Kandji vs Kaspersky Endpoint Detection and Response Expert comparison

Kandji vs. Kaspersky Endpoint Detection and Response Expert

Download the complete report

Helped 885,311 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of March 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of Kandji is 0.5%, up from 0.3% compared to the previous year. The mindshare of Kaspersky Endpoint Detection and Response Expert is 1.4%, up from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.4%
Kaspersky Endpoint Detection and Response Expert	1.4%
Kandji	0.5%
Other	94.7%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

reviewer2795433

Cloud Ops Lead at a tech vendor with 10,001+ employees

Automated updates have strengthened security and save me time on daily device management

In my opinion, the best features Kandji offers are its UI, which is very clean and clear to use, not overly cluttered, allowing me to see the icon of all the different apps that I can install, and when I click on the little icon in my toolbar, it shows me any updates which I am able to install, making it very easy to use. The clean UI and ease of use definitely save me time, probably cutting the time in half for trying to figure out when to install updates myself, because the notifications are pushed to me, which is good since I want to keep my system up to date without interfering with my workflow. Kandji has impacted my organization positively by definitely increasing security because it notifies you when an update is ready to be installed, and if you do not install it within a reasonable time frame, it would automatically install it, which is good, and it probably has saved at least 30% of my time from manually having to look for updates since it just notifies me when the update is ready. Kandji's automatic installation feature ensures our team's compliance or security posture, as it makes sure we are up to date and all on the same version of a particular tool, which is very important for a technical IT team to avoid differences that might affect functionality.

Read full review

Ravi-Upadhyay

Founder at Inspira Enterprise

Provides strong threat detection and response through behavior analytics and network isolation

I have found the most valuable features of Kaspersky Endpoint Detection and Response Expert to be its ability to tackle the biggest challenges customers face when they have to mitigate any kind of a malware, ransomware attack, or online theft scenarios. The solution utilizes its HIPS, which is the host intrusion prevention system, behavior analytics system, and device control mechanism, making the antivirus capabilities of EDR quite strong. It is able to detect zero-day threats as well as historical or legacy malware, providing protection against current threats in the market and legacy malware. My opinion on the advanced threat detection algorithms in Kaspersky Endpoint Detection and Response Expert is that the ATP functionality is quite strong because it utilizes the behavioral analytics engine in the backend, which employs machine learning mechanisms to identify any kind of vulnerability or exploit running on the operating system level and the network level. If an attack is about to happen on the endpoint, it is able to protect over the network as well and checks for any illegitimate encryption activities. The machine learning capability within Kaspersky Endpoint Detection and Response Expert has contributed to improving detection accuracy and reducing false positives in my environment by helping me identify malicious activity and differentiate between any malicious activity on the operating system level and on the network level. I have seen customers with in-house developed applications that have no public signatures available. Once I whitelist a particular application, it intelligently whitelists not only the executable but also all the dependent services required to run that application. Furthermore, Kaspersky Endpoint Detection and Response Expert has successfully blocked network-level attacks on the endpoint. For example, during a recent DoS attack aimed at choking the entire network, Kaspersky detected the attack, isolated the device in a sandbox network, and alerted my SOC team via email for corrective action, thereby proactively helping me detect and protect devices from malicious attacks.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I generally believe that Cortex XDR by Palo Alto Networks is probably the best in the market right now."

"Has great threat detection capabilities."

"We use Cortex XDR by Palo Alto Networks for its ability to detect based on behavior rather than simple virus scan to prevent malicious activities."

"There has been a significant reduction of approximately 70% to 80% in our internal MTTR and MTTD metrics, now around five to eight minutes whereas previously it was hours, which has helped tremendously."

"It detected stuff that other things wouldn't detect."

"It has absolutely improved the way our organization functions, we are more secure, it is giving us more peace of mind, and it has found malicious activity happening on our endpoints that probably would not have been detected if we didn't have it."

