Cisco Secure Endpoint vs Cisco Secure Workload comparison

Cisco Secure Endpoint and Cisco Secure Workload are both solutions in the Cisco Security Portfolio category. Cisco Secure Endpoint is ranked #7 with an average rating of 8.3, while Cisco Secure Workload is ranked #9 with an average rating of 9.5. Cisco Secure Endpoint holds a 11.6% mindshare in CSS, compared to Cisco Secure Workload’s 8.9% mindshare. Additionally, 96% of Cisco Secure Endpoint users are willing to recommend the solution, compared to 100% of Cisco Secure Workload users who would recommend it.

Cisco Secure Endpoint

Read 49 Cisco Secure Endpoint reviews

483 Views
0 Comparison Views

96% willing to recommend

Cisco Secure Workload

Read 15 Cisco Secure Workload reviews

330 Views
0 Comparison Views

100% willing to recommend

Cisco Secure Endpoint

Cisco Secure Workload

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Cisco Secure Endpoint and Cisco Secure Workload based on real PeerSpot user reviews.

Find out in this report how the two Cisco Security Portfolio solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Cisco Secure Endpoint vs. Cisco Secure Workload Report (Updated: June 2025).

Buyer's Guide

Cisco Secure Endpoint vs. Cisco Secure Workload

June 2025

Download the complete report

Helped 860,168 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cisco Secure Endpoint

Ranking in Cisco Security Portfolio

7th

Average Rating

8.6

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Endpoint Protection Platform (EPP) (25th), Endpoint Detection and Response (EDR) (19th)

Cisco Secure Workload

Ranking in Cisco Security Portfolio

9th

Average Rating

8.6

Reviews Sentiment

7.7

Number of Reviews

Ranking in other categories

Cloud and Data Center Security (8th), Cloud Workload Protection Platforms (CWPP) (13th), Microsegmentation Software (4th)

Mindshare comparison

As of July 2025, in the Cisco Security Portfolio category, the mindshare of Cisco Secure Endpoint is 11.6%, up from 7.0% compared to the previous year. The mindshare of Cisco Secure Workload is 8.9%, up from 3.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cisco Security Portfolio

Featured Reviews

Ahmed-Dawood

Director of IT at Oriental Weavers

A tool that offers good performance and technical support along with great protection to endpoint devices

The vendor from Cisco takes care of the maintenance. We need three people to take care of the tool in case of crashes. From the dashboard, we come to know about everything related to the endpoint. You can take action unless it is not the physical hardware to which something wrong has happened, especially if something wrong happens to the operating system. I would definitely recommend the solution to those planning to use it. To provide endpoint protection, I feel the product should be speedy enough to detect malicious programs and trojans. There are a lot of tools that are not acting as signature-based but as behavior-based antivirus. Cisco Secure Endpoint is required, especially if the customers don't have a sandbox. Overall, I rate the product an eight out of ten.

Read full review

Raj Metkar

Director, Head of Networks at MUFG, EMEA

Discover internal application dependencies and create a dependency map

We actively seek improvements in integrating the Infoblox DDI platform with Cisco Secure Workload. This integration allows Cisco Secure Workload to learn about our networks and network tags, providing valuable insights into vulnerabilities related to the operating system and various applications installed on our servers. Recently, Cisco announced a new product called HyperShield, an AI-based autonomous micro-segmentation solution. While Cisco has not stated that HyperShield will replace Cisco Secure Workload, it represents a natural evolution for the company. HyperShield features dynamic policy discovery and enforcement; however, once policies are enforced, they do not change until a discovery occurs, requiring a re-enforcement process. This new platform operates autonomously, minimizing the need for user or security engineer intervention. I would have expected Cisco to incorporate more automatic discovery and enforcement features within the existing Cisco Secure Workload product. Instead of enhancing the current product, they have introduced a new solution. Cisco plans to honor existing Tetration licenses, allowing users to transition to HyperShield without additional costs, reflecting the investment enterprises have already made. From Cisco’s perspective, this represents a natural progression in their product line. While the product name changes, it seems more of a rebranding effort. The enhancements are greater autonomy, improved discovery, and automatic enforcement, which are now being introduced in HyperShield. Cisco Secure Workload offers automatic policy enforcement but cannot adjust policies dynamically as the application needs to change. Having used the platform for the past five years, the recent announcement has been reassuring. Cisco has confirmed that our investment in the platform will not go to waste. They will honor our existing licenses, providing a natural migration path to the new solution without any disruption

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The best feature that we found most valuable, is actually the security product for the endpoint, formerly known as AMP. It has behavioral analytics, so you can be more proactive toward zero-day threats. I found that quite good."

