


Kaspersky Next XDR Optimum and Vectra AI are competitors in the cybersecurity market specializing in endpoint and network protection. Kaspersky appears more effective in endpoint security, whereas Vectra AI provides superior network visibility.
Features: Kaspersky offers firewall control, automatic updates, and centralized management, enhancing endpoint protection. Meanwhile, Vectra AI provides network detection and response capabilities using machine learning and AI, enabling efficient alert reduction and detailed investigative analysis.
Room for Improvement: Kaspersky can enhance malware detection beyond signatures, improve resource efficiency, and increase AI integration. Additionally, it needs better platform compatibility and advanced reporting features. Vectra AI should focus on advancing integration with security tools, enhancing host visibility, and minimizing false positives.
Ease of Deployment and Customer Service: Kaspersky supports various deployment models for on-premises and hybrid environments; however, customer support varies. Vectra AI efficiently caters to cloud and hybrid setups, with generally positive customer service feedback, although some users suggest improved agent expertise.
Pricing and ROI: Kaspersky is competitively priced with discounts for bulk purchases, offering good ROI through endpoint protection. Vectra AI's pricing is higher due to its advanced detection capabilities but provides valuable network insights, justifying its cost. Kaspersky attracts price-sensitive customers, whereas Vectra's features may appeal to those seeking top-tier network security.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
In Cortex XDR by Palo Alto Networks, most of the remediation is automated and the accuracy is quite good.
The payback period is roughly six months.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
The technical support from Kaspersky was very responsive.
I would rate technical support from Kaspersky a nine out of ten.
I would rate their technical support a 10, as we have local support in South Africa and the ability to reach out to the teams quickly and effectively when they are in similar time zones, leading to great support globally.
The support is quite reliable depending on the service engineer assigned.
When I create tickets, the response is fast, and issues are solved promptly.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Activating the newly purchased licenses is instantaneous, allowing installations without adjustments since it's cloud-based.
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
Any endpoint added to Active Directory can be detected by Kaspersky Security Center, which can then push the agent onto it.
Both scalability and stability of Kaspersky Endpoint Security for Business are solid.
Vectra AI is scalable because it can work through different kinds of solutions and is compatible with all kinds of cloud solutions.
Cortex remains fast and responsive, even with increasing data and alerts.
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Cortex XDR by Palo Alto Networks can be trusted completely.
There have been performance issues during scanning, causing the PC to respond slowly.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
If the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better.
Kaspersky needs to improve its security techniques as it has not been in Gartner records for the last two years.
I previously mentioned that Kaspersky Endpoint Security for Business doesn't have built-in DLP, which was a concern.
Kaspersky Endpoint Security for Business does not have encryption tools.
ExtraHop's ability to decrypt encrypted data is a feature that Vectra AI lacks.
You need to have a Linux server, and from the Linux server, you must perform AI tasks, and there is a lot to be handled in the back end.
All threats, including hacking attempts, should be comprehensively addressed.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Compared to CrowdStrike, which is very costly, and SentinelOne, which is also very costly, Cortex XDR by Palo Alto Networks is a medium cost-efficient solution.
The pricing and licensing cost of Kaspersky Endpoint Security is cheaper compared to Trend Micro.
Vectra is cheaper in terms of pricing and features compared to Darktrace.
I find the pricing of Vectra AI to be one of the best we have seen as feedback from customers and partners indicates it is very competitive for an EDR solution.
It is very acceptable when you compare it with Darktrace, for example.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
It stands out as an antivirus and malware protection solution due to its extensive feeds and resources for antivirus signatures.
The best features in Kaspersky Endpoint Security for Business are the file threat protection, web threat protection, mail threat protection, network threat protection, firewall, behavior detection, and exploit prevention.
The unified endpoint management and the capabilities that are added to the antivirus and anti-malware are what differentiate this solution from others.
Our company used Vectra AI to detect the malicious threats and viruses before they could cause more damage, and we successfully stopped the threats.
Alert noise was dramatically reduced by nearly 80%, allowing SOC analysts to focus more on true threats, which made them more productive and resulted in higher operational efficiency.
There are extensive out-of-box detection capabilities.
| Product | Mindshare (%) |
|---|---|
| Cortex XDR by Palo Alto Networks | 4.5% |
| Kaspersky Next XDR Optimum | 1.5% |
| Vectra AI | 2.2% |
| Other | 91.8% |

| Company Size | Count |
|---|---|
| Small Business | 46 |
| Midsize Enterprise | 21 |
| Large Enterprise | 54 |
| Company Size | Count |
|---|---|
| Small Business | 63 |
| Midsize Enterprise | 27 |
| Large Enterprise | 33 |
| Company Size | Count |
|---|---|
| Small Business | 10 |
| Midsize Enterprise | 10 |
| Large Enterprise | 29 |
Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.
Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.
What are the key features of Cortex XDR?Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.
Kaspersky Next XDR Optimum offers robust protection and user-friendly detection tools beyond endpoints for small to mid-sized businesses, enhancing cybersecurity strategies with essential EDR and seamless XDR integration.
Kaspersky Next XDR Optimum unites endpoint protection with automatic response capabilities, allowing businesses to identify, analyze, and neutralize threats efficiently. With features like antivirus, firewall, encryption, centralized management, and robust reporting, it supports multiple platforms and enhances secure environments for computers, servers, and networks. While user satisfaction is high due to its straightforward management and modular capabilities, some desire improvements in performance, AI integration, and cloud compatibility. Enhanced support, training, and simpler updates are also sought, though organizations value its effectiveness against malware and spyware. Despite high pricing and resource demands, Kaspersky's user-friendly approach and integration capabilities remain appreciated.
What are the features of Kaspersky Next XDR Optimum?
What benefits or ROI can users expect?
Organizations rely on Kaspersky Next XDR Optimum for endpoint protection against cyber threats, including malware and ransomware. Deployed across computers, servers, and mobile environments, it allows for centralized manageability, device control, and web access control. This approach ensures comprehensive security updates, file encryption, and efficient network activity monitoring, making it suitable for diverse business implementations.
Vectra AI offers advanced hybrid network and identity security, detecting threats traditional tools miss. It uses AI to identify lateral attacks and credential misuse, providing a proactive defense for enterprises.
Vectra AI enhances security by using AI-driven detection across network, cloud, and identity layers, surpassing EDR and SIEMs by offering real-time threat detection. It ensures continuous observability and automates SOC workflows to minimize manual efforts, creating an efficient security environment. Its AI-powered approach significantly reduces noise, focusing on true threats, and provides insights into complex threat landscapes, with seamless integration into environments like EDR and Office 365.
What are Vectra AI's key features?Vectra AI is utilized across industries for comprehensive network and anomaly detection. Organizations deploy it for threat hunting and incident response, monitoring both on-premises and cloud activities. By placing sensors across sites, they optimize security practices and streamline their detection processes.
We monitor all Extended Detection and Response (XDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.