Cisco Secure Endpoint vs Tanium comparison

Cisco and Tanium are both solutions in the Endpoint Protection Platform (EPP) category. Cisco is ranked #32 with an average rating of 8.7, while Tanium is ranked #16 with an average rating of 8.3. Cisco holds a 1.3% mindshare in EPP, compared to Tanium’s 2.3% mindshare. Additionally, 96% of Cisco users are willing to recommend the solution, compared to 80% of Tanium users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 18, 2026

Tanium and Cisco Secure Endpoint are key players in the cybersecurity sector, specializing in endpoint protection solutions. Current data comparisons suggest Cisco Secure Endpoint holds a slight advantage due to its superior security features and integration capabilities.

Features: Tanium offers real-time data collection, comprehensive asset management, and patch management capabilities, providing precise control and visibility over endpoints. Cisco Secure Endpoint, on the other hand, delivers advanced threat protection, integration with other Cisco products like Talos, and centralized management via a user-friendly console, enhancing its value for organizations seeking robust security measures.

Room for Improvement: Tanium could enhance its ease of deployment and user interface to facilitate quicker onboarding, particularly for smaller IT teams. Additionally, its integration with third-party security tools could be expanded. Cisco Secure Endpoint could improve transparency in incident resolution times, refine the user experience for less tech-savvy users, and streamline its configuration process to reduce initial setup hurdles.

Ease of Deployment and Customer Service: Cisco Secure Endpoint is known for a straightforward deployment process and efficient customer service, which contributes to its rapid integration and effective support. In contrast, Tanium often requires more comprehensive setup and dedicated resources, which can pose challenges for organizations with limited IT staff.

Pricing and ROI: Tanium is perceived as cost-effective initially and offers substantial long-term ROI through its asset management capabilities, potentially reducing operational costs. Conversely, while Cisco Secure Endpoint may involve a higher initial setup cost, its security capabilities justify the investment, offering a satisfactory ROI for businesses focused on comprehensive security outcomes.

To learn more, read our detailed Cisco Secure Endpoint vs. Tanium Report (Updated: April 2026).

Buyer's Guide

Cisco Secure Endpoint vs. Tanium

April 2026

Download the complete report

Helped 893,244 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of May 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.6%, down from 3.9% compared to the previous year. The mindshare of Cisco Secure Endpoint is 1.3%, down from 1.5% compared to the previous year. The mindshare of Tanium is 2.3%, down from 2.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.6%
Tanium	2.3%
Cisco Secure Endpoint	1.3%
Other	92.8%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

JavedHashmi

Chief Technology Officer at Future Point Technologies

Reliable threat protection is achieved while integration and analysis capabilities need refinement

Cisco Secure Endpoint is very good in machine learning, which allows it to secure offline contents even if not connected to the internet. We haven't encountered a single breach after it's deployed. It controls USB devices and has a separate antivirus solution called Tetra, providing security even for real-time, day-zero attacks through its strong Talos threat intelligence platform.

Read full review

Mairajuddin Ahmed

Division Manager, Information Technology at a legal firm with 51-200 employees

Centralized policies have improved remote endpoint control and have simplified data visibility

The integration is not simple and easy. It requires experienced users or people who have done the implementation. When certain policies are applied, they do not immediately push the policies. For example, we manage endpoint device USB access. We set a policy to block it, but it does not come into effect immediately. Sometimes it takes three or four days for it to reflect. That is a pain point. I have raised this issue with support as well, but they said that I need to limit the number of devices in the policy. In terms of application deployment, for us, it was seamless.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Cortex XDR is stable, offering high quality and reliable performance."

"The product is very good, it has caught a lot of exploits that most products would not."

"We can visualize and control the activities in the environment from anywhere."

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."

"Being a cloud solution it is very flexible in serving internal and external connections and a broad range of devices."

"Cortex is the best tool for endpoint detection, and I have used it to verify hashes or domains to identify malicious activity, trigger playbooks that automate and gather endpoint logs, block malicious processes, and update incident tickets, showcasing end-to-end processes with automation in investigation and reducing the analysis workflow."

"It's very stable. I've never experienced downtime for the ASM console or ASM core."

"The solution's stability is generally good."