"The ability to detonate a particular problem in a sandbox environment and understand what the effects are, is helpful. We're trying, for example, to determine, when people send information in, if an attachment is legitimate or not. You just have to open it. If you can do that in a secure sandbox environment, that's an invaluable feature. What you would do otherwise would be very risky and tedious."

"With Cisco Secure Endpoint, we now have visibility over what is happening on the endpoint side."

"There are several valuable features including strong prevention and exceptional reporting capabilities."

"The console feature gives a centralized management of what's going on, and if something happens, it gives you an alert. So, that's the most important feature for me."

"The most valuable feature is its threat protection and data privacy, including its cyber attack and data protection, as we need to cover and protect data on user devices."

"The stability of the solution is perfect. I believe it's the most stable solution on the market right now."

"The most valuable feature at this moment is that Cisco AMP or Cisco Secure Endpoint solution is delivering a lot of things, and I always say to a lot of customers that if we didn't have Cisco AMP, we probably would have had ransomware somewhere. So, it's protecting us very well from a lot of hackers, malware, and especially ransomware."

More Cisco Secure Endpoint pros

"It's stable."

"A complete and powerful micro-segmentation solution."

"The most valuable feature of this solution is security."

"Generally speaking, Cisco support is considered one of the best in the networking products and stack."

"Scalability is its most valuable feature."

"Secure Workload's best feature is that it's an end-to-end offering from Cisco."

"The most valuable feature of the solution is that we don't have to do packet captures on the network."

"The most valuable feature is micro-segmentation, which is the most important with respect to visibility."

More Cisco Secure Workload pros

Cons

"The technical support is very slow."

"We would like to have an API integration with a SIEM solution, because as far as I know, it currently hasn't yet been released."

"We have had some problems with updates not playing nice with our environment. This is important, because if there is a new version, we need to test it thoroughly before it goes into production. We cannot just say, "There's a new version. It's not going to give us any problems." With the complexity of the solution using multiple engines for multiple tasks, it can sometimes cause performance issues on our endpoints. Therefore, we need to test it before we deploy. That takes one to three days before we can be certain that the new version plays nice with our environment."

"The connector updates are very easily done now, and that's improving. Previously, the connector had an issue, where almost every time it needed to be updated, it required a machine reboot. This was always a bit of an inconvenience and a bug. Because with a lot of software now, you don't need to do that and shouldn't need to be rebooting all the time."

"The one challenge that I see is the use of multiple endpoint protection platforms. For instance, we have AMP, but we also have Microsoft Windows Defender, System Center Endpoint Protection, and Microsoft Malware Protection Engine deployed. So, we have a bunch of different things that do the same thing. What winds up happening is, e.g., if I get an alert for a potential incident or malware and want to pull the file, I'll go to fetch the file to analyze it. But, one of these other programs has already gotten it, so the file has already been quarantined by another endpoint protection system. AMP doesn't realize that and the file fetch fails, then you're left wondering what's going on."

"On the firewall level, they were lagging a little bit behind, but they are running up again. I have full trust in the new 3000 series of firewalls where we would also be able to look more into the traffic that we're monitoring and get more security layers in our services. That would definitely be a big step."

"Cisco Secure Endpoint lacks features like DLP which other vendors offer. XDR is new, so integration capabilities with third-party tools need improvement."

"They could improve the main dashboard to more clearly show me the things that I want to see. When I open the dashboard right now, I see a million things and they are not always the things that I need."

More Cisco Secure Endpoint cons

"Secure Workload is a little complicated to use, and the dashboard isn't intuitive, so it takes a while to learn how to use it."

"There was a controversy when Cisco reduced the amount of data they kept, and the solution became quite cost-intensive, which made its adoption challenging….Although they have modified it now, I preferred the previous version, and I wish all the functionality were back under the same product."

"The multi-tenancy, redundancy, backup and restore functionalities, as well as the monitoring aspects of the solution, need improvement. The solution offers virtually no enterprise-grade possibility for monitoring."

"The emailed notifications are either hard to find or they are not available. Search capabilities can be improved."

"They should scale down the hardware a bit. The initial hardware investment is two million dollars so it's a price point problem. The issue with the price comes from the fact that you have to have it with enormous storage and enormous computes."

"I'd like to see better documentation for advanced features. The documentation is fairly basic. I would also like to see better integration with other applications."

"The interface is really helpful for technical people, but it is not user-friendly."

"It has an uninviting interface."

