No more typing reviews! Try our Samantha, our new voice AI agent.

OpenText Core Endpoint Protection​ vs ThreatLocker Zero Trust Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 17, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Protection Platform (EPP)
4th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
115
Ranking in other categories
Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (4th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
OpenText Core Endpoint Prot...
Ranking in Endpoint Protection Platform (EPP)
35th
Average Rating
7.8
Reviews Sentiment
5.8
Number of Reviews
31
Ranking in other categories
No ranking in other categories
ThreatLocker Zero Trust Pla...
Ranking in Endpoint Protection Platform (EPP)
5th
Average Rating
9.2
Reviews Sentiment
7.1
Number of Reviews
82
Ranking in other categories
Network Access Control (NAC) (4th), Advanced Threat Protection (ATP) (4th), Application Control (1st), ZTNA as a Service (5th), ZTNA (5th), Ransomware Protection (1st)
 

Mindshare comparison

As of August 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.9%, up from 3.7% compared to the previous year. The mindshare of OpenText Core Endpoint Protection​ is 1.7%, up from 0.8% compared to the previous year. The mindshare of ThreatLocker Zero Trust Platform is 1.3%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.9%
ThreatLocker Zero Trust Platform1.3%
OpenText Core Endpoint Protection​1.7%
Other93.1%
Endpoint Protection Platform (EPP)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
reviewer2584380 - PeerSpot reviewer
vCIO At Grove Networks Inc. at a computer software company with 11-50 employees
Improving threat detection is critical for enhanced protection
We use Webroot Business Endpoint Protection as a NextGen antivirus solution for our clients. It's included in the contract we have with our clients as a cost-effective option for antivirus protection Webroot Business Endpoint Protection is cost-effective for rolling it out to all of our clients,…
Santo Joy - PeerSpot reviewer
Head Of Cyber Security at a outsourcing company with 201-500 employees
Security controls have been strengthened with granular application, ringfencing, and access policies
The features of ThreatLocker Zero Trust Endpoint Protection Platform that I like the most are the Ringfencing, elevation control, storage control, and application whitelisting functionality. For examples of how these features benefit my company, we were looking for a solution across various vendors to actually implement application whitelisting controls. ThreatLocker's agent, which is very lightweight and does not use much CPU or RAM, helped us achieve that solution. Ringfencing was an add-on that ticked off a lot of Australian framework security controls, which is the reason we chose it. My impression of the allowlisting feature in terms of managing which software, scripts, and libraries run on my devices is that ThreatLocker's community page has a lot of information around this, which is very helpful. Not only that, the Cyber Hero support that ThreatLocker provides gives us insights and best practices, helping us achieve that solution and guiding us to the right platform. The impact of Ringfencing on controlling the behavior of approved applications has been a big winner for us because it is something that many other platforms do not provide as a functionality. Having that allowed us to identify what applications talk to each other, which is something that many other platforms do not do. The network control feature impacts my ability to manage network traffic across my endpoints and servers. We have not used this widely across all our partners, but wherever required, we use it. It has been an easy solution for those customers to get that control implemented. The elevation feature's role in facilitating just-in-time administrative access for approved applications shows that elevation control helps in many use cases involving remote control platforms, door usage, and security system platforms that require local admins. There are many solutions that provide this functionality, but the licensing cost seems to be expensive, and it also adds another solution into the mix. Rather than doing that, we try to use ThreatLocker Zero Trust Endpoint Protection Platform to achieve that control. Regarding the storage control feature, I have used it. The primary function is USB blocking, which is very widely adopted, and also just locking down and allowing certain users to access certain file locations helps us there. When it comes to enforcing policy-driven access over various storage devices, it depends on the business risk adapted by the companies that we support, but generally the use case is USB and external storage devices where companies know that is a risk, but they do not have appropriate solutions. There are EDR platforms that claim to do this, but ThreatLocker Zero Trust Endpoint Protection Platform does it at an advanced level. My assessment of the efficiency of the real-time threat intelligence and category controls employed by Web Control in blocking malicious and non-compliant sites leads me to think that Web Control is another functionality within ThreatLocker Zero Trust Endpoint Protection Platform that is an add-on on top of the current set. That is another solution that we use based on what is required for the company, but again, that is not widely adapted yet for our partners.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The level of security I get for my endpoints and servers is extremely valuable."
"Palo Alto is one of the tech vendors that always provides top-of-the-line products."
"Since they've done their most recent update, the ease to isolate endpoints is valuable. If we find one where there is a virus on it, we can easily isolate it. We don't even have to contact the user. We don't have to manually take them off the network. We can easily isolate them."
"It is a simple platform to use."
"Monitoring is most valuable."
"If the user leaves our premises or network, Palo Alto Traps will still be on that endpoint and will still apply our policies."
"We think that this product will help us grow, as it meets our needs currently and we can grow with it over time."
"The tool is designed to scale for large enterprises and handle large volumes of data."
"Webroot pioneered integration of novel concepts in endpoint protection."
"Webroot Business Endpoint Protection is very scalable."
"Webroot's tech support is pretty good; they've given me some pointers."
"I like that Webroot is very lightweight. It didn't bog down the machine, and more importantly, it had heuristics artificial intelligence to some degree. It wasn't like full-blown artificial intelligence, but something where you have one endpoint recognizing issues because it maintains a cloud database. If one client recognizes a threat, it would add it to the database, and almost immediately, every agent in the world would also know about that threat. That was very appealing to us. However, now it's becoming commonplace, whereas ventures like Symantec and McAfee were based more on the traditional model of definition and updates, and we were always falling behind. Webroot also has pretty good technical support."
"It monitors traffic and keeps us from getting ransomware or other viruses."
"We've not had any issues with scalability. If an organization needs to expand, they can do so quite easily."
"My advice about this product is that it is a very good solution and offers a stable and trusted software that runs smoothly and is easy to deploy."
"The most valuable aspect of Webroot Business Endpoint Protection is that I have never gotten malware with it."
"The control list is the best feature. For our company, it provides value to our customers since they can see we are improving our security."
"ThreatLocker Zero Trust Endpoint Protection Platform has helped my company save on operational costs or expenses by freeing up a lot of time on the IT side of the team."
"I would rate it a ten out of ten."
"Feature-wise, the learning mode and the fact that it's blocking everything are the most valuable. I don't see why more companies don't use the type of product."
"Since implementing ThreatLocker Zero Trust Platform, I have significantly reduced the risk of malware and ransomware execution by blocking several unauthorized applications by default, reducing the number of users with local administrator privileges, and overall reducing my attack surface, improving compliance, and providing better visibility."
"My impression of the allowlisting feature in ThreatLocker Zero Trust Endpoint Protection Platform for managing which software, scripts, and libraries run on my devices is that it is awesome."
"The application whitelisting feature allows us to block and manage approved applications effectively. It ensures that no one can install an application on our systems unless it is approved by me, which is very efficient."
"It is a comprehensive platform that allows you to do a lot of things."
 

