No more typing reviews! Try our Samantha, our new voice AI agent.

Kaspersky Next EDR Foundations vs Tanium comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Detection and Response (EDR)
5th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
115
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Extended Detection and Response (XDR) (4th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Kaspersky Next EDR Foundations
Ranking in Endpoint Detection and Response (EDR)
28th
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
15
Ranking in other categories
Ransomware Protection (9th)
Tanium
Ranking in Endpoint Detection and Response (EDR)
23rd
Average Rating
7.8
Reviews Sentiment
6.2
Number of Reviews
23
Ranking in other categories
Vulnerability Management (26th), Endpoint Protection Platform (EPP) (14th), Unified Endpoint Management (UEM) (8th), Autonomous Endpoint Management (3rd)
 

Mindshare comparison

As of August 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.7%, down from 3.8% compared to the previous year. The mindshare of Kaspersky Next EDR Foundations is 0.9%, up from 0.6% compared to the previous year. The mindshare of Tanium is 2.1%, down from 2.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.7%
Tanium2.1%
Kaspersky Next EDR Foundations0.9%
Other93.3%
Endpoint Detection and Response (EDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
HM
Cyber Security Manager at Greater Cairo Water Company (GCWC)
Centralized endpoint control has strengthened defense in depth across our distributed branches
When considering features or capabilities of Kaspersky Next EDR Foundations that I have found most valuable, it appears similar to other vendors, and I don't find a unique feature in it as it looks comparable to any other EDR solution. However, we purchased it because we have had Kaspersky Endpoint for 10 years, so it has fantastic integration between EDR and the endpoint. Additionally, Kaspersky is one of the famous leaders in endpoint protection in the world. The centralized management console of Kaspersky Next EDR Foundations has helped me streamline my security protocols significantly. This helps me a great deal because we are a large enterprise and we need centralization. It simplifies operations for us. We have many branches around Cairo, which is the capital of Egypt, and because we need centralization, we cannot perform our tasks without it.
Sandeepraj Gatla - PeerSpot reviewer
Dfir Analyst at a tech services company with 201-500 employees
Endpoint monitoring has strengthened incident response and provides rapid isolation and forensics
Tanium provides an endpoint which is isolated from the network and environment. We can easily search its logs and history and connect remotely directly to that particular device which has been isolated from the network. We can search for the history and logs, including audit logs and event logs. The complete activity of the user or owner of the device is visible to us. We can see the artifacts of particular USB transfers internally for official use. We can not only connect remotely but also see the device status and how many failures have occurred within the network so far. We can see the IP address, how many times it has changed its IP address, and how many times it was connected to VPN or external VPN or internal VPN and what has been searched while on VPN. We can block the IOCs or IP addresses as well. We can block domains, hashes, SHA values, SHA-256, SHA-1, SHA-5 and MD5. Although I am not completely involved in the automation team, we do have that team and I have worked in some CERT recently. Tanium is more useful while we are in the CERT because most of the times when we are on high alert, Tanium does play a main role for that particular incident or any high case. Tanium is a simple tool and we can easily integrate it to many devices and it is a mandatory tool to secure an endpoint. It is mandatory to give any RDP connection and the tool should be present in the particular device. It is completely mandatory and it is in the policy as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We use Cortex XDR by Palo Alto Networks for its ability to detect based on behavior rather than simple virus scan to prevent malicious activities."
"Palo Alto is the core of the security infrastructure in the environment."
"We have a complete overview of all our PCs and it's very easy to handle and to use the interface. It has a lot of benefits for us."
"One of the things that I enjoy the most is using policy extensions. It's like having host firewalls to control USB connections. I think it's a wonderful tool to restrict use when connecting to our computers. Another important tool is Home Insights. That is an add-on to the Cortex solution. I like that because we can see all the vulnerabilities in the environment and control what assets are connected to our network."
"Traps pays for itself within the first 16 months of a three-year subscription."
"It blocks malicious files, prevents attacks, and doesn't require many updates because it is a very light application."
"Cortex XDR by Palo Alto Networks saves time in various ways, although the user interface is fairly standard."
"I can highlight that we have not faced any security incidents with Cortex XDR by Palo Alto Networks, and even though our environment is quite dynamic, we have not faced any security incident with Cortex XDR by Palo Alto Networks until now."
"I would say that Kaspersky Endpoint Security Cloud is one of the best, very effective software because of its vulnerability assessment and threat assessments."
"All features in Kaspersky Endpoint Security Cloud are perfect, and I am interested in working with Kaspersky Endpoint Security Cloud."
"The AI-driven threat intelligence has helped my threat management significantly, as it helps me catch many threats."
"It is a powerful tool for zero-day attack prevention."
"The most valuable component of the solution is the malware detection feature."
"In terms of software performance, it has been effective in providing good security."
"We had the cloud suite of KasperskyEndpoint Security Cloud, and its monitoring was fine."
"The standout features of Kaspersky Endpoint Security Cloud include its cloud-based console and the simplicity of managing endpoints."
"The product is granular and can build complex roles compared to other EDR vendors."
"The security features are very valuable."
"Tanium is highly scalable."
"Tanium has made the process of detecting threats more proactive with its detection. So, the process is easier and more efficient."
"Tanium's most valuable feature is its instant discovery aspect."
"I'm not so familiar with the tool but I like the interaction of the console to the picture. Patching is the primary model I have been focusing on for the last couple of weeks. So I have created a proof of concept environment and have been checking the available features."
"It's definitely not complex, it is pretty user-friendly and it's a solid tool enterprise to use."
"The interrogation piece was the most valuable feature because it was very detailed."
 

