Check Point Harmony Endpoint vs ConnectWise SIEM comparison

Check Point Harmony Endpoint vs. ConnectWise SIEM

Download the complete report

Helped 900,747 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of June 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.5%, down from 4.0% compared to the previous year. The mindshare of Check Point Harmony Endpoint is 2.1%, down from 2.6% compared to the previous year. The mindshare of ConnectWise SIEM is 0.8%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.5%
Check Point Harmony Endpoint	2.1%
ConnectWise SIEM	0.8%
Other	93.6%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Gerardo Rojas

Support at a security firm with 51-200 employees

Remote Access Security Reinforced with Real-Time Device Protection

Dashboard customization is needed for improvements. While the centralized management is strong, the dashboard could offer more flexibility. It would be helpful to tailor views for different roles, such as IT or security support. Regarding needed improvements, custom report building could be enhanced. Current reports are informative, and a drag-and-drop builder would allow teams to create tailored views for compliance, executive summaries, or operational metrics. For further improvements, enhancing threat simulation and testing would be valuable. Building a threat simulation tool and adding native capabilities to simulate phishing, malware, or ransomware scenarios will help teams validate protection and train users without relying on third-party tools.

Read full review

reviewer2711757

Cyber Security Software Engineer at a tech services company with 11-50 employees

Automated alerting and reporting excel while cost and feature limitations remain

I find automation to be one of the best and most valuable features of the product. Machine learning is incorporated into the solution, though AI is a broader term that I wouldn't apply here. I haven't personally explored AI yet, but I will investigate it. Machine learning functions more as automation in my experience, as there's no training involved yet. I want to conduct R&D on another project with Wazuh to determine how to capture usage, for example, tracking user logins and time spent. This is where I need to implement machine learning. Additionally, the extraction of GeoIP adds complexity. The solution is effectively reducing incident response times in operations.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We can use Cortex XDR to get the entire graph of the incidents from source to destination, and we can take remedial action."

"These days it's machine-learning technology and behavior-based analytics features that make us more secure."

"Cortex XDR by Palo Alto Networks saves time in various ways, although the user interface is fairly standard."

"If the user leaves our premises or network, Palo Alto Traps will still be on that endpoint and will still apply our policies."

"The product has an intuitive dashboard."

"If you are looking to deploy a security solution as a whole, this is a good option."

"The normal protection was really effective, and we detected situations that if we didn't have Cortex XDR by Palo Alto Networks, it's highly likely that we would have been affected, but it protected the infrastructure."

"One of the things that I enjoy the most is using policy extensions. It's like having host firewalls to control USB connections. I think it's a wonderful tool to restrict use when connecting to our computers. Another important tool is Home Insights. That is an add-on to the Cortex solution. I like that because we can see all the vulnerabilities in the environment and control what assets are connected to our network."

More Cortex XDR by Palo Alto Networks pros

"Check Point Harmony Endpoint provides greater security as it is impacting positively and has reduced incidents and saved many malicious threats since implementation."

"The feature that we find most valuable is the easy way of configuring it via the SmartConsole on Check Point. The configuration is very straightforward and although it has some impact on the firewall CPU and memory, it doesn't impact the IPS, for example. It allows for the scanning of downloaded files from the internet. Scanning files that our users have downloaded to check if they have any virus is the most important thing."

"Check Point Antivirus has continuously scanned each and every file before reaching our network, and this feature gives full security confidence to feel safe from malware and ransomware attacks."

"One of the characteristics of this antivirus that is valuable is the detection of ransomware."

"Information is easily managed and protected (which is particularly useful in lost or stolen endpoints)."

"If you have Check Point firewalls on your infrastructure, this is the best solution to deploy because it's just to enable a Blade."

"The best feature of Check Point Harmony Endpoint is the advanced threat detection, which provides 100% detection and shows strong performance against sophisticated attack techniques."

"We're able to secure all endpoints and manage them from a single console."

More Check Point Harmony Endpoint pros

"The integration capabilities of ConnectWise SIEM are off the shelf, making it easy to buy and use; you just unpack it and use it."

"One valuable feature of ConnectWise Fortify is the ability to add other teams and receive notifications when customers make changes or remove multi-factor authentication in Microsoft or SAP environments."

"We have found the solution has great functionality and it is easy to use."

Cons

"Enhancing UI simplicity and playbook flexibility are areas that could benefit from more low-code automation options for smoother integrations."

"I would like to see improvement in the tool's user interface, particularly in the area of managing alerts and providing more reporting capabilities."

"A better pricing plan would make this product more competitive."

"It is not easy to sell Cortex XDR, not because it isn't a good tool. Its marketing needs to be improved."