More Cisco Secure Workload cons

Pricing and Cost Advice

"The price is very fair to the customer."

"It can always be cheaper."

"It is quite cost-effective. I would rate it ten out of ten."

"It is an expensive solution."

"I rate the pricing a five or six on a scale of one to ten, where one is expensive, and ten is cheap."

"The costs of 50 licenses of AMP for three years is around $9,360."

"Pricing is a big issue."

"We had faced some license issues, but it has been improved. At the beginning of the implementation, we faced a lot of licensing issues, but now, we have EA licensing, which gives us an opportunity to grow."

More Cisco Secure Endpoint pricing and cost advice

"The cost for the hardware is around 300k."

"Pricing depends on the scope of the application and the features. Larger installations save more."

"It is not cheap and pricing may limit scalability."

"The price is outrageous. If you have money to throw at the product, then do it."

"Regarding price, Cisco Secure Workload can be expensive if you don't have a budget. If you're not doing micro-segmentation, every extra security measure or enforcement you're putting on top of your existing environment will be an extra cost. It's not a cheap solution at all. But from my point of view, if you need to do micro-segmentation, this is one of the best tools I've seen for it. I can't compare that to Microsoft's solution because I haven't looked into it. I've looked into VMware and Cisco. Those are the only two that I know of. I didn't know that Microsoft could do micro-segmentation at all. Maybe they can, but I haven't heard anything about it."

"The price is based on how many computers you're going to install it on."

"The pricing is a bit higher than we anticipated."

See which vendors are best for you

Use our free recommendation engine to learn which Cisco Security Portfolio solutions are best for your needs.

See recommendations

860,168 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

23%

Manufacturing Company

Financial Services Firm

Government

Computer Software Company

24%

Manufacturing Company

10%

Financial Services Firm

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Cisco Secure Endpoint?

The product's initial setup phase was very simple.

See all answers

What is your experience regarding pricing and costs for Cisco Secure Endpoint?

Cisco is aggressive in pricing, making it competitive and sometimes even cheaper than other good products like CrowdStrike, Microsoft Defender, or SentinelOne.

See all answers

What needs improvement with Cisco Secure Endpoint?

Cisco Secure Endpoint lacks features like DLP which other vendors offer. XDR is new, so integration capabilities with third-party tools need improvement. The forensic capabilities need enhancement,...

See all answers

What do you like most about Cisco Secure Workload?

The product provides multiple-device integration.

See all answers

What is your experience regarding pricing and costs for Cisco Secure Workload?

CloudStrike offers antivirus capabilities and firewall features for servers and VDI but lacks automatic policy discovery. This raises questions about the resources required to discover and write po...

See all answers

What needs improvement with Cisco Secure Workload?

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cisco Secure Endpoint

Compared 15% of the time

CrowdStrike Falcon vs Cisco Secure Endpoint

Compared 10% of the time

SentinelOne Singularity Complete vs Cisco Secure Endpoint

Compared 6% of the time

Check Point Harmony Endpoint vs Cisco Secure Endpoint

Compared 4% of the time

Bitdefender GravityZone EDR vs Cisco Secure Endpoint

Compared 3% of the time

More Cisco Secure Endpoint Competitors

Cisco Hypershield vs Cisco Secure Workload

Compared 23% of the time

Akamai Guardicore Segmentation vs Cisco Secure Workload

Compared 17% of the time

Illumio vs Cisco Secure Workload

Compared 16% of the time

Cisco ACI vs Cisco Secure Workload

Compared 10% of the time

Microsoft Defender for Cloud vs Cisco Secure Workload

Compared 2% of the time

More Cisco Secure Workload Competitors

Product Reports

Buyer's Guide

Cisco Secure Endpoint

June 2025

Download Cisco Secure Endpoint product report

Buyer's Guide

Cisco Secure Workload

June 2025

Download Cisco Secure Workload product report

Also Known As

Cisco AMP for Endpoints

Cisco Tetration

Overview

Cisco Secure Endpoint is a comprehensive endpoint security solution that natively includes open and extensible extended detection and response (XDR) and advanced endpoint detection and response (EDR) capabilities. Secure Endpoint offers relentless breach protection that enables you to be confident, be bold, and be fearless with one of the industry’s most trusted endpoint security solutions. It protects your hybrid workforce, helps you stay resilient, and secures what’s next with simple, comprehensive endpoint security powered by unique insights from 300,000 security customers and deep visibility from the networking leader.

Cisco Secure Endpoint was formerly known as Cisco AMP for Endpoints.

