Microsoft Defender for Business vs Stormshield Endpoint Security comparison

Microsoft Defender for Business vs. Stormshield Endpoint Security

Download the complete report

Helped 885,311 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of March 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.5%, down from 4.0% compared to the previous year. The mindshare of Microsoft Defender for Business is 1.9%, up from 1.9% compared to the previous year. The mindshare of Stormshield Endpoint Security is 0.4%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.5%
Microsoft Defender for Business	1.9%
Stormshield Endpoint Security	0.4%
Other	94.2%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Takayuki-Umehara

Public Cloud Engineer at Prudential

Product deployment protects assets but needs improvement in system support

I am doing maintenance for Microsoft Defender for Business, and I'm currently working with it. We don't need to use the latest version of Microsoft Defender for Business. We still use the latest virus definition file that Microsoft Defender for Business has automatically updated. We implement a basic update mechanism. Our compliance division manages how many servers and PCs we have and whether those servers have antivirus solutions. I am not certain about how Microsoft Defender for Business helps with AI-driven security strategies. I just use it normally and don't know if it uses AI technology. I rate Microsoft Defender for Business a six out of ten.

Read full review

it_user745593

Senior Project Manager, PMP at a transportation company with 10,001+ employees

Protects the global station and has good stability

The feature I find most valuable is that it protects the global station The solution's integration with the Windows environment could be better. The solution needs better integration with products, if it did, it would have the assumption of better security. I've been using the solution since…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"From a single pane of glass, you can easily manage all of your endpoints."

"The level of security I get for my endpoints and servers is extremely valuable."

"Cortex is the best tool for endpoint detection, and I have used it to verify hashes or domains to identify malicious activity, trigger playbooks that automate and gather endpoint logs, block malicious processes, and update incident tickets, showcasing end-to-end processes with automation in investigation and reducing the analysis workflow."

"These days it's machine-learning technology and behavior-based analytics features that make us more secure."

"I recommend this solution to others because it is easy to manage, reliable, and overall good to use."

"Cortex is the best solution for avoiding security breaches, malware attacks, and other kinds of security issues."

"Cortex XDR's most valuable feature is its intelligence-based dashboards."

"If the user leaves our premises or network, Palo Alto Traps will still be on that endpoint and will still apply our policies."

More Cortex XDR by Palo Alto Networks pros

"Defender's main strength is its integration with Microsoft Sentinel, offering valuable insights."

"If you're an Intune user, you can bring in certain capabilities like system-hardening policies, which further enhances the security."

"The best features of Microsoft Defender for Business include it coming as an XDR solution which provides automated investigations, remediations, and endpoint detection and response."

"The security features in Microsoft Defender for Business that have been most effective for our company include the way it's built-in and intertwined into all the operating systems, giving us a good opportunity to holistically block things for the organization using that tenant."

"Using Microsoft Defender for Business is beneficial for my company."

"Microsoft Defender for Business is good for small and medium-sized businesses. It offers solid security flexibility and integration with tools like Microsoft Lighthouse and some other software. It takes some of the features of Defender for Endpoint EDR and provides those services for small and medium-sized business environments."

"Defender's main strength is its integration with Microsoft Sentinel, offering valuable insights."

"Microsoft Defender for Business stands out due to its ease of use, particularly due to the fact that many of my customers already use Microsoft and Azure."

More Microsoft Defender for Business pros

"The feature I find most valuable is that it protects the global station."

"It is very good for preventing cryptolocker attacks."

"If you need a Windows based multi-functional end-point security solution then this product is for you."

"The feature I find most valuable is that it protects the global station."

Cons

"It would be better if they could educate the customers more. Some sort of seminars and roadshows will help educate the customers and show what the product can do. The price could be better. It would also help if they had a team for deployment and support."

"They have the worst support, as a company, that I have ever worked with, as they are difficult to get a hold of and keep on the phone. They don't know what they are talking about when you get them on the phone. They don't like to respond to messages when you send them to them. They like to "research problems" for weeks on end, then pass you off to somebody else."

"It automatically detects security issues. It should be able to protect our network devices while operating autonomously."

"Limited remote connection."

"Enhancing UI simplicity and playbook flexibility are areas that could benefit from more low-code automation options for smoother integrations."

"It'll help if customization was easier."

"Managing the product should be easier."

"The MAC agent is not as robust feature-wise as the PC version."

More Cortex XDR by Palo Alto Networks cons

"I see room for improvement in Microsoft Defender for Business, particularly regarding the consolidation of all security solutions in one place and the integration of AI and data security into the same platform."

