No more typing reviews! Try our Samantha, our new voice AI agent.

Sangfor Endpoint Secure vs WatchGuard EPDR comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 9, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Detection and Response (EDR)
5th
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Sangfor Endpoint Secure
Ranking in Endpoint Detection and Response (EDR)
54th
Average Rating
8.2
Reviews Sentiment
7.4
Number of Reviews
11
Ranking in other categories
No ranking in other categories
WatchGuard EPDR
Ranking in Endpoint Detection and Response (EDR)
20th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
38
Ranking in other categories
Endpoint Protection Platform (EPP) (16th)
 

Mindshare comparison

As of November 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, down from 3.8% compared to the previous year. The mindshare of Sangfor Endpoint Secure is 0.9%, up from 0.7% compared to the previous year. The mindshare of WatchGuard EPDR is 1.4%, down from 2.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.8%
WatchGuard EPDR1.4%
Sangfor Endpoint Secure0.9%
Other93.9%
Endpoint Detection and Response (EDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
HD
Cloud Engineer at REDtone Digital Services
Robust security with features like antivirus protection and centralized management, but it may have limitations in supporting migrations from public clouds
While it excels in migrating VMs from on-premises and local infrastructure, it does not provide support for public cloud migrations. Attempting to migrate from public clouds like AWS encountered challenges, and Sangfor's support team clarified that they don't offer assistance for migrations from public cloud environments. It would be much more convenient if the migration tool could be installed directly on the customer's VMs, enabling a smoother migration process to the new infrastructure, with potential restrictions addressed accordingly.
Petri Alhainen - PeerSpot reviewer
Administrator at Sulbana Oy
Balanced endpoint protection has improved forensic visibility and speeds threat investigation
I think there's always something that needs to be improved about WatchGuard EPDR, but I don't have something specific to say that you should do this or that. They are listening to the users, so they are fixing things as they've been found. I don't have any example to give. The pricing is always a thing where you need to be in the line that the balance to get it right is a challenging thing with WatchGuard EPDR. If you have good features, then you can have a little bigger price, but if you just get the balance right, that's important. I haven't used automated incident response in WatchGuard EPDR.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cortex XDR by Palo Alto Networks saves time in various ways, although the user interface is fairly standard."
"Cortex XDR by Palo Alto Networks has given us better endpoint visibility and richer investigation context, allowing us to identify suspicious activity, understand the attack path, and contain potential threats much faster than before."
"Monitoring is most valuable."
"I like that the product has behavior-based detection which offers many benefits over signature-based detection."
"Once you become familiar with it, Cortex XDR by Palo Alto Networks is a more powerful tool and I would say that I prefer it over MDE because it is a stronger tool for me."
"Palo Alto is one of the tech vendors that always provides top-of-the-line products."
"The solution allows us to gain remote access without the user's knowledge and take the necessary actions on the device."
"Traps has drastically reduced our endpoint attack surface via advanced detection capabilities, sandboxing of never before seen programs, and by drastically limiting where executables can launch in the first place."
"The real-time monitoring feature of Sangfor Endpoint Secure is truly real-time, with no delay compared to other solutions."
"The tool's most valuable features are control access, endpoint security, and load balancing of ISPs."
"Sangfor Endpoint Secure has some good policy certificates."
"The user-friendliness of Sangfor Endpoint Secure is particularly impressive. Even with basic technical knowledge, users can easily navigate the system, make changes, and implement updates."
"The tool's AI feature is helpful in endpoint security."
"We use the product for network protection from any malicious threat."
"I like the tool's honeypot feature. Some features include having a honeypot to detect attacks in a certain area. Additionally, there is RDP protection, which means that when we remote into our server or any endpoint, we must enter a password as a second layer of security. It can also integrate with next-generation firewalls."
"It has a quick response time, threat intelligence, cybersecurity features, quick report generation, behavior analysis, dynamic detection, and quarantine features."
"The most valuable feature of the solution is its device control."
"The technical support staff is well trained and very skillful, and I find them to be very supportive."
"The most valuable part of Panda Adaptive Defense 360 is its overall effectiveness as a good and decent security solution, providing comprehensive security which improves protection for devices significantly."
"It prevents our users from circumventing security. Everything is password protected so they can't get into it. They can't uninstall it. They can't do anything."
"We have had a good experience with customer service and support."
"What I appreciate the most about WatchGuard EPDR is that with the managed detection and response system, when there is an alert about the product running, the turnaround time for enabling it is less than two hours."
"The EDR has a high accuracy rate with only a few false positives."
"The patch management module is very important."
 

