No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft Defender for Business vs Stormshield Endpoint Security comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Protection Platform (EPP)
4th
Average Rating
8.4
Reviews Sentiment
6.7
Number of Reviews
118
Ranking in other categories
Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Microsoft Defender for Busi...
Ranking in Endpoint Protection Platform (EPP)
19th
Average Rating
7.6
Reviews Sentiment
6.6
Number of Reviews
20
Ranking in other categories
Microsoft Security Suite (19th)
Stormshield Endpoint Security
Ranking in Endpoint Protection Platform (EPP)
50th
Average Rating
8.0
Number of Reviews
3
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.7% compared to the previous year. The mindshare of Microsoft Defender for Business is 1.3%, down from 2.1% compared to the previous year. The mindshare of Stormshield Endpoint Security is 0.8%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.8%
Microsoft Defender for Business1.3%
Stormshield Endpoint Security0.8%
Other94.1%
Endpoint Protection Platform (EPP)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Paritosh Jani - PeerSpot reviewer
Associate VP (Managed Information Technology Services) at Dev Information Tech Pvt Ltd
Has delivered automated threat response and streamlined integration with advanced tools
The best features of Microsoft Defender for Business include it coming as an XDR solution which provides automated investigations, remediations, and endpoint detection and response. Moreover, it can be tightly integrated with vulnerability management or detecting vulnerabilities and pushing them to the SIEM solution. I utilize the advanced threat hunting feature of Microsoft Defender for Business and find it helpful; it's good and improving with every update. Microsoft Defender for Business integrates effectively with the Microsoft ecosystem as with Azure Sentinel, and it has a two-way natural integration. Apart from that, it also integrates with industry SIEM solutions such as Splunk.
it_user745593 - PeerSpot reviewer
Senior Project Manager, PMP at a transportation company with 10,001+ employees
Protects the global station and has good stability
The feature I find most valuable is that it protects the global station The solution's integration with the Windows environment could be better. The solution needs better integration with products, if it did, it would have the assumption of better security. I've been using the solution since…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cortex XDR can integrate the firewalls and determine the tendencies of the attacks. It's a new generation antivirus, with protection endpoints and detection response. It is very easy to use and everybody can operate the solution."
"Being a cloud solution it is very flexible in serving internal and external connections and a broad range of devices."
"The protection offered by this product is good, as is the endpoint reporting."
"Based on my experience with Cortex XDR by Palo Alto Networks, I highly recommend it due to its quick response to zero-day attacks and low utilization from end-user devices."
"Cortex XDR is stable, offering high quality and reliable performance."
"I recognize that Cortex XDR by Palo Alto Networks is one of the best products in its category regarding capabilities."
"I've found the solution to be highly scalable for enterprises."
"The solution's most valuable feature is its ability to rapidly detect certain hardware files."
"The most valuable feature of the solution is its central console."
"The solution is effective, continuously improving, and highly regarded, especially with Microsoft's leadership in the industry."
"Using Microsoft Defender for Business is beneficial for my company."
"The interface is quite user-friendly."
"The most effective features of Microsoft Defender for Business include its threat detection and response capabilities in managing vulnerabilities and ransomware attacks."
"Microsoft Defender for Business stands out due to its ease of use, particularly due to the fact that many of my customers already use Microsoft and Azure."
"Everything is stable. There have been no technical errors or stability issues."
"I would recommend Microsoft Defender for Business to others, rating it as ten out of ten."
"If you need a Windows based multi-functional end-point security solution then this product is for you."
"The feature I find most valuable is that it protects the global station."
"It is very good for preventing cryptolocker attacks."
 

Cons

"It takes time to scan the servers and devices."
"In some cases, there are too many options for me, and it is a bit too hard to find some settings which I really need to implement."
"In the next release, I would like to see more UI improvements. Their UI is a bit basic. When we are speaking about Palo Alto Networks they are the big company, so they can improve the UI a little bit. The UI, the reports, the log system can all be improved."
"There are some default policies which sometimes affect our applications and cause them to run around."
"One thing that was missing was the integration part. Currently, they don't have out-of-box integration with IBM QRadar, or if they have the integration, the integration doesn't work well."
"Managing the product should be easier."
"Limited remote connection."
"I would like to see them include NDR (Network Detection Response). Then it would work well with SIEM Response."
"Threat protection could be improved even though it is already a built-in feature."
"The solution's AI is notorious for false positives, and the time you have to spend training it is ridiculous."
"The security could always be improved."
"The biggest one is that Defender needs to be more proactive to the emerging threats. There can be tighter integration with email, especially how it integrates with our email system, which is the Microsoft Outlook suite. There should be the ability to react a lot quicker to emerging threats because sometimes, it takes a few days before some of these new threats are fully identified, and we need that to be a few hours."
"The areas where Microsoft Defender for Business could improve include the support, installation process, and wiki. I should be able to find solutions to issues quickly without having to delve too deep."
"Talking with the tool's technician about any problem is very complicated."
"Additionally, the pricing policy poses a challenge, particularly in multi-year contracts, where other solutions like Trend Micro offer more affordable options."
"I have an open case for close to two months with no responses or updates, except for an email response, and I've made four or five phone calls regarding the Microsoft Interconnect for AD and cloud tenant."
"Release speed for newer versions. When a new OS is released, you've got to wait half year to get the new version that covers the new Windows OS."
"Only Windows based. Dependence on MS updates and service start-up priority."
"The solution's integration with the Windows environment could be better."
 

Pricing and Cost Advice

"The pricing is okay, although direct support can be expensive."
"I feel it is fairly priced."
"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."
"Its pricing is kind of in line with its competitors and everybody else out there."
"It's about $55 per license on a yearly basis."
"Cortex XDR by Palo Alto Networks is an expensive solution."
"Cortex XDR's pricing is ok."
"It has reasonable pricing for the use cases it provides to the company."
"It has to get more competitive because we are starting to see some of the competitors providing better pricing, and some of it, of course, is to gain market share. The Defender product pricing is probably a little higher than the competitors."
"The tool is cheap, while some other solutions are more expensive. I remember the tool cost about five euros for a workstation or for a user on a monthly basis."
"Since we're a nonprofit, we get pretty good discounts on the tool."
"The tool's cost has been a little high, but I do not think it was terrible."
"Defender for Business is included by default with an Office 365 premium subscription."
Information not available
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
12%
Comms Service Provider
12%
Construction Company
11%
Manufacturing Company
10%
Computer Software Company
13%
Comms Service Provider
10%
Outsourcing Company
10%
Financial Services Firm
8%
Comms Service Provider
18%
Construction Company
8%
Outsourcing Company
8%
Financial Services Firm
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business47
Midsize Enterprise21
Large Enterprise55
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise2
Large Enterprise4
No data available
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Microsoft Defender for Business?
Our thoughts on the pricing for Microsoft Defender for Business are that we wish it could be better. If the pricing w...
What needs improvement with Microsoft Defender for Business?
I see room for improvement in Microsoft Defender for Business, particularly regarding the consolidation of all securi...
Ask a question
Earn 20 points
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
SkyRecon Systems StormShield Security Suite
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Arkoon, Netasq
Find out what your peers are saying about Microsoft Defender for Business vs. Stormshield Endpoint Security and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.