No more typing reviews! Try our Samantha, our new voice AI agent.

Kaspersky Next EDR Foundations vs Kaspersky Next XDR Expert comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 9, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
4.7
Cortex XDR by Palo Alto Networks provides cost savings, enhanced security, and compliance with reduced administrative effort and robust threat detection.
Sentiment score
6.5
Kaspersky Endpoint Security Cloud provides significant annual financial savings and security improvements, with users experiencing a 30% return.
Sentiment score
1.0
Kaspersky Endpoint Detection and Response improves incident response time, reduces breaches, and enhances threat visibility with efficient deployment and accurate detection.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cyber Security Manager at Welab bank
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
Detection and Response Consultant at Inovasys
In Cortex XDR by Palo Alto Networks, most of the remediation is automated and the accuracy is quite good.
Network Security Engineer at Cyberwell Solution
 

Customer Service

Sentiment score
7.0
Cortex XDR support varies by plan and location; premium plans provide better experiences but others report delays.
Sentiment score
5.4
Kaspersky Endpoint Security Cloud's support is praised for technical help but criticized for slow responses and reliance on articles.
Sentiment score
5.8
Kaspersky's customer support receives mixed reviews, with excellent assistance from premium support but complaints about response times and expertise.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
Head of data centers at a non-profit with 10,001+ employees
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
Senior Process Expert at A.P. Moller - Maersk
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
Chief of IT Architecture at a financial services firm with 10,001+ employees
They should start offering sessions if there's some critical error occurring, even if someone has to pay for the support.
Supports Engineer at Rawad IT Solutions
We contacted support, and they answered all questions.
Security Specialist at Carina
 

Scalability Issues

Sentiment score
7.5
Cortex XDR offers scalable, flexible management for enterprises, supporting thousands of users with easy deployment and cloud-based maintenance.
Sentiment score
6.5
Kaspersky Endpoint Security Cloud is highly scalable but needs improved device reassignment features for better business adaptation.
Sentiment score
4.9
Scalability of Kaspersky EDR is generally favorable, notably for enterprises, though licensing and servers can impact performance.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Assistant Security Architect at Cloudnomics
Activating the newly purchased licenses is instantaneous, allowing installations without adjustments since it's cloud-based.
Junior Security Analyst at ITSEC Asia
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
Head of data centers at a non-profit with 10,001+ employees
If you assign a device to a user in Kaspersky Endpoint Security Cloud, you cannot reassign it to another user.
Supports Engineer at Rawad IT Solutions
 

Stability Issues

Sentiment score
8.0
Cortex XDR is praised for its stability and performance, with manageable upgrades and frequent updates enhancing its features.
Sentiment score
7.7
Users are satisfied with Kaspersky Endpoint Security Cloud's stability, though some report delays in support and update issues.
Sentiment score
5.8
Kaspersky Endpoint Detection is stable and reliable, averaging an 8/10 rating despite occasional connectivity and licensing issues.
Cortex remains fast and responsive, even with increasing data and alerts.
Final Year Student at Gitam University
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Senior Process Expert at A.P. Moller - Maersk
Cortex XDR is stable, offering high quality and reliable performance.
Cyber Security Manager at Welab bank
 

Room For Improvement

Cortex XDR users desire better OS integration, interface, threat detection, and pricing, while facing complexity and compatibility challenges.
Kaspersky Endpoint Security Cloud requires expertise, has integration and performance issues, limited features, and users seek better scalability and security.
Kaspersky needs improved stability, interface, resource management, integration, threat detection, and support compared to CrowdStrike and Trend Micro.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
Final Year Student at Gitam University
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
Pre Sales Architect at network techlab
If the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better.
Cyber Security Information Security Specialist at MHM Holding GmbH
Recently, there was a company which was attacked by phishing emails, and out of 10, it was only blocking three emails.
Supports Engineer at Rawad IT Solutions
Changes occur without notification or updates from the Kaspersky team, making it difficult to prepare for modifications.
Technical Support Engineer at 64 Network Security Pvt Ltd
Kaspersky Endpoint Detection and Response stops certain things. However, it does not take me to the file, and it is not user-friendly.
IT Manager at R K Khanna and Associates
 

Setup Cost

Cortex XDR is seen as costly by some, but offers scalable licensing and satisfaction varies with advanced features.
Kaspersky Endpoint Security Cloud provides flexible pricing, generally seen as accessible and competitive, though some users find it expensive.
Kaspersky EDR is seen as cost-effective, balancing strong support and threat detection with varied opinions on pricing.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
Consultant at a tech services company with 1,001-5,000 employees
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Senior Process Expert at A.P. Moller - Maersk
Cortex XDR is perceived as expensive by some customers, yet offers dynamic pricing.
Cyber Security Manager at Welab bank
Kaspersky Endpoint Detection and Response is cheap.
IT Manager at R K Khanna and Associates
 