Cons

"The solution can never really be an on-premises solution based simply on the way it is set up. It needs metadata to run and improve. Having an on-premises solution would cut it off from making improvements."
"Traps doesn't work with McAfee. You need to remove McAfee to install Traps. This is very common, and its nothing that should be an issue. Some antivirus engines recognize Traps as an threat component, so maybe they need to shake hands somewhere."
"The technical support is not very good. I find the process difficult."
"For working with the solution, you only really need a web browser, however, we've found that working on Chrome, for example, is horrible."
"Whenever the tool releases a new version when deploying the product across the organization, I feel like there are some disturbances in the CPU usage after upgrading the tool to the latest version."
"In an upcoming release, the solution could improve by proving hard disk encryption. If it could support this it would be a complete solution."
"The dashboard could use some significant improvement, just making it more useful with more information. It has a limited amount of information right now. It is customizable, but I'd love to see a better out-of-box dashboard."
"It's more focused on network communication. If a customer wants to increase the level of protection and start working with documents, it's impossible to integrate these features into the system. It's more of a communication-oriented system than a content security-oriented system."
"It would be much more convenient if the migration tool could be installed directly on the customer's VMs, enabling a smoother migration process to the new infrastructure, with potential restrictions addressed accordingly."
"There are a few areas for improvement. We have encountered licensing issues on occasion, and sometimes updates don't apply properly."
"It is complicated to establish a tunnel due to technical issues in the VPN system."
"Currently, the tool lacks reporting functionalities."
"Sangfor Endpoint Secure should include healing capabilities."
"I face issues while migrating from Kaspersky to Sangfor Endpoint Secure."
"The interface has too many buttons, making it cluttered."
"Sangfor Endpoint Secure performs poorly."
"Occasionally, we suffer from little bugs that give us the wrong message."
"I'd like to integrate it into my main services."
"The stability could be improved. My teammates who use Panda Security and I have experienced some issues."
"The implementation was difficult."
"It needs improvements in its EDR and its ability to manage all the nodes. I'd like better communication between the console and the nodes, so I don't have to remote into each individual machine that's having an issue with the protection."
"Improvements could be made in terms of how the reporting is structured."
"Their portal is, to me, in need of a lot of work. It's just not very good."
"The solution should have additional endpoint protection."
 

Pricing and Cost Advice

"Every customer has to pay for a license because it doesn't work with what you get from a managed services provider."
"It has a yearly renewal."
"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."
"This is an expensive solution."
"Our customers have expressed that the price is high."
"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."
"It has reasonable pricing for the use cases it provides to the company."
"The pricing is a little high. It is per user per year."
"The product is expensive compared to other vendors."
"We were using Hyper-V. So, we switched to Sangfor because of the pricing."
"The solution is cheap. It is cheaper than other products by 15-20 percent."
"Its "pay as you grow" model offers cost-effectiveness compared to major cloud providers."
"Sangfor Endpoint Secure is not a cheap solution."
"Sangfor Endpoint Secure's pricing is cheap. I rate it seven out of ten."
"Price-wise, Sangfor Endpoint Secure can be considered a competitively priced product in the market as it offers quite low prices compared to other solutions."
"The price is excellent."
"The licensing costs are not too high. We pay about 20 Euros a year. It's a reasonable amount to pay."
"The solution is priced well for what features it provides."
"The solution's pricing is better compared to other products."
"Our licensing fee is 1M Euro per month, so it is about 80 Euro's per user."
"The price of this solution depends on the number of licenses that you are purchasing."
"There is a license needed to use this solution and it is approximately $30 annually."
"Customers need to pay monthly licensing costs for Panda Security Adaptive Defense, which is not expensive."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
921,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Financial Services Firm
15%
Comms Service Provider
13%
Media Company
7%
Outsourcing Company
7%
Comms Service Provider
11%
Outsourcing Company
9%
Computer Software Company
8%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise3
Large Enterprise3
By reviewers
Company SizeCount
Small Business28
Midsize Enterprise8
Large Enterprise2
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
Ask a question
Earn 20 points
What needs improvement with WatchGuard EPDR?
I think there's always something that needs to be improved about WatchGuard EPDR, but I don't have something specific...
What is your primary use case for WatchGuard EPDR?
I'm talking about WatchGuard EPDR, which is endpoint protection. I try to remember if we have them in our system, and...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
Panda Adaptive Defense 360
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Indra, Valea AB, Fineit, Aemcom, Data Solutions INC., Gloucestershire NHS, Golden Star Resources Ltd, Hispania Racing Team, Instituto Dos Museus e da ConserÊo, Escuelas Pias Provincia Emaus, Axiom Housing Association, Municipality of Bjuv, Lesedi Nuclear, Mullsj_ municipality, Eng. skolan Norr AB, Dalakraft AB, Peter Green Haulage Ltd
Find out what your peers are saying about Sangfor Endpoint Secure vs. WatchGuard EPDR and other solutions. Updated: September 2026.
921,028 professionals have used our research since 2012.