"I think sometimes Cortex XDR agent automatically stops event capturing from the device, and then even the dashboard does not get any notifications from the agent."

"This product has not improved my organization - in fact, we are in the process of moving back to another product as a result of Cortex's horrible impact on system performance."

"The main issue I could point out is the offline agents and the way that it is missing."

"I feel that it should not be a licensed activity because a feature should allow us to see applications running on end devices."

More Cortex XDR by Palo Alto Networks cons

"Check Point needs to work in areas like branding and other value propositions to make products stand out in the market despite the solutions being more affordable than the ones offered by competitors."

"We did have some early compatibility issues, which I hope Check Point has since resolved."

"The price of the product could be more friendly."

"Filtering the websites that can be visited is important also as there's always a chance to come by sites that, just by clicking, will download malicious threats."

"Check Point Harmony Endpoint can be improved by having the capability to integrate with other solutions, as no one has the complete Check Point solution, so integration with other OEMs would be beneficial."

"The services of EDR consumption should be reduced and the support needs to be improved."

"One area of this product that has room for improvement is the disc encryption."

"I have a few issues when attempting to install Harmony on some of the machines."

More Check Point Harmony Endpoint cons

"ConnectWise Fortify could work on covering more areas, like phishing messages, which have become more complicated to detect."

"ConnectWise SIEM is primarily focused on notifications and is limited in that aspect, while Wazuh can automate the elimination process."

"The manage portion of the solution is complicated and should be simplified by having different versions to meet the needs of different size companies."

Pricing and Cost Advice

"We pay about $50,000 USD per year for a bundle that includes Cortex XDR."

"This is an expensive solution."

"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."

"Every customer has to pay for a license because it doesn't work with what you get from a managed services provider."

"It is "expensive" and flexible."

"Our customers have expressed that the price is high."

"The pricing is a little bit on the expensive side."

"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"The product is averagely priced. The product price is neither very high nor too low. The tool is not really expensive."

"The price is good."

"The solution is too pricey."

"The licensing cost for Check Point is $3 USD or $4 USD per end-user."

"Check Point Antivirus is a good solution, but it's a little costly."

"I rate Check Point Harmony Endpoint's pricing a seven out of ten because it is a little high."

"One of the key factors that made us go with this solution was the pricing. On the licensing part, there was an initial complementary set of licenses offered in the initial onboarding package, either 15 or 20. Then, we had some complementary licenses in the initial purchase of the package. That was pretty useful."

"The solution is reasonable, but there are cheaper solutions out there."

More Check Point Harmony Endpoint pricing and cost advice

"The solution is expensive."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

900,747 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

12%

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Construction Company

10%

Outsourcing Company

Financial Services Firm

Computer Software Company

15%

Construction Company

12%

Comms Service Provider

10%

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	46
Midsize Enterprise	20
Large Enterprise	52

By reviewers
Company Size	Count
Small Business	136
Midsize Enterprise	66
Large Enterprise	76

No data available

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What is your experience regarding pricing and costs for Check Point Harmony Endpoint?

My experience with pricing indicates that the costs have increased compared to last year. Previously, Check Point Har...

What needs improvement with Check Point Harmony Endpoint?

Check Point Harmony Endpoint works well overall, but one area I would like to see improved is the reporting and dashb...

What is your primary use case for Check Point Harmony Endpoint?

Check Point Harmony Endpoint helps to secure our devices as my main use case for this product. When users need to acc...

What needs improvement with ConnectWise Fortify?

I haven't utilized the advanced threat intelligence capabilities with ConnectWise SIEM. Advanced threat intelligence ...

What is your primary use case for ConnectWise Fortify?

I do not have experience with ConnectWise SIEM for RMM, as I mostly work on Wazuh, and I have a team that handles Con...

What advice do you have for others considering ConnectWise Fortify?

The review can be made anonymous if just my name and not the company name is used. I would assess the real-time visib...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 10% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Wazuh vs Cortex XDR by Palo Alto Networks

Compared 2% of the time

More Cortex XDR by Palo Alto Networks Competitors

Microsoft Defender for Endpoint vs Check Point Harmony Endpoint

Compared 4% of the time

Symantec Endpoint Security vs Check Point Harmony Endpoint

Compared 4% of the time

SentinelOne Singularity Endpoint vs Check Point Harmony Endpoint

Compared 3% of the time

CrowdStrike Falcon vs Check Point Harmony Endpoint

Compared 3% of the time

ESET Endpoint Protection Platform vs Check Point Harmony Endpoint

Compared 2% of the time

More Check Point Harmony Endpoint Competitors

Zscaler Zero Trust Exchange Platform vs ConnectWise SIEM

Compared 6% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs ConnectWise SIEM

