No more typing reviews! Try our Samantha, our new voice AI agent.

Jamf Protect vs Sophos Endpoint comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 19, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
4.9
Cortex XDR reduces security incidents, personnel needs, and costs, offering quick ROI, enhanced performance, and competitive pricing.
Sentiment score
5.3
Jamf Protect offers cost-effective security with compliance telemetry, faster response times, and enhanced macOS protection reducing breach risks.
Sentiment score
5.5
Sophos Endpoint increases ROI in 12-16 months through productivity, protection, system integration, malware defense, and compliance.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cyber Security Manager at Welab bank
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
Detection and Response Consultant at Inovasys
In Cortex XDR by Palo Alto Networks, most of the remediation is automated and the accuracy is quite good.
Network Security Engineer at Cyberwell Solution
A return on investment has been realized with Jamf Protect, having saved 30 to 40 percent in time due to faster detection-to-response cycles for macOS indications.
Manager, Account Services Delivery at Softcell Technologies Limited
 

Customer Service

Sentiment score
7.0
Cortex XDR support is effective and fast but faces issues with language, delays, and high costs, yet generally satisfactory.
Sentiment score
7.9
Jamf Protect's support is proactive and highly rated but could improve response times; 24/7 team mainly in Europe.
Sentiment score
8.1
Sophos Endpoint's customer service is effective but needs faster, knowledgeable responses; technical improvements have been implemented.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
Head of data centers at a non-profit with 10,001+ employees
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
Senior Process Expert at A.P. Moller - Maersk
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
Chief of IT Architecture at a financial services firm with 10,001+ employees
The technical team is knowledgeable.
Manager, Account Services Delivery at Softcell Technologies Limited
The customer support is very proactive, helpful, and knowledgeable.
Project Manager at Wells Fargo
I rate Sophos support as excellent, giving it a ten out of ten.
Assistant Manager, Information Technology at Swades Foundation
I would give customer support a rating of 10 out of 10 because they resolve my problems as soon as possible, and I receive very good, quick support from Sophos.
Project Engineer at IT Solution
They have introduced a dedicated role called Technical Account Manager (TAM) for every partner.
Director at Infosonik Systems Ltd
 

Scalability Issues

Sentiment score
7.5
Cortex XDR is scalable, supports diverse enterprises, integrates with endpoints, and enables easy expansion with cloud infrastructure.
Sentiment score
7.5
Jamf Protect excels in scalability, ensuring stable performance for enterprises with large numbers of Mac devices and users.
Sentiment score
8.1
Sophos Endpoint is praised for scalability and flexibility, supporting diverse business sizes with easy expansion via cloud features.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Assistant Security Architect at Cloudnomics
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
Head of data centers at a non-profit with 10,001+ employees
I think scalability for Cortex XDR by Palo Alto Networks is good.
Threat Analyst II at a tech vendor with 1,001-5,000 employees
I initially had a few customers with macOS but now have more, and it remains stable without encountering issues, allowing me to scale it up to many customers.
Manager, Account Services Delivery at Softcell Technologies Limited
Jamf Protect is very scalable, enabling me to manage a large number of devices seamlessly and easily.
Project Manager at Wells Fargo
I believe Jamf Protect's scalability is effective because we have been using it in our organization since the start, and our numbers have recently risen by a large amount, so we are still using it.
Software Engineer at a tech vendor with 501-1,000 employees
If we are using 300 machines and suddenly 10 more people are joining our organization, I will just raise a ticket on Sophos Endpoint and they will increase my 10 endpoint licenses.
Project Engineer at IT Solution
 

Stability Issues

Sentiment score
8.0
Cortex XDR is highly regarded for stability, reliable performance, and well-received updates, despite minor occasional disruptions.
Sentiment score
8.8
Jamf Protect is highly stable with minimal CPU impact, boasting up to 365 days of uninterrupted performance.
Sentiment score
8.6
Users appreciate Sophos Endpoint's reliability, though some report performance issues during updates, influencing stability ratings between six and ten.
Cortex remains fast and responsive, even with increasing data and alerts.
Final Year Student at Gitam University
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Senior Process Expert at A.P. Moller - Maersk
Cortex XDR is stable, offering high quality and reliable performance.
Cyber Security Manager at Welab bank
In the alpha phase, we found out that it was taking twenty to thirty percent of CPU usage, and in some of the Macs, it was taking even more than seventy percent of CPU usage.
Endpoint Engineer Manager at a tech vendor with 10,001+ employees
Jamf Protect is stable, reliable, and has been functioning well in production across the macOS fleet.
Manager, Account Services Delivery at Softcell Technologies Limited
Jamf Protect is very stable, and I have not seen any downtime.
Project Manager at Wells Fargo
Sophos Endpoint is stable in my experience for the past two years.
Project Engineer at IT Solution
 

