Morphisec vs Symantec Endpoint Security comparison

Morphisec and Broadcom are both solutions in the Endpoint Protection Platform (EPP) category. Morphisec is ranked #49, while Broadcom is ranked #16 with an average rating of 7.1. Morphisec holds a 0.6% mindshare in EPP, compared to Broadcom’s 3.3% mindshare. Additionally, 100% of Morphisec users are willing to recommend the solution, compared to 80% of Broadcom users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Symantec Endpoint Security and Morphisec both compete in endpoint protection. Morphisec appears to have the upper hand due to its innovative features and proactive defense strategies that users find justified in terms of cost.

Features: Symantec Endpoint Security provides robust threat detection, real-time analytics, and a comprehensive protection suite. Morphisec is recognized for advanced prevention capabilities, a lightweight design, and its unique method of stopping attacks before they execute.

Room for Improvement: Symantec Endpoint Security could improve performance speed, reduce system resource usage, and enhance user interface intuitiveness. Morphisec could benefit from better integration with other security tools, more comprehensive reporting features, and an increase in scalability options.

Ease of Deployment and Customer Service: Symantec Endpoint Security offers flexible deployment options and responsive customer service. Morphisec stands out for its straightforward, rapid deployment process without extensive configuration. While Morphisec's customer support is well-rated, Symantec's extensive support infrastructure provides a slight advantage.

Pricing and ROI: Symantec Endpoint Security generally has higher setup costs, but users note a good ROI due to its wide range of features. Morphisec, with lower initial costs and significant value in thwarting advanced threats, delivers excellent ROI.

To learn more, read our detailed Morphisec vs. Symantec Endpoint Security Report (Updated: March 2026).

Buyer's Guide

Morphisec vs. Symantec Endpoint Security

March 2026

Download the complete report

Helped 884,873 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of March 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.5%, down from 4.0% compared to the previous year. The mindshare of Morphisec is 0.6%, up from 0.4% compared to the previous year. The mindshare of Symantec Endpoint Security is 3.3%, down from 4.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.5%
Symantec Endpoint Security	3.3%
Morphisec	0.6%
Other	92.6%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Rick Schibler

VP of Information Technology at Kentucky Trailer

Offers in-memory protection at a lower price than competitors

Morphisec's in-memory protection is probably the most valuable feature because it stops malicious activity from occurring. If something tries to install or act as a sleeper agent, Morphisec will detect and stop it. Morphisec's Moving Target Defense is critical to hardening our attack surface. If it detects something, it indicates whether it's valid. That means you've got a breach requiring investigation. It detects anomalies but doesn't necessarily point to what caused them. You still need to do that work. The solution is reasonably easy to administer. They made some changes last year, adding a cloud-based monitoring solution that makes deploying and monitoring our endpoints easy.

Read full review

Kumbesh Rajagopal

Senior Security Delivery Analyst at Accenture

Management becomes easier with minimal complications, but improvement in support tools needed

Regarding areas of improvement for Symantec Endpoint Security, there are many changes, and the support portal tool is complicated compared to other tools. When trying to get service from Symantec, the process is complex. I'm not sure whether it's because of my project or something else. Though it is easy to manage, easy to get, easy to install, and works efficiently for managing policies, we faced a significant disadvantage. We wanted to add multiple hashes because of numerous new alerts coming, but we could only add them one by one, which is a considerable disadvantage in Symantec.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"When the pandemic started, Palo Alto came up with many solutions, which helped with the quick shift from on-premises to the cloud."

"This software helps us understand any issues that may arise when someone is not at work."

"The most valuable features are incident creation, policy-based protection, IP whitelisting, and device encryption. These are beneficial for endpoint and server security."

"The product has an intuitive dashboard."

"Cortex XDR lets us manage several clients from the same console, and its endpoint defense is more advanced than traditional antivirus."

"Being a cloud solution it is very flexible in serving internal and external connections and a broad range of devices."

"The dashboard is customizable."

"The management capabilities, allow an IT organization to get quite a good picture of attempted cyber attacks."

More Cortex XDR by Palo Alto Networks pros

"Morphisec provides full visibility into security events from Microsoft Defender and Morphisec in one dashboard. Defender and Morphisec are integrated. It's important because it lowers the total cost of maintenance on the engineer's time, more or less. So the administrative time is dramatically reduced in maintaining the product. This saves an engineer around four to five hours a week."

"Morphisec also provides full visibility into security events for Microsoft Defender and Morphisec in one dashboard... in the single pane of glass provided by Morphisec, it's all right there at your fingertips: easy to access and easy to understand. And if you choose to go down further to know everything from the process to the hash behind it, you can."