More Cortex XDR by Palo Alto Networks pros

"I can't think of a case where a computer was infected and AMP did not let us know or missed it."

"If somebody has been compromised, the question always is: How has it affected other devices in the network? Cisco AMP gives you a very neat view of that."

"I did the initial setup myself and it was really easy and straightforward."

"The most valuable features of this solution are the IPS and the integration with ISE."

"There are several valuable features including strong prevention and exceptional reporting capabilities."

"The most valuable feature of the solution is its technical support."

"The Cisco suite of security solutions definitely gives us a great deal of comfort that we are doing that."

"Cisco has definitely improved our organization a lot. In terms of business, our company feels safer. We actually switched from legacy signature-based solutions to threat intelligence-based and machine learning-based solutions, which is Cisco Secure. This has improved our security significantly, from 10% of signature-based technology security to 99.9% of the current one which we are running. We were happy."

More Cisco Secure Endpoint pros

"The solution is scalable and helps to understand how infrastructure works. It helps to improve the health of the organization."

"Tanium's most valuable features are patch management, inventory, and distribution software."

"The interrogation piece was the most valuable feature because it was very detailed."

"I would say Tanium is the best tool for vulnerability management."

"I like the fact that you can create patching campaigns depending on the area of your network that you want to address first. I like the ability it has to make several campaigns that work in parallel."

"Tanium's most valuable feature is its instant discovery aspect."

"Tanium is highly scalable."

"It's definitely not complex, it is pretty user-friendly and it's a solid tool enterprise to use."

More Tanium pros

Cons

"It'll help if customization was easier."

"The solution can never really be an on-premises solution based simply on the way it is set up. It needs metadata to run and improve. Having an on-premises solution would cut it off from making improvements."

"Limited remote connection."

"I would like to see improvement in the tool's user interface, particularly in the area of managing alerts and providing more reporting capabilities."

"It's very time-consuming to log support issues and the people that answer the tickets aren't very knowledgeable."

"The dashboard could use some significant improvement, just making it more useful with more information."

"The dashboard could use some significant improvement, just making it more useful with more information. It has a limited amount of information right now. It is customizable, but I'd love to see a better out-of-box dashboard."

"There are some third-party solutions that are difficult to integrate with, which is something that can be improved."

More Cortex XDR by Palo Alto Networks cons

"We don't have issues. We think that Cisco covers all of the security aspects on the market. They continue to innovate in the right way."

"I would like more seamless integration, because I have a security solution based on Cisco and I'm looking at integration for the old solution."

"In terms of the user experience, if the UX design could be much simpler [that would improve things]... if they could make it more intuitive for someone who is not an engineer so that they still can read what's going on in their webpage and understand, that would be something."

"The room for improvement would be on event notifications. I do feel that if you subscribe to all the event notification types out-of-the-box, or don't really go through and take the time to filter out events, the notifications can become overwhelming with information."

"The Linux agent has conflicts with other solutions, including the Exploit Prevention system found in Windows servers, and we didn't find a fix during troubleshooting, and Cisco couldn't offer one either."

"I would like them to add whatever makes filtering more advanced in scanning and blocking for malware in emails."

"The user interface is dull."

"We had a lot of noise at the beginning, and we had to turn it down based on exclusions, application whitelisting, and excluding unknown benign applications. Cisco should understand the need for continuous updates on the custom Cisco exclusions and the custom applications that come out-of-the-box with the AMP for Endpoints."

More Cisco Secure Endpoint cons

"The most painful thing is the interface. It's a bit unclear sometimes."

"The solution needs to improve the reporting and tracking capabilities."

"Any movement into a SaaS solution has challenges since the processes and data flows are not well defined. Hence, you need to build it at the same time."

"Our biggest issue with the solution is its lack of mobility."

"The most painful thing is the interface. It's a bit unclear sometimes."

"When working with Tanium, there are some older devices that haven't been patched for a long time, and certain patches are not included in Tanium."

"The solution can give a lot of false positives."

"The performance could improve in future releases. We have had performance issues in specialized web environments, but overall I think the problems are less than 2% of the computer systems being used."

More Tanium cons

Pricing and Cost Advice

"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."

"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."

"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."

"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."

"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."

"Very costly product."

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."

