No more typing reviews! Try our Samantha, our new voice AI agent.

Bitdefender GravityZone EDR vs Lookout comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Detection and Response (EDR)
6th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
112
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Extended Detection and Response (XDR) (4th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Bitdefender GravityZone EDR
Ranking in Endpoint Detection and Response (EDR)
17th
Average Rating
8.4
Reviews Sentiment
6.3
Number of Reviews
62
Ranking in other categories
No ranking in other categories
Lookout
Ranking in Endpoint Detection and Response (EDR)
52nd
Average Rating
7.6
Reviews Sentiment
7.1
Number of Reviews
3
Ranking in other categories
Threat Intelligence Platforms (TIP) (26th), Mobile Threat Defense (3rd)
 

Mindshare comparison

As of June 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.5%, down from 4.0% compared to the previous year. The mindshare of Bitdefender GravityZone EDR is 1.7%, down from 2.4% compared to the previous year. The mindshare of Lookout is 0.8%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.5%
Bitdefender GravityZone EDR1.7%
Lookout0.8%
Other94.0%
Endpoint Detection and Response (EDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
HarshBhardiya - PeerSpot reviewer
SOC Engineer at a outsourcing company with 10,001+ employees
Provides detailed event investigation and endpoint control but needs better Mac support and UI improvements
I find the advanced behavioral analytics feature in Bitdefender GravityZone EDR a little gimmicky, as I don't usually find much use for it. The advanced behavioral analytics feature needs to be optimized to be more user-friendly and easier to work with. We don't specifically look for the customizable dashboards within Bitdefender GravityZone EDR; rather, we get the logs on our SIEM solution, QRadar, where we have created the dashboards. We also have Tableau and Power BI, so we don't utilize any dashboards on the EDR front. I would like to optimize the incident response area as well, especially when comparing my experience with CrowdStrike, which is relatively more responsive and easier to navigate when there are multiple hosts involved. Other areas of improvement for Bitdefender GravityZone EDR include its lack of support for Mac devices.
DB
IT Manager at NHS Trust
Enhanced mobile security with visibility into app and website usage, but installation challenges remain
We use Lookout for mobile devices, such as phones It has reduced our risk around mobile devices. I like the security features and being able to see what apps and websites people are using. There is nothing we have come across that we've desired. We have been using Lookout for one year. The…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"My advice for others looking into using Cortex is that it is very easy to use and very useful for the customer environment, whether it's a public or private one."
"Automation and playbooks have helped me significantly, as Cortex Xnor's playbooks predefine the workflow of the automation, such as response processes, alert triggering, and enriching the context, efficiently detecting and blocking malicious attacks with firewalls while eliminating workload and speeding responses for next-generation operations."
"There has been a significant reduction of approximately 70% to 80% in our internal MTTR and MTTD metrics, now around five to eight minutes whereas previously it was hours, which has helped tremendously."
"The best feature of Cortex XDR by Palo Alto Networks is that it collects logs from different sections such as the endpoint, the network, and the cloud, making it easy to investigate alerts, collect some of the investigation packages related to the infected machines, and provide live response."
"Cortex is the best tool for endpoint detection, and I have used it to verify hashes or domains to identify malicious activity, trigger playbooks that automate and gather endpoint logs, block malicious processes, and update incident tickets, showcasing end-to-end processes with automation in investigation and reducing the analysis workflow."
"The most valuable features are the fact that it was running in the background and it would intercept any weird stuff, and the fact that it would send things directly to the cloud for sandboxing. It's quite practical."
"But overall, when we speak about security and protection, they are one of the top providers."
"The tool is designed to scale for large enterprises and handle large volumes of data."
"It was easy to set up."
"GravityZone can be controlled from the cloud."
"We like the dashboard, the console, the reporting. It's very easy to deploy."
"Bitdefender GravityZone EDR needs to be more stable."
"I like GravityZone's short implementation time, as it takes only a day at most."
"I think that in Egypt, the cloud version of Bitdefender is more mature than Kaspersky and the other vendors."
"We have been running the solution for a long time through various versions and we have not had any viruses or malware breaches."
"The nice thing about Bitdefender is that it has modules and layers that you can add as the requirement becomes more sophisticated and dangerous or threatening."
"The most valuable features are the antivirus as a whole, the anti-malware, and all of the protection features that scan our enterprise devices."
"We have not had any issues with bugs or breakdowns."
"The protection offered by the product is the most valuable feature. It detects vulnerabilities or traps on our users' phones and then prompts them to clean up their devices. Tools we used previously would only discover, which required us to gather information on the backend, so Lookout is a welcome upgrade."
 