Valuable Features

Cortex XDR offers advanced security with robust detection, integration, and AI capabilities, praised for flexibility and user-friendly interface.
Kaspersky Endpoint Security Cloud offers comprehensive protection and management with strong malware detection and integration with Microsoft Office 365.
Kaspersky Endpoint Detection and Response offers robust threat management with high detection rates, automation, customization, and comprehensive security features.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
Cyber Security Manager at Welab bank
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
Pre Sales Architect at network techlab
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
Final Year Student at Gitam University
Endpoint Detection and Response functionality includes root cause analysis and device isolation.
Technical Support Engineer at 64 Network Security Pvt Ltd
Kaspersky Endpoint Security Cloud is one of the best, very effective software because of its vulnerability assessment and threat assessments.
Supports Engineer at Rawad IT Solutions
We contacted support, and they answered all questions.
Security Specialist at Carina
The main network is being monitored through the firewall at that level.
IT Manager at R K Khanna and Associates
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Detection and Response (EDR)
6th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
110
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Extended Detection and Response (XDR) (5th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Kaspersky Next EDR Foundations
Ranking in Endpoint Detection and Response (EDR)
27th
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
14
Ranking in other categories
Ransomware Protection (9th)
Kaspersky Next XDR Expert
Ranking in Endpoint Detection and Response (EDR)
35th
Average Rating
7.8
Reviews Sentiment
6.3
Number of Reviews
19
Ranking in other categories
Extended Detection and Response (XDR) (20th)
 

Mindshare comparison

As of May 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of Kaspersky Next EDR Foundations is 0.8%, up from 0.5% compared to the previous year. The mindshare of Kaspersky Next XDR Expert is 1.0%, down from 1.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.4%
Kaspersky Next EDR Foundations0.8%
Kaspersky Next XDR Expert1.0%
Other94.8%
Endpoint Detection and Response (EDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Zunair Aftab - PeerSpot reviewer
Supports Engineer at Rawad IT Solutions
Security features excel while management tools face challenges
Kaspersky Endpoint Security Cloud has proven to be a robust and comprehensive solution for endpoint protection. So far, no major negative features have been observed. However, email security integration with Microsoft 365 has room for improvement. In a recent real-world incident, a company received 10 phishing emails, of which only three were blocked by the system. Enhancing detection accuracy to block 7 or more would significantly improve trust and effectiveness. With the on-premises version, there's a known issue where assigning a device to a new group results in it being auto-assigned back to the previous group. Fixing this bug would greatly streamline device management. Additionally, in the cloud version, once a device is assigned to a user, it cannot be reassigned without deleting the user or the device entirely. It would be far more user-friendly if the platform allowed simple reassignment or de-assignment, returning the device to an "unassigned" state. As for automated behavioral analysis, while current functionality is based on machine learning, upgrading to true AI-powered detection could bring substantial improvements. Ideally, the system should proactively flag potential threats, and offer administrators the option to either allow or block applications based on intelligent risk analysis
Manikumar David - PeerSpot reviewer
IT Manager at R K Khanna and Associates
Experienced weak security checks and increased system load with limited control
Kaspersky Endpoint Detection and Response is not up to the mark compared to what I have seen from earlier products. I was using CrowdStrike, and Kaspersky Endpoint Detection and Response is not up to the mark compared to CrowdStrike and other products. Kaspersky Endpoint Detection and Response sometimes seems to allow certain files which should not be allowed on its own. I trust Kaspersky Endpoint Detection and Response to check the files, but I cannot sit and check all the files that are coming in. Kaspersky Endpoint Detection and Response has its own weaknesses. Kaspersky Endpoint Detection and Response slows the system slightly. It uses more resources than what CrowdStrike does. When any attack happens or something is happening with other products I am using, Kaspersky Endpoint Detection and Response stops certain things. However, it does not take me to the file, and it is not user-friendly.
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
893,915 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Construction Company
12%
Comms Service Provider
9%
Manufacturing Company
8%
Comms Service Provider
18%
Financial Services Firm
10%
Computer Software Company
9%
Manufacturing Company
7%
Comms Service Provider
13%
Financial Services Firm
9%
Manufacturing Company
8%
Real Estate/Law Firm
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise20
Large Enterprise49
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise4
Large Enterprise3
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise6
Large Enterprise6
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your primary use case for KasperskyEndpoint Security Cloud?
I already have Kaspersky Endpoint Security Cloud Optimum on my company, karinoware.com. I am working on Kaspersky End...
What needs improvement with Kaspersky Endpoint Detection and Response?
Kaspersky Endpoint Detection and Response is not up to the mark compared to what I have seen from earlier products. I...
What advice do you have for others considering Kaspersky Endpoint Detection and Response?
It seems okay. CrowdStrike was not heavy on my network or usage. I would rate this product an 8.
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Information Not Available
Find out what your peers are saying about Kaspersky Next EDR Foundations vs. Kaspersky Next XDR Expert and other solutions. Updated: April 2026.
893,915 professionals have used our research since 2012.