


Vectra AI and Check Point Infinity compete in the cybersecurity space, focusing on threat detection and network security. Vectra AI holds an edge in network threat detection by enriching context for incidents, though Check Point Infinity offers a more comprehensive architecture covering various security infrastructure aspects.
Features: Vectra AI integrates multiple alerts into actionable incidents, enhances threat detection across network metadata, and provides enriched context beyond SIEM capabilities. Check Point Infinity offers a unified security infrastructure, covering endpoints, cloud environments, and mobile devices, and provides granular policy enforcement with identity awareness.
Room for Improvement: Vectra AI lacks depth in host-level detail and requires further integration with SIEMs for comprehensive visibility, with ongoing cloud integration development. Check Point Infinity faces challenges with high pricing, complex licensing, and slow technical support for newer cloud features. Both systems could benefit from better integration with third-party tools and enhanced documentation.
Ease of Deployment and Customer Service: Vectra AI focuses on on-premises deployment with hybrid cloud options and is praised for responsive technical support. Its deployment process is smooth due to personalized support. Check Point Infinity provides versatile deployment options, supporting public and hybrid cloud models, though its support could improve in responsiveness for better operational experiences.
Pricing and ROI: Vectra AI's pricing is considered expensive with a complex licensing model based on IPs and environment size, affecting smaller organizations. Despite this, it offers significant ROI through a better security posture and reduced response times. Check Point Infinity also features high costs and complicated licensing, with additional licenses often needed for full functionality, making it more suitable for larger enterprises that can leverage the enhanced security operations for justified expenses.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
In Cortex XDR by Palo Alto Networks, most of the remediation is automated and the accuracy is quite good.
When I use different Check Point tools, I save support time overall.
The value is in the capacity to protect against problems or attacks with technology, developing and strengthening cybersecurity policies and administration.
I would say we can save about 90% of our budget with Check Point Infinity.
The payback period is roughly six months.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
As soon as we raise a ticket, they engage promptly, indicating strong vendor support.
The technical support is excellent with quick response times.
Check Point support is very responsive.
The support is quite reliable depending on the service engineer assigned.
When I create tickets, the response is fast, and issues are solved promptly.
Customer support receives a rating of nine out of ten due to being very supportive and responding quite efficiently.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
I think scalability for Cortex XDR by Palo Alto Networks is good.
The Infinity Portal lets us manage on-premises, cloud and edge environments from a single elastic console.
We have not faced any issues with scalability.
Check Point Infinity is scalable because Check Point has a deployment ecosystem with technical support and the quality of the final information from these tools.
Vectra AI is scalable because it can work through different kinds of solutions and is compatible with all kinds of cloud solutions.
Cortex remains fast and responsive, even with increasing data and alerts.
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Cortex XDR is stable, offering high quality and reliable performance.
Check Point Infinity is a very stable solution; I don't remember experiencing any downtime.
Check Point Infinity is very stable for our company.
Check Point Infinity has achieved a 99.9% block rate on zero-day malware in the 2025 Miercom test.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
If the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better.
A more guided setup process or contextual help within the dashboard would make it easier for new team members to get up to speed.
I would recommend having more comprehensive documentation, including a guide for installation and configuration of Check Point Infinity.
I would improve Check Point Infinity by embedding some sort of analytics that indicates which attacks are coming from specific IP addresses very often so that we can block those IP addresses.
ExtraHop's ability to decrypt encrypted data is a feature that Vectra AI lacks.
You need to have a Linux server, and from the Linux server, you must perform AI tasks, and there is a lot to be handled in the back end.
All threats, including hacking attempts, should be comprehensively addressed.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Cortex XDR is perceived as expensive by some customers, yet offers dynamic pricing.
In terms of pricing, I find Check Point Infinity to be an expensive product.
The setup cost or license is very high.
We received a relative discount for this.
Vectra is cheaper in terms of pricing and features compared to Darktrace.
It is very acceptable when you compare it with Darktrace, for example.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
Check Point uses robust AI software to detect and recognize all cyber-attacks, giving me the ability to prevent these attacks.
Check Point Infinity has positively impacted my organization by making everything better, including the speed of the network and the security.
We have seen a faster response time and reduced effort from the network and security engineers while going through logs.
Our company used Vectra AI to detect the malicious threats and viruses before they could cause more damage, and we successfully stopped the threats.
Alert noise was dramatically reduced by nearly 80%, allowing SOC analysts to focus more on true threats, which made them more productive and resulted in higher operational efficiency.
There are extensive out-of-box detection capabilities.
| Product | Mindshare (%) |
|---|---|
| Cortex XDR by Palo Alto Networks | 9.9% |
| Vectra AI | 9.5% |
| Check Point Infinity | 2.8% |
| Other | 77.8% |


| Company Size | Count |
|---|---|
| Small Business | 44 |
| Midsize Enterprise | 20 |
| Large Enterprise | 47 |
| Company Size | Count |
|---|---|
| Small Business | 40 |
| Midsize Enterprise | 9 |
| Large Enterprise | 10 |
| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 10 |
| Large Enterprise | 29 |
Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.
Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.
What are the key features of Cortex XDR?Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.
Check Point Infinity is the only fully consolidated cyber security architecture that provides unprecedented protection against Gen V mega-cyber attacks as well as future cyber threats across all networks, endpoint, cloud and mobile. The architecture is designed to resolve the complexities of growing connectivity and inefficient security. Learn more about Check Point Infinity
Vectra AI offers advanced hybrid network and identity security, detecting threats traditional tools miss. It uses AI to identify lateral attacks and credential misuse, providing a proactive defense for enterprises.
Vectra AI enhances security by using AI-driven detection across network, cloud, and identity layers, surpassing EDR and SIEMs by offering real-time threat detection. It ensures continuous observability and automates SOC workflows to minimize manual efforts, creating an efficient security environment. Its AI-powered approach significantly reduces noise, focusing on true threats, and provides insights into complex threat landscapes, with seamless integration into environments like EDR and Office 365.
What are Vectra AI's key features?Vectra AI is utilized across industries for comprehensive network and anomaly detection. Organizations deploy it for threat hunting and incident response, monitoring both on-premises and cloud activities. By placing sensors across sites, they optimize security practices and streamline their detection processes.
We monitor all AI-Powered Cybersecurity Platforms reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.