Room For Improvement

Cortex XDR requires enhancements in UI, integration, reporting, and pricing, while addressing false positives and improving automation and mobile support.
Jamf Protect requires enhancements in integration, user experience, pricing, support, documentation, analytics, and compatibility with Apple and SIEM.
Sophos Endpoint users face issues with migration, integration, resource usage, and seek cost, support, and feature improvements particularly for compatibility.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
Final Year Student at Gitam University
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
Pre Sales Architect at network techlab
If the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better.
Cyber Security Information Security Specialist at MHM Holding GmbH
If they could be flagged the moment I visit them, that would be great because I would know exactly which website was causing the warnings.
Software Engineer at a tech vendor with 501-1,000 employees
Jamf Protect should have more built-in automated remediation actions, enhanced reporting and long-term analytics, and deeper SOAR and SIEM native integration with more customization in behavioral rule tuning for MSP environments.
Manager, Account Services Delivery at Softcell Technologies Limited
Expanding out-of-the-box support for additional SIEMs.
Project Manager at Wells Fargo
Sophos Endpoint should include the Linux endpoint agent and should provide a solution for Linux endpoints as well, because the server license is costly and nobody wants to use the server license on an endpoint machine.
Project Engineer at IT Solution
The enterprise integration is very poor, requiring a lot of manual work.
IT Consultant at Inception
Users have noted that daily upload limits per device, overall data lake storage capacity tied to licenses, and daily API query limits can be restrictive.
Director at Infosonik Systems Ltd
 

Setup Cost

Cortex XDR offers flexible pricing from $55 to $90 per endpoint annually, considered cost-effective for its advanced features.
Jamf Protect offers varied pricing and features, seen as cost-effective by some but mid-range or expensive by others.
Sophos Endpoint is competitively priced, offering discounts on long-term licenses, though extra features may increase costs.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
Consultant at a tech services company with 1,001-5,000 employees
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Senior Process Expert at A.P. Moller - Maersk
Cortex XDR is perceived as expensive by some customers, yet offers dynamic pricing.
Cyber Security Manager at Welab bank
Jamf Protect includes a number of features that other EDR solutions charge additional fees for, such as compliance and device control.
Project Manager at Wells Fargo
The setup cost is relatively low due to the deployment effort for macOS fleet through standard setup via Jamf Pro policies and Jamf Protect onboarding, initial tuning, and rule configuration.
Manager, Account Services Delivery at Softcell Technologies Limited
The cost is reasonable and cheaper than other alternatives.
Director at Infosonik Systems Ltd
It is quite affordable; I think the pricing and licensing are reasonable.
IT Leader at Die Ambulanten - Home Care GmbH
The pricing is slightly increased, but it is good because Sophos Endpoint has a lot of features.
Project Engineer at IT Solution
 

