Cisco Secure Endpoint vs Stormshield Endpoint Security comparison

Cisco Secure Endpoint vs. Stormshield Endpoint Security

Download the complete report

Helped 900,644 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of June 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.7%, down from 3.8% compared to the previous year. The mindshare of Cisco Secure Endpoint is 1.3%, down from 1.5% compared to the previous year. The mindshare of Stormshield Endpoint Security is 0.6%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.7%
Cisco Secure Endpoint	1.3%
Stormshield Endpoint Security	0.6%
Other	94.4%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

JavedHashmi

Chief Technology Officer at Future Point Technologies

Reliable threat protection is achieved while integration and analysis capabilities need refinement

Cisco Secure Endpoint is very good in machine learning, which allows it to secure offline contents even if not connected to the internet. We haven't encountered a single breach after it's deployed. It controls USB devices and has a separate antivirus solution called Tetra, providing security even for real-time, day-zero attacks through its strong Talos threat intelligence platform.

Read full review

it_user745593

Senior Project Manager, PMP at a transportation company with 10,001+ employees

Protects the global station and has good stability

The feature I find most valuable is that it protects the global station The solution's integration with the Windows environment could be better. The solution needs better integration with products, if it did, it would have the assumption of better security. I've been using the solution since…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution allows us to make investigations. Other XDR solutions also provide similar capabilities but for investigation, Cortex XDR is better."

"It is easy to use."

"My advice for anybody who is considering Cortex XDR is that it is a complete solution, and has very good features."

"Their XDR agent and their behavioral indicators of compromise (BIOC) are pretty nice. Their managed threat hunting is also pretty nice. They also have WildFire, which is a service for actively looking for malware. It's quite useful."

"It is a simple platform to use."

"We can use Cortex XDR to get the entire graph of the incidents from source to destination, and we can take remedial action."

"The live terminal is probably the best thing ever. It gives you the access to get straight onto any machine."

"Implementing Cortex XDR by Palo Alto Networks has had a significant impact on my security analyst workload because it becomes much easier."

More Cortex XDR by Palo Alto Networks pros

"The implementation was performed, with support from Cisco partners, in a few hours and in the following days AMP 4 Endpoints found many things that the old antivirus solution missed, which was a very huge advantage for us."

"There are several valuable features including strong prevention and exceptional reporting capabilities."

"The stability of the solution is perfect. I believe it's the most stable solution on the market right now."

"The solution's integration capabilities are excellent. It's one of the best features."

"The tool's most valuable feature is its integration with other Cisco products, such as switches and routers. This integration allows comprehensive coverage of security parameters across the customer's entire network. Customers find it easier to manage because they already know Cisco products. The cloud-based management is another valuable feature, enabling customers to manage their security from anywhere with an internet connection."

"Cisco has definitely improved our organization a lot. In terms of business, our company feels safer. We actually switched from legacy signature-based solutions to threat intelligence-based and machine learning-based solutions, which is Cisco Secure. This has improved our security significantly, from 10% of signature-based technology security to 99.9% of the current one which we are running. We were happy."

"We have seen a measurable decrease in the mean time to detect or respond to threats by 90 percent, blocking a vast majority of threats."

"Real-time threat prevention using sandboxing, file trajectory, and retrospective security."

More Cisco Secure Endpoint pros

"It is very good for preventing cryptolocker attacks."

"If you need a Windows based multi-functional end-point security solution then this product is for you."

"The feature I find most valuable is that it protects the global station."

Cons

"It is a complex solution to implement."

"We had a problem with getting our older endpoints up to date, but their newest updates have been really good. I've been pleased with it in terms of what our needs are. It's doing what we want it to do."

"This product has not improved my organization - in fact, we are in the process of moving back to another product as a result of Cortex's horrible impact on system performance."

"The onboarding process could be better."

"It is an enterprise-level solution. Its price could be less expensive."

"The downsides of Cortex XDR by Palo Alto Networks are that in many incidents, when I enter the causality chain, there are numerous logs."

"The technical support is not very good. I find the process difficult."

"Currently, if you use Palo Alto endpoint protection as the only solution it's very complicated to remove pre-existing threats."

More Cortex XDR by Palo Alto Networks cons

"I would like more seamless integration, because I have a security solution based on Cisco and I'm looking at integration for the old solution."

"The one challenge that I see is the use of multiple endpoint protection platforms. For instance, we have AMP, but we also have Microsoft Windows Defender, System Center Endpoint Protection, and Microsoft Malware Protection Engine deployed. So, we have a bunch of different things that do the same thing. What winds up happening is, e.g., if I get an alert for a potential incident or malware and want to pull the file, I'll go to fetch the file to analyze it. But, one of these other programs has already gotten it, so the file has already been quarantined by another endpoint protection system. AMP doesn't realize that and the file fetch fails, then you're left wondering what's going on."