Cons

"We would also like to have advanced tech protection and email scanning."
"Basically, they don't provide customer support tools just to investigate the logs."
"The solution should enhance the ADR and reporting."
"The onboarding process could be better."
"If they had pulse rate detection, it would be better."
"I feel that it should not be a licensed activity because a feature should allow us to see applications running on end devices."
"This product has not improved my organization - in fact, we are in the process of moving back to another product as a result of Cortex's horrible impact on system performance."
"Based on our experience so far, its implementation is quite complex."
"The only complaint I have with Webroot is its inability to prevent UoD phishing and its inability to check against bots or block anti-attacks. Plus the URL server is in zero-definition."
"Webroot is very reactionary. It waits until the threat is active within memory to try and detect it. They need better pre-execution detection and prevention."
"It needs to improve the problems with the faster connection, and have a huge reduction in false positives."
"There is one thing that is deplorable with the product that I would change as soon as I found a better one. However, the reports are worthless."
"I believe that Webroot Business Endpoint Protection should offer a more modern UI."
"We need to have a stronger defense against CryptoLock and other attackers."
"There should be a Webroot Business Endpoint Protection mobile app."
"They should provide more information on the type of cyber attacks."
"ThreatLocker would benefit from incorporating an antivirus feature or comprehensive 24-hour log monitoring, a valuable enhancement for both business and enterprise-level users."
"From a reporting perspective, enhancing the ability to customize reports would be beneficial."
"Some reporting areas need improvement. We need to generate more reports."
"The user experience could be improved. Most complaints we get are based on users wanting certain functionality."
"Scalability is challenging, not due to the platform. Scaling ThreatLocker Zero Trust Endpoint Protection Platform usage requires dedicated resources for maintenance."
"A valuable addition to ThreatLocker would be a column in the audit page displaying a VirusTotal score for each file."
"I'm not sure if I'm using it wrong; however, I find that I have to babysit it too much."
"One area I see for improvement is in the visibility of support tickets within the ThreatLocker ticketing system."
 

