SanerNow CyberHygiene Platform vs Symantec Endpoint Detection and Response comparison

SanerNow CyberHygiene Platform vs. Symantec Endpoint Detection and Response

Download the complete report

Helped 885,376 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of March 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of SanerNow CyberHygiene Platform is 0.4%, up from 0.1% compared to the previous year. The mindshare of Symantec Endpoint Detection and Response is 0.7%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.4%
SanerNow CyberHygiene Platform	0.4%
Symantec Endpoint Detection and Response	0.7%
Other	95.5%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

JAN MICHAEL UY

Information Technology Supervisor at DMCI Homes, Inc.

Can automate updates and manage software licenses more effectively

Our team uses the SanerNow CyberHygiene Platform for threat detection, focusing on features like vulnerabilities and asset exposure. The asset exposure feature is packaged with software licenses and machines. We get the latest updates and patches for Windows workstations and applications for remediation. We can automate these updates, which greatly improves our previous manual and scripting-based tools. Before, we struggled with setting policies and making changes to workstations. Now, we can automate updates and manage software licenses more effectively. We monitor who's using various licenses like Office, CAD, Visio, and Lumion.

Read full review

Hamid Harroud

IT Director at Al Akhawayn University

A highly stable and affordable solution for detecting and preventing security threats

The solution needs to provide better integration. We may receive things from email, network, or the machine itself. So we need a centralized system to get alerts or messages which are not available in the product. The solution must provide features to centralize the alerts received. It should provide integration with other Symantec products.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"One of the things that I enjoy the most is using policy extensions. It's like having host firewalls to control USB connections. I think it's a wonderful tool to restrict use when connecting to our computers. Another important tool is Home Insights. That is an add-on to the Cortex solution. I like that because we can see all the vulnerabilities in the environment and control what assets are connected to our network."

"We switched because there were a lot of added features with Palo Alto that Check Point didn't have, and it was an upgrade for us."

"The product's most valuable features are massive user and feature intelligence exploit detection."

"My advice for anybody who is considering Cortex XDR is that it is a complete solution, and has very good features."

"Being a cloud solution it is very flexible in serving internal and external connections and a broad range of devices."

"It can automatically correlate events and logs, which is very helpful for an IT administrator. It can correlate different kinds of malware activities over a network, agent, or host system. You do not need to do it manually. It is a good feature. It is also a user-friendly solution. We have deployed it on the cloud because our space does not provide any flexibility for on-premises deployment, but Palo Alto has added some flexibility to install it on-premises. It must be like the same Cortex XDR agent for all the VPN services, web filtering services, and everything else."

"The tool's use cases are relevant to security."

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."

More Cortex XDR by Palo Alto Networks pros

"Although it is, in fact, a complete vulnerability management solution, the most valuable feature is the patch management functionality. Most of our customers give preference to this tool over other tools when it comes to patch management."

"Our team uses the SanerNow CyberHygiene Platform for threat detection, focusing on features like vulnerabilities and asset exposure. The asset exposure feature is packaged with software licenses and machines. We get the latest updates and patches for Windows workstations and applications for remediation. We can automate these updates, which greatly improves our previous manual and scripting-based tools."

"Symantec Endpoint Detection and Response is stable."

"IPS and the user interface are good features."

"Symantec Endpoint Detection and Response is used for the protection of endpoints."

"I have had absolutely no problem with using this solution, it really works well."

"The solution is stable."

"The solution has great blocking features."

"The Detection vulnerability is very effective and distinguishes Symantec Endpoint Detection and Response from its competitors."

"In Symantec Endpoint Detection and Response, the most valuable features are threat hunting and that customers can gather logs from multiple computers and servers in one place."

More Symantec Endpoint Detection and Response pros

Cons

"Being able to filter the events to see those that are related to the actual alert would save time spent by the engineer."

"There are some third-party solutions that are difficult to integrate with, which is something that can be improved."

"I think sometimes Cortex XDR agent automatically stops event capturing from the device, and then even the dashboard does not get any notifications from the agent."

"Impact on system performance is horrible, adding a lot of delays for users."

"However, if you do not have Palo Alto in your environment, you are paying these additional services just for Cortex XDR by Palo Alto Networks, so it is not a cost-effective solution."

"In terms of areas of improvement, we have not completed our review of the product. We're also looking at other products. So, it's a little bit hard to tell what could be different because we have not completed the review of this product, but based on our experience so far, its implementation is quite complex."

"When it comes to core analysis, and security analysis, Cortex needs to provide more information."