Reviews from Real Users

Cisco Secure Endpoint stands out among its competitors for a number of reasons. Two major ones are its ability to enable developers to easily secure their endpoints with one single operation using its management console and its advanced alerting techniques.

Tim C., an IT manager at Van Der Meer Consulting, writes, "The solution makes it possible to see a threat once and block it everywhere across all endpoints and the entire security platform. It has the ability to block right down to the file and application level across all devices based on policies, such as, blacklisting and whitelisting of software and applications. This is good. Its strength is the ability to identify threats very quickly, then lock them and the network down and block the threats across the organization and all devices, which is what you want. You don't want to be spending time working out how to block something. You want to block something very quickly, letting that flow through to all the devices and avoiding the same scenario on different operating systems."

Wouter H., a technical team lead network & security at Missing Piece BV, notes, "Any alert that we get is an actionable alert. Immediately, there is information that we can just click through, see the point in time, what happened, what caused it, and what automatic actions were taken. We can then choose to take any manual actions, if we want, or start our investigation. We're no longer looking at digging into information or wading through hundreds of incidents. There's a list which says where the status is assigned, e.g., under investigation or investigation finished. That is all in the console. It has taken away a lot of the administration, which we would normally be doing, and integrated it into the console for us."

Cisco

Cisco Secure Workload is a cloud and data security solution that offers a zero-trust policy of keeping an organization’s application workloads safe and secure throughout the entire on-premise and cloud data center ecosystems.

Cisco Secure Workload will consistently provide protection by discovering workload process anomalies, stopping threats immediately, minimizing the risk threat surface, and aborting any lateral movement.

Today’s ecosystems are very elastic, and in the application-focused dynamic of today’s aggressive marketplace, Cisco Secure Workload delivers a robust security solution that works effectively with today’s most popular applications. The solution uniquely surrounds each and every workload to ensure organizations are able to keep their data, network, and applications safe and secure at all times. Cisco Secure Workload ensures that enterprise organizations can maintain secure applications by consistently building firewalls around every workload level throughout the entire ecosystem. The solution can manage applications that are deployed on containers, virtual machines, or bare-metal servers.

Cisco Secure workload is able to meet an organization's busy needs and offers flexible options such as Software-as-a-Service (SaaS) and on-premises options. Using the Secure Workload SaaS options, users receive all the benefits of Cisco Secure Workload protection without the hassle of having to deploy and maintain the platform on premises. Users are responsible for acquiring the necessary software licensing and deploying software agents. Using SaaS, Secure Workload runs in the cloud and is operated and maintained by Cisco. This option offers the ability to scale easily and is a popular choice for SaaS-first and SaaS-only clients. Many organizations find they get the best TCO and achieve the best productivity and profitability using the SaaS options.

When choosing on-premises options, organizations choose between hardware-based appliance models (large or small form factors). Platform selection is dependent on scalability goals, the desired fidelity level of flow telemetry, and the actual number of workloads. When a user chooses to configure Cisco Secure Workload for a conversation-only flow telemetry for all workloads, each platform has the capability to scale up vertically twice the default platform scale. Additionally, with Secure Workload, it is possible for the platform to be scaled horizontally in order to satisfy the demands of extra large widely distributed enterprise environments using federation capabilities.

Cisco Secure Workload also provides a robust disaster recovery (DR) tool, which helps to make it a complete, comprehensive solution. The DR allows for continuous restore and backup capabilities that enable users to quickly remediate operations and data to a standby cluster in the event of a drastic failure or disaster.

Reviews from Real Users

“The solution offers 100% telemetry coverage. The telemetry you collect is not sampled, it's not intermittent. It's complete. You see everything in it, including full visibility of all activities on your endpoints and in your network. Other valuable features include vast support for annotations, flexible user applications, machine learning, automatic classification, and hierarchical policies.” - CTO at a tech vendor

Cisco

Sample Customers

Heritage Bank, Mobile County Schools, NHL University, Thunder Bay Regional, Yokogawa Electric, Sam Houston State University, First Financial Bank

ADP, University of North Carolina Charlotte (UNCC)

Buyer's Guide

Cisco Secure Endpoint vs. Cisco Secure Workload

June 2025

Free Report: Cisco Secure Endpoint vs. Cisco Secure Workload

Find out what your peers are saying about Cisco Secure Endpoint vs. Cisco Secure Workload and other solutions. Updated: June 2025.

DOWNLOAD NOW

860,168 professionals have used our research since 2012.

See our Cisco Secure Endpoint vs. Cisco Secure Workload report.

See our list of best Cisco Security Portfolio vendors.

We monitor all Cisco Security Portfolio reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.