Cisco Secure Endpoint vs Stormshield Endpoint Security comparison

Cisco and Stormshield are both solutions in the Endpoint Protection Platform (EPP) category. Cisco is ranked #32 with an average rating of 8.7, while Stormshield is ranked #56. Cisco holds a 1.3% mindshare in EPP, compared to Stormshield’s 0.6% mindshare. Additionally, 96% of Cisco users are willing to recommend the solution, compared to 100% of Stormshield users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Stormshield Endpoint Security and Cisco Secure Endpoint are two prominent security solutions in the market. Cisco Secure Endpoint stands out due to its comprehensive features, making it a preferred choice for many users.

Features: Stormshield Endpoint Security is praised for robust threat detection, lightweight operation, and cost-effectiveness. Cisco Secure Endpoint garners positive feedback for extensive integration capabilities, advanced malware protection, and diverse security protocols.

Room for Improvement: Users of Stormshield Endpoint Security highlight a need for better scalability, more frequent updates, and enhanced features. Comparatively, Cisco Secure Endpoint users point out the desire for a more intuitive configuration process, enhanced reporting tools, and improved usability.

Ease of Deployment and Customer Service: Stormshield Endpoint Security is recognized for its straightforward deployment and responsive customer support. Cisco Secure Endpoint, while appreciated for its deployment model, slightly falls behind due to reports of delayed support response times.

Pricing and ROI: Stormshield Endpoint Security is commended for its cost-effectiveness and strong perceived ROI. Cisco Secure Endpoint, although more costly, is justified by its advanced feature set, delivering solid value for the investment.

To learn more, read our detailed Cisco Secure Endpoint vs. Stormshield Endpoint Security Report (Updated: April 2026).

Buyer's Guide

Cisco Secure Endpoint vs. Stormshield Endpoint Security

April 2026

Download the complete report

Helped 893,221 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of May 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.6%, down from 3.9% compared to the previous year. The mindshare of Cisco Secure Endpoint is 1.3%, down from 1.5% compared to the previous year. The mindshare of Stormshield Endpoint Security is 0.6%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.6%
Cisco Secure Endpoint	1.3%
Stormshield Endpoint Security	0.6%
Other	94.5%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

JavedHashmi

Chief Technology Officer at Future Point Technologies

Reliable threat protection is achieved while integration and analysis capabilities need refinement

Cisco Secure Endpoint is very good in machine learning, which allows it to secure offline contents even if not connected to the internet. We haven't encountered a single breach after it's deployed. It controls USB devices and has a separate antivirus solution called Tetra, providing security even for real-time, day-zero attacks through its strong Talos threat intelligence platform.

Read full review

it_user745593

Senior Project Manager, PMP at a transportation company with 10,001+ employees

Protects the global station and has good stability

The feature I find most valuable is that it protects the global station The solution's integration with the Windows environment could be better. The solution needs better integration with products, if it did, it would have the assumption of better security. I've been using the solution since…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The dashboard is customizable."

"The solution allows us to make investigations. Other XDR solutions also provide similar capabilities but for investigation, Cortex XDR is better."

"The most valuable feature of Cortex XDR by Palo Alto Networks is its machine-learning capabilities. Additionally, there is full integration with other solutions."

"The product is very good, it has caught a lot of exploits that most products would not."

"There are a lot of lead solutions in this space, however, Palo Alto is number one."

"Implementing Cortex XDR by Palo Alto Networks has had a significant impact on my security analyst workload because it becomes much easier."

"The user interface of the solution is sophisticated and straightforward."

"We think that this product will help us grow, as it meets our needs currently and we can grow with it over time."

More Cortex XDR by Palo Alto Networks pros

"appreciate the File Trajectory feature, as it's excellent for an analyst or mobile analyst. I can track everything that happens on our server from my PC or device. Integration with SecureX is a welcome feature because it connects Cisco's integrated security portfolio with our complete infrastructure. Sandboxing is helpful, and integration with the Cisco environment is excellent as we use many of their products, and that's very valuable for us."

