No more typing reviews! Try our Samantha, our new voice AI agent.

Kandji vs SonicWall Capture Client comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
4.8
Cortex XDR reduces costs, minimizes incidents, improves ROI, and enhances efficiency with automation and seamless system integration.
Sentiment score
7.1
Kandji boosts efficiency by reducing IT management time and costs, enabling superior productivity with fewer resources than competitors.
Sentiment score
1.0
SonicWall Capture Client offers cost savings, improved security, reduced manual work, lower infection rates, and easy deployment for better productivity.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cyber Security Manager at Welab bank
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
Detection and Response Consultant at Inovasys
In Cortex XDR by Palo Alto Networks, most of the remediation is automated and the accuracy is quite good.
Network Security Engineer at Cyberwell Solution
The time saved includes processes such as software installation, as previously we needed to take a user device remotely, but with Kandji, we can initiate software installation from the back end, which is a significant time saver.
Tech Support Engineer at Aleph
We went from one hour for resolution time per device to 15 minutes, allowing us to save more than 50 hours of support time in a year.
IT Corporate Engineer at Shippo
I have seen a return on investment with Kandji, estimating that time saved is at least 20 to 30%, as individuals do not have to figure out which security updates to carry out themselves since the notification is pushed for them to review and install.
Cloud Ops Lead at a tech vendor with 10,001+ employees
 

Customer Service

Sentiment score
7.0
Cortex XDR's adaptable customer service excels in problem-solving, fast response, and professionalism, despite varying quality and log analysis suggestions.
Sentiment score
7.1
Kandji's customer service is praised for responsiveness and effectiveness, with high reliability reducing the need for support.
Sentiment score
4.9
SonicWall Capture Client support is mixed, with some satisfied but many seeking faster response and improved escalation processes.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
Head of data centers at a non-profit with 10,001+ employees
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
Senior Process Expert at A.P. Moller - Maersk
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
Chief of IT Architecture at a financial services firm with 10,001+ employees
I would rate the overall impression of the technical support experts, their expertise, and their competence as 10 out of 10.
Senior Information Technology Engineer at Deel
The customer support at Kandji is phenomenal and is the best I have experienced from any vendor.
IT Support Technician at a tech vendor with 10,001+ employees
The customer support is the best I have ever seen.
IT Operation Manager at a retailer with 201-500 employees
Partners can purchase single endpoints at prices equivalent to 1,000-endpoint deals, providing an advantage for managed security service provider partners.
Product Manager at wahana piranti teknologi
While their escalation process is understandable, it can be time-consuming as all logs need to be provided multiple times across different service levels.
Product Manager at a tech services company with 11-50 employees
 

Scalability Issues

Sentiment score
7.6
Cortex XDR offers scalable management and deployment capabilities for organizations, though affordability for smaller enterprises may be challenging.
Sentiment score
7.0
Kandji is scalable for small to medium companies, handling device increases smoothly but may struggle with very large enterprises.
Sentiment score
8.5
SonicWall Capture Client delivers scalable licensing, easy installation, cloud management, and an accessible interface, favored by small to medium businesses.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Assistant Security Architect at Cloudnomics
Activating the newly purchased licenses is instantaneous, allowing installations without adjustments since it's cloud-based.
Junior Security Analyst at ITSEC Asia
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
Head of data centers at a non-profit with 10,001+ employees
Kandji's scalability is quite good, though I do see a concern once organizations start getting really large and need more flexibility.
IT Support Technician at a tech vendor with 10,001+ employees
I think Kandji is a perfect choice for growing small companies that become medium-sized or even bigger.
IT Operation Manager at a retailer with 201-500 employees
Kandji's scalability is perfect, as my organization grew from 180 to almost 300 devices with no bottlenecks.
IT Corporate Engineer at Shippo
There are no restrictions on the scalability of SonicWall Capture Client.
Product Manager at a tech services company with 11-50 employees
SonicWall Capture Client is accessed via cloud-based management console.
Product Manager at a tech services company with 11-50 employees
The installation process is straightforward, requiring only five pilot installations to enable customers to complete the remaining installations independently.
Product Manager at wahana piranti teknologi
 

