If you are considering Cisco XDR, it really delivers the most value when you already have a decent security ecosystem and want centralized visibility plus faster investigations, especially if you are already using Cisco security products. I would rate this product an 8 out of 10.
I believe Cisco XDR is good and I think I can also recommend it to most of the companies to just try it out once to have a POC, just to make sure all the things get under control in a single dashboard. You have to try it once. So far, everything is going well. I gave this product a rating of nine out of ten.
Cybersecurity Analyst at a outsourcing company with 51-200 employees
Real User
Top 5
Mar 21, 2026
Based on feedback from my client, they seem very satisfied with the output of Cisco XDR solution, so I assume they are content. I recommend Cisco XDR to any client that may be interested because I have used a number of Cisco products and have no negative reservations at this point. I would rate this product an 8 out of 10.
In terms of DLP, Cisco XDR is quite useful. We are using a different DLP as well within our organization, so we are not extensively relying upon Cisco XDR for DLP, but it is a good solution to fall back upon. In terms of pricing, it is not the cheapest but it is also not the most expensive compared to other products we have experienced in the past. Cisco XDR is hosted on private cloud. We are typically deployed on AWS and have utilized automation workflows to improve our mean time to respond, reducing it from over 24 hours to less than 16 hours. We prioritize incidents based on its criticality in terms of which devices or environments are affected that we have integrated with this platform. This has definitely helped in prioritizing incidents and ensuring that we have good coverage twenty-four hours a day, seven days a week across business hours and non-business hours by looking at the trend of what incident types occur and how often they occur, as well as what kind of team support is required across multiple shifts during the day and night. The platform helps our SOC team access the platform across the entire shifts. We follow three shifts, and it helps with the shift handover when we transition from the morning shift to the afternoon shift or from the afternoon shift to the night shift. The platform helps seamlessly hand over from the previous analyst in the previous shift to the new analyst in the next shift. My advice to other potential buyers of Cisco XDR would be to always conduct an evaluation or a proof of concept before actually purchasing because each environment is different and while Cisco XDR may be useful in most environments, there are potentially some environments where it may not be useful. It is always good to try before you buy. I would rate this product an eight out of ten.
Cybersecurity Consultant | Managed Infrastructure Services Head | Business Apps and DevOps Head at Blueberry Tech Solutions India Pvt Ltd
Consultant
Top 20
Dec 15, 2025
I mostly use the AI assistance and automation feature for reporting, not for analysis because I do not trust AI for conclusions, only for inputs and reporting, which is how the AI component is utilized. I do use the feature for prioritizing incidents across multiple security controls, but that needs to be configured, as I work mostly at the governance level for information security as a consultant, so the effectiveness depends on how well it is integrated and what the policy and operations are. Cisco XDR streamlines incident response through its functionalities, being top of the stack and comparing well with other providers such as Palo Alto or the recently developed open-source Wazuh, which makes it very good. I compare Cisco XDR with top-of-the-stack options available such as Palo Alto, Sophos XDR, and Secureye, an Indian company, and it lines up with all of them, providing a lot of other devices and software with Cisco's easy integration, making it one of the best for visibility. I would definitely suggest Cisco XDR for enterprises and MSMEs who have a specified budget to fortify their defenses, and it stacks up well against other offerings in the market, naming CrowdStrike as somewhat better due to its knowledge base and R&D, with Tanium ranking just under it, making Cisco XDR probably number three in the XDR market. I rate this review overall as a seven out of ten.
The impact of AI assistance and Cisco XDR on productivity is massive. We're no longer tied to just our reporting that was created for either looking at information specifically requested, or in response to a past event that we knew about. Now, security administrators can just go look and chat with the bot to get back a much more instant response and almost a live view of the data. They can navigate through breadcrumbs to get to the details of an event without causing hours of delays for someone to dig through that data or involve someone more conversationally versed in specific hardware products to look at the data. The feature for prioritizing incidents across multiple security controls in Cisco XDR has affected my incident management process significantly. Even on the vendor side, as a traditional IT shop, we have silos of excellence where all these teams don't necessarily work together until there is an incident. Having our security and specified incident response leads from each team be able to get this data quickly allows security to determine if an incident is a mistake, a script triggering alarms, or just a bad network change. My experience with using Cisco XDR to evaluate gaps in security coverage has been quite beneficial. Giving our security team and the first few end-user leads that own specific systems access to the AI chatbot has been crucial. We did reviews to determine what they are asking of the bot, how often they prompt it, and the types of responses they are getting back. This helped us identify that many of the teams in the middle that own connecting pieces did not realize that the security team was more responsive and concerned about certain issues than they thought. My advice for other organizations considering Cisco XDR is to evaluate if they're already using a platform that meets all their needs. Think about what additional capabilities you desire, and envision what could be possible if everyone had access to pertinent data. Engaging directly with someone at Cisco to demonstrate how XDR can meet those needs is crucial to instill excitement and clarity among teams about data, workflows, and security. On a scale of 1-10, I rate Cisco XDR a 9.
Cisco XDR streamlines incident response through its provided functionalities because, based on the clarity of the dashboard and the granularity, it works effectively. I would rate Cisco XDR overall a nine out of ten, based on the price point.
Some alerts before incidents occur would be a beneficial AI feature. Customers expect alerts for potential problems so they can take preventive measures. I rate Cisco XDR as eight out of ten. Our experience indicates that additional features or licensing options could enrich the overall experience.
Cisco XDR enhances threat detection and streamlined security operations through centralized visibility and integration with multiple security tools. It reduces alert fatigue and offers automated incident response, providing a flexible cybersecurity platform.Cisco XDR is designed for advanced threat detection and automated response. With AI-driven analytics, it supports proactive security measures across networks and devices. Users benefit from customizable reporting, dashboards, and the...
