No more typing reviews! Try our Samantha, our new voice AI agent.

Bitdefender GravityZone Extended Detection and Response (XDR) vs Netsurion comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Extended Detection and Response (XDR)
3rd
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (5th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Bitdefender GravityZone Ext...
Ranking in Extended Detection and Response (XDR)
26th
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
8
Ranking in other categories
Endpoint Detection and Response (EDR) (30th), Network Detection and Response (NDR) (13th)
Netsurion
Ranking in Extended Detection and Response (XDR)
46th
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
24
Ranking in other categories
Managed Security Services Providers (MSSP) (21st), Security Information and Event Management (SIEM) (50th), SOC as a Service (9th), Managed Detection and Response (MDR) (31st)
 

Mindshare comparison

As of November 2026, in the Extended Detection and Response (XDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 4.7%, down from 5.8% compared to the previous year. The mindshare of Bitdefender GravityZone Extended Detection and Response (XDR) is 1.5%, up from 0.7% compared to the previous year. The mindshare of Netsurion is 1.1%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Extended Detection and Response (XDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks4.7%
Bitdefender GravityZone Extended Detection and Response (XDR)1.5%
Netsurion1.1%
Other92.7%
Extended Detection and Response (XDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
reviewer2165952 - PeerSpot reviewer
Company Advisor
Automated protection has reduced our management time and keeps all client environments consistently secure
Reporting in Bitdefender GravityZone Extended Detection and Response (XDR) could be improved. It has some reporting in it, but it's a little cumbersome to work with, so the reporting that is there could be improved. The analytics dashboards of Bitdefender GravityZone Extended Detection and Response (XDR) are quite useful, and they are nice in that we can see an overview very quickly and drill down into specific issues or specific clients. The dashboards are quite good, though it would be nice if we had the same with automated reports. It would be much more useful for us to have that via email or having a report. The only downside that we find is that the product is a little bit slow.
John-Berry - PeerSpot reviewer
Information Technology Manager at ProfitSolv
The SOC center monitors, hunts, and notifies us of threats around the clock
I know they are working to resolve this issue, but Netsurion is currently unable to retrieve logs from S3 buckets. We use WP Engine for a lot of web hosting as well as AWS, and both of these platforms use S3 buckets. I would like Netsurion to be able to pull logs from Linux devices. We have some of that capability, and I believe they can do it. However, the way it works with Amazon is strange and glitchy. Therefore, working something out with Amazon would be great. Netsurion's SOC can be a bit too aggressive at times. We have asked them to adjust their playbook because I am tired of being notified about the same issue multiple times a day. I am aware of the issue, and it is not a cause for concern. Let's only take action on this issue if we see an actual problem.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features are incident creation, policy-based protection, IP whitelisting, and device encryption. These are beneficial for endpoint and server security."
"The initial setup isn't too bad."
"The most valuable feature is that you can select remote access of any machine for sandboxing."
"The most valuable features of this product are the management capabilities, which allow an IT organization to get quite a good picture of attempted cyber attacks, and its out-of-the-box investigation capabilities."
"It is an easy-to-use tool."
"Cortex is a very good total solution on the endpoints."
"Cortex XDR by Palo Alto Networks has helped us a lot with securing the whole environment and the whole IT structure, giving us full knowledge of what is happening on the client and enabling us to take action right away from a single point for managing security operations on the hosts."
"We think that this product will help us grow, as it meets our needs currently and we can grow with it over time."
"Bitdefender GravityZone Ultra Plus is highly stable."
"The quarantine computer functionality is very good for me."
"The best thing about Bitdefender is that it has got top-notch features and it is not tied to specific countries like some other antivirus tools."
"The solution has best-in-breed technology and scores very highly on efficacy rates."
"The threat detection rates are exceptionally good, better than most of the competition."
"I find Bitdefender GravityZone Ultra Plus to be a pretty good solution for the mid-level market, specifically for organizations with up to two hundred fifty users. I like that it is an averagely priced solution. It also has a straightforward installation that can be completed within three to five minutes. Its technical support is also good enough."
"The best features in the product, as a reseller, are the integrated SOC; integration with a SOC is one of the advantages."
"We moved from Sophos antivirus to Bitdefender GravityZone Extended Detection and Response (XDR), and ever since then, we've been very happy with the product."
"Expediting incident response is really great."
"The managed service is great value which saves you a full-time employee on your staff by being able to outsource it to EventTracker to review all the logs and cull through the data to make recommendations and identify threats, then how to remediate them."
"The most valuable feature is that we get the events: the alerts about disk space and the security reports that we get once a day, including user lockouts and the like."
"The biggest lesson I have learned is that the outsourcing of this service has a dramatic impact on the organization."
"We don't have the eyeballs available to stare and watch for things, or even have the capability of building internal alert systems. So, the managed SOC has been huge for freeing up staff to work on other responsibilities. We are saving on at least one full-time employee."
"The network alert is the most valuable feature. That way, we in the IT department are aware of user lockout and invalid password attempts way before a user ever even calls in."
"If we need to do a search for user lockouts, we can go, search, and find locations where they have been locked out, then keep track of those events, historically."
"EventTracker has increased productivity and saved us time, absolutely."
 