"Morphisec has absolutely helped save money on our security stack. The ransomware at the end of the day can cost organizations millions upon millions of dollars. Investing in tools like Morphisec is a great reduction in that cost. If I can spend $10,000 in a year to protect assets that could be ransomed for $20,000,000, that's definitely a bet that one should pursue. Morphisec absolutely it's worth the investment."

"We have seen it successfully block attacks that a traditional antivirus did not pick up."

"The biggest feature is that it hides everything from your operating system that's running in-memory from anything to try to run against it. That's the most unique thing that's on the market. There's nothing else out there that's quite like that. That's a big selling point and why we went with it. It does exactly what the design does. If you can't find it, you can't execute against it."

"Morphisec makes use of deterministic attack prevention that doesn’t require investigation of security alerts. It changes the memory locations of where certain applications run. If you think of Excel, opening a PDF, running an Excel macro, or opening a webpage and clicking on a link, all of those actions run in a certain area of memory. Morphisec changes the memory locations of where those run."

"It provides full visibility into security events and from both solutions in one dashboard. I'm not a big security guy, if I have a threat that looks like there's a problem, I will ask Morphisec to dissect it for me, and tell me what might be happening. Because it tends to be all hash codes, so I can tell what's going on. They've been pretty good with that."

"Morphisec makes it very easy for IT teams of any size to prevent breaches of critical systems because of the design of their tool. When we evaluated Morphisec, the CIO and I sat and listened. What attracted us to them is the fact that it stops activity at the point of detection. That saves a lot of time because now we are not investigating and trying to trace down what to turn off. We have already prevented it, which makes it very much safer and more secure."

More Morphisec pros

"Symantec End-User Endpoint Security is easy to use."

"The solution is easy to use"

"The product blocks computer viruses."

"The fact that it has centralized management is the most valuable feature."

"The scheduled scans and the active protection were the most valuable because it allowed me to have the systems protected in real-time and also be able to schedule scans so that as new definitions would update, machines could be scanned to make sure that everything was in tip-top shape and there was nothing lurking in the background."

"Helps to protect our organization from known attacks and blocks malicious files, which are not generally repelled well."

"The anti-virus and firewall policies are the most valuable features of this solution."

"I like the endpoint detection and response. That's the best feature. I also like the fact that we don't need to use a file on the computer, whereas some anti-malware solutions work with a file on the endpoint. Symantec is a very good option compared to solutions from other vendors."

More Symantec Endpoint Security pros

Cons

"The encryption is not up to the mark."

"The installation should be easier and the Palo Alto pre-sales and sales teams should have more information on the product because they don't know what they are selling."

"The solution lags to the real-time scenarios here and there."

"They have the worst support, as a company, that I have ever worked with, as they are difficult to get a hold of and keep on the phone. They don't know what they are talking about when you get them on the phone. They don't like to respond to messages when you send them to them. They like to "research problems" for weeks on end, then pass you off to somebody else."

"For Cortex XDR by Palo Alto Networks, if I had to point out improvements, I would say the UI is still somewhat difficult for beginners."

"I would like to see them include NDR (Network Detection Response)."

"The solution could improve by providing better integration with their own products and others."

"Technology evolves every day, so it would be nice if it gets more secure. It can also have more integration with other platforms."

More Cortex XDR by Palo Alto Networks cons

"We sometimes have to depend on the support team to know what action we should take. If the solution for an alert can be built into the report that we are getting, it will save time, and the interaction with support would be less. At times, corrective action is required, but at times, we don't need to take any action. It would be good if we get to know in the report that a particular infection doesn't require any action. It will save us time and effort."

"If anything, tech support might be their weakest link. The process of getting someone involved sometimes takes a little time. It seems to me that they should have all the data they need to let me know whether an alert is legitimate or not, but they tend to need a lot of information from me to get to the bottom of something. It usually takes a little longer than I would expect."

"Right now, it's just their auto-update feature. I know they are currently working on that. When they release a new version of the threat prevention platform, I do have to update that, rolling out to every computer. They have said, "From version 5, you would be able to do an auto-update." While this is very minor, that is the only thing that I would say needs to be upgraded. It would just make life a lot easier for other IT teams. However, I have simplified the process, so all I need to do is just download one file."

"I haven't been able to get the cloud deployment to work. When there's an update, I'm supposed to be able to roll it out for the cloud solution, but right now I'm continuing to use our SCCM solution to update it."

"It might be a bit much to ask, but we are now beginning to use Morphisec Scout, which provides vulnerability information. At this time, it's recognizing vulnerabilities and reporting them to us, but it's not necessarily resolving them. There's still a separate manual process to resolve those vulnerabilities, primarily through upgrades. We have to do that outside of Morphisec. If Morphisec could somehow have that capability built into it, that would be very effective."

