No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point Harmony Endpoint vs Heimdal Endpoint Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 1, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Protection Platform (EPP)
4th
Ranking in Endpoint Detection and Response (EDR)
5th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
115
Ranking in other categories
Extended Detection and Response (XDR) (4th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Check Point Harmony Endpoint
Ranking in Endpoint Protection Platform (EPP)
6th
Ranking in Endpoint Detection and Response (EDR)
7th
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
199
Ranking in other categories
Anti-Malware Tools (3rd)
Heimdal Endpoint Security
Ranking in Endpoint Protection Platform (EPP)
40th
Ranking in Endpoint Detection and Response (EDR)
42nd
Average Rating
9.0
Reviews Sentiment
8.6
Number of Reviews
1
Ranking in other categories
Anti-Malware Tools (27th), Threat Intelligence Platforms (TIP) (25th), Domain Name System (DNS) Security (13th), Ransomware Protection (12th)
 

Mindshare comparison

As of August 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.9%, up from 3.7% compared to the previous year. The mindshare of Check Point Harmony Endpoint is 2.2%, down from 2.4% compared to the previous year. The mindshare of Heimdal Endpoint Security is 0.6%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.9%
Check Point Harmony Endpoint2.2%
Heimdal Endpoint Security0.6%
Other93.3%
Endpoint Protection Platform (EPP)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
GR
Support at a security firm with 51-200 employees
Remote Access Security Reinforced with Real-Time Device Protection
Dashboard customization is needed for improvements. While the centralized management is strong, the dashboard could offer more flexibility. It would be helpful to tailor views for different roles, such as IT or security support. Regarding needed improvements, custom report building could be enhanced. Current reports are informative, and a drag-and-drop builder would allow teams to create tailored views for compliance, executive summaries, or operational metrics. For further improvements, enhancing threat simulation and testing would be valuable. Building a threat simulation tool and adding native capabilities to simulate phishing, malware, or ransomware scenarios will help teams validate protection and train users without relying on third-party tools.
DEEPAK KUMAR PACHDEO DUBEY - PeerSpot reviewer
Senior IT Support Specialist at PXGEO
Delivers efficiency and agility with USB control limitations
One area where we lag is that, since we use everything from Heimdal, including XDR and other features, we also use the privilege manager feature called Elevation. What we lack is granular USB control. We have an issue where we can only switch USB on or off. I want to whitelist specific devices in the network, which I currently cannot do.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of Cortex XDR by Palo Alto Networks is the low consumption of system resources. The solution uses a lot of AI and machine learning."
"Cortex XDR is a simple platform that's easy for administrators and users. You have a lot of flexibility to change or customize the features."
"Implementing Cortex XDR by Palo Alto Networks has had a significant impact on my security analyst workload because it becomes much easier."
"The live terminal is probably the best thing ever. It gives you the access to get straight onto any machine."
"They did what they said, and this solution could apply to any scenario."
"I don't have to do much monitoring with it; I don't have to have anybody manually looking at this, it gives us reports, and it lets us know if something needs to be addressed, and we can easily address it."
"Cortex XDR is stable, offering high quality and reliable performance."
"The most valuable feature is that you can select remote access of any machine for sandboxing."
"It has an inbuilt AI system that helps in diffusing the virus in a proactive manner and protects the system from getting damaged at the worst level."
"The communication with the console is very dynamic and remote, without the need to return to the computer locally."
"The overall features and data loss prevention makes it a valuable product in every way."
"I have found the Zero phishing and IPS features the most useful in Check Point Harmony Endpoint, and additionally, threat emulation sandboxing is effective."
"The solution adds value to our organization since it is protecting us and integrates analytics with the Check Point cloud."
"This antivirus has powerful security features that online threats cannot compromise."
"The end-user facilities for managing the tool are good."
"The most valuable feature of Check Point Harmony Endpoint is centralized management."
"As compared to multiple solutions I have used in the past, Heimdal is a very agile and lightweight solution."
 