"This is an expensive solution."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"We had faced some license issues, but it has been improved. At the beginning of the implementation, we faced a lot of licensing issues, but now, we have EA licensing, which gives us an opportunity to grow."

"We can know if something bad is potentially happening instantaneously and prevent it from happening. We can go to a device and isolate it before it infects other devices. In our environment, that's millions of dollars saved in a matter of seconds."

"It is quite cost-effective. I would rate it ten out of ten."

"It is a subscription-based product."

"There is also the Cisco annual subscription plus my management time in terms of what I do with the Cisco product. I spend a minimal amount of time on it though, just rolling out updates as they need them and monitoring the console a couple of times a day to ensure nothing is out of control. Cost-wise, we are quite happy with it."

"You must make monthly payments towards the licensing charges attached to the product. There are no extra charges apart from the standard licensing fees associated with the product."

"Whenever you are doing the licensing process, I would highly advise to look at what other Cisco solutions you have in your organization, then evaluate if an Enterprise Agreement is the best way to go. In our case, it was the best way to go. Since we had so many other Cisco products, we were able to tie those in. We were actually able to get several Cisco security solutions for less than if we had bought three or four Cisco security solutions independently or ad hoc."

"The solution's price is about the same as that of Palo Alto solutions."

More Cisco Secure Endpoint pricing and cost advice

"Tanium is a more expensive solution in Latin America than some of the competitors, such as BigFix."

"The solution offers value for money."

"The product's pricing differs from region to region depending on negotiations and the number of endpoints."

"It's an expensive solution. It would be nice if the cost were lower."

"There is an annual license required to use this solution."

"The solution is expensive but it's a good investment."

"It is higher than some competitors in the market."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

893,244 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

12%

Construction Company

12%

Comms Service Provider

Manufacturing Company

10%

Comms Service Provider

Government

Financial Services Firm

15%

Government

11%

Manufacturing Company

Healthcare Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	45
Midsize Enterprise	21
Large Enterprise	48

By reviewers
Company Size	Count
Small Business	21
Midsize Enterprise	14
Large Enterprise	21

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	3
Large Enterprise	12

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What do you like most about Cisco Secure Endpoint?

The product's initial setup phase was very simple.

See all answers

What is your experience regarding pricing and costs for Cisco Secure Endpoint?

Cisco is aggressive in pricing, making it competitive and sometimes even cheaper than other good products like CrowdS...

See all answers

What needs improvement with Cisco Secure Endpoint?

Cisco Secure Endpoint lacks features like DLP which other vendors offer. XDR is new, so integration capabilities with...

See all answers

What needs improvement with Tanium?

While there is always room for improvement, I am pleased with Tanium.

See all answers

What is your primary use case for Tanium?

The primary use case for Tanium ( /products/tanium-reviews ) is compliance, patching, and inventory as part of the co...

See all answers

What advice do you have for others considering Tanium?

For smaller companies, Tanium is quite a big investment, and one needs to have a considerable setup to make it econom...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 9% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

CrowdStrike Falcon vs Cisco Secure Endpoint

Compared 6% of the time

Microsoft Defender for Endpoint vs Cisco Secure Endpoint

Compared 5% of the time

SentinelOne Singularity Endpoint vs Cisco Secure Endpoint

Compared 4% of the time

VMware Carbon Black Workload vs Cisco Secure Endpoint

Compared 4% of the time

More Cisco Secure Endpoint Competitors

CrowdStrike Falcon vs Tanium

Compared 6% of the time

BigFix vs Tanium

Compared 4% of the time

Microsoft Defender for Endpoint vs Tanium

Compared 4% of the time

NinjaOne vs Tanium

Compared 3% of the time

Adaptiva vs Tanium

Compared 1% of the time

More Tanium Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

May 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Cisco Secure Endpoint

May 2026

Download Cisco Secure Endpoint product report

Buyer's Guide

Tanium

April 2026

Download Tanium product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Cisco AMP for Endpoints

Tanium Inc Cloud, Tanium XEM

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Cisco Secure Endpoint offers robust endpoint security with real-time threat prevention and cloud-based management. It is designed for seamless integration with Cisco products, delivering comprehensive protection and ease of use.

