Bitdefender GravityZone XDR vs SentinelOne Singularity Endpoint comparison

Bitdefender GravityZone XDR vs. SentinelOne Singularity Endpoint

Download the complete report

Helped 920,769 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of November 2026, in the Extended Detection and Response (XDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 4.7%, down from 5.8% compared to the previous year. The mindshare of Bitdefender GravityZone XDR is 1.2%, up from 1.1% compared to the previous year. The mindshare of SentinelOne Singularity Endpoint is 6.3%, down from 6.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Extended Detection and Response (XDR) Mindshare Distribution
Product	Mindshare (%)
SentinelOne Singularity Endpoint	6.3%
Cortex XDR by Palo Alto Networks	4.7%
Bitdefender GravityZone XDR	1.2%
Other	87.8%

Extended Detection and Response (XDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Jörg Köhler

Owner at AvalisNT AG

Setup is smooth and management is seamless, while improvements in email filtering transparency enhance efficiency

For data correlation, we just haven't worked long enough with it to assess its impact on our overall threat response strategy. We prefer a system that simply informs us when there is a problem; we don't want to engage too much in threat hunting. Therefore, we're not looking to create a SOC from this, which is also why we moved from XDR to MDR. There are areas for improvement, including the difficulty in getting the right handles on the applied email filters. It's sometimes unclear why one email is treated as spam and another is not, even if they contain similar content. Making the process of how emails are treated a bit more transparent would be beneficial.

Read full review

Vaibhav Mahendra Kolhe

Soc Analyst at Softcell Technologies Limited

Automation has reduced alerts and freed the soc team to focus on faster incident response

Regarding mean time to respond, the improvements I see with SentinelOne Singularity Complete are that genuine files also get alerts. We are getting false positives, but we are also getting genuine true positive alerts. The improvement will be deep visibility because as I am using Splunk as a SIEM, I compare deep visibility with Splunk, but deep visibility has limited access with only a 14-day policy to retain logs. The improvement will be in overall policy management. The third point will be the complexity of policies. If we want some endpoints to use only USB or if we need to block USB on some points, the policy management is very complex. The fourth point will be that Mac OS and Linux don't have the rollback policy; that policy is only for Windows. These four points are improvements if SentinelOne Singularity Complete can address them. Data privacy and security when utilizing Purple AI is crucial for SentinelOne Singularity Complete, and SentinelOne Singularity Complete lacks in data security. Data security is very important in this world. In my organization, if we deploy SentinelOne Singularity Complete and we have integrated all the firewalls, all devices, and AWS devices to SentinelOne Singularity Complete, logs will be forwarded to SentinelOne Singularity Complete through SentinelOne Singularity Complete. However, SentinelOne Singularity Complete doesn't have data security solutions such as Forcepoint DLP or 48 layer; SentinelOne Singularity Complete doesn't have that DLP solution. From the data security point of view, SentinelOne Singularity Complete is not good.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I generally believe that Cortex XDR by Palo Alto Networks is probably the best in the market right now."

"The scalability of Cortex XDR by Palo Alto Networks is very good."

"I like that the product has behavior-based detection which offers many benefits over signature-based detection."

"Cortex covers everything I need. It's a perfect solution. Cortex provides a different level of visibility because it's an extended EDR, allowing you to grab logs from the network and firewalls. Palo Alto invented the concept of the extended EDR or XDR."

"The solution helps find bugs, and it is safe to use to prevent attacks by hackers."

"I've found the solution to be highly scalable for enterprises."

"I can highlight that we have not faced any security incidents with Cortex XDR by Palo Alto Networks, and even though our environment is quite dynamic, we have not faced any security incident with Cortex XDR by Palo Alto Networks until now."

"It is easy to use."

More Cortex XDR by Palo Alto Networks pros

"Since then, we are working with it, and so far, we have no problems; it's working smoothly with email security."

"I find that the auto-response capability is most valuable."

"The HyperDetect feature in GravityZone XDR is effective."

"Scalability is pretty easy. It's easy to increase the capacity. You can just add on licenses to the existing license, and the duration of the license can be adjusted. For example, you've already bought a license for a year, and you want to add some more users. We can just add on licenses for the remaining period so that the entire organization can have the same expiry date. That makes renewal easier."

"The solution has an automatic patch management capability."

"It provides an in-depth analysis and gives recommendations, along with a historical search capability."

"I would rate GravityZone XDR more than nine out of ten."

"I appreciate the overall utilization of AI to enhance security posture."

"SentinelOne offers several valuable features for threat detection and response."

"One of the features that convinced us to adopt SentinelOne was that the solution can recognize and respond to attacks with or without a network connection. That is very important."

"SentinelOne gives us visibility into various high-level vulnerabilities on every gateway on the network. It helps us prevent vulnerable devices from being compromised. We primarily use Singularity for its EDR functions. We're happy with that."

"SentinelOne has provided amazing security; we were getting new cryptolocker variant infections several times per month and the month following our SentinelOne rollout, the numbers dropped to zero, and we have not had a single infection since."