Cons

"There are some false positives."
"It is not a suitable solution if you are looking for a single product with multiple features such as DLP, encryption, rollback, etc."
"Cortex XDR should have a lightweight agent, and the agent size should not be heavy."
"In general, the price could be more competitive."
"The dashboard is the area that needs to improve so that we can have the ability to drill down without having to go elsewhere to verify results."
"I am facing issues with customer support for Cortex XDR by Palo Alto Networks, so I am not satisfied with customer support."
"The solution needs better reports. I think they should let the customer go in and customize the reports."
"In terms of areas of improvement, we have not completed our review of the product. We're also looking at other products. So, it's a little bit hard to tell what could be different because we have not completed the review of this product, but based on our experience so far, its implementation is quite complex."
"The solution seems to be pretty amateur for an EDR solution, and it should be more in sync in terms of features, with solutions such as FireEye and SentinelOne."
"The solution must improve its management features."
"Adding a feature like Data Loss Prevention would be beneficial."
"Detection and response is a disadvantage that could be improved."
"Some customers would like additional features that aren't available through the current GravityZone platform. Some feedback has been about the deletion of other software not going smoothly during the installation of Bitdefender, particularly the removal of previous software like Sophos."
"Reporting in Bitdefender GravityZone Extended Detection and Response (XDR) could be improved."
"I would like automatic issue fixing for users without needing to physically open the PC. I'd prefer updates and fixes from the cloud to avoid headaches and save time."
"The EventTracker support said, "We do have that." However, that wasn't necessarily the case. It was primarily an eight to five type of thing."
"There are some issues with searches taking a long period of time, but they assured me that they have implemented a new search function that's available in version 9, but which requires a solid-state hard drive... Depending on how many logs you have it could take a long time to return the results if you're looking back prior to the last 30 days."
"The weekly reporting could use some improvement. For example, when we handed them our landscape document, it took longer than I would have liked for those details to become noticeable within the reports."
"The biggest problem is that we have too many domain controllers. So, we have to keep all the clients and main system updated with the latest versions along with making sure all the firewalls are open."
"The hosted on-premise hardware that we were using was having issues. The performance of it was horrendous, but we weren't using it."
"The deployment of the agents could be a bit easier. We always seem to have a bit of a challenge with that. A lot of times the agents either don't deploy or they quit responding, then we have to go and redeploy them."
"The solution's dashboard is okay. The one thing that we ran into are issues when we upgraded to the newer version. It uses Elasticsearch for the different dashboard entries. So, we were running on spinning disks, and Elasticsearch didn't work that well. A number of the different dashboards, like my dashboard or different things like that, pull from Elasticsearch. Since Elasticsearch really wasn't working, we were having some issues with that, but we just migrated."
"With version 8, there are quite a few things; the query tool was one of the big ones, and the query speed was one of the big ones, but they've made some great strides between versions 8 and 9."
 

Pricing and Cost Advice

"Our customers have expressed that the price is high."
"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."
"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."
"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."
"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."
"I don't recall what the cost was, but it wasn't really that expensive."
"Cortex XDR's pricing is ok."
"Cortex XDR by Palo Alto Networks is an expensive solution."
"We have purchased licenses for the use of Bitdefender GravityZone Ultra Plus. The price of the solution is reasonable but could be better."
"Bitdefender GravityZone Ultra Plus is pretty average, meaning it's not cheaper, but it's pretty good. It has average pricing."
"It is a bit expensive as compared to some of the other products that have come out in recent years. Expense-wise, the only downside is that it is not cheap."
"In the security space, it's hard to quantify your return on investment. So, I don't. We spend about $40,000 a year and so. It's hard to say if the SIEM saved that much money."
"Our pricing for Netsurion last year was US $52,000 per year."
"Netsurion's pricing is competitive. At the same time, they're the only ones who do what we want to do the way we want it. I can't say we would've paid more, but we would've had to have come up with our own solution if they weren't providing that."
"When we first got the EventTracker product, we were using SIEM Simplified. At the time they didn't call it that, but it was more of a service thing. So, there was a bit more hand-holding and getting stuff set up, along with failure reports, that they did during the first one to two years. Then, we decided that the the additional money to have someone do these daily reports wasn't terribly useful, so we discontinued that service."
"Netsurion's pricing is extremely fair and flexible. The price of their SIEM product is reasonable, and you can pay for those services you want on top of that. It wasn't cheap, but it's competitive, and we intend to renew our contract."
"I don't know if the pricing is by the seat but we're paying about $20,000 to 25,000 a year. On top of that, we pay for the managed support services. That runs us about another $35,000 or $40,000 a year."
"The upfront costs have increased, and we have been locked into this contract. The cost of changing over from it is way too high."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
920,929 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Comms Service Provider
14%
Construction Company
12%
Outsourcing Company
10%
Manufacturing Company
8%
Outsourcing Company
19%
Construction Company
11%
Manufacturing Company
9%
Performing Arts
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise1
Large Enterprise1
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise7
Large Enterprise7
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Bitdefender GravityZone Ultra Plus?
The pricing and licensing of Bitdefender GravityZone Extended Detection and Response (XDR) is reasonable. We moved fr...
What needs improvement with Bitdefender GravityZone Ultra Plus?
Reporting in Bitdefender GravityZone Extended Detection and Response (XDR) could be improved. It has some reporting i...
What is your primary use case for Bitdefender GravityZone Ultra Plus?
Our customers typically use Bitdefender GravityZone Extended Detection and Response (XDR) primarily as an antivirus s...
Ask a question
Earn 20 points
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
GravityZone Ultra Plus
Netsurion Managed Threat Protection, Netsurion EventTracker
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Archdiocese, Northstar, SeSa, W&W Informatik, Yamaha Motor Europe
The Salvation Army, The FRESH Market, Pacific Western Bank, NASA, American Academy of Orthopaedic Surgeons (AAOS), and Talbot’s Stores
Find out what your peers are saying about Bitdefender GravityZone Extended Detection and Response (XDR) vs. Netsurion and other solutions. Updated: October 2026.
920,929 professionals have used our research since 2012.