"My advice for others looking into using Cortex is that it is very easy to use and very useful for the customer environment, whether it's a public or private one."

"Cortex XDR is a very capable solution for protecting large networks and a lot of endpoints. It's very useful because the automation is very high, and if you combine it with the features on Palo Alto firewalls, it provides very strong protection."

More Cortex XDR by Palo Alto Networks pros

"I highly recommend Kandji to others looking into using it since I have not seen any game-breaking issues; it is highly reliable, scalable, improves security, and reduces the time individuals need to spend on system configuration for security updates."

"It's a very easy plug-and-play solution where you can just enroll the devices and choose the features you want."

"The stability of the product is great."

"The performance for Kaspersky is good, and it's not impacted our client performance."

"We have a central console and from there you can monitor all workstations via an agent."

"We recommend Kaspersky Endpoint Detection and Response Expert to all clients to whom we provide solutions, and for endpoint security, we usually choose Kaspersky Endpoint Detection and Response Expert exclusively."

"It is easy to manage."

"EDR's most valuable feature is its basic protection from malware and viruses."

"Kaspersky is viable with ADR."

"The integration with our hypervisor is quite smooth, especially within the Kaspersky Enterprise environment. We have many virtual machines, and the integration is helpful."

More Kaspersky Endpoint Detection and Response Expert pros

Cons

"Cortex XDR could be improved with more GUI features."

"The encryption is not up to the mark."

"Cortex XDR is trickier to configure than other Palo Alto products. This is one area where we are not so satisfied."

"If Palo Alto reduces the pricing slightly for their products, it would make them more scalable in markets such as India and globally for cybersecurity."

"They have the worst support, as a company, that I have ever worked with, as they are difficult to get a hold of and keep on the phone. They don't know what they are talking about when you get them on the phone. They don't like to respond to messages when you send them to them. They like to "research problems" for weeks on end, then pass you off to somebody else."

"Enhancing UI simplicity and playbook flexibility are areas that could benefit from more low-code automation options for smoother integrations."

"I would like to see better protection, specifically to protect email applications."

"Dashboards do not allow everyone to see what's happening."

More Cortex XDR by Palo Alto Networks cons

"Kandji should give open customization."

"The issue with Kaspersky EDR is the sandbox. I'd like to have the ability to manage it on the cloud as well."

"Kaspersky Endpoint Detection and Response should continue to improve its protection while adapting to the changing threat ecosystems. Having more advanced features would be a benefit."

"They should include XDR features in the solution."

"The solution lacks DLP."

"The main problem with Endpoint is that Kaspersky is a Russian company, and my clients prefer not to use it."

"I would like to integrate Kaspersky with my Log Collector SIEM. Right now that's not possible."

"There are some issues with EDR's web policy blocking sites that are marked as exceptions."

"Kaspersky Endpoint Detection and Response should continue to improve its protection while adapting to the changing threat ecosystems."

More Kaspersky Endpoint Detection and Response Expert cons

Pricing and Cost Advice

"Cortex XDR by Palo Alto Networks is an expensive solution."

"The tool's price is moderate."

"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."

"Cortex XDR's pricing is ok."

"The price of the product is not very economical."

"Very costly product."

"The price of the solution is high for the license and in general."

"It has a yearly renewal."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"Users have to pay a yearly licensing fee for Kandji, which is expensive."

"We were on a three-year license to use Kaspersky Endpoint Detection and Response. The price could be better."

"Kaspersky is licensed on a yearly basis."

"EDR is priced on the cheaper side. Licensing for EDR is available on a yearly basis for around 80 SAR a year."

"Kaspersky's pricing is very competitive when it comes to comparison with the other solutions."

"If one is cheap, ten is expensive, I rate the product’s price as a seven out of ten, especially if I compare it with CrowdStrike."

"The solution isn't the cheapest considering what you get. I would rate the pricing as seven out of ten."

"We have been satisfied with the license of the solution."