Pricing and Cost Advice

"We pay about $50,000 USD per year for a bundle that includes Cortex XDR."
"Our license will require renewal in August, after which the maintenance will continue as usual."
"I am using the Community edition."
"It has reasonable pricing for the use cases it provides to the company."
"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."
"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."
"Its pricing is kind of in line with its competitors and everybody else out there."
"The price of the product is not very economical."
"From a pricing standpoint, I would rate it a four out of five."
"I rate the product's pricing a three on a scale of one to ten, where one is cheap, and ten is expensive. There are no costs in addition to the product's standard licensing fees."
"The solution is very cost-effective."
"It is relatively cheap."
"The pricing is high."
"Work on a price tier plan."
"Webroot is less expensive than SentinelOne."
"Get a trial, then a multi-year license."
"Although the pricing seems good, there have been inconsistencies in contract negotiations."
"Others say ThreatLocker is too expensive, and I tell them they're dreaming. It's well-priced for what it does."
"I believe ThreatLocker's pricing model is fair and flexible, allowing account managers to offer customized deals based on our specific needs."
"The price of ThreatLocker Allowlisting is reasonable in the market, but it is not fantastic."
"The pricing works fine for me. It's very reasonably priced."
"I can't complain. Cheaper would always be nice, but I think it's reasonable compared to other software in the cybersecurity market."
"Considering what this product does, ThreatLocker is very well-priced, if not too nicely priced for the customer."
"Its price is fair. They have added some additional things to it beyond allowlisting. They are up-charging for them, but in terms of the value we get and the way it impacts us, we get a bang for our buck with ThreatLocker than a lot of our other security tools."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
909,948 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
12%
Outsourcing Company
10%
Comms Service Provider
10%
Financial Services Firm
10%
Construction Company
13%
Outsourcing Company
9%
Financial Services Firm
8%
Comms Service Provider
8%
Computer Software Company
11%
Financial Services Firm
11%
Manufacturing Company
11%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise21
Large Enterprise54
By reviewers
Company SizeCount
Small Business35
Midsize Enterprise2
Large Enterprise2
By reviewers
Company SizeCount
Small Business56
Midsize Enterprise14
Large Enterprise13
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Webroot Business Endpoint Protection?
Webroot Business Endpoint Protection is probably on the cheaper side, so I would rate their pricing a one or a two ou...
What needs improvement with Webroot Business Endpoint Protection?
Webroot Business Endpoint Protection needs to improve its ability to detect threats. It does not do what it's adverti...
What is your primary use case for Webroot Business Endpoint Protection?
We use Webroot Business Endpoint Protection as a NextGen antivirus solution for our clients. It's included in the con...
What is your experience regarding pricing and costs for ThreatLocker Allowlisting?
My experience with pricing, setup cost, and licensing for ThreatLocker Zero Trust Platform is that the pricing is rea...
What needs improvement with ThreatLocker Allowlisting?
I would suggest adding an AI-based policy recommendation feature to ThreatLocker Zero Trust Platform because we have ...
What is your primary use case for ThreatLocker Allowlisting?
Our main use case for ThreatLocker Zero Trust Platform is to provide endpoint security and to control each and every ...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Webroot SecureAnywhere Business Endpoint Protection
Protect, Allowlisting, Network Control, Ringfencing
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Mytech Partners
Information Not Available
Find out what your peers are saying about OpenText Core Endpoint Protection​ vs. ThreatLocker Zero Trust Platform and other solutions. Updated: August 2026.
909,948 professionals have used our research since 2012.