Stability Issues

Sentiment score
8.0
Cortex XDR is reliable and stable, with minor issues outweighed by consistent performance and highly rated dependability.
Sentiment score
9.0
Users highly praise Kandji's stability and reliability, with excellent performance and minimal intervention contributing to user satisfaction.
Sentiment score
8.6
SonicWall Capture Client's stability divides opinion, praised for threat prevention but critiqued for high resource consumption and slowdowns.
Cortex remains fast and responsive, even with increasing data and alerts.
Final Year Student at Gitam University
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Senior Process Expert at A.P. Moller - Maersk
Cortex XDR by Palo Alto Networks can be trusted completely.
Soc Analyst at Softcell Technologies Limited
I would say it is a 100% reliable product.
Senior Information Technology Engineer at Deel
 

Room For Improvement

Cortex XDR needs improved UI, integration, affordability, monitoring, false positive handling, Mac OS support, and better AI features.
Kandji requires app library expansion, UI and customization enhancements, better remote access, improved integration, and more flexible features at competitive pricing.
SonicWall Capture Client suffers from performance issues, outdated interface, high RAM use, and lacks robust threat detection and support.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
Final Year Student at Gitam University
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
Pre Sales Architect at network techlab
If the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better.
Cyber Security Information Security Specialist at MHM Holding GmbH
The simplicity and straightforwardness are its strongest attributes.
IT Support Technician at a tech vendor with 10,001+ employees
However, it often takes more than thirty minutes to execute the command, and sometimes it fails.
TechOps Engineer at a financial services firm with 201-500 employees
I hope there is an easier way to sandbox people's bring your own device devices because when we're doing SOC 2, it really wants us to sandbox things so that if someone were to take a device that is not ours, we could delete just our data off there and not theirs.
SysAdmin at a recreational facilities/services company with 11-50 employees
One of the drawbacks is that I cannot use Advanced and Premier licenses within a single tenant, which can be problematic when users need to deploy different licenses.
Product Manager at a tech services company with 11-50 employees
XDR cannot be used unless MDR services are purchased with SonicWall.
Product Manager at a tech services company with 11-50 employees
A significant limitation is that SonicWall Capture Client cannot be installed on smartphones, as there is no mobile version available.
Product Manager at wahana piranti teknologi
 

Setup Cost

Cortex XDR is pricier than some rivals but offers flexible pricing and robust features, costing $55-$90 per endpoint monthly.
Kandji's enterprise pricing is higher than Jamf, with hidden costs, smooth setup, but pricey annual fees for startups.
SonicWall Capture Client pricing receives mixed reviews for cost-effectiveness, varying by business size, region, and additional costs.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
Consultant at a tech services company with 1,001-5,000 employees
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Senior Process Expert at A.P. Moller - Maersk
Compared to CrowdStrike, which is very costly, and SentinelOne, which is also very costly, Cortex XDR by Palo Alto Networks is a medium cost-efficient solution.
Soc Analyst at Softcell Technologies Limited
It is cheap.
TechOps Engineer at a financial services firm with 201-500 employees
The pricing is not published publicly, requiring interaction with sales representatives for details.
Cloud Ops Lead at a tech vendor with 10,001+ employees
While it might be on the expensive side compared to Jamf Pro, it is closer in pricing to other MDMs such as Microsoft Intune, which comes with the EMS E3 license.
Technical Lead at a tech vendor with 10,001+ employees
SonicWall Capture Client offers a cost-effective solution that's cheaper compared to other vendors like CrowdStrike.
Product Manager at a tech services company with 11-50 employees
 