"We have only had four attacks in the last year, "attacks" being some benign PDF from a vendor that, for some reason, were triggered. There were no actual attacks. They were just four false positives, or something lowly like adware. There have been false positives with both the on-premises solution and the cloud solution."

"Some of the filters for the console need improvement. There are alerts that show up and just being able to acknowledge that we've seen those and not turn them off, but dismiss them, would be a huge benefit."

"Sometimes it generates false positive alerts. They need to continue working on that. They have provided solutions for it and have fixed issues with updated versions. The service is quite good but they need to work on it more so that there are no false positive alerts."

More Morphisec cons

"There was an administrative feature, which was available in the previous version, which has been removed. We would like that feature to be added again, because it helps the customer in many ways, and it's a very user-friendly feature."

"We were having a problem in Version 14, where the client machines used to go into the health state and once it restarted, and never came back again."

"The spam filter is something that you can't control, and you can't set the filter to intercept different types of emails."

"The areas that need improvement include scanning issues, application control issues, and the detection of malicious files."

"Any external device which is inserted into a computer should be subject to an auto-scan policy, to automatically scan it before accepting the device... They need to make it more user-friendly, so that when anyone puts in a USB stick it will be scanned, popping up any problems before it is used."

"They should work on the virus definition file and agent lighter."

"We communicate with our local partners and they give us the license key. Then, we have to go to the portal and apply it, but sometimes it doesn't work. We then have to create a new administrative account and migrate all our endpoints. That is the only major issue we have been battling with."

"The solution is very difficult to uninstall. There isn't really a way to uninstall the product at all, which is quite a headache."

More Symantec Endpoint Security cons

Pricing and Cost Advice

"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."

"This is an expensive solution."

"Cortex XDR by Palo Alto Networks is quite an expensive solution."

"It is present, but when compared to other competitive products, I would say it is not less expensive; however, when all of the other added values are considered, the price is reasonable."

"We pay about $50,000 USD per year for a bundle that includes Cortex XDR."

"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."

"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."

"Very costly product."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"The pricing is definitely fair for what it does."

"It does not have multi-tenants. If South Africa wants to show only the machines that they have, they need their own cloud incidence. It is not possible to have that in a single cloud incidence with multiple tenants in it, instead you need to have multiple cloud incidences. Then, if you have that, it will be more expensive. However, they are going to change that, which is good."

"Morphisec is reasonably priced because our parent company's other subsidiaries use different products like CrowdStrike. CrowdStrike is four or five times more expensive than Morphisec. The competitive pricing saves us money in our overall security stack."

"Compared to their competitors, the price of Morphisec is not that high. You can easily deploy it on a large-scale or small-scale network."

"Our licensing is tied into our contract. Because we have a long-term contract, our pricing is a little bit lower. It is per year, so we don't get charged per endpoint, but we do have a cap. Our cap is 80 endpoints. If we were to go over 80, when we renewed our contract, which is not until three years are over. Then, they would reevaluate, and say, "Well, you have more than 80 devices active right now. This is going to be the price change." They know that we are installing and replacing computers, so the numbers will be all over the place depending on whether you archive or don't archive, which is the reason why we just have to keep up on that stuff."

"Price-wise, it's on the higher side. A traditional antivirus solution is cheaper, but in terms of security and manageability, its ROI is better than a traditional antivirus. I would recommend it to anybody evaluating or considering an antivirus solution. If your system gets compromised, the cost of ransom would be a lot more. This way, it saves a lot of cost."

"It is priced correctly for what it does. They end up doing a good deal of discounting, but I think it is priced appropriately."

"Licenses are per endpoint, and that's true for the cloud version as well. The only difference is that there is a little extra charge for the cloud version."

More Morphisec pricing and cost advice

"The pricing is a little bit more expensive than other competitors, if you compare it to Kaspersky, for example, or McAfee."

"The pricing is as per the environment. If all the features are there, there will be a cost for them. There were no additional costs for me. Support and other things were included in the pricing."

"Symantec Endpoint Security is a moderately priced solution."

"There is a yearly license."

"I rate the product's pricing a six out of ten."

"The price of the solution could be less expensive."

"The problem is Symantec is more expensive than other vendors."

"We pay on a yearly basis..."

More Symantec Endpoint Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

884,873 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

Manufacturing Company

Financial Services Firm

Comms Service Provider

Outsourcing Company

18%

Manufacturing Company

11%

Financial Services Firm

Computer Software Company

Comms Service Provider

12%

Manufacturing Company

10%

Financial Services Firm

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	47

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	8
Large Enterprise	8

By reviewers
Company Size	Count
Small Business	69
Midsize Enterprise	32
Large Enterprise	63

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

Ask a question

Earn 20 points

Which is better - Cortex XDR or Symantec End-User Endpoint Security?

Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...

See all answers

Which offers better endpoint security - Symantec or Microsoft Defender?

We use Symantec because we do not use MS Enterprise products, but in my opinion, Microsoft Defender is a superior sol...

See all answers

What do you like most about Symantec End-User Endpoint Security?

Symantec have everything – documentation, videos, data sheets.

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 9% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Trellix Endpoint Security Platform vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Halcyon vs Morphisec

Compared 7% of the time

CrowdStrike Falcon vs Morphisec

Compared 6% of the time

FortiCNAPP vs Morphisec

Compared 5% of the time

Deep Instinct Prevention Platform vs Morphisec

Compared 5% of the time

SentinelOne Singularity Complete vs Morphisec

Compared 4% of the time

More Morphisec Competitors

Microsoft Defender for Endpoint vs Symantec Endpoint Security

Compared 17% of the time

CrowdStrike Falcon vs Symantec Endpoint Security

Compared 8% of the time

Kaspersky Endpoint Security for Business vs Symantec Endpoint Security

Compared 5% of the time

Trellix Endpoint Security Platform vs Symantec Endpoint Security

Compared 4% of the time

Check Point Harmony Endpoint vs Symantec Endpoint Security

Compared 4% of the time

More Symantec Endpoint Security Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

March 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Morphisec

March 2026

Download Morphisec product report

Buyer's Guide

Symantec Endpoint Security

February 2026

Download Symantec Endpoint Security product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Morphisec, Morphisec Moving Target Defense

Symantec EPP, Symantec Endpoint Protection (SEP)

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Morphisec delivers signatureless endpoint-specific protection, effectively blocking zero-day threats and ransomware without affecting performance, making it a preferred choice for enhancing security strategies.

Morphisec empowers users by providing comprehensive protection against advanced threats with its innovative signatureless and in-memory security features. Its seamless integration with Microsoft Defender ensures complete visibility and automatic threat blocking through a unified dashboard. The Moving Target Defense technology enhances deployment efficiency while its lightweight design maintains system performance. Despite some challenges in cloud deployment and feature updates, users find value in its ease of use and minimal administrative effort.

What are the key features of Morphisec?

Signatureless Protection: Blocks threats without relying on signatures, ensuring up-to-date defense.
In-Memory Protection: Prevents attacks targeting system memory to safeguard endpoints.
Zero-Day Threat Blocking: Offers proactive defense against undiscovered threats.
Unified Dashboard: Provides comprehensive security event visibility and integration with Microsoft Defender.
Lightweight Design: Ensures smooth operation without system performance issues.

What benefits can users expect when evaluating Morphisec?

Enhanced Security: Strengthens defense layers against ransomware and memory attacks.
Seamless Integration: Works alongside existing antivirus solutions like Microsoft Defender.
Minimal Administration: Requires low maintenance due to its set-and-forget nature.
Automatic Updates: Keeps protection current without manual intervention.
Broad Coverage: Suitable for desktops, servers, and cloud platforms.

In industries with high security needs, deploying Morphisec adds a robust defense against advanced threats. Its compatibility with antivirus solutions and cloud platforms makes it adaptable to diverse environments, ensuring effective threat mitigation and detection.

Morphisec

Symantec Endpoint Security is a robust and reliable product that provides complete protection against viruses, malware, Trojans, and malicious files. It offers application and device control, ease of use in deploying and updating, a central control console, stability, scalability, auto-discovery capabilities, patch management, endpoint detection and response capabilities, intrusion detection module.

The Symantec Global Intelligence Network (GIN) provides threat intelligence and detection across endpoints, email, and web traffic. It has helped organizations reduce downtime, increase productivity, and improve security posture. Symantec Endpoint Security is easy to use, has a flexible administration, and offers more value than expected.

Broadcom

Sample Customers

CBI Health Group, University Honda, VakifBank

Lenovo/Motorola, TruGreen, Covenant Health, Citizens Medical Center

Audio Visual Dynamics, Red Deer Advocate, Asia Pacific Telecom Co. Ltd., Kibbutz Ein Gedi, and AMETEK, Inc.

Buyer's Guide

Morphisec vs. Symantec Endpoint Security

March 2026

Free Report: Morphisec vs. Symantec Endpoint Security

Find out what your peers are saying about Morphisec vs. Symantec Endpoint Security and other solutions. Updated: March 2026.

DOWNLOAD NOW

884,873 professionals have used our research since 2012.

See our Morphisec vs. Symantec Endpoint Security report.

See our list of best Endpoint Protection Platform (EPP) vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.