ConnectWise SIEM vs Kaspersky Endpoint Detection and Response Expert comparison

ConnectWise SIEM vs. Kaspersky Endpoint Detection and Response Expert

Download the complete report

Helped 884,933 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of March 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of ConnectWise SIEM is 0.7%, up from 0.2% compared to the previous year. The mindshare of Kaspersky Endpoint Detection and Response Expert is 1.4%, up from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.4%
Kaspersky Endpoint Detection and Response Expert	1.4%
ConnectWise SIEM	0.7%
Other	94.5%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

reviewer2711757

Cyber Security Software Engineer at a tech services company with 11-50 employees

Automated alerting and reporting excel while cost and feature limitations remain

I find automation to be one of the best and most valuable features of the product. Machine learning is incorporated into the solution, though AI is a broader term that I wouldn't apply here. I haven't personally explored AI yet, but I will investigate it. Machine learning functions more as automation in my experience, as there's no training involved yet. I want to conduct R&D on another project with Wazuh to determine how to capture usage, for example, tracking user logins and time spent. This is where I need to implement machine learning. Additionally, the extraction of GeoIP adds complexity. The solution is effectively reducing incident response times in operations.

Read full review

Ravi-Upadhyay

Founder at Inspira Enterprise

Provides strong threat detection and response through behavior analytics and network isolation

I have found the most valuable features of Kaspersky Endpoint Detection and Response Expert to be its ability to tackle the biggest challenges customers face when they have to mitigate any kind of a malware, ransomware attack, or online theft scenarios. The solution utilizes its HIPS, which is the host intrusion prevention system, behavior analytics system, and device control mechanism, making the antivirus capabilities of EDR quite strong. It is able to detect zero-day threats as well as historical or legacy malware, providing protection against current threats in the market and legacy malware. My opinion on the advanced threat detection algorithms in Kaspersky Endpoint Detection and Response Expert is that the ATP functionality is quite strong because it utilizes the behavioral analytics engine in the backend, which employs machine learning mechanisms to identify any kind of vulnerability or exploit running on the operating system level and the network level. If an attack is about to happen on the endpoint, it is able to protect over the network as well and checks for any illegitimate encryption activities. The machine learning capability within Kaspersky Endpoint Detection and Response Expert has contributed to improving detection accuracy and reducing false positives in my environment by helping me identify malicious activity and differentiate between any malicious activity on the operating system level and on the network level. I have seen customers with in-house developed applications that have no public signatures available. Once I whitelist a particular application, it intelligently whitelists not only the executable but also all the dependent services required to run that application. Furthermore, Kaspersky Endpoint Detection and Response Expert has successfully blocked network-level attacks on the endpoint. For example, during a recent DoS attack aimed at choking the entire network, Kaspersky detected the attack, isolated the device in a sandbox network, and alerted my SOC team via email for corrective action, thereby proactively helping me detect and protect devices from malicious attacks.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution's most valuable feature is its ability to rapidly detect certain hardware files."

"I like the centralized console and the predictive analysis it does of malware. It is very stable and also scalable."

"Cortex XDR by Palo Alto Networks saves time in various ways, although the user interface is fairly standard."

"This software helps us understand any issues that may arise when someone is not at work."

"My advice for anybody who is considering Cortex XDR is that it is a complete solution, and has very good features."

"The initial setup is pretty easy."

"The dashboard is customizable."

"If you are looking to deploy a security solution as a whole, this is a good option."

More Cortex XDR by Palo Alto Networks pros

"The integration capabilities of ConnectWise SIEM are off the shelf, making it easy to buy and use; you just unpack it and use it."

"One valuable feature of ConnectWise Fortify is the ability to add other teams and receive notifications when customers make changes or remove multi-factor authentication in Microsoft or SAP environments."

"We have found the solution has great functionality and it is easy to use."

"The integration with our hypervisor is quite smooth, especially within the Kaspersky Enterprise environment. We have many virtual machines, and the integration is helpful."