"We have had some problems with updates not playing nice with our environment."

"The technical support is very slow."

"The thing I hate the most, which they have not fixed, is when it creates duplicate entries within a console. If you have a computer and you upgrade from Windows 7 to Windows 10, or you upgrade your agent from version 6 to 7, it creates a new instance in there instead of updating the information. Instead of paying a license for one computer, I have to license two computers until I manually go in, search for all the duplicate entries, and clean them out myself."

"One of the things that Cisco Secure Endpoint really needs is that it's not just Secure Endpoint, it's a point product, and I think we really need to move into solution-based selling, designing, and architecting. So that we're not worried about putting things on endpoints and selling 'x' amount of endpoints, but to provide a solution that covers all of the remote access and sell them as solutions that cover multiple things."

"Its price is okay for us, but it can always be better. There's always room for improvement when it comes to pricing."

"Logging could be better in terms of sending more logs to Cisco Firepower or Cisco ASA. That's an area where it could be made better."

More Cisco Secure Endpoint cons

"Only Windows based. Dependence on MS updates and service start-up priority."

"The solution's integration with the Windows environment could be better."

"Release speed for newer versions. When a new OS is released, you've got to wait half year to get the new version that covers the new Windows OS."

Pricing and Cost Advice

"I am using the Community edition."

"The pricing is a little bit on the expensive side."

"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."

"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."

"Cortex XDR's pricing is ok."

"It has reasonable pricing for the use cases it provides to the company."

"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"The solution is highly affordable; I believe we pay $2 or $3 per endpoint. It's significantly cheaper than the competitors on the market."

"We have a license for 3,000 users and if we get up to 3,100 users, it doesn't stop working, but on the next renewal date you're supposed to go in there and add that extra 100 licenses. It's really good that they let you grow and expand and then pay for it. Sometimes, with other products, you overuse a license and they just don't work."

"Pricing can be more expensive than similar software that does less functionality, but not recognized by customers."

"Whenever you are doing the licensing process, I would highly advise to look at what other Cisco solutions you have in your organization, then evaluate if an Enterprise Agreement is the best way to go. In our case, it was the best way to go. Since we had so many other Cisco products, we were able to tie those in. We were actually able to get several Cisco security solutions for less than if we had bought three or four Cisco security solutions independently or ad hoc."

"The costs of 50 licenses of AMP for three years is around $9,360."

"I rate the pricing a five or six on a scale of one to ten, where one is expensive, and ten is cheap."

"The Enterprise Agreement is like an all-you-can-eat buffet of Cisco products. In that vein, it was very affordable."

"My company does make annual payments towards the licensing costs of the solution. Cisco Secure Endpoint is a little bit expensive."

More Cisco Secure Endpoint pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

900,644 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

12%

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Manufacturing Company

10%

Financial Services Firm

Government

Construction Company

Comms Service Provider

16%

Financial Services Firm

11%

Construction Company

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	46
Midsize Enterprise	20
Large Enterprise	52

By reviewers
Company Size	Count
Small Business	21
Midsize Enterprise	15
Large Enterprise	21

No data available

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What is your experience regarding pricing and costs for Cisco Secure Endpoint?

Cisco is aggressive in pricing, making it competitive and sometimes even cheaper than other good products like CrowdS...

What needs improvement with Cisco Secure Endpoint?

Cisco Secure Endpoint lacks features like DLP which other vendors offer. XDR is new, so integration capabilities with...

What is your primary use case for Cisco Secure Endpoint?

We deployed Cisco Secure Endpoint for our customers two to three years back. The use case was to secure their endpoin...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Ask a question

Earn 20 points

Comparisons

Compared 10% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

CrowdStrike Falcon vs Cisco Secure Endpoint

Compared 6% of the time

Microsoft Defender for Endpoint vs Cisco Secure Endpoint

Compared 5% of the time

SentinelOne Singularity Endpoint vs Cisco Secure Endpoint

Compared 5% of the time

VMware Carbon Black Workload vs Cisco Secure Endpoint

Compared 3% of the time

Cisco Umbrella vs Cisco Secure Endpoint

Compared 3% of the time

More Cisco Secure Endpoint Competitors

Symantec Endpoint Security vs Stormshield Endpoint Security

Compared 21% of the time

Sophos Endpoint vs Stormshield Endpoint Security

Compared 11% of the time

Trellix Endpoint Security Platform vs Stormshield Endpoint Security

Compared 9% of the time

Fortinet FortiClient vs Stormshield Endpoint Security

Compared 6% of the time

WithSecure Elements Endpoint Protection vs Stormshield Endpoint Security

Compared 5% of the time

More Stormshield Endpoint Security Competitors

Product Reports

Cortex XDR by Palo Alto Networks

Download Cortex XDR by Palo Alto Networks product report

Cisco Secure Endpoint

Download Cisco Secure Endpoint product report

Endpoint Protection Platform (EPP)

Download Stormshield Endpoint Security product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Cisco AMP for Endpoints

SkyRecon Systems StormShield Security Suite

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Cisco Secure Endpoint offers robust endpoint security with real-time threat prevention and cloud-based management. It is designed for seamless integration with Cisco products, delivering comprehensive protection and ease of use.