Valuable Features

Cortex XDR provides advanced threat detection with AI analytics, real-time blocking, and seamless integration for enhanced security.
Jamf Protect offers comprehensive endpoint security for Mac environments with real-time alerts, seamless integration, and low performance impact.
Sophos Endpoint provides strong virus detection, ransomware protection, and seamless management with advanced AI and zero-day threat defense.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
Cyber Security Manager at Welab bank
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
Pre Sales Architect at network techlab
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
Final Year Student at Gitam University
The best features that stand out in Jamf Protect include macOS native threat detection using the kernel and user space behavioral analysis, real-time alerting, integration with Jamf Pro with automated response and quarantine actions, and pre-built rule sets that help with macOS threat models and MITRE mapping.
Manager, Account Services Delivery at Softcell Technologies Limited
I can think of having a general sense that Jamf Protect makes me and my team feel more secure because I have not noticed or seen any security-related breaches with me or with any of my other colleagues.
Software Engineer at a tech vendor with 501-1,000 employees
Jamf Protect offers good telemetry and auditing capabilities.
Endpoint Engineer Manager at a tech vendor with 10,001+ employees
Key features for comprehensive detection and prevention include advanced threat prevention, ransomware protections, exploit prevention, and AI-powered detections.
Director at Infosonik Systems Ltd
Web filtering helps provide protection by allowing me to block unwanted and unauthorized websites from Sophos EPP Suite, which helps prevent unauthorized intrusion, thus keeping our organization servers secure.
Assistant Manager, Information Technology at Swades Foundation
With the reseller management, I can manage multiple clients without having to log in to each client.
IT Consultant at Inception
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Protection Platform (EPP)
5th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
108
Ranking in other categories
Endpoint Detection and Response (EDR) (7th), Extended Detection and Response (XDR) (6th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (2nd)
Jamf Protect
Ranking in Endpoint Protection Platform (EPP)
22nd
Average Rating
9.0
Reviews Sentiment
7.6
Number of Reviews
13
Ranking in other categories
AI Customer Experience Personalization (26th)
Sophos Endpoint
Ranking in Endpoint Protection Platform (EPP)
21st
Average Rating
8.2
Reviews Sentiment
7.4
Number of Reviews
63
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of March 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.5%, down from 4.0% compared to the previous year. The mindshare of Jamf Protect is 1.0%, up from 0.7% compared to the previous year. The mindshare of Sophos Endpoint is 1.4%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.5%
Sophos Endpoint1.4%
Jamf Protect1.0%
Other94.1%
Endpoint Protection Platform (EPP)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Nick Rudman - PeerSpot reviewer
Project Manager at Wells Fargo
Security platform has reduced malware risk and has strengthened compliance for macOS endpoints
Jamf Protect provides multiple levels of telemetry collection, allowing me to select how sensitive I want to be on event triggers. Jamf Protect allows me to monitor against specific threat categories aligned to the MITRE ATT&CK framework. In addition to protection, I utilize Jamf Protect to monitor our endpoint compliance with the CIS critical security control baseline. If the environment is predominantly Apple based, Jamf Protect is a strong solution for providing EDR capabilities to endpoints. The detection capabilities are on par with other leading EDR tools, and it integrates well with Jamf MDM. The compliance telemetry, log forwarding, and USB device management included as part of Jamf Protect provide a good return on investment. Jamf Protect has had a positive impact on my organization, as it has been one of the best tools that protects against malware. It offers better detection of malware, reducing downtime and risk to our network by approximately 30 to 50 percent. Implementing it is straightforward, although there can be a steep learning curve in general, especially for less technical users. The competitive pricing included in the business package is great, and compliance with our security standards has been maintained.
Sabbir Ahmed - PeerSpot reviewer
Director at Infosonik Systems Ltd
Experience significant threat prevention advancements with user-friendly deployment
The feature is called relay server, and some people refer to it as a cache server. The Sophos EPP Suite is scalable. Some customers in banks typically have 5,000 to 7,000 users. One customer started with 1,000 users and has now extended to 4,000 users. Some customers are using up to 8,000 users without any issues. Regarding AI elements in the Sophos EPP Suite, firewalls have already introduced AI features. They have integrated AI models similar to ChatGPT in firewalls. These AI features should be introduced in endpoint XDR as well. Key features for comprehensive detection and prevention include advanced threat prevention, ransomware protections, exploit prevention, and AI-powered detections. Extended visibility and data analysis include cross-product data correlations. They have a data lake, live discover, and threat graphs. They also offer AI case summary and AI common analysis, accessible from Sophos Central, which is the management portal for Sophos XDR. Sophos Central serves as one central management portal for managing firewalls, endpoint, Sophos encryption, and mobile device management solutions. This centralized management is particularly appealing to customers.
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
885,311 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
13%
Manufacturing Company
8%
Computer Software Company
8%
Financial Services Firm
8%
University
13%
Computer Software Company
10%
Manufacturing Company
6%
Comms Service Provider
6%
Manufacturing Company
10%
Educational Organization
8%
Computer Software Company
8%
Outsourcing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise20
Large Enterprise47
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise4
Large Enterprise6
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise7
Large Enterprise14
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What do you like most about Jamf Protect?
Jamf Protect searches incoming and outgoing traffic for malware to monitor the network for security.
What is your experience regarding pricing and costs for Jamf Protect?
The pricing, setup cost, and licensing have been very effective. Jamf Protect includes a number of features that othe...
What needs improvement with Jamf Protect?
Regarding improvements for Jamf Protect, I receive the warnings related to insecure website accesses through mail at ...
What is your experience regarding pricing and costs for Sophos EPP Suite?
The setup cost is good and licensing is good. The pricing is slightly increased, but it is good because Sophos Endpoi...
What needs improvement with Sophos EPP Suite?
I would give Sophos Endpoint a rating of nine out of ten because it is working very well. I have cut one point becaus...
What is your primary use case for Sophos EPP Suite?
I am using Sophos Endpoint to protect our environment from malware, and I am also using it for web control and applic...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
EPP Suite
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
EK Services
Find out what your peers are saying about Jamf Protect vs. Sophos Endpoint and other solutions. Updated: March 2026.
885,311 professionals have used our research since 2012.