Cons

"There are some false positives. What our guys would have liked is that it would have been easier to manipulate as soon as they found a false positive that they knew was a false positive. How to do so was not obvious. Some people complained about it. The interface, the ESM, is not user-friendly."
"The solution needs better reports. I think they should let the customer go in and customize the reports."
"Cortex XDR by Palo Alto Networks can improve mobile integration to allow access to the console."
"I don't like that they have different types of licenses. For example, if users select a license, they think they will have all the platforms they need to improve their network or security. But after some time, Palo Alto Networks changed their licensing, and some of the features that, for example, were free at the beginning now have a cost. I think the integration can be improved. For example, a lot of tools are just integrated through APIs."
"For working with the solution, you only really need a web browser, however, we've found that working on Chrome, for example, is horrible."
"It is not easy to sell Cortex XDR, not because it isn't a good tool. Its marketing needs to be improved."
"The solution should enhance the ADR and reporting."
"It is a complex solution to implement."
"One area that could be improved about Check Point Harmony Endpoint is the user interface for policy management. It is functional, but not very intuitive, especially when trying to set granular rules or exceptions."
"Check Point Harmony Endpoint's agent is a bit heavy."
"Once we installed a CP agent in our system, we found that it was consuming more memory. Even a normal configuration system can be hung."
"It took me time to learn how to configure endpoint security."
"Check Point offers solutions with only a few features for our company's customers' sites."
"There was a learning curve for our general population of employees (the user)."
"Check Point Antivirus could be improved by having the gateway automatically run a packet capture on the traffic so that it can be easily uploaded to TAC in the event that there is a false positive or if the traffic is required for further investigation."
"The interface could be more user-friendly."
"What we lack is granular USB control. We have an issue where we can only switch USB on or off."
 

Pricing and Cost Advice

"The price of the product is not very economical."
"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."
"The pricing is okay, although direct support can be expensive."
"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."
"The solution is expensive. It's pricing is on a yearly-basis."
"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."
"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."
"Cortex XDR’s pricing is very reasonable."
"The tool’s cost has increased by almost 300% in two years."
"Licensing comes free in that first year or is included in the base package. From a commercial point of view, it really just is the renewal cost, rather than a one-time fixed cost or buy-in."
"Price-wise, the product is affordable. There are no additional costs apart from the licensing charges that are attached to the product."
"I bought them for 12 months and I genuinely cannot remember what I paid for them. I think it's about 100 pounds per user per year, so about 10 pounds a month per person."
"One of the key factors that made us go with this solution was the pricing. On the licensing part, there was an initial complementary set of licenses offered in the initial onboarding package, either 15 or 20. Then, we had some complementary licenses in the initial purchase of the package. That was pretty useful."
"In comparison to other software solutions available on the market, it comes at a higher price point."
"We implement this solution with a yearly subscription and there are no extra costs."
"The pricing is very expensive. You need to buy the appliance and subscription as well."
Information not available
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
908,834 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
13%
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
10%
Outsourcing Company
12%
Construction Company
12%
Financial Services Firm
8%
Manufacturing Company
8%
Construction Company
17%
Comms Service Provider
13%
Computer Software Company
9%
Financial Services Firm
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise21
Large Enterprise54
By reviewers
Company SizeCount
Small Business138
Midsize Enterprise65
Large Enterprise75
No data available
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Check Point Harmony Endpoint?
My experience with pricing indicates that the costs have increased compared to last year. Previously, Check Point Har...
What needs improvement with Check Point Harmony Endpoint?
Check Point Harmony Endpoint works well overall, but one area I would like to see improved is the reporting and dashb...
What is your primary use case for Check Point Harmony Endpoint?
Check Point Harmony Endpoint helps to secure our devices as my main use case for this product. When users need to acc...
What is your experience regarding pricing and costs for Heimdal Endpoint Security?
Pricing, compared to what we had before, was quite economical. There was a difference of about twenty percent or some...
What needs improvement with Heimdal Endpoint Security?
One area where we lag is that, since we use everything from Heimdal, including XDR and other features, we also use th...
What is your primary use case for Heimdal Endpoint Security?
My company colleagues and I use this antivirus solution. I am part of a company where I deploy solutions, and I also ...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Check Point Endpoint Security, Endpoint Security, Check Point SandBlast Agent, Check Point Antivirus
Heimdal Next-Gent Endpoint Antivirus, Thor Vigilance Enterprise, Heimdal Endpoint Detection and Response, Heimdal DNS Security - Endpoint, Heimdal Threat Prevention, Heimdal Ransomware Encryption Protection
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Boston Properties, Independence Care System, Melbourne Convention and Exhibition Centre (MCEC), Courtagen Life Sciences, Carmel Partners
Brother, Symbion, CPH West
Find out what your peers are saying about Microsoft, SentinelOne, CrowdStrike and others in Endpoint Protection Platform (EPP). Updated: August 2026.
908,834 professionals have used our research since 2012.