Cons

"Currently, we are monitoring all USB drives and ports but we would like to improve our device control capabilities."
"While using Cortex, I noticed some aspects that could be improved, such as increasing the synchronization speed between XDR and Xnor."
"The solution should add unwanted malicious hash values to a block list so that whenever the action is triggered, it will automatically prevent the malicious content."
"I would like to see improvement in the tool's user interface, particularly in the area of managing alerts and providing more reporting capabilities."
"There's an overall lack of features."
"Cortex XDR by Palo Alto Networks is not only pricey; it is extremely expensive."
"The setup is quite easy. We had appropriate support from the manager. One thing that was missing was the integration part."
"We had a problem with getting our older endpoints up to date, but their newest updates have been really good. I've been pleased with it in terms of what our needs are. It's doing what we want it to do."
"One area where the product could be improved is in its delivery and installation process."
"Recently, there was a company which was attacked by phishing emails, and out of 10, it was only blocking three emails."
"Recent upgrades have occurred, but some customers question why certain options are disabled."
"Kaspersky Next EDR Foundations could be improved if it depended more on artificial intelligence, as other vendors such as CrowdStrike do."
"Sometimes, the tool consumes a lot of resources from the endpoints, making it an area of concern where improvements are required since it currently consumes a little bit of RAM."
"The tool's update management can be better. In future releases, the addition of a DLP module would be valuable."
"While the product provides a good level of protection, we need better support, especially in terms of being kept informed about new threats and specific configurations needed."
"Kaspersky's global ranking has been on the decline."
"The solution needs to improve the reporting and tracking capabilities."
"I would like to have more integrations and custom plugins to input. Integration is always a big deal in a lot of different environments."
"They could improve the UI."
"We had some issues with the solution's OS upgrade."
"There are some bugs in the product. The tool needs to improve in the area of reporting."
"The solution can give a lot of false positives."
"There are downsides and drawbacks in Tanium, and there is room for improvement from my perspective."
"The solution lacks mobility."
 

Pricing and Cost Advice

"Every customer has to pay for a license because it doesn't work with what you get from a managed services provider."
"The price was fine."
"Very costly product."
"The tool's price is moderate."
"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."
"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."
"Cortex XDR by Palo Alto Networks is quite an expensive solution."
"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."
"The solution is moderately priced and cannot be considered an expensive or cheap tool."
"I find Kaspersky Endpoint Security Cloud more accessible in terms of pricing."
"We had to pay an annual licensing fee for KasperskyEndpoint Security Cloud."
"The platform is expensive."
"The solution is reasonably priced."
"Kaspersky Endpoint Security Cloud is a cost-effective solution."
"The product is averagely priced."
"The product’s price is flexible."
"The solution offers value for money."
"The solution is expensive but it's a good investment."
"The product's pricing differs from region to region depending on negotiations and the number of endpoints."
"It is higher than some competitors in the market."
"There is an annual license required to use this solution."
"It's an expensive solution. It would be nice if the cost were lower."
"Tanium is a more expensive solution in Latin America than some of the competitors, such as BigFix."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
909,948 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
12%
Outsourcing Company
10%
Comms Service Provider
10%
Financial Services Firm
10%
Comms Service Provider
15%
Outsourcing Company
14%
Construction Company
9%
Financial Services Firm
8%
Financial Services Firm
14%
Government
10%
Manufacturing Company
9%
Healthcare Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise21
Large Enterprise54
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise4
Large Enterprise3
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise4
Large Enterprise12
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What needs improvement with KasperskyEndpoint Security Cloud?
Kaspersky Next EDR Foundations could be improved if it depended more on artificial intelligence, as other vendors suc...
What is your primary use case for KasperskyEndpoint Security Cloud?
I use Kaspersky Next EDR Foundations for endpoint detection and response.
What needs improvement with Tanium?
While there is always room for improvement, I am pleased with Tanium.
What is your primary use case for Tanium?
The primary use case for Tanium ( /products/tanium-reviews ) is compliance, patching, and inventory as part of the co...
What advice do you have for others considering Tanium?
For smaller companies, Tanium is quite a big investment, and one needs to have a considerable setup to make it econom...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
Tanium Inc Cloud, Tanium XEM
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
JPMorgan Chase, eBay, Amazon, US Bank, MetLife, pwc, Cerner, Delphi, MGM Grand, New York Life
Find out what your peers are saying about Kaspersky Next EDR Foundations vs. Tanium and other solutions. Updated: August 2026.
909,948 professionals have used our research since 2012.