No more typing reviews! Try our Samantha, our new voice AI agent.

Kandji vs Sangfor Endpoint Secure comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Detection and Response (EDR)
6th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
113
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Extended Detection and Response (XDR) (4th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Kandji
Ranking in Endpoint Detection and Response (EDR)
13th
Average Rating
8.8
Reviews Sentiment
6.6
Number of Reviews
19
Ranking in other categories
Vulnerability Management (19th), Mobile Device Management (MDM) (3rd), Enterprise Mobility Management (EMM) (5th)
Sangfor Endpoint Secure
Ranking in Endpoint Detection and Response (EDR)
36th
Average Rating
8.2
Reviews Sentiment
7.4
Number of Reviews
11
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.6%, down from 3.9% compared to the previous year. The mindshare of Kandji is 0.4%, up from 0.4% compared to the previous year. The mindshare of Sangfor Endpoint Secure is 0.7%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.6%
Kandji0.4%
Sangfor Endpoint Secure0.7%
Other95.3%
Endpoint Detection and Response (EDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
CD
SysAdmin at a recreational facilities/services company with 11-50 employees
Strong security structure has supported fast Mac and iOS administration with minimal IT effort
One area for improvement for Kandji would be having a bigger suite of applications. I noticed that some of the niche apps our data software firm needs were not in the regular library. We were able to use the custom app feature to create those apps ourselves, but I would love it if Kandji could expand the library. I also wish Kandji could lock down different ports on MacBooks based on which ones we wanted to shut down, and I hope there is an easier way to sandbox people's bring your own device devices because when we're doing SOC 2, it really wants us to sandbox things so that if someone were to take a device that is not ours, we could delete just our data off there and not theirs. An improvement needed for Kandji would be the ability to remote into devices. I would appreciate something that is really reliable for that without having to buy third-party software.
OA
Coordinator Associate at National Institute of Cardiovascular Diseases
Quick threat response and behavior analysis while enhancing network security
The main use case is usually related to security. It deals with attacks that come day-to-day such as zero-day attacks and APT attacks. Our main task is to secure the network infrastructure in the hospital where I work It facilitates the departments of IT and other departments to procure and…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution's most valuable feature is the user interface."
"Palo Alto is constantly adding new features."
"Palo Alto is the best security solution in the market."
"Their XDR agent and their behavioral indicators of compromise (BIOC) are pretty nice. Their managed threat hunting is also pretty nice. They also have WildFire, which is a service for actively looking for malware. It's quite useful."
"The best feature of Cortex XDR by Palo Alto Networks is that it collects logs from different sections such as the endpoint, the network, and the cloud, making it easy to investigate alerts, collect some of the investigation packages related to the infected machines, and provide live response."
"The most valuable aspect of Cortex XDR by Palo Alto Networks for me is its integration with AI detection, where we get to know the behavioral detection based on users, traffic patterns, and different services that we consume."
"The tool's use cases are relevant to security."
"The initial setup is easy."
"Kandji has positively impacted my organization because many things happen through Kandji, especially on the laptops and desktops at the infrastructure workspace level."
"Kandji has positively impacted my organization by providing remote and quick support."
"After switching to Kandji, we have seen a return on investment, specifically in human resource savings."
"Kandji has positively impacted my organization because it is very user-friendly, and among the multiple MDM solutions I have used, such as JumpCloud and Intune, Kandji stands out as one of the best for Mac devices."
"Kandji has positively impacted my organization because it was very easy to implement and manage all of our devices, especially when we manage with the ISO and SOC 2 certifications that we need for our organization."
"Kandji has positively impacted my organization by simplifying the management of the Apple fleet."
"Kandji has positively impacted my organization by allowing us to better assist and it allows for a better user experience, a better kind of fleet management."
"Kandji offers excellent features, including the ability to erase devices remotely without needing to be in front of the laptop."
"We use the product for network protection from any malicious threat."
"Sangfor Endpoint Secure has some good policy certificates."
"The most valuable feature I have found in the system is its comprehensive end-to-end protection."
"I like the tool's honeypot feature. Some features include having a honeypot to detect attacks in a certain area. Additionally, there is RDP protection, which means that when we remote into our server or any endpoint, we must enter a password as a second layer of security. It can also integrate with next-generation firewalls."
"It has a quick response time, threat intelligence, cybersecurity features, quick report generation, behavior analysis, dynamic detection, and quarantine features."
"What stands out to me is the dual-end user interface they provide."
"The tool's most valuable features are control access, endpoint security, and load balancing of ISPs."
"The tool's AI feature is helpful in endpoint security."
 