Valuable Features

Cortex XDR by Palo Alto Networks provides AI-driven threat detection, automation, and seamless integration, simplifying security for analysts.
Kandji offers intuitive management, excellent support, quick deployment, and robust security, enhancing efficiency and compliance in device management.
SonicWall Capture Client provides robust protection features, including rollback, machine learning, and dual-agent real-time threat detection.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
Cyber Security Manager at Welab bank
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
Pre Sales Architect at network techlab
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
Final Year Student at Gitam University
Kandji has impacted my organization positively by definitely increasing security because it notifies you when an update is ready to be installed, and if you do not install it within a reasonable time frame, it would automatically install it.
Cloud Ops Lead at a tech vendor with 10,001+ employees
It is reliable, a modern approach to managing Apple devices, and with features in blueprints, smart apps, and consistently reliable performance, I do not think Jamf really comes close.
IT Support Technician at a tech vendor with 10,001+ employees
The Auto Apps function is brilliant. It takes 20 seconds to push out a new app, and it automatically updates. This function really saves time.
IT Operation Manager at a retailer with 201-500 employees
Machine learning is particularly effective due to SonicWall sandboxing's threat intelligence database of approximately 7.1 billion entries.
Product Manager at wahana piranti teknologi
One is that users can use the sandbox of SonicWall, which is called Capture ATP for free.
Product Manager at a tech services company with 11-50 employees
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Detection and Response (EDR)
6th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
114
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Extended Detection and Response (XDR) (4th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Kandji
Ranking in Endpoint Detection and Response (EDR)
13th
Average Rating
8.8
Reviews Sentiment
6.6
Number of Reviews
19
Ranking in other categories
Vulnerability Management (19th), Mobile Device Management (MDM) (3rd), Enterprise Mobility Management (EMM) (5th)
SonicWall Capture Client
Ranking in Endpoint Detection and Response (EDR)
46th
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
11
Ranking in other categories
Endpoint Protection Platform (EPP) (41st)
 

Mindshare comparison

As of July 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.6%, down from 3.9% compared to the previous year. The mindshare of Kandji is 0.4%, up from 0.4% compared to the previous year. The mindshare of SonicWall Capture Client is 0.8%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.6%
Kandji0.4%
SonicWall Capture Client0.8%
Other95.2%
Endpoint Detection and Response (EDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
CD
SysAdmin at a recreational facilities/services company with 11-50 employees
Strong security structure has supported fast Mac and iOS administration with minimal IT effort
One area for improvement for Kandji would be having a bigger suite of applications. I noticed that some of the niche apps our data software firm needs were not in the regular library. We were able to use the custom app feature to create those apps ourselves, but I would love it if Kandji could expand the library. I also wish Kandji could lock down different ports on MacBooks based on which ones we wanted to shut down, and I hope there is an easier way to sandbox people's bring your own device devices because when we're doing SOC 2, it really wants us to sandbox things so that if someone were to take a device that is not ours, we could delete just our data off there and not theirs. An improvement needed for Kandji would be the ability to remote into devices. I would appreciate something that is really reliable for that without having to buy third-party software.
HT
Product Manager at wahana piranti teknologi
Has consistently delivered double-layer protection and simplified policy application while needing mobile compatibility and better MacOS support
A significant limitation is that SonicWall Capture Client cannot be installed on smartphones, as there is no mobile version available.Occasionally, the Sentinel engine becomes unresponsive, particularly when customers do not properly restart or shutdown their systems. This requires a hard restart after installation to resolve the issue. Installation on Mac OS can be challenging, requiring multiple attempts due to version compatibility requirements. We must ensure the SonicWall Capture Client version is stable for Mac OS. The RAM usage is higher compared to SentinelOne, utilizing approximately 150 megabytes of memory. This is a common concern from customers, and reducing RAM consumption would be beneficial.
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
902,988 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
12%
Financial Services Firm
11%
Manufacturing Company
10%
Comms Service Provider
9%
Financial Services Firm
12%
Comms Service Provider
10%
Outsourcing Company
8%
Computer Software Company
7%
Comms Service Provider
11%
Computer Software Company
8%
Government
8%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise21
Large Enterprise53
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise5
Large Enterprise7
By reviewers
Company SizeCount
Small Business11
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Kandji?
My experience with pricing, setup cost, and licensing is that we are using nearly 100 machines in Kandji, which comes...
What needs improvement with Kandji?
Kandji can definitely be improved by the complexity. I feel we cannot necessarily tweak the Blueprints in the ways th...
What is your primary use case for Kandji?
My main use case for Kandji is MDM management, so managing our Macs and iOS devices in a corporate enterprise environ...
What is your experience regarding pricing and costs for SonicWall Capture Client?
SonicWall Capture Client offers a cost-effective solution that's cheaper compared to other vendors like CrowdStrike.
What needs improvement with SonicWall Capture Client?
A significant limitation is that SonicWall Capture Client cannot be installed on smartphones, as there is no mobile v...
What is your primary use case for SonicWall Capture Client?
The solution is used primarily in hospitality, specifically hotels, and manufacturing sectors. Approximately 70% of u...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Luton College
Find out what your peers are saying about Kandji vs. SonicWall Capture Client and other solutions. Updated: June 2026.
902,988 professionals have used our research since 2012.