No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point Harmony Endpoint vs Malwarebytes Endpoint Protection comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 1, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Protection Platform (EPP)
4th
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Check Point Harmony Endpoint
Ranking in Endpoint Protection Platform (EPP)
7th
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
197
Ranking in other categories
Anti-Malware Tools (4th), Endpoint Detection and Response (EDR) (8th)
Malwarebytes Endpoint Prote...
Ranking in Endpoint Protection Platform (EPP)
62nd
Average Rating
9.0
Number of Reviews
1
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.6% compared to the previous year. The mindshare of Check Point Harmony Endpoint is 2.0%, down from 2.4% compared to the previous year. The mindshare of Malwarebytes Endpoint Protection is 0.3%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.8%
Check Point Harmony Endpoint2.0%
Malwarebytes Endpoint Protection0.3%
Other93.9%
Endpoint Protection Platform (EPP)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
GR
Support at a security firm with 51-200 employees
Remote Access Security Reinforced with Real-Time Device Protection
Dashboard customization is needed for improvements. While the centralized management is strong, the dashboard could offer more flexibility. It would be helpful to tailor views for different roles, such as IT or security support. Regarding needed improvements, custom report building could be enhanced. Current reports are informative, and a drag-and-drop builder would allow teams to create tailored views for compliance, executive summaries, or operational metrics. For further improvements, enhancing threat simulation and testing would be valuable. Building a threat simulation tool and adding native capabilities to simulate phishing, malware, or ransomware scenarios will help teams validate protection and train users without relying on third-party tools.
KL
IT Consultant at Rigorsys Inc
Protects against zero-day threats and provides a quick overview of the status of all desktops
The platform's real-time protection works by blocking or quarantining threats when a user clicks on a link or opens an email deemed suspicious. I recommend it for those focused on zero-day threats. However, if you're looking for a one-size-fits-all solution, you may need more than one product. Overall, I rate it a nine out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I have found the solution to be very easy in respect of the integration and configurable."
"It blocks malicious files, prevents attacks, and doesn't require many updates because it is a very light application."
"They did what they said, and this solution could apply to any scenario."
"From the Palo Alto side, whatever they buy, they integrate that really well into their integration suite, and that makes a massive difference."
"The live terminal is probably the best thing ever. It gives you the access to get straight onto any machine."
"The most valuable features are incident creation, policy-based protection, IP whitelisting, and device encryption. These are beneficial for endpoint and server security."
"Cortex XDR by Palo Alto Networks has given us better endpoint visibility and richer investigation context, allowing us to identify suspicious activity, understand the attack path, and contain potential threats much faster than before."
"Cortex XDR is stable, offering high quality and reliable performance."
"My advice to anyone who is considering Check Point Endpoint Security is that it is a great solution that is very easy to deploy, and it really gives you visibility of what's happening on your endpoint."
"The anti-ransomware blade is great; it stops device encryption automatically and has caught hundreds of cases on client laptops."
"The biggest value we found was ease of deployment. I haven't really used it much, so I can't really comment beyond that. I haven't used it much, but it's working."
"The initial setup is very easy."
"The Antivirus engine's performance has been excellent."
"This solution helps make sure that we can patch and keep security going without having to talk to everyone for change management."
"It was probably one of the easiest products I've ever had to deploy, and I set it up and deployed it all from a mobile phone on a beach in about 20 minutes."
"After introducing Harmony Endpoint we have seen the incident levels going down to close to zero."
"We focus on zero-day threats, and Malwarebytes helps minimize the risk."
 

Cons

"Being able to filter the events to see those that are related to the actual alert would save time spent by the engineer."
"Cortex XDR by Palo Alto Networks is not only pricey; it is extremely expensive."
"For working with the solution, you only really need a web browser, however, we've found that working on Chrome, for example, is horrible."
"I would like to see them include NDR (Network Detection Response). Then it would work well with SIEM Response."
"The solution lags to the real-time scenarios here and there."
"They have the worst support, as a company, that I have ever worked with, as they are difficult to get a hold of and keep on the phone. They don't know what they are talking about when you get them on the phone. They don't like to respond to messages when you send them to them. They like to "research problems" for weeks on end, then pass you off to somebody else."
"Enhancing UI simplicity and playbook flexibility are areas that could benefit from more low-code automation options for smoother integrations."
"In an upcoming release, the solution could improve by proving hard disk encryption. If it could support this it would be a complete solution."
"I hope the agent size of Check Point Harmony Endpoint could be reduced for improvement."
"Need more documentation."
"If the IT department is used to "cloning" endpoints (making images) you are going to have a hard time trying to install the product and you are going to end up reading a lot of Check Point documents."
"Once we installed a CP agent in our system, we found that it was consuming more memory. Even a normal configuration system can be hung."
"Unfortunately, the web (cloud) management system and log search performance are quite bad."
"The solution needs better reports and centralized logs."
"Some users have reported high resource consumption, leading to performance issues on devices with limited hardware capability."
"Pattern-based security is not the latest architecture and it is insufficient because every day, there are approximately 380,000 new vulnerabilities and threats."
"The product's reporting functionality could be improved. Additionally, there could be enough documentation available."
 

Pricing and Cost Advice

"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."
"It's about $55 per license on a yearly basis."
"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."
"The pricing is a little bit on the expensive side."
"It is "expensive" and flexible."
"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."
"The price of the solution is high for the license and in general."
"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."
"Check Point Antivirus is a good solution, but it's a little costly."
"One of the key factors that made us go with this solution was the pricing. On the licensing part, there was an initial complementary set of licenses offered in the initial onboarding package, either 15 or 20. Then, we had some complementary licenses in the initial purchase of the package. That was pretty useful."
"Choosing the correct set of licenses is essential because, without the additional software blade licenses, the Check Point gateways are just a stateful firewall."
"Initial monies replacing all AVs with a single product is about £10k."
"Check Point Harmony Endpoint is an expensive solution. My company's clients pay INR 1,000 for each user of the product, while Check Point also provides an option to pay INR 2,300 for three years."
"The tool’s cost has increased by almost 300% in two years."
"I rate the product price a four on a scale of one to ten, where one is low, and ten is high."
"I rate Check Point Harmony Endpoint's pricing a seven out of ten because it is a little high."
"The product pricing is fair. They may negotiate if you contact them directly; otherwise, you'll pay the standard premium."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Outsourcing Company
16%
Construction Company
10%
Manufacturing Company
9%
Financial Services Firm
8%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
By reviewers
Company SizeCount
Small Business138
Midsize Enterprise64
Large Enterprise76
No data available
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Check Point Harmony Endpoint?
My experience with pricing indicates that the costs have increased compared to last year. Previously, Check Point Har...
What needs improvement with Check Point Harmony Endpoint?
Check Point Harmony Endpoint works well overall, but one area I would like to see improved is the reporting and dashb...
What is your primary use case for Check Point Harmony Endpoint?
Check Point Harmony Endpoint helps to secure our devices as my main use case for this product. When users need to acc...
Ask a question
Earn 20 points
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Check Point Endpoint Security, Endpoint Security, Check Point SandBlast Agent, Check Point Antivirus
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Boston Properties, Independence Care System, Melbourne Convention and Exhibition Centre (MCEC), Courtagen Life Sciences, Carmel Partners
Information Not Available
Find out what your peers are saying about SentinelOne, Microsoft, CrowdStrike and others in Endpoint Protection Platform (EPP). Updated: October 2026.
920,769 professionals have used our research since 2012.