Cons

"The deployment is pretty hard."
"Cortex XDR by Palo Alto Networks is not only pricey; it is extremely expensive."
"When it comes to core analysis, and security analysis, Cortex needs to provide more information."
"Cortex XDR is trickier to configure than other Palo Alto products. This is one area where we are not so satisfied."
"Although I would say this product is highly-rated, it could probably do more because nothing does everything that you want."
"Cortex does not offer an on-premises solution. However, some customers would prefer not to be on the cloud. It would be ideal if it could offer something on-prem as well."
"The technical support is not very good. I find the process difficult."
"The solution should enhance the ADR and reporting."
"I rated Kandji an eight because the laptop needs to be connected to Wi-Fi to erase it."
"I believe Kandji can be improved by having more self-service options, as users can complete a few steps before reaching out to IT support, which will give us more context on the issue."
"There are certain limitations with blueprints where each machine can only have one or must have a blueprint, which is frustrating since certain machines may not need to have a blueprint straight away for testing."
"The Windows part needs a lot of work."
"While it might be on the expensive side compared to Jamf Pro, it is closer in pricing to other MDMs such as Microsoft Intune, which comes with the EMS E3 license, making it potentially pricey for startups, yet a good cost for established enterprises."
"I think Kandji could be improved with a better UI."
"Kandji can definitely be improved by the complexity. I feel we cannot necessarily tweak the Blueprints in the ways that we need to or there are just complex one-off situations where we need more customization and more ability to run custom scripts."
"While I do not have anything specific to add about the features, I do think there is a lack of flexibility in Kandji."
"I believe Sangfor Endpoint Secure could improve in terms of its user interface and management capabilities."
"The interface has too many buttons, making it cluttered."
"It is complicated to establish a tunnel due to technical issues in the VPN system."
"When an issue occurs, the response time for first-level support and the time taken for meetings could be improved."
"It would be much more convenient if the migration tool could be installed directly on the customer's VMs, enabling a smoother migration process to the new infrastructure, with potential restrictions addressed accordingly."
"Sangfor Endpoint Secure should include healing capabilities."
"I face issues while migrating from Kaspersky to Sangfor Endpoint Secure."
"Sometimes, the VPN is not secure and doesn't work properly in Sangfor Endpoint Secure."
 

Pricing and Cost Advice

"The price was fine."
"Our customers have expressed that the price is high."
"Our license will require renewal in August, after which the maintenance will continue as usual."
"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."
"Cortex XDR by Palo Alto Networks is quite an expensive solution."
"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."
"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."
"I feel it is fairly priced."
"Users have to pay a yearly licensing fee for Kandji, which is expensive."
"Sangfor Endpoint Secure's pricing is cheap. I rate it seven out of ten."
"The product is expensive compared to other vendors."
"Its "pay as you grow" model offers cost-effectiveness compared to major cloud providers."
"Sangfor Endpoint Secure is not a cheap solution."
"The solution is cheap. It is cheaper than other products by 15-20 percent."
"We were using Hyper-V. So, we switched to Sangfor because of the pricing."
"Price-wise, Sangfor Endpoint Secure can be considered a competitively priced product in the market as it offers quite low prices compared to other solutions."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
902,988 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
12%
Financial Services Firm
11%
Manufacturing Company
10%
Comms Service Provider
9%
Financial Services Firm
12%
Comms Service Provider
10%
Outsourcing Company
8%
Computer Software Company
7%
Financial Services Firm
17%
Comms Service Provider
11%
University
7%
Media Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise21
Large Enterprise52
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise5
Large Enterprise7
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise3
Large Enterprise3
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Kandji?
My experience with pricing, setup cost, and licensing is that we are using nearly 100 machines in Kandji, which comes...
What needs improvement with Kandji?
Kandji can definitely be improved by the complexity. I feel we cannot necessarily tweak the Blueprints in the ways th...
What is your primary use case for Kandji?
My main use case for Kandji is MDM management, so managing our Macs and iOS devices in a corporate enterprise environ...
What needs improvement with Sangfor Endpoint Secure?
The interface has too many buttons, making it cluttered. It would be better if it were a simplified version with fewe...
What is your primary use case for Sangfor Endpoint Secure?
Sangfor Endpoint Secure is easy to handle with its user-friendly interface. The four engines it utilizes for endpoint...
What advice do you have for others considering Sangfor Endpoint Secure?
At first, people might not understand the interface, which is why it should be simplified. However, once they underst...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Information Not Available
Find out what your peers are saying about Kandji vs. Sangfor Endpoint Secure and other solutions. Updated: June 2026.
902,988 professionals have used our research since 2012.