Cortex XDR by Palo Alto Networks delivers comprehensive endpoint security, integrating well with other systems to offer robust threat detection and real-time protection through AI-driven analytics.
| Product | Market Share (%) |
|---|---|
| Cortex XDR by Palo Alto Networks | 3.8% |
| Microsoft Defender for Endpoint | 10.0% |
| CrowdStrike Falcon | 8.2% |
| Other | 78.0% |
| Type | Title | Date | |
|---|---|---|---|
| Category | Endpoint Protection Platform (EPP) | Sep 11, 2025 | Download |
| Product | Reviews, tips, and advice from real users | Sep 11, 2025 | Download |
| Comparison | Cortex XDR by Palo Alto Networks vs Microsoft Defender for Endpoint | Sep 11, 2025 | Download |
| Comparison | Cortex XDR by Palo Alto Networks vs CrowdStrike Falcon | Sep 11, 2025 | Download |
| Comparison | Cortex XDR by Palo Alto Networks vs SentinelOne Singularity Complete | Sep 11, 2025 | Download |
| Title | Rating | Mindshare | Recommending | |
|---|---|---|---|---|
| CrowdStrike Falcon | 4.3 | 8.2% | 97% | 135 interviewsAdd to research |
| Wazuh | 3.7 | N/A | 80% | 48 interviewsAdd to research |
| Company Size | Count |
|---|---|
| Small Business | 39 |
| Midsize Enterprise | 18 |
| Large Enterprise | 30 |
| Company Size | Count |
|---|---|
| Small Business | 818 |
| Midsize Enterprise | 480 |
| Large Enterprise | 1521 |
Cortex XDR by Palo Alto Networks offers advanced endpoint protection and threat detection through AI and behavior-based analytics. Its user-friendly design simplifies integration with firewalls, delivering multi-layered protection with low resource consumption. Valued for policy management, USB control, and incident correlation, Cortex XDR enhances threat management and real-time threat hunting capabilities. However, users note challenges with third-party integration, reporting, and dashboard automation. Agent performance across operating systems and memory consumption are areas for improvement, alongside reducing false positives and simplifying endpoint management and setup.
What features does Cortex XDR offer?Cortex XDR is crucial in industries requiring robust endpoint protection, such as finance, healthcare, and technology. It supports malware detection, behavioral analysis, and ransomware mitigation across endpoints, including remote work environments, providing comprehensive threat visibility and security policy management. The solution's integration with firewalls and specialized industry requirements enhances security posture in diverse operational settings.
Cortex XDR by Palo Alto Networks was previously known as Cyvera, Cortex XDR, Palo Alto Networks Traps.
CBI Health Group, University Honda, VakifBank
| Author info | Rating | Review Summary |
|---|---|---|
| Cyber Security Manager at Welab bank | 4.5 | As a cybersecurity manager with experience in Cortex XDR by Palo Alto Networks, I value its advanced threat detection and user-friendly GUI. While it offers a good ROI, improvements in sales support and expanded AI features would enhance its effectiveness. |
| Cyber Security Information Security Specialist at MHM Holding GmbH | 4.5 | I've found Cortex XDR effective for advanced threat detection, especially its behavioral engine and logging. It's stable, easy to deploy, integrates well, and offers good ROI, though the NTA pricing could be improved. |
| Pre-Sales Architect at network techlab | 4.5 | I work with Cortex XDR by Palo Alto Networks for its next-gen antivirus and threat prevention. It offers valuable automation and analytics but needs improvements like data loss prevention and multi-tenancy features. Its compliance capabilities enhance cost-saving returns. |
| Technical Specialist at HCL Technologies | 4.5 | I use Cortex XDR in my company to protect clients from unknown malware as an antivirus, EDR, and XDR solution. It excels in threat detection but needs improvement, as new versions sometimes cause CPU usage issues during deployment. |
| Cyber Security Analyst at HALA INFOSEC | 4.0 | We utilize Cortex XDR to monitor network and endpoint security, finding it valuable for its detailed information and ability to connect with host servers, networks, and proxies. It compares favorably with CrowdStrike, though improvements are needed in blocklisting malicious content. |
| Head Of Information Technology at Diha Travels and Tours Limited | 4.5 | I use Cortex XDR for incident detection and response at my company. Its real-time network visibility helps detect threats early, though it could improve in managing alerts and reporting. A built-in compliance framework would enhance its value. |
| Senior Security Consultant at helpag | 5.0 | Our company uses Cortex XDR for endpoint protection and compliance, integrating with Palo Alto's firewall for enhanced visibility. It's effective but needs mandatory network integration and an on-premises option for full XDR benefits and broader vendor compatibility. |
| Sr. Endpoint Security Engineer at iOPEX Technologies | 4.5 | As a tech support engineer working with Cortex XDR, I find the Broker VM feature invaluable. However, feature improvements are needed, especially in malware detection, as slow investigations and occasional misidentifications can frustrate customers and require version changes. |
