Cortex XDR by Palo Alto Networks is that it is a good tool for analysis, remediation, and incident response, with no negative points in terms of budget and overall effectiveness."
"Huntress has improved our security dramatically."
"We saw the benefits of Huntress pretty quickly. Once it started detecting threats, it was great."
"Overall, my experience with Huntress Managed EDR has been very positive."
"The benefits of Huntress Managed EDR were seen almost immediately after deploying it."
"Using Huntress Managed EDR has helped reduce the need for expensive security tools or hiring additional security analysts since I can use that as the first port of call versus trying to get an external SOC."
"The endpoint protection is definitely the most impactful feature for clients. It just works. It is a set-it-and-forget-it type of solution."
"Using Huntress Managed EDR has helped reduce the need for expensive security tools or to hire expensive security analysts, and it is important because we save money."
"What I like the most about Huntress Managed EDR is their lockdowns on malware; just last night I remediated a system that could have gone really sideways, their SOC called me and texted me and within 45 seconds we had a lockdown and remediation in progress, so all around they are just phenomenal."
"It is very useful, and the logs are very helpful; when we go to logs, we understand what is happening."
"Zscaler Client Connector has eliminated VPN bottlenecks and outages, improved user productivity with instant secure access, and reduced help desk tickets related to VPN issues, overcoming 60% of VPN-related problems while allowing faster onboarding of remote users and better enforcement of zero-trust security policies."
"It is very important to see what is happening between the user and the applications that we have, and to filter the traffic from outbound traffic and inside traffic."
"The best features of Zscaler Client Connector are that it gives the client a much more transparent experience, as they don't have to worry about connecting to a VPN."
"The real-time analytics feature in Zscaler Client Connector is another valuable feature called Digital Experience, or ZDX, which can easily identify the root cause of issues accessing public or internal resources and provide good analysis so relevant teams can quickly resolve them, making it a very good tool that helps customers."
"The solution operates in the background seamlessly without the user noticing."
"I'd rate the solution nine out of ten."
"Zscaler Client Connector is quite scalable, and I would rate its scalability as nine or ten out of ten."
 

Cons

"There are some false positives."
"There are some default policies which sometimes affect our applications and cause them to run around. In the hotel industry, we use a different type of data versus Oracle and SQL. By default, there are some policies which stop us from running properly. Because of this, the support level is also not that strong. We have to wait to get a results."
"Cortex XDR could be improved with more GUI features."
"There are some limitations on the Traps agents."
"The only issues that we have are, one the cost, two the dashboard is not very intuitive, even though you can drill down within the dashboard, we usually have to gather information from other sources to determine locations and if its a false positive."
"The solution eats memory of the computer, unlike anything I've ever seen."
"I don't like that they have different types of licenses. For example, if users select a license, they think they will have all the platforms they need to improve their network or security. But after some time, Palo Alto Networks changed their licensing, and some of the features that, for example, were free at the beginning now have a cost. I think the integration can be improved. For example, a lot of tools are just integrated through APIs."
"When it comes to malware files, it should be a little quick because, at times, it would give a wrong result in the sense of what it might be on malware, even if it still might be a normal one."
"Other products are a little more flashy and might have a little more marketing prowess because they have such a huge amount of information and they have security maps and threat portals and all sorts of features that we don't necessarily find to help security, but they do help those products when you're showing them to clients."
"I would suggest making the cost a little bit lower."
"The existing features are perfect. However, I think they could add a more robust set of security features like dark web scanning, penetration testing, and risk assessment for clients. We would have one tool for everything. We wouldn't have to go to multiple vendors to pull something together. That would be more beneficial for us."
"I would like the API to be a little better. They are getting there."
"I am anxiously watching to see how they evolve their MDR for Office 365. If anything, I would like more automated remediation capabilities in their MDR for Office 365."
"The product could be improved in terms of customization options available for reports."
"Reporting for Huntress Managed EDR could be better."
"One thing they could improve is evolving from an EDR to an MDR, like Blackpoint. This transition would enable automatic remediation of anything that looks dangerous, including within Microsoft 365."
"If the speed is slow for Zscaler Client Connector connection, then we have issues because if the speed is not good, then Zscaler Client Connector goes down."
"I rate this product nine out of ten because I have seen some minor instability issues after updates and some room for UI improvement for deeper analytics, with instances of major issues after updating the GCC that required rollbacks."
"There is room for improvement regarding the price of Zscaler Client Connector, as it is one of the most expensive solutions available."
"The stability of Zscaler Client Connector needs improvement, as it often disconnects and reconnects."
"Zscaler Client Connector is not low in cost; it is definitely on the higher side."
"There is a hard learning curve for Zscaler Client Connector; their support isn't the greatest all the time."
 

Pricing and Cost Advice

"I am using the Community edition."
"The price is on the higher side, but it's okay."
"Our license will require renewal in August, after which the maintenance will continue as usual."
"Compared to CrowdStrike, Cortex XDR is an expensive solution."
"The solution is expensive. It's pricing is on a yearly-basis."
"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."
"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."
"It is "expensive" and flexible."
"We haven't had any problems with Huntress' pricing. We're at 250 workstations, and we've grown considerably this year. They've been able to handle everything that we've thrown at them within that time frame. They're also reducing the price based on how many endpoints we add."
"It works well for an MSP."
"Huntress has a favourable pricing structure, and I appreciate the cost-effectiveness compared to previous solutions."
"Huntress is priced fairly for the services and value it provides."
"The pricing is competitive, in line with Huntress's offerings, and aligns well with our business model."
"It is very fair. I started at $2.50 and now I am at $3.50. When I signed up, I thought it was too cheap. It now reflects the price. It is very fair. I do not think you can find anything better."
"The cost-effectiveness of Huntress is much better compared to BlackPoint. Although Huntress does not offer all the finer details that BlackPoint does, it remains much more competitive in pricing."
"It is fair. They provide good value for the product that they deliver. I have had one price increase in the entire time I have used them. They added a bunch of features and then said that they have to increase our price a little bit. That is a fair way to handle it."
Information not available
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
921,714 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Computer Software Company
10%
Manufacturing Company
9%
Comms Service Provider
8%
Outsourcing Company
8%
Manufacturing Company
17%
Comms Service Provider
10%
Financial Services Firm
8%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
By reviewers
Company SizeCount
Small Business74
Midsize Enterprise6
Large Enterprise5
By reviewers
Company SizeCount
Small Business3
Large Enterprise5
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What needs improvement with Huntress?
There is room for improvement in Huntress Managed EDR regarding a minor issue. Currently, Huntress is unable to call ...
What is your primary use case for Huntress?
Huntress Managed EDR is used for endpoint detection and response, along with other Huntress products. I work with ITD...
What advice do you have for others considering Huntress?
Huntress Managed EDR is easy to maintain. Huntress Managed EDR is a very good product for the SMB market because the ...
What is your experience regarding pricing and costs for Zscaler Client Connector?
My experience with pricing, setup cost, and licensing is that the pricing is fair, though it is a bit costly. It oper...
What needs improvement with Zscaler Client Connector?
For Zscaler Client Connector, I would appreciate more granular control over the client update rollout and slightly fa...
What is your primary use case for Zscaler Client Connector?
My main use case of Zscaler Client Connector is to provide secure, seamless access to the internet and internal appli...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Information Not Available
Find out what your peers are saying about Huntress Managed EDR vs. Zscaler Client Connector and other solutions. Updated: September 2026.
921,714 professionals have used our research since 2012.