"There is an annual license to use Kaspersky Endpoint Detection and Response. The price overall is a bit expensive when compared to other solutions. There are not any additional fees other than the license."

More Kaspersky Endpoint Detection and Response Expert pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

885,311 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

13%

Manufacturing Company

Computer Software Company

Financial Services Firm

11%

Computer Software Company

11%

Manufacturing Company

10%

Educational Organization

Computer Software Company

10%

Manufacturing Company

Financial Services Firm

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	47

No data available

By reviewers
Company Size	Count
Small Business	30
Midsize Enterprise	4
Large Enterprise	18

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What is your experience regarding pricing and costs for Kandji?

My experience with pricing, setup cost, and licensing is that their pricing structure is bucket-based, requiring lice...

What needs improvement with Kandji?

I have not been involved in the purchase process of Kandji, but I understand it is very Apple-centric and they have v...

What is your primary use case for Kandji?

My main use case for Kandji is that within my organization, I have a Mac as my work laptop, and Kandji is used for se...

What do you like most about Kaspersky Endpoint Detection and Response Expert?

The integration with our hypervisor is quite smooth, especially within the Kaspersky Enterprise environment. We have ...

What is your experience regarding pricing and costs for Kaspersky Endpoint Detection and Response Expert?

The price of the solution is economical.

What needs improvement with Kaspersky Endpoint Detection and Response Expert?

The user interface of Kaspersky Endpoint Detection and Response Expert could be more intuitive, and I would appreciat...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 9% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Jamf Pro vs Kandji

Compared 20% of the time

Microsoft Intune vs Kandji

Compared 18% of the time

CrowdStrike Falcon vs Kandji

Compared 14% of the time

Microsoft Defender for Endpoint vs Kandji

Compared 12% of the time

Open EDR vs Kandji

Compared 6% of the time

More Kandji Competitors

Fortinet FortiEDR vs Kaspersky Endpoint Detection and Response Expert

Compared 17% of the time

TrendAI Vision One vs Kaspersky Endpoint Detection and Response Expert

Compared 14% of the time

Check Point Harmony Endpoint vs Kaspersky Endpoint Detection and Response Expert

Compared 7% of the time

Cynet vs Kaspersky Endpoint Detection and Response Expert

Compared 4% of the time

OPTIMUS EDR vs Kaspersky Endpoint Detection and Response Expert

Compared 4% of the time

More Kaspersky Endpoint Detection and Response Expert Competitors

Product Reports

Cortex XDR by Palo Alto Networks

Download Cortex XDR by Palo Alto Networks product report

Download Kandji product report

Vulnerability Management

February 2026

Kaspersky Endpoint Detection and Response Expert

Download Kaspersky Endpoint Detection and Response Expert product report

Kaspersky Endpoint Detection and Response Expert report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

No data available

Kaspersky EDR

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Kandji’s automations are a force multiplier. They free your technology team from repetitive tasks, letting you focus energy on more impactful projects. Kandji has purpose-built experiences from setup and app installs to software updates and computer restarts. It’s what your teams expect from a company with high standards. From increased efficiency to lower cost of ownership, your bottom line is our top priority.

Kandji

Kaspersky Endpoint Detection and Response Expert is a comprehensive cybersecurity solution designed to detect and respond to advanced threats in real time. It combines advanced threat intelligence, machine learning algorithms, and behavioral analysis to provide proactive protection against sophisticated attacks.

With its centralized management console, security teams can easily monitor and investigate incidents, while automated response capabilities enable quick remediation. This solution offers deep visibility into endpoint activities, allowing organizations to identify and mitigate potential risks effectively. Kaspersky Endpoint Detection and Response Expert is a powerful tool for enhancing the overall security posture of businesses, ensuring the protection of critical assets and sensitive data.

Kaspersky

Sample Customers

CBI Health Group, University Honda, VakifBank

Information Not Available

Ferrari, Insolar, Tael, Republic of Serbia

Kandji vs. Kaspersky Endpoint Detection and Response Expert