Compared 6% of the time

CompassOne by Blackpoint Cyber vs ConnectWise SIEM

Compared 5% of the time

SentinelOne Wayfinder Threat Detection and Response vs ConnectWise SIEM

Compared 4% of the time

Wazuh vs ConnectWise SIEM

Compared 3% of the time

More ConnectWise SIEM Competitors

Product Reports

Cortex XDR by Palo Alto Networks

Download Cortex XDR by Palo Alto Networks product report

Check Point Harmony Endpoint

Download Check Point Harmony Endpoint product report

Security Information and Event Management (SIEM)

May 2026

Download ConnectWise SIEM product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Check Point Endpoint Security, Endpoint Security, Check Point SandBlast Agent, Check Point Antivirus

ConnectWise Security Management, ConnectWise Fortify, Continuum Fortify, ConnectWise SIEM, ConnectWise SASE

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Check Point Harmony Endpoint provides advanced threat prevention with centralized management and seamless integration, safeguarding networks through robust security features and real-time threat detection. It excels at ransomware prevention, encryption protection, and detailed threat analysis.

Check Point Harmony Endpoint is renowned for its comprehensive security features, including anti-ransomware capabilities and centralized management. It integrates seamlessly with existing systems, enhancing network protection through features like SandBlast Agent and threat emulation. Organizations benefit from significant incident reductions, utilizing its powerful threat detection, forensics, VPN capabilities, and robust encryption measures. Centralized management during remote work setups and enhanced security through URL filtering and rollback mechanisms further solidify its efficiency. Despite its high resource consumption and configuration challenges, it remains a preferred choice among enterprises aiming to enhance cybersecurity measures.

What Key Features Does Check Point Harmony Endpoint Offer?

Advanced Threat Prevention: Protects against the latest threats with proactive mechanisms.
Anti-Ransomware Capabilities: Prevents and mitigates ransomware attacks efficiently.
SandBlast Agent: Provides seamless firewall integration for enhanced security.
Threat Emulation: Offers an additional layer of security by identifying threats pre-execution.
Real-Time Threat Detection: Enables rapid response through continuous monitoring.

What Benefits Can Users Expect?

Centralized Management: Simplifies control across all endpoints from a single platform.
Enhanced Incident Response: Reduces response time with effective forensic capabilities.
Integration with Existing Systems: Fits well within existing infrastructures for optimum protection.
Improved Ransomware and Malware Defense: Significantly lowers incidents of ransomware attacks.

In sectors such as finance and healthcare, Check Point Harmony Endpoint is crucial for maintaining data security and regulatory compliance. Its features cater to endpoint protection requirements across industries, providing reliable solutions for encryption and cybersecurity challenges. The tool's deployment across diverse environments secures endpoint systems effectively, ensuring uninterrupted operations amid evolving threats.

Check Point Software Technologies

ConnectWise SIEM is a cybersecurity platform designed to enhance threat detection and response capabilities, integrating seamlessly into sophisticated IT infrastructures.

Developed to address complex cybersecurity challenges, ConnectWise SIEM offers robust monitoring and analytics, enabling businesses to detect threats faster and with greater accuracy. It combines security information and event management with advanced intelligence to create a comprehensive security solution that supports real-time analysis and immediate action.

What are the most important features of ConnectWise SIEM?

Advanced Threat Detection: Leverages machine learning to identify potential threats quickly.
Real-Time Alerts: Provides instant notifications to ensure swift response to incidents.
Comprehensive Reporting: Delivers detailed insights to inform decision-making.
Scalability: Adapts to the growing needs of any organization.
Seamless Integration: Connects effortlessly with existing IT tools and platforms.

What benefits or ROI should users look for in reviews?

Reduced Downtime: Minimizes disruptions with proactive threat management.
Cost Efficiency: Lowers overall security expenditure through strategic resource allocation.
Improved Compliance: Assists in meeting industry regulations with comprehensive logs and reports.
Enhanced Security Posture: Strengthens defenses with continuous monitoring and analysis.

ConnectWise SIEM is widely implemented in industries such as finance, healthcare, and retail, where data security is crucial. These sectors benefit from its capability to handle large volumes of data while maintaining regulatory compliance. Its flexibility allows customization to meet specific industry requirements, providing targeted security solutions to protect sensitive information.

ConnectWise

Sample Customers

CBI Health Group, University Honda, VakifBank

Boston Properties, Independence Care System, Melbourne Convention and Exhibition Centre (MCEC), Courtagen Life Sciences, Carmel Partners

Techvera, Syrex, Clark Integrated Technologies

Check Point Harmony Endpoint vs. ConnectWise SIEM