"The stability of the solution is perfect. I believe it's the most stable solution on the market right now."

"The Cisco environment has been perfect."

"The solution's integration capabilities are excellent. It's one of the best features."

"The most valuable feature is its threat protection and data privacy, including its cyber attack and data protection, as we need to cover and protect data on user devices."

"It doesn't impact the devices. It is an agent-based solution, and we see no performance knock on cell phones. That was a big thing for us, especially in the mobile world. We don't see battery degradation like you do with other solutions which really drain the battery, as they're constantly doing things. That can shorten the useful life of a device."

"Real-time threat prevention using sandboxing, file trajectory, and retrospective security."

"Any alert that we get is an actionable alert. Immediately, there is information that we can just click through, see the point in time, what happened, what caused it, and what automatic actions were taken. We can then choose to take any manual actions, if we want, or start our investigation. We're no longer looking at digging into information or wading through hundreds of incidents. There's a list which says where the status is assigned, e.g., under investigation or investigation finished. That is all in the console. It has taken away a lot of the administration, which we would normally be doing, and integrated it into the console for us."

More Cisco Secure Endpoint pros

"It is very good for preventing cryptolocker attacks."

"The feature I find most valuable is that it protects the global station."

"If you need a Windows based multi-functional end-point security solution then this product is for you."

Cons

"For working with the solution, you only really need a web browser, however, we've found that working on Chrome, for example, is horrible."

"Cortex XDR by Palo Alto Networks is a very good product, but financially, it is very expensive, so the company should look into that area."

"However, if you do not have Palo Alto in your environment, you are paying these additional services just for Cortex XDR by Palo Alto Networks, so it is not a cost-effective solution."

"The connection to the internet has not performed as expected."

"The solution can never really be an on-premises solution based simply on the way it is set up. It needs metadata to run and improve. Having an on-premises solution would cut it off from making improvements."

"It is not very strong in terms of endpoint management. It should have additional features like DLP, encryption, or advanced device control. Currently, Cortex is good in terms of the security of the endpoints, but it is not as good as other vendors in terms of the management of the endpoint."

"When it comes to malware files, it should be a little quick because, at times, it would give a wrong result in the sense of what it might be on malware, even if it still might be a normal one."

"It automatically detects security issues. It should be able to protect our network devices while operating autonomously."

More Cortex XDR by Palo Alto Networks cons

"Integration and dashboard are areas with certain shortcomings in Cisco Secure Endpoint."

"The reporting and analytics areas of the solution need to be improved."

"In the next release, I would for it to have back up abilities. I would like the ability to go back to a point in time to when my PC was uninfected and to the moment of when the infection happened."

"In Orbital, there are tons of prebuilt queries, but there is not a lot of information in lay terms. There isn't enough information to help us with what we're looking for and why we are looking for it with this query. There are probably a dozen queries in there that really focus on what I need to focus on, but they are not always easy to find the first time through."

"The technical support is very slow."

"It is not very stable because we have new versions four times a year, which fixes bugs. We had some problems with some deployments."

"I would recommend that the solution offer more availability in terms of the product portfolio and integration with third-party products."

"The one challenge that I see is the use of multiple endpoint protection platforms. For instance, we have AMP, but we also have Microsoft Windows Defender, System Center Endpoint Protection, and Microsoft Malware Protection Engine deployed. So, we have a bunch of different things that do the same thing. What winds up happening is, e.g., if I get an alert for a potential incident or malware and want to pull the file, I'll go to fetch the file to analyze it. But, one of these other programs has already gotten it, so the file has already been quarantined by another endpoint protection system. AMP doesn't realize that and the file fetch fails, then you're left wondering what's going on."

More Cisco Secure Endpoint cons

"Only Windows based. Dependence on MS updates and service start-up priority."

"Release speed for newer versions. When a new OS is released, you've got to wait half year to get the new version that covers the new Windows OS."

"The solution's integration with the Windows environment could be better."

Pricing and Cost Advice

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."