"The detection engine running on endpoints works very well and provides a good protection level."

"My impression of the stability of this solution is good. We have not had any issues with stability."

"We recommend Kaspersky Endpoint Detection and Response Expert to all clients to whom we provide solutions, and for endpoint security, we usually choose Kaspersky Endpoint Detection and Response Expert exclusively."

"The solution provides high-end security that is critical for financial institutions and bankers."

"The most valuable features are the reports."

"We particularly appreciate how scalable this solution is, as we often need to increase our end-user numbers."

"Encryption is the most valuable feature. It creates an encryption tunnel from your location to the delivery address."

More Kaspersky Endpoint Detection and Response Expert pros

Cons

"A better pricing plan would make this product more competitive."

"We would also like to have advanced tech protection and email scanning."

"Currently, if you use Palo Alto endpoint protection as the only solution it's very complicated to remove pre-existing threats."

"It would be good to have a better way to search for a file within the UI."

"Currently, we are monitoring all USB drives and ports but we would like to improve our device control capabilities."

"As an improvement, I would like to see enhanced connection speeds."

"The solution can never really be an on-premises solution based simply on the way it is set up. It needs metadata to run and improve. Having an on-premises solution would cut it off from making improvements."

"The product's pricing needs improvement. They could provide more discounts. Additionally, the dashboard and control panel could be enhanced."

More Cortex XDR by Palo Alto Networks cons

"ConnectWise SIEM is primarily focused on notifications and is limited in that aspect, while Wazuh can automate the elimination process."

"ConnectWise Fortify could work on covering more areas, like phishing messages, which have become more complicated to detect."

"The manage portion of the solution is complicated and should be simplified by having different versions to meet the needs of different size companies."

"I would say that Kaspersky is not too big in the cloud-related area."

"Everything is automatic on Kaspersky but it would be great if they could add a feature for examining suspicious files."

"The technical support team should respond in a more timely manner."

"Kaspersky Endpoint Detection and Response could improve some issues and add new security files."

"An area for improvement in Kaspersky Endpoint Detection and Response is its technical support because currently, technical support is delayed."

"Could include some additional protection."

"The license prices for this solution are quite high."

More Kaspersky Endpoint Detection and Response Expert cons

Pricing and Cost Advice

"The pricing is okay, although direct support can be expensive."

"Its pricing is kind of in line with its competitors and everybody else out there."

"This is an expensive solution."

"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."

"Traps pays for itself within the first 16 months of a three-year subscription. This is attributed to OPEX savings, as security teams spent less time trying to identify and isolate malware for analysis as a result of a reduction in malware incidents, false positives, and breach avoidance."

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."

"This is an expensive solution."

"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"The solution is expensive."

"Endpoint's pricing is good, especially compared to expensive solutions like Sophos."

"The solution’s pricing is okay."

"We were on a three-year license to use Kaspersky Endpoint Detection and Response. The price could be better."

"If one is cheap, ten is expensive, I rate the product’s price as a seven out of ten, especially if I compare it with CrowdStrike."

"The pricing is reasonable. Not too cheap, not too expensive."

"The license for EDR costs about 1,000 pesos per user. I would rate the pricing as four out of five."

"We have been satisfied with the license of the solution."

"The solution isn't the cheapest considering what you get. I would rate the pricing as seven out of ten."

More Kaspersky Endpoint Detection and Response Expert pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

884,933 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

Manufacturing Company

Financial Services Firm

Comms Service Provider

Computer Software Company

22%

Comms Service Provider

University

Financial Services Firm

Computer Software Company

10%

Manufacturing Company

Financial Services Firm

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	47

No data available

By reviewers
Company Size	Count
Small Business	30
Midsize Enterprise	4
Large Enterprise	18

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What needs improvement with ConnectWise Fortify?

I haven't utilized the advanced threat intelligence capabilities with ConnectWise SIEM. Advanced threat intelligence ...

What is your primary use case for ConnectWise Fortify?