"The remediation and rollback features are pretty impressive."

"My favorite feature about it is the full visibility into telemetry."

"We opted for SentinelOne because it gives you visibility and control over all the devices on which you have the agent deployed. That is very valuable because, in the end, all the attacks enter only through one gateway, which is usually a user's computer."

"No solution can ever provide a 100% protection, but their rollback feature closes this gap in endpoint security giving end users a ray of hope in the event of a worst case scenario endpoint breach, especially in ransomware attacks."

More SentinelOne Singularity Endpoint pros

Cons

"I don't like that they have different types of licenses. For example, if users select a license, they think they will have all the platforms they need to improve their network or security. But after some time, Palo Alto Networks changed their licensing, and some of the features that, for example, were free at the beginning now have a cost. I think the integration can be improved. For example, a lot of tools are just integrated through APIs."

"The only issues that we have are, one the cost, two the dashboard is not very intuitive, even though you can drill down within the dashboard, we usually have to gather information from other sources to determine locations and if its a false positive."

"Managing the product should be easier."

"The GUI could be improved. It's a little bit cumbersome. It could be more user-friendly."

"To jump from the partner to Palo Alto directly was challenging."

"This product has not improved my organization - in fact, we are in the process of moving back to another product as a result of Cortex's horrible impact on system performance."

"The server sometimes stops continuously to check things so it would be helpful to receive access updates or technical reasons."

"We would also like to have advanced tech protection and email scanning."

More Cortex XDR by Palo Alto Networks cons

"The resource consumption is high for Bitdefender GravityZone XDR, nearly using one gigabyte of RAM, especially on Windows 10 and 11."

"The solution’s pricing could be improved."

"The product could be improved by offering a single panel for the management of all Bitdefender products. Additionally, there might be a need to simplify the interface in the future."

"It's not very mature, and additional costs are involved."

"Another area of improvement is CPU utilization. CPU utilization could be improved."

"There are areas for improvement, including the difficulty in getting the right handles on the applied email filters."

"They need to improve how we install the software."

"I would like to have the same features such as ransomware that are available on the cloud version of SentinelOne also made available for the on-prem version because a lot of people in our region are not ready for cloud solutions."

"The MDM functionality and maturity still need improvement."

"Regarding the pricing, Singularity Platform is very high compared to other platforms that have been worked with, such as CrowdStrike and other Sophos EDRs."

"However, I do not provide a ten out of ten because when I compare it with different products, SentinelOne Singularity Endpoint is at the third position. This means that on the prevention side, it might be better."

"SentinelOne can continue to make the presentation of relevant and timely data to the analysts as succinct and clear as possible. It will allow analysts to execute remediation or resolution with the least amount of clicks."

"The stability of SentinelOne should be improved."

"I would like to see a better control panel for the managed service side of it."

More SentinelOne Singularity Endpoint cons

Pricing and Cost Advice

"Compared to CrowdStrike, Cortex XDR is an expensive solution."

"The pricing is a little high. It is per user per year."

"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."

"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."

"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."

"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."

"It has reasonable pricing for the use cases it provides to the company."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a six out of ten."

"It's not the price of the software itself that makes it expensive. It's because you have to buy a VM; you have to buy additional hardware. All those things make it slightly costlier."

"I don't know about the licensing model. It seems easy, but it's not my area of expertise. I don't have information on how it compares to its competitors, but the pricing is per device."

"SentinelOne Singularity Complete is a fair price."

"I believe that the current pricing and licensing structure is fair."

"The licensing is convenient, straightforward, and very clear."

"SentinelOne Singularity Complete is cheaper than CrowdStrike but more expensive than any traditional anti-virus solution."

"From what I understand, it is pricey, but it works. It is a very good product."

"SentinelOne Singularity Complete's pricing is affordable."

"SentinelOne Singularity Complete is fairly priced."

More SentinelOne Singularity Endpoint pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.

See recommendations

920,769 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

14%

Outsourcing Company

12%

Construction Company

10%

Manufacturing Company

10%

Comms Service Provider

12%

Computer Software Company

11%

Construction Company

10%

Manufacturing Company

Outsourcing Company

12%

Manufacturing Company

10%

Computer Software Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	50
Midsize Enterprise	21
Large Enterprise	57

No data available

By reviewers
Company Size	Count
Small Business	139
Midsize Enterprise	74
Large Enterprise	98

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What is your experience regarding pricing and costs for Bitdefender GravityZone XDR?

The pricing of Bitdefender GravityZone XDR is reasonable.

What needs improvement with Bitdefender GravityZone XDR?

For data correlation, we just haven't worked long enough with it to assess its impact on our overall threat response ...

What is your primary use case for Bitdefender GravityZone XDR?

I am using SentinelOne not for MDR, only for EDR/XDR, because we wanted to use it for MDR, but the threshold for the ...

Which is better - SentinelOne or Darktrace?

Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is ...

What is your experience regarding pricing and costs for SentinelOne Singularity?

It is neither too costly, but definitely, it is one of the advantages that SentinelOne is quite adapted towards the p...