If you are considering Cisco XDR, it really delivers the most value when you already have a decent security ecosystem and want centralized visibility plus faster investigations, especially if you are already using Cisco security products. I would rate this product an 8 out of 10.
I believe Cisco XDR is good and I think I can also recommend it to most of the companies to just try it out once to have a POC, just to make sure all the things get under control in a single dashboard. You have to try it once. So far, everything is going well. I gave this product a rating of nine out of ten.
Based on feedback from my client, they seem very satisfied with the output of Cisco XDR solution, so I assume they are content. I recommend Cisco XDR to any client that may be interested because I have used a number of Cisco products and have no negative reservations at this point. I would rate this product an 8 out of 10.
In terms of DLP, Cisco XDR is quite useful. We are using a different DLP as well within our organization, so we are not extensively relying upon Cisco XDR for DLP, but it is a good solution to fall back upon. In terms of pricing, it is not the cheapest but it is also not the most expensive compared to other products we have experienced in the past. Cisco XDR is hosted on private cloud. We are typically deployed on AWS and have utilized automation workflows to improve our mean time to respond, reducing it from over 24 hours to less than 16 hours. We prioritize incidents based on its criticality in terms of which devices or environments are affected that we have integrated with this platform. This has definitely helped in prioritizing incidents and ensuring that we have good coverage twenty-four hours a day, seven days a week across business hours and non-business hours by looking at the trend of what incident types occur and how often they occur, as well as what kind of team support is required across multiple shifts during the day and night. The platform helps our SOC team access the platform across the entire shifts. We follow three shifts, and it helps with the shift handover when we transition from the morning shift to the afternoon shift or from the afternoon shift to the night shift. The platform helps seamlessly hand over from the previous analyst in the previous shift to the new analyst in the next shift. My advice to other potential buyers of Cisco XDR would be to always conduct an evaluation or a proof of concept before actually purchasing because each environment is different and while Cisco XDR may be useful in most environments, there are potentially some environments where it may not be useful. It is always good to try before you buy. I would rate this product an eight out of ten.
As of now, there are no gaps identified, so I am not able to provide further advice. The review rating for Cisco XDR is nine out of ten.
I mostly use the AI assistance and automation feature for reporting, not for analysis because I do not trust AI for conclusions, only for inputs and reporting, which is how the AI component is utilized. I do use the feature for prioritizing incidents across multiple security controls, but that needs to be configured, as I work mostly at the governance level for information security as a consultant, so the effectiveness depends on how well it is integrated and what the policy and operations are. Cisco XDR streamlines incident response through its functionalities, being top of the stack and comparing well with other providers such as Palo Alto or the recently developed open-source Wazuh, which makes it very good. I compare Cisco XDR with top-of-the-stack options available such as Palo Alto, Sophos XDR, and Secureye, an Indian company, and it lines up with all of them, providing a lot of other devices and software with Cisco's easy integration, making it one of the best for visibility. I would definitely suggest Cisco XDR for enterprises and MSMEs who have a specified budget to fortify their defenses, and it stacks up well against other offerings in the market, naming CrowdStrike as somewhat better due to its knowledge base and R&D, with Tanium ranking just under it, making Cisco XDR probably number three in the XDR market. I rate this review overall as a seven out of ten.
The impact of AI assistance and Cisco XDR on productivity is massive. We're no longer tied to just our reporting that was created for either looking at information specifically requested, or in response to a past event that we knew about. Now, security administrators can just go look and chat with the bot to get back a much more instant response and almost a live view of the data. They can navigate through breadcrumbs to get to the details of an event without causing hours of delays for someone to dig through that data or involve someone more conversationally versed in specific hardware products to look at the data. The feature for prioritizing incidents across multiple security controls in Cisco XDR has affected my incident management process significantly. Even on the vendor side, as a traditional IT shop, we have silos of excellence where all these teams don't necessarily work together until there is an incident. Having our security and specified incident response leads from each team be able to get this data quickly allows security to determine if an incident is a mistake, a script triggering alarms, or just a bad network change. My experience with using Cisco XDR to evaluate gaps in security coverage has been quite beneficial. Giving our security team and the first few end-user leads that own specific systems access to the AI chatbot has been crucial. We did reviews to determine what they are asking of the bot, how often they prompt it, and the types of responses they are getting back. This helped us identify that many of the teams in the middle that own connecting pieces did not realize that the security team was more responsive and concerned about certain issues than they thought. My advice for other organizations considering Cisco XDR is to evaluate if they're already using a platform that meets all their needs. Think about what additional capabilities you desire, and envision what could be possible if everyone had access to pertinent data. Engaging directly with someone at Cisco to demonstrate how XDR can meet those needs is crucial to instill excitement and clarity among teams about data, workflows, and security. On a scale of 1-10, I rate Cisco XDR a 9.
I would rate Cisco XDR a nine out of ten. The only thing that could make it a ten is better licensing. That's my only complaint.
Cisco XDR streamlines incident response through its provided functionalities because, based on the clarity of the dashboard and the granularity, it works effectively. I would rate Cisco XDR overall a nine out of ten, based on the price point.
I'd rate Cisco XDR a nine out of ten overall.
Some alerts before incidents occur would be a beneficial AI feature. Customers expect alerts for potential problems so they can take preventive measures. I rate Cisco XDR as eight out of ten. Our experience indicates that additional features or licensing options could enrich the overall experience.
I rate Cisco XDR as eight out of ten. They need to improve their pricing strategy for a higher rating.