Cons

"There are some limitations on the Traps agents."
"If you compare it to SentinelOne, which has more functionalities and detection capabilities on an open platform, the pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks."
"Traps doesn't work with McAfee. You need to remove McAfee to install Traps. This is very common, and its nothing that should be an issue. Some antivirus engines recognize Traps as an threat component, so maybe they need to shake hands somewhere."
"It tends to do 99.9% of things. The only thing I'd like is single sign-on authentication into their cloud platform so that my users can be properly authenticated against it."
"We would also like to have advanced tech protection and email scanning."
"Palo Alto Networks Cortex XDR does not detect malicious activity like in other anti-virus solutions like Trend Micro and Windows with Cisco."
"For working with the solution, you only really need a web browser, however, we've found that working on Chrome, for example, is horrible."
"Impact on system performance is horrible, adding a lot of delays for users."
"Areas for improvement would be performance and pricing."
"The outreach from support was a bit bad according to their plan, but we've got two people here that manage and support GravityZone and interact with them and they manage it very well."
"There is a need to work on the deployment, when it comes to deploying to Windows machines with regards to downloading the size of the package."
"Unfortunately, the solution wasn't designed to be used in France."
"Some of the things that we are looking at but not sure how far along they are with releasing are geo-tracking, remote wipe, and encryption management."
"We find it's making the machines run slow."
"Application Control should be available on the cloud."
"The main area for improvement is the dashboard of the cloud console, where we manage security policies and groupings. It needs to be more flexible and informative."
"We just submitted an enhancement request reflecting the main area we want to see improvement in; the APIs. Currently, we're able to build dashboards, but it's somewhat backward because we use our MDM API to create them. Lookout should provide API to customers so we can query our data and use it in our cloud, and this is the only outstanding area for improvement with the product right now."
"The initial setup requires a little bit of experience with configuration."
"From the analysis that we've done, they do seem to be maybe a step behind in trying to enter the market with a new solution. But when they do pick up, they do come out with some good products."
 

Pricing and Cost Advice

"Very costly product."
"We pay about $50,000 USD per year for a bundle that includes Cortex XDR."
"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."
"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."
"The price of the solution is high for the license and in general."
"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."
"The pricing is a little high. It is per user per year."
"Compared to CrowdStrike, Cortex XDR is an expensive solution."
"Bitdefender GravityZone Ultra's pricing is competitive in the market."
"The solution is affordable."
"As I am on a different model, my clients pay me on a monthly basis."
"Licensing is done on a yearly basis and it's workstation-based."
"We need to pay for a yearly license for the solution."
"There is a fully functional trial that we used and we didn't have any issues."
"The licensing cost has been manageable for our small team."
"We take the subscription. Only we're taking that GravityZone and protection of the environment and the system. We didn't subscribe to the detection response."
"The pricing is fair; it's comparable to our previous solution, and we carried out multiple POCs and POVs (proof of value). The product is worth the money we pay for it."
"Lookout is definitely on the lower end when it comes to price point and that seems to be the only differentiator. The technology is in place in this space and it's really about who is coming in at the better price point now."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
900,747 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
12%
Financial Services Firm
11%
Manufacturing Company
10%
Comms Service Provider
9%
Comms Service Provider
12%
Construction Company
9%
Financial Services Firm
6%
Manufacturing Company
6%
Manufacturing Company
11%
Financial Services Firm
9%
Government
9%
Construction Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise20
Large Enterprise52
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise9
Large Enterprise11
By reviewers
Company SizeCount
Small Business2
Large Enterprise5
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Bitdefender GravityZone Ultra?
The cost is reasonable, with the license costing approximately six to eight dollars per user.
What needs improvement with Bitdefender GravityZone Ultra?
I would like to see improvements in Bitdefender GravityZone EDR to better support older machines. From my experience,...
What is your primary use case for Bitdefender GravityZone Ultra?
My usual use cases for Bitdefender GravityZone EDR mostly involve zoning, reviewing EDR policies, and vetting for pos...
What is your experience regarding pricing and costs for Lookout?
The pricing is a little expensive. We are currently looking at comparisons with other solutions, including Umbrella.
What needs improvement with Lookout?
There is nothing we have come across that we've desired.
What is your primary use case for Lookout?
We use Lookout for mobile devices, such as phones.
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Bitdefender GravityZone Ultra, Bitdefender GravityZone
CipherCloud
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Mentor Graphics, Rudersdal Kommune
Information Not Available
Find out what your peers are saying about Bitdefender GravityZone EDR vs. Lookout and other solutions. Updated: June 2026.
900,747 professionals have used our research since 2012.