"We face a licensing issue with Windows 11 Enterprise not reflecting in our portal, which affects activation. Microsoft's support did not resolve this issue, even after sharing remote desktop and screen details."

"We faced some issues while running some applications on Mac."

"Talking with the tool's technician about any problem is very complicated."

"If I need logs and don't have local storage bundled with Defender, I need to add workspace and log analytics, which is costly for storing logs of 2 GB, 5 GB, 10 GB."

"Defender's reporting is rather scattered, and its URL filtering mechanism doesn't really work."

"The tool's support is an area of concern where improvements are needed."

"The user interface has a lot of features which can make it complex and hard to adapt to for some users."

More Microsoft Defender for Business cons

"The solution's integration with the Windows environment could be better."

"Release speed for newer versions. When a new OS is released, you've got to wait half year to get the new version that covers the new Windows OS."

"Only Windows based. Dependence on MS updates and service start-up priority."

Pricing and Cost Advice

"This is an expensive solution."

"Cortex XDR's pricing is ok."

"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."

"I feel it is fairly priced."

"It has reasonable pricing for the use cases it provides to the company."

"It has a yearly renewal."

"Our customers have expressed that the price is high."

"The solution is expensive. It's pricing is on a yearly-basis."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"Since we're a nonprofit, we get pretty good discounts on the tool."

"It has to get more competitive because we are starting to see some of the competitors providing better pricing, and some of it, of course, is to gain market share. The Defender product pricing is probably a little higher than the competitors."

"Defender for Business is included by default with an Office 365 premium subscription."

"The tool's cost has been a little high, but I do not think it was terrible."

"The tool is cheap, while some other solutions are more expensive. I remember the tool cost about five euros for a workstation or for a user on a monthly basis."

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

885,311 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

13%

Manufacturing Company

Computer Software Company

Financial Services Firm

Computer Software Company

16%

Comms Service Provider

Government

Financial Services Firm

No data available

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	47

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	2
Large Enterprise	4

No data available

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What is your experience regarding pricing and costs for Microsoft Defender for Business?

Our thoughts on the pricing for Microsoft Defender for Business are that we wish it could be better. If the pricing w...

What needs improvement with Microsoft Defender for Business?

I see room for improvement in Microsoft Defender for Business, particularly regarding the consolidation of all securi...

What advice do you have for others considering Microsoft Defender for Business?

I would rate this product an eight out of ten.

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Ask a question

Earn 20 points

Comparisons

Compared 9% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

HP Wolf Security vs Microsoft Defender for Business

Compared 13% of the time

Microsoft Defender for Office 365 vs Microsoft Defender for Business

Compared 10% of the time

Microsoft Defender XDR vs Microsoft Defender for Business

Compared 4% of the time

Norton Small Business vs Microsoft Defender for Business

Compared 4% of the time

ESET Endpoint Protection Platform vs Microsoft Defender for Business

Compared 3% of the time

More Microsoft Defender for Business Competitors

Trellix Endpoint Security Platform vs Stormshield Endpoint Security

Compared 19% of the time

Sophos Endpoint vs Stormshield Endpoint Security

Compared 17% of the time

Symantec Endpoint Security vs Stormshield Endpoint Security

Compared 17% of the time

WithSecure Elements Endpoint Protection vs Stormshield Endpoint Security

Compared 12% of the time

Fortinet FortiClient vs Stormshield Endpoint Security

Compared 11% of the time

More Stormshield Endpoint Security Competitors

Product Reports

Cortex XDR by Palo Alto Networks

Download Cortex XDR by Palo Alto Networks product report

Microsoft Defender for Business

Download Microsoft Defender for Business product report

Endpoint Protection Platform (EPP)

February 2026

Download Stormshield Endpoint Security product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

No data available

SkyRecon Systems StormShield Security Suite

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Microsoft Defender for Business is a new endpoint security solution that was designed especially for the small and medium-sized business (up to 300 employees). With this endpoint security solution, your company's devices are better protected from ransomware, malware, phishing, and other threats.

Microsoft

Stormshield offers innovative end-to-end security solutions worldwide to protect networks (Stormshield Network Security), workstations (Stormshield Endpoint Security) and data (Stormshield Data Security). These next-generation trusted solutions ensure the protection of strategic information and are deployed through a partner network of distributors, integrators and operators in businesses of all sizes, government institutions and defense organizations worldwide.

Stormshield

Sample Customers

CBI Health Group, University Honda, VakifBank

Information Not Available

Arkoon, Netasq

Microsoft Defender for Business vs. Stormshield Endpoint Security