What needs improvement with SentinelOne Singularity?

I have encountered an issue related to the alerting mechanism in SentinelOne Singularity Complete. Sometimes I need t...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 16% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Trellix Endpoint Security Platform vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Wazuh vs Bitdefender GravityZone XDR

Compared 22% of the time

TrendAI Vision One vs Bitdefender GravityZone XDR

Compared 17% of the time

Darktrace vs Bitdefender GravityZone XDR

Compared 7% of the time

ESET EDR/XDR vs Bitdefender GravityZone XDR

Compared 6% of the time

Secureworks Taegis XDR vs Bitdefender GravityZone XDR

Compared 6% of the time

More Bitdefender GravityZone XDR Competitors

CrowdStrike Falcon vs SentinelOne Singularity Endpoint

Compared 4% of the time

Microsoft Defender for Endpoint vs SentinelOne Singularity Endpoint

Compared 3% of the time

Trellix Endpoint Security Platform vs SentinelOne Singularity Endpoint

Compared 3% of the time

Fortinet FortiEDR vs SentinelOne Singularity Endpoint

Compared 3% of the time

Intercept X Endpoint vs SentinelOne Singularity Endpoint

Compared 2% of the time

More SentinelOne Singularity Endpoint Competitors

Product Reports

Cortex XDR by Palo Alto Networks

Download Cortex XDR by Palo Alto Networks product report

Bitdefender GravityZone XDR

Download Bitdefender GravityZone XDR product report

SentinelOne Singularity Endpoint

Download SentinelOne Singularity Endpoint product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

No data available

Sentinel Labs, SentinelOne Singularity, Singularity Platform

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Bitdefender GravityZone XDR provides advanced threat detection and response capabilities, delivering comprehensive security insights tailored for knowledgeable audiences.

Bitdefender GravityZone XDR amplifies security operations across environments, ensuring high-level detection and response. It integrates seamlessly, enhancing cybersecurity strategies with its innovative threat intelligence. Efficiently designed, it addresses evolving threats, empowering IT professionals to maintain robust cyber defenses.

What are the most important features of Bitdefender GravityZone XDR?

Advanced Threat Detection: Uses behavioral analysis to accurately identify threats.
Comprehensive Reporting: Offers detailed insights for improved threat visibility.
Scalability: Adapts to different network sizes ensuring consistent protection.
Automation: Streamlines processes with automated response capabilities.

What benefits and ROI should users look for in Bitdefender GravityZone XDR?

Improved Security Posture: Enhances overall threat readiness.
Cost Efficiency: Reduces potential losses from undetected attacks.
Operational Efficiency: Minimizes manual monitoring with automation.
Adaptability: Quickly adjusts to newer threats with flexible configuration.

In industries such as finance and healthcare, Bitdefender GravityZone XDR plays a crucial role in safeguarding sensitive data. Its integration enables institutions to combat sophisticated threats, ensuring compliance and data integrity without compromising operational efficiency.

Bitdefender

SentinelOne Singularity Complete is an advanced endpoint security platform featuring centralized management across multiple locations. It leverages AI-driven behavior detection, threat prioritization, and ransomware rollback for enhanced protection and streamlined operations.

With a focus on endpoint protection, threat detection, and automated response, SentinelOne Singularity Complete provides comprehensive security through AI-powered behavioral analysis and real-time threat detection. The centralized console simplifies management, offering seamless integration and minimal system impact. Its robust reporting capabilities facilitate compliance with audit-ready reports. Lightweight agents operate across diverse environments, improving visibility and performance while curbing manual efforts. To optimize its utility, faster console load times and improved customizability in reports and dashboards are recommended. Users may benefit from smoother integration with IT tools and enhanced policy management flexibility, as well as upgraded agent processes and simplified endpoint deployment. Expanding built-in analytics and refining alert management can further heighten platform efficacy.

What are the key features of SentinelOne Singularity Complete?

AI-Powered Detection: Utilizes advanced AI to identify potential threats based on behavior.
Automatic Remediation: Automatically rectifies detected issues, reducing response times.
Ransomware Rollback: Restores data to previous states if affected by ransomware attacks.
Centralized Dashboards: Provides real-time insights through intuitive dashboards.
Threat Prioritization: Identifies and ranks threats based on potential impact.

What benefits should users look for in reviews?

Integration: Seamlessly connects with security solutions to enhance risk management.
Minimal System Impact: Operates efficiently, preserving system performance.
Enhanced Protection: Delivers robust threat defense through AI-driven technology.
Compliance Support: Offers detailed reporting for audit readiness.
User Convenience: Combines autonomous decision-making with an intuitive interface.

In various industries, SentinelOne Singularity Complete is implemented for endpoint protection and incident management. Companies rely on it for its real-time threat detection and automated response capabilities, ensuring compliance and reduced manual intervention. Its adaptive nature supports diverse environments, enhancing operational efficiency.

SentinelOne

Sample Customers

CBI Health Group, University Honda, VakifBank

Information Not Available

Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank

Bitdefender GravityZone XDR vs. SentinelOne Singularity Endpoint