"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."

"The solution is expensive. It's pricing is on a yearly-basis."

"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."

"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."

"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."

"Compared to CrowdStrike, Cortex XDR is an expensive solution."

"This is an expensive solution."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"The pricing and licensing fees are okay."

"I rate the pricing a five or six on a scale of one to ten, where one is expensive, and ten is cheap."

"Pricing can be more expensive than similar software that does less functionality, but not recognized by customers."

"Cisco's pricing is reasonable. We also do not need to opt for niche players, which would have charged us significantly more than Cisco for ecosystem solutions. We are highly satisfied with the pricing structure of Cisco's solutions they are reasonable."

"You must make monthly payments towards the licensing charges attached to the product. There are no extra charges apart from the standard licensing fees associated with the product."

"Its price is fair for us."

"...the licensing needs to be improved. All the product features we need are there. It's just a matter of the complexity and the different offerings and trying to figure things out."

"The costs of 50 licenses of AMP for three years is around $9,360."

More Cisco Secure Endpoint pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

893,221 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

12%

Construction Company

12%

Comms Service Provider

Manufacturing Company

10%

Government

Comms Service Provider

Computer Software Company

Comms Service Provider

17%

Financial Services Firm

11%

Construction Company

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	45
Midsize Enterprise	21
Large Enterprise	48

By reviewers
Company Size	Count
Small Business	21
Midsize Enterprise	14
Large Enterprise	21

No data available

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What do you like most about Cisco Secure Endpoint?

The product's initial setup phase was very simple.

See all answers

What is your experience regarding pricing and costs for Cisco Secure Endpoint?

Cisco is aggressive in pricing, making it competitive and sometimes even cheaper than other good products like CrowdS...

See all answers

What needs improvement with Cisco Secure Endpoint?

Cisco Secure Endpoint lacks features like DLP which other vendors offer. XDR is new, so integration capabilities with...

See all answers

Ask a question

Earn 20 points

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 9% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

CrowdStrike Falcon vs Cisco Secure Endpoint

Compared 6% of the time

Microsoft Defender for Endpoint vs Cisco Secure Endpoint

Compared 5% of the time

SentinelOne Singularity Endpoint vs Cisco Secure Endpoint

Compared 4% of the time

VMware Carbon Black Workload vs Cisco Secure Endpoint

Compared 4% of the time

More Cisco Secure Endpoint Competitors

Symantec Endpoint Security vs Stormshield Endpoint Security

Compared 17% of the time

Sophos Endpoint vs Stormshield Endpoint Security

Compared 12% of the time

Trellix Endpoint Security Platform vs Stormshield Endpoint Security

Compared 11% of the time

Fortinet FortiClient vs Stormshield Endpoint Security

Compared 9% of the time

ThreatLocker Zero Trust Platform vs Stormshield Endpoint Security

Compared 3% of the time

More Stormshield Endpoint Security Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

May 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Cisco Secure Endpoint

May 2026

Download Cisco Secure Endpoint product report

Buyer's Guide

Endpoint Protection Platform (EPP)

April 2026

Download Stormshield Endpoint Security product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Cisco AMP for Endpoints

SkyRecon Systems StormShield Security Suite

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Cisco Secure Endpoint offers robust endpoint security with real-time threat prevention and cloud-based management. It is designed for seamless integration with Cisco products, delivering comprehensive protection and ease of use.

Cisco Secure Endpoint provides real-time threat detection, analytics, and rapid response capabilities. Its ease of use, integrated features like sandboxing and Device and File Trajectory, and its incorporation with Talos make it effective for threat hunting and endpoint protection. With strong machine learning and seamless integration with other tools, it addresses threat prevention and network visibility. However, there is room for improvement in AI features, SIEM API integration, user interface simplification, and cost reduction. Enhanced dashboards, reporting, and support are also areas for potential enhancement.

What are the primary features of Cisco Secure Endpoint?