"Based on our experience so far, its implementation is quite complex."

More Cortex XDR by Palo Alto Networks cons

"SanerNow CyberHygiene Platform needs to incorporate more documentation."

"SanerNow has good integration with the more well known ITSM tools, but at the same time there are many other ITSM (IT Service Management) tools available in the market, including local tools here in India, and I'm not sure how SanerNow plans to integrate with them all out of the box."

"I think we have experienced some technical issues because the company focuses mainly on bigger clients. Also, sometimes the solution fails to detect zero-day attacks, so that feature needs some enhancement because it is lacking compared to other solutions."

"It should be easier to deploy Symantec's client for end-users."

"The unpredictability of the pricing is a cause of concern."

"Since Broadcom took over, we have not been satisfied by the way they are handling the end user's query or end-user support."

"A significant deterioration in customer support."

"One potential area for improvement in Symantec EDR is the reporting engine."

"It would be beneficial to have more integration and compatibility with other platforms."

"They need to improve their cloud presence."

More Symantec Endpoint Detection and Response cons

Pricing and Cost Advice

"The tool's price is moderate."

"The pricing is a little bit on the expensive side."

"The price of the product is not very economical."

"It has reasonable pricing for the use cases it provides to the company."

"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."

"It is "expensive" and flexible."

"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."

"Our customers have expressed that the price is high."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"As with several other solutions such as Microsoft MECM and SCCM, the licensing for SanerNow involves per-device pricing for each kind of product or service on offer."

"The pricing is reasonable - we paid about 2.5 million for 3,500 nodes."

"Of late, because of the Broadcom purchase, its price has been increasing."

"It's a yearly subscription."

"We pay around $100,000 for 5000 licenses every year."

"The product is cheap."

"The price is really high and it should be lower."

"The price is reasonable."

"Symantec Endpoint Detection and Response is expensive."

"We have a yearly subscription, and the pricing is fair."

More Symantec Endpoint Detection and Response pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

885,376 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

13%

Manufacturing Company

Computer Software Company

Financial Services Firm

Outsourcing Company

14%

Computer Software Company

Retailer

Real Estate/Law Firm

Financial Services Firm

Manufacturing Company

Comms Service Provider

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	47

No data available

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	7
Large Enterprise	9

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What is your experience regarding pricing and costs for SanerNow?

The pricing is reasonable - we paid about 2.5 million for 3,500 nodes.

What needs improvement with SanerNow?

SanerNow CyberHygiene Platform needs to incorporate more documentation.

What is your primary use case for SanerNow?

We use the tool for patch, application, and vulnerability management.

What is your experience regarding pricing and costs for Symantec Endpoint Detection and Response?

I am not aware of the pricing details, as that falls under the management's responsibility.

What needs improvement with Symantec Endpoint Detection and Response?

While the prices for technical issues in Symantec Endpoint Detection and Response are good, as a partner of Symantec,...

What is your primary use case for Symantec Endpoint Detection and Response?

Different companies such as banks and local government in Poland use Symantec Endpoint Detection and Response because...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 9% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Microsoft Configuration Manager vs SanerNow CyberHygiene Platform

Compared 7% of the time

Qualys VMDR vs SanerNow CyberHygiene Platform

Compared 7% of the time

Kaspersky Anti-Targeted Attack Platform vs SanerNow CyberHygiene Platform

Compared 5% of the time

Red Canary vs SanerNow CyberHygiene Platform

Compared 5% of the time

BigFix vs SanerNow CyberHygiene Platform

Compared 5% of the time

More SanerNow CyberHygiene Platform Competitors

Kaspersky Endpoint Detection and Response Expert vs Symantec Endpoint Detection and Response

Compared 7% of the time

CrowdStrike Falcon vs Symantec Endpoint Detection and Response

Compared 7% of the time

Microsoft Defender for Endpoint vs Symantec Endpoint Detection and Response

Compared 7% of the time

Trellix Endpoint Security Platform vs Symantec Endpoint Detection and Response

Compared 6% of the time

Kaspersky Endpoint Security Cloud vs Symantec Endpoint Detection and Response

Compared 6% of the time

More Symantec Endpoint Detection and Response Competitors

Product Reports

Cortex XDR by Palo Alto Networks

Download Cortex XDR by Palo Alto Networks product report

Download SanerNow CyberHygiene Platform product report

Vulnerability Management

February 2026

Symantec Endpoint Detection and Response

Download Symantec Endpoint Detection and Response product report

Symantec Endpoint Detection and Response report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

SecPod SanerNow, SanerNow RP

No data available

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

SecPod’s SanerNow CVEM prevents cyberattacks. It is a fully integrated, continuous, & automated platform designed to help enterprise IT Security Teams overcome security risks posed by vulnerabilities and misconfigurations. The solution offers seven modules driven by one agent & can be operationalized through an integrated cloud console.