I do not have experience with ConnectWise SIEM for RMM, as I mostly work on Wazuh, and I have a team that handles Con...

What advice do you have for others considering ConnectWise Fortify?

The review can be made anonymous if just my name and not the company name is used. I would assess the real-time visib...

What do you like most about Kaspersky Endpoint Detection and Response Expert?

The integration with our hypervisor is quite smooth, especially within the Kaspersky Enterprise environment. We have ...

What is your experience regarding pricing and costs for Kaspersky Endpoint Detection and Response Expert?

The price of the solution is economical.

What needs improvement with Kaspersky Endpoint Detection and Response Expert?

The user interface of Kaspersky Endpoint Detection and Response Expert could be more intuitive, and I would appreciat...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 9% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Check Point Harmony SASE (formerly Perimeter 81) vs ConnectWise SIEM

Compared 5% of the time

Zscaler Zero Trust Exchange Platform vs ConnectWise SIEM

Compared 4% of the time

CrowdStrike Falcon Complete MDR vs ConnectWise SIEM

Compared 3% of the time

CompassOne by Blackpoint Cyber vs ConnectWise SIEM

Compared 3% of the time

Wazuh vs ConnectWise SIEM

Compared 3% of the time

More ConnectWise SIEM Competitors

Fortinet FortiEDR vs Kaspersky Endpoint Detection and Response Expert

Compared 17% of the time

TrendAI Vision One vs Kaspersky Endpoint Detection and Response Expert

Compared 14% of the time

Check Point Harmony Endpoint vs Kaspersky Endpoint Detection and Response Expert

Compared 7% of the time

Cynet vs Kaspersky Endpoint Detection and Response Expert

Compared 4% of the time

OPTIMUS EDR vs Kaspersky Endpoint Detection and Response Expert

Compared 4% of the time

More Kaspersky Endpoint Detection and Response Expert Competitors

Product Reports

Cortex XDR by Palo Alto Networks

Download Cortex XDR by Palo Alto Networks product report

Security Information and Event Management (SIEM)

Download ConnectWise SIEM product report

Kaspersky Endpoint Detection and Response Expert

Download Kaspersky Endpoint Detection and Response Expert product report

Kaspersky Endpoint Detection and Response Expert report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

ConnectWise Security Management, ConnectWise Fortify, Continuum Fortify, ConnectWise SIEM, ConnectWise SASE

Kaspersky EDR

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

IT solution providers are the first—and often only—line of defense for every kind of business in every part of the world. Whether managing mom-and-pop businesses or high-profile clients, providing preventive security measures is a must-have in today’s cybersecurity landscape. Security information and event management (SIEM) solutions offer an additional layer of security for your clients; however, most SIEM solutions are routinely difficult to manage, expensive to deploy, and require a significant amount of in-house cybersecurity expertise.

ConnectWise SIEM offers a powerful alternative to expand your security perspective to both prevention and detection. The solution includes comprehensive, flexible SIEM software that streamlines safety and security across your network without additional full-time employee costs or complicated implementations.

ConnectWise

Kaspersky Endpoint Detection and Response Expert is a comprehensive cybersecurity solution designed to detect and respond to advanced threats in real time. It combines advanced threat intelligence, machine learning algorithms, and behavioral analysis to provide proactive protection against sophisticated attacks.

With its centralized management console, security teams can easily monitor and investigate incidents, while automated response capabilities enable quick remediation. This solution offers deep visibility into endpoint activities, allowing organizations to identify and mitigate potential risks effectively. Kaspersky Endpoint Detection and Response Expert is a powerful tool for enhancing the overall security posture of businesses, ensuring the protection of critical assets and sensitive data.

Kaspersky

Sample Customers

CBI Health Group, University Honda, VakifBank

Techvera, Syrex, Clark Integrated Technologies

Ferrari, Insolar, Tael, Republic of Serbia

ConnectWise SIEM vs. Kaspersky Endpoint Detection and Response Expert