Integration with Cisco Products: Seamlessly connects with Cisco's offerings like Umbrella and Firepower, providing extended security measures.
Real-Time Threat Prevention: Delivers live threat detection and rapid response, ensuring immediate protection against threats.
Cloud-Based Management: Offers ease of deployment and management through cloud infrastructure, enhancing accessibility and efficiency.
Sandboxing: Provides an isolated environment to safely execute and monitor untrusted applications, preventing potential threats.
Device and File Trajectory: Tracks the actions of devices and files over time, offering valuable insight into their behavior and impact.
Talos Integration: Leverages intelligence from Cisco Talos for enhanced threat intelligence and response capabilities.

What benefits are highlighted in reviews of Cisco Secure Endpoint?

Improved Threat Detection: Users highlight its powerful analytics for identifying and neutralizing threats promptly.
Enhanced Network Visibility: Allows for comprehensive monitoring of network activities, benefiting security operations.
User-Friendly Interface: Valued for its intuitive navigation and ease of use, streamlining security management.
Scalable Integration: Reviews emphasize the ease of integrating with existing tools and platforms, providing flexibility.
Rapid Threat Response: Known for its quick reaction to threats, minimizing potential damage and downtime.

In industries such as finance, healthcare, and manufacturing, Cisco Secure Endpoint is vital for maintaining endpoint security and malware protection. Organizations use it within managed security services, integrating with tools like Umbrella for DNS security. It provides visibility into malware activities and supports threat hunting for devices beyond corporate networks. Deployed on workstations, servers, and laptops, it efficiently logs and blocks malicious actions, ensuring a secure environment.

Cisco

Stormshield Endpoint Security provides robust protection, safeguarding critical business operations against evolving threats. It addresses security needs with advanced solutions that ensure comprehensive threat management and mitigation.

Stormshield Endpoint Security is tailored for a tech-savvy audience seeking reliable defense mechanisms to protect sensitive data. It combines cutting-edge technologies to provide a high level of security. Whether dealing with targeted attacks or generic malware, businesses trust its versatile approach, running seamless operations while mitigating risks. It supports endpoints with minimal impact on performance, ensuring continuous productivity.

What are the key features of Stormshield Endpoint Security?

Behavioral Analysis: Detects potential threats by analyzing activity patterns, ensuring proactive security measures.
Application Control: Restricts unwanted applications, allowing only approved programs to run, reducing vulnerability.
Network Protection: Secures data in transit by monitoring network traffic and preventing unauthorized access.
Advanced Threat Intelligence: Utilizes threat intelligence to anticipate attacks and respond swiftly to new security challenges.

What benefits should users expect when evaluating Stormshield Endpoint Security?

Cost-Efficiency: Reduces potential losses from security breaches, justifying investment with strong threat prevention.
Scalability: Adapts to business growth, offering consistent protection without requiring constant upgrades.
Easy Deployment: Provides straightforward installation and configuration, allowing quick adoption and minimal downtime.
Compliance Support: Helps meet industry standards, ensuring regulatory adherence for enhanced trust and credibility.

In sectors like finance and healthcare, Stormshield Endpoint Security is implemented to safeguard sensitive client data and meet compliance standards. In manufacturing, it secures networks from industrial espionage, addressing unique challenges by providing tailored security enhancing business resilience.

Stormshield

Sample Customers

CBI Health Group, University Honda, VakifBank

Heritage Bank, Mobile County Schools, NHL University, Thunder Bay Regional, Yokogawa Electric, Sam Houston State University, First Financial Bank

Arkoon, Netasq

Buyer's Guide

Cisco Secure Endpoint vs. Stormshield Endpoint Security

April 2026

Free Report: Cisco Secure Endpoint vs. Stormshield Endpoint Security

Find out what your peers are saying about Cisco Secure Endpoint vs. Stormshield Endpoint Security and other solutions. Updated: April 2026.

DOWNLOAD NOW

893,221 professionals have used our research since 2012.

See our Cisco Secure Endpoint vs. Stormshield Endpoint Security report.

See our list of best Endpoint Protection Platform (EPP) vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.