Cisco Secure Endpoint provides real-time threat detection, analytics, and rapid response capabilities. Its ease of use, integrated features like sandboxing and Device and File Trajectory, and its incorporation with Talos make it effective for threat hunting and endpoint protection. With strong machine learning and seamless integration with other tools, it addresses threat prevention and network visibility. However, there is room for improvement in AI features, SIEM API integration, user interface simplification, and cost reduction. Enhanced dashboards, reporting, and support are also areas for potential enhancement.

What are the primary features of Cisco Secure Endpoint?

Integration with Cisco Products: Seamlessly connects with Cisco's offerings like Umbrella and Firepower, providing extended security measures.
Real-Time Threat Prevention: Delivers live threat detection and rapid response, ensuring immediate protection against threats.
Cloud-Based Management: Offers ease of deployment and management through cloud infrastructure, enhancing accessibility and efficiency.
Sandboxing: Provides an isolated environment to safely execute and monitor untrusted applications, preventing potential threats.
Device and File Trajectory: Tracks the actions of devices and files over time, offering valuable insight into their behavior and impact.
Talos Integration: Leverages intelligence from Cisco Talos for enhanced threat intelligence and response capabilities.

What benefits are highlighted in reviews of Cisco Secure Endpoint?

Improved Threat Detection: Users highlight its powerful analytics for identifying and neutralizing threats promptly.
Enhanced Network Visibility: Allows for comprehensive monitoring of network activities, benefiting security operations.
User-Friendly Interface: Valued for its intuitive navigation and ease of use, streamlining security management.
Scalable Integration: Reviews emphasize the ease of integrating with existing tools and platforms, providing flexibility.
Rapid Threat Response: Known for its quick reaction to threats, minimizing potential damage and downtime.

In industries such as finance, healthcare, and manufacturing, Cisco Secure Endpoint is vital for maintaining endpoint security and malware protection. Organizations use it within managed security services, integrating with tools like Umbrella for DNS security. It provides visibility into malware activities and supports threat hunting for devices beyond corporate networks. Deployed on workstations, servers, and laptops, it efficiently logs and blocks malicious actions, ensuring a secure environment.

Cisco

Stormshield Endpoint Security provides robust protection, safeguarding critical business operations against evolving threats. It addresses security needs with advanced solutions that ensure comprehensive threat management and mitigation.

Stormshield Endpoint Security is tailored for a tech-savvy audience seeking reliable defense mechanisms to protect sensitive data. It combines cutting-edge technologies to provide a high level of security. Whether dealing with targeted attacks or generic malware, businesses trust its versatile approach, running seamless operations while mitigating risks. It supports endpoints with minimal impact on performance, ensuring continuous productivity.

What are the key features of Stormshield Endpoint Security?

Behavioral Analysis: Detects potential threats by analyzing activity patterns, ensuring proactive security measures.
Application Control: Restricts unwanted applications, allowing only approved programs to run, reducing vulnerability.
Network Protection: Secures data in transit by monitoring network traffic and preventing unauthorized access.
Advanced Threat Intelligence: Utilizes threat intelligence to anticipate attacks and respond swiftly to new security challenges.

What benefits should users expect when evaluating Stormshield Endpoint Security?

Cost-Efficiency: Reduces potential losses from security breaches, justifying investment with strong threat prevention.
Scalability: Adapts to business growth, offering consistent protection without requiring constant upgrades.
Easy Deployment: Provides straightforward installation and configuration, allowing quick adoption and minimal downtime.
Compliance Support: Helps meet industry standards, ensuring regulatory adherence for enhanced trust and credibility.

In sectors like finance and healthcare, Stormshield Endpoint Security is implemented to safeguard sensitive client data and meet compliance standards. In manufacturing, it secures networks from industrial espionage, addressing unique challenges by providing tailored security enhancing business resilience.

Stormshield

Sample Customers

CBI Health Group, University Honda, VakifBank

Heritage Bank, Mobile County Schools, NHL University, Thunder Bay Regional, Yokogawa Electric, Sam Houston State University, First Financial Bank

Arkoon, Netasq

Cisco Secure Endpoint vs. Stormshield Endpoint Security