


Kaspersky Endpoint Security for Business and Trellix Endpoint Detection and Response (EDR) both offer robust security solutions. User reviews indicate that Trellix EDR has superior features, while Kaspersky is preferred for pricing and support. Despite this, Trellix EDR is perceived as worth the higher price.
Features: Users appreciate the comprehensive threat intelligence and advanced analytics of Trellix EDR. Kaspersky is noted for its reliable malware protection and effective endpoint management tools. Trellix EDR’s proactive threat hunting and detailed incident reports give it an edge.
Room for Improvement:Kaspersky users suggest enhancements in integration capabilities and report generation. Trellix EDR users point out the need for a smoother integration with third-party tools and improvements in response times. Both products could benefit from streamlined workflows, but Trellix EDR needs to focus more on its integration capabilities.
Ease of Deployment and Customer Service:Kaspersky’s deployment is straightforward with clear instructions, while its customer service is responsive. Trellix EDR has a more complex deployment but offers dedicated support that eases the process. Trellix EDR's customer service, despite being excellent, involves a steeper learning curve. Kaspersky provides a more user-friendly deployment experience.
Pricing and ROI:Kaspersky is appreciated for its competitive pricing and good ROI, making it suitable for budget-conscious buyers. Trellix EDR, although more expensive, delivers significant value through advanced features and higher ROI, justifying the cost for businesses seeking comprehensive protection.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
In Cortex XDR by Palo Alto Networks, most of the remediation is automated and the accuracy is quite good.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
The technical support from Kaspersky was very responsive.
I would rate technical support from Kaspersky a nine out of ten.
I have contracted support and also have an operating control so I can get various types of support.
On our servers, we do not want it to touch our resources, so we deployed Sophos XDR on the server.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
I think scalability for Cortex XDR by Palo Alto Networks is good.
Any endpoint added to Active Directory can be detected by Kaspersky Security Center, which can then push the agent onto it.
Both scalability and stability of Kaspersky Endpoint Security for Business are solid.
Cortex remains fast and responsive, even with increasing data and alerts.
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Cortex XDR is stable, offering high quality and reliable performance.
There have been performance issues during scanning, causing the PC to respond slowly.
So I have to use Sophos XDR on servers because Sophos XDR does not consume resources.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
If the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better.
Kaspersky needs to improve its security techniques as it has not been in Gartner records for the last two years.
I previously mentioned that Kaspersky Endpoint Security for Business doesn't have built-in DLP, which was a concern.
Kaspersky Endpoint Security for Business does not have encryption tools.
I am seeing, for workflows, some sort of ethical hacking to test our environment.
Trellix Endpoint Detection and Response (EDR) is interesting and is a very good entry point that has been evolving through the last years.
They can enhance Trellix Endpoint Detection and Response (EDR) using AI now to do more enhanced reporting and more enhanced threat analysis.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Cortex XDR is perceived as expensive by some customers, yet offers dynamic pricing.
The pricing and licensing cost of Kaspersky Endpoint Security is cheaper compared to Trend Micro.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
It stands out as an antivirus and malware protection solution due to its extensive feeds and resources for antivirus signatures.
The best features in Kaspersky Endpoint Security for Business are the file threat protection, web threat protection, mail threat protection, network threat protection, firewall, behavior detection, and exploit prevention.
The unified endpoint management and the capabilities that are added to the antivirus and anti-malware are what differentiate this solution from others.
Trellix Endpoint Detection and Response (EDR) has very good threat hunting capability.
I have spent efforts on training our managers and others - what can software do if the knowledge base is low?
All the tree of data that we have, which may be a lot of information to argue whether it is going to be a threat or not, can be analyzed.
| Product | Mindshare (%) |
|---|---|
| Cortex XDR by Palo Alto Networks | 3.4% |
| Kaspersky Endpoint Security for Business | 1.8% |
| Trellix Endpoint Detection and Response (EDR) | 1.1% |
| Other | 93.7% |


| Company Size | Count |
|---|---|
| Small Business | 44 |
| Midsize Enterprise | 20 |
| Large Enterprise | 47 |
| Company Size | Count |
|---|---|
| Small Business | 63 |
| Midsize Enterprise | 27 |
| Large Enterprise | 33 |
| Company Size | Count |
|---|---|
| Small Business | 14 |
| Midsize Enterprise | 3 |
| Large Enterprise | 11 |
Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.
Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.
What are the key features of Cortex XDR?Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.
Kaspersky Endpoint Security for Business is a cybersecurity solution that is designed to protect small and large business networks and devices from all types of cyber security threats by implementing machine learning algorithms for real-time threat detection and response. The solution offers antivirus protection, firewall, network attack protection, web control, device control, data encryption, reporting tools, and more. Kaspersky integrates with a wide variety of external systems and platforms and is easy to customize to meet your organization’s specific security needs.
Benefits of using Kaspersky Endpoint Security for Business
Some of the key benefits of using Kaspersky Endpoint Security for Business include:
Kaspersky Endpoint Security for Business features
Kaspersky Endpoint Security for Business provides its users with a wide range of features to protect their corporate networks and devices against multiple types of threats, including:
Reviews from Real Users
Kaspersky Endpoint Security for Business stands out among its competitors for a number of reasons. Several major ones are its high performance, flexibility, and powerful virtualization capabilities.
Natnael A., a consultant at IWM Network Solutions, writes, “The app virtualizing is a great feature. The system developers use it to deliver apps to targeted staff. It basically reduces the server infrastructure resource. The solution provides good functionality.”
Rob M., a systems administrator at Saint Tammany Parish Hospital, says, “The solution has provided flexibility by allowing an end user to remote in, log in, and get their VM. VDI session and have all the icons and applications they need to use and retain the same booking view regardless of location.”
Reduce the time to detect and respond to threats. Trellix EDR helps security analysts quickly prioritize threats and minimize potential disruption.
Guided investigation automatically asks and answers questions while gathering, summarizing, and visualizing evidence from multiple sources—reducing the need for more SOC resources.
Cloud-based deployment and analytics enables your skilled security analysts to focus on strategic defense, instead of tool maintenance. Benefit from implementing the right solution for you.
We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.