SanerNow Continuous Vulnerability & Exposure Management (CVEM) platform offers an innovative approach to cyber-attack prevention and attack surface management.

SanerNow, with its CVEM capabilities, offers a new outlook on cybersecurity by evaluating enterprise IT infrastructure from a weakness perspective.

By integrating seven modules in one platform, the solution offers a unified approach to tackle IT infrastructure weaknesses - from scanning & detecting vulnerabilities & misconfigurations, asset exposure management, risk prioritization, patch management, endpoint management, and compliance management.

The seven modules are:

SanerNow AE: Discover and monitor usage of hardware and software assets in your IT network, manage licenses and more, daily.

SanerNow CPAM: Continuous assessment of 70+ anomalies on 2000+ data points of infrastructure/posture to detect outliers, trends, and security control deviations.

SanerNow VM: Detect, assess, and prioritize vulnerabilities on devices using industry’s fastest scanner & world’s largest security intelligence library of 160,000+ checks.

SanerNow CM: Detect and fix misconfigurations to harden systems and comply with regulatory standards or custom policies.

SanerNow RP: Prioritize risk of vulnerabilities, misconfigurations, and other weaknesses, remediate effectively.

SanerNow PM: Integrated patch management to automatically deploy patches for 30+ version of Windows, Linux, Mac OSs and 400+ third-party applications.

SanerNow EM: Get complete visibility into your endpoints and use 100+ security controls for software deployment, system tune-up, application & device control, and more.

The platform offers infrastructure inventory visibility, network anomaly normalization, detection, prioritization, remediation & system hardening of endpoints across every infrastructure layer.

It improves risk visibility beyond software vulnerabilities, expanding the scope of vulnerability management by monitoring more than 100 endpoint health controls, deploying/uninstalling software system health monitoring, eliminating rogue processes and applications, identifying malicious connections and devices, applying system-level security controls, system tuning, fix deviations and anomalies and building queries to get instant visibility to security risks.

Secpod Technologies

Symantec Endpoint Detection and Response (EDR) is a powerful security solution designed to help organizations proactively detect, investigate, and mitigate advanced threats across their endpoint environments. As part of Broadcom's cybersecurity portfolio, Symantec EDR provides comprehensive visibility into endpoint activities, enabling security teams to quickly identify and respond to threats that evade traditional defenses.

Symantec EDR leverages machine learning, behavioral analysis, and global threat intelligence from Symantec's vast network to detect sophisticated threats, including zero-day attacks, ransomware, and advanced persistent threats (APTs). This allows organizations to identify malicious activities early and respond swiftly to mitigate potential damage. The solution offers automated response options that enable security teams to contain and remediate threats quickly.

Symantec EDR provides detailed forensic capabilities, allowing security analysts to dive deep into endpoint data, investigate incidents thoroughly, and understand the scope and impact of attacks. Features such as timeline analysis, incident graphing, and the ability to isolate endpoints enhance investigative efforts and support effective remediation strategies.

With its centralized management console, Symantec EDR offers visibility across the entire endpoint environment, regardless of the operating systems or whether endpoints are on-premise or remote. Symantec EDR seamlessly integrates with other Symantec security solutions, enhancing its detection capabilities and enabling a unified approach to threat management. Its scalable architecture ensures that businesses of all sizes can benefit from its advanced security features without compromising performance.

Quickly discover and resolve threats with deep endpoint visibility and superior detection analytics, reducing mean time to remediation. Overcome cyber security skills shortages and streamline SOC operations with extensive automation and built-in integrations for sandboxing, SIEM, and orchestration.

Fortify security teams with the unmatched expertise and global scale of Symantec Managed Endpoint Detection and Response services.
Roll out Endpoint Detection and Response (EDR) across Windows, macOS, and Linux devices using Symantec Endpoint Protection (SEP)-integrated EDR or a dissolvable agent.

Broadcom

Sample Customers

CBI Health Group, University Honda, VakifBank

Siemens, Aruba, SironLabs, POS Aviation, Kotak, Kaizen Automotive, Amagi, McNeilus Steel, Claremont, Glassbeam, Marlabs, Amazon Web Services

Information Not Available

SanerNow CyberHygiene Platform vs. Symantec Endpoint Detection and Response