Cisco Secure Endpoint provides real-time threat detection, analytics, and rapid response capabilities. Its ease of use, integrated features like sandboxing and Device and File Trajectory, and its incorporation with Talos make it effective for threat hunting and endpoint protection. With strong machine learning and seamless integration with other tools, it addresses threat prevention and network visibility. However, there is room for improvement in AI features, SIEM API integration, user interface simplification, and cost reduction. Enhanced dashboards, reporting, and support are also areas for potential enhancement.

What are the primary features of Cisco Secure Endpoint?

Integration with Cisco Products: Seamlessly connects with Cisco's offerings like Umbrella and Firepower, providing extended security measures.
Real-Time Threat Prevention: Delivers live threat detection and rapid response, ensuring immediate protection against threats.
Cloud-Based Management: Offers ease of deployment and management through cloud infrastructure, enhancing accessibility and efficiency.
Sandboxing: Provides an isolated environment to safely execute and monitor untrusted applications, preventing potential threats.
Device and File Trajectory: Tracks the actions of devices and files over time, offering valuable insight into their behavior and impact.
Talos Integration: Leverages intelligence from Cisco Talos for enhanced threat intelligence and response capabilities.

What benefits are highlighted in reviews of Cisco Secure Endpoint?

Improved Threat Detection: Users highlight its powerful analytics for identifying and neutralizing threats promptly.
Enhanced Network Visibility: Allows for comprehensive monitoring of network activities, benefiting security operations.
User-Friendly Interface: Valued for its intuitive navigation and ease of use, streamlining security management.
Scalable Integration: Reviews emphasize the ease of integrating with existing tools and platforms, providing flexibility.
Rapid Threat Response: Known for its quick reaction to threats, minimizing potential damage and downtime.

In industries such as finance, healthcare, and manufacturing, Cisco Secure Endpoint is vital for maintaining endpoint security and malware protection. Organizations use it within managed security services, integrating with tools like Umbrella for DNS security. It provides visibility into malware activities and supports threat hunting for devices beyond corporate networks. Deployed on workstations, servers, and laptops, it efficiently logs and blocks malicious actions, ensuring a secure environment.

Cisco

Tanium offers robust endpoint protection, patching, and inventory management, consolidating the functions of tools like BigFix with capabilities in incident response, network security, and cloud or on-premise deployments.

Known for real-time capabilities, Tanium provides detailed analytics, security features, and device management. Users benefit from quick implementation, real-time updates, and patching campaigns. Despite its strengths, integration and custom plugin expansion remain areas to improve, along with data visualization and network optimization. Reporting enhancements and user training could advance its usability, and some UI elements may require updates for clarity and security.

What are the essential features of Tanium?

Detailed Analytics: Provides actionable insights for better decision-making.
Security Capabilities: Offers strong defense measures against threats.
Real-Time Queries: Facilitates immediate information access.
Patch Management: Streamlines software updates across devices.
Device Management: Efficiently handles comprehensive inventory and monitoring tasks.

What benefits should users expect?

Ease of Use: Simplifies complex IT tasks.
Scalability: Adapts to growing IT infrastructure needs.
Integration Flexibility: Merges with existing systems effortlessly.
Real-Time Updates: Ensures current data availability for informed actions.

Tanium's deployment spans industries focusing on endpoint protection and compliance, ensuring reliable device and server management in settings where safety and quick adaptation are critical. Organizations use it for application deployment, compliance checks, and integrating it as an EDR solution, enhancing overall security and operational efficiencies.

Tanium

Sample Customers

CBI Health Group, University Honda, VakifBank

Heritage Bank, Mobile County Schools, NHL University, Thunder Bay Regional, Yokogawa Electric, Sam Houston State University, First Financial Bank

JPMorgan Chase, eBay, Amazon, US Bank, MetLife, pwc, Cerner, Delphi, MGM Grand, New York Life

Buyer's Guide

Cisco Secure Endpoint vs. Tanium

April 2026

Free Report: Cisco Secure Endpoint vs. Tanium

Find out what your peers are saying about Cisco Secure Endpoint vs. Tanium and other solutions. Updated: April 2026.

DOWNLOAD NOW

893,244 professionals have used our research since 2012.

See our Cisco Secure Endpoint vs. Tanium report.

See our list of best Endpoint Protection Platform (EPP) vendors and best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.