No more typing reviews! Try our Samantha, our new voice AI agent.

Coro vs Sophos Endpoint comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 19, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Protection Platform (EPP)
4th
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Coro
Ranking in Endpoint Protection Platform (EPP)
55th
Average Rating
0.0
Reviews Sentiment
3.1
Number of Reviews
1
Ranking in other categories
Email Security (53rd), Data Loss Prevention (DLP) (70th), Endpoint Detection and Response (EDR) (63rd)
Sophos Endpoint
Ranking in Endpoint Protection Platform (EPP)
17th
Average Rating
8.2
Reviews Sentiment
7.3
Number of Reviews
66
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.6% compared to the previous year. The mindshare of Coro is 0.5%, down from 0.6% compared to the previous year. The mindshare of Sophos Endpoint is 1.5%, up from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.8%
Sophos Endpoint1.5%
Coro0.5%
Other94.2%
Endpoint Protection Platform (EPP)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Vignesh  K - PeerSpot reviewer
Practice Engineer at Cloudunicorn.in
Auto scanning and enhanced security but re-adding protections need improvement
At that time, we observed certain issues with the product. The functionalities could be improved, such as the isolation feature. If we remove our protection, we cannot easily add it back. If, in our organization, we need to remove a specific system for a particular time, we cannot add it back for security after doing so. This is one thing we have experienced. Scalability is also lacking. If we want to do the same thing repeatedly, there's not much the solution offers; it isn't very strong.
Ashutosh Jha - PeerSpot reviewer
Project engineer at IT Solution india private limited
Endpoint protection has strengthened malware defense and simplifies web and peripheral control
I would give Sophos Endpoint a rating of nine out of ten because it is working very well. I have cut one point because it has no solution for on-premises. Additionally, it has no solution for any Linux-based system endpoints. I have to install the server protection on Linux machines, which is why I am cutting one point for Sophos Endpoint. Sophos Endpoint should include the Linux endpoint agent and should provide a solution for Linux endpoints as well, because the server license is costly and nobody wants to use the server license on an endpoint machine. Sophos Endpoint should have a Linux endpoint independent agent as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cortex XDR by Palo Alto Networks saves time in various ways, although the user interface is fairly standard."
"But overall, when we speak about security and protection, they are one of the top providers."
"The initial setup isn't too bad."
"On a scale from one to ten, I would rate Cortex XDR by Palo Alto Networks a nine."
"Automation and playbooks have helped me significantly, as Cortex Xnor's playbooks predefine the workflow of the automation, such as response processes, alert triggering, and enriching the context, efficiently detecting and blocking malicious attacks with firewalls while eliminating workload and speeding responses for next-generation operations."
"If the user leaves our premises or network, Palo Alto Traps will still be on that endpoint and will still apply our policies."
"Based on my experience with Cortex XDR by Palo Alto Networks, I highly recommend it due to its quick response to zero-day attacks and low utilization from end-user devices."
"The stability of the solution is very good. We have about 100 users on it right now, and we use it twice a week."
"The auto-scanning feature is quite beneficial."
"Web filtering helps provide protection by allowing me to block unwanted and unauthorized websites from Sophos EPP Suite, which helps prevent unauthorized intrusion, thus keeping our organization servers secure."
"The most valuable feature Sophos EPP Suite is that it protects the computer beyond the premise, whether the user is at home, in the office, or traveling, and you are able to apply the policies as the user moves."
"What I like best about Sophos EPP Suite is that it's a good product. What's nice about it is that after I installed it on my computer, the tool detects and eliminates most of the problems, malware, and vulnerabilities. It works very well and is very efficient because it doesn't use up many resources from my computer. For me, Sophos EPP Suite is the best security and antivirus solution. In terms of its endpoint capabilities, I'm unable to comment on other Sophos security devices, but it seems Sophos EPP Suite has a next-generation firewall feature, though I didn't use it, and it may not be comparable to other next-generation firewalls. My current firewall is a next-generation firewall from Fortinet, and it's the best firewall for me in terms of cost and security, but for endpoint protection, I use Sophos EPP Suite, and it has the best security for my device. The tool is also good for organizations. It's the best tool."
"Fast response time and protection are great; these are the main advantages."
"Intercept X is the most valuable feature in the solution. It's more or less pretty standard. The endpoint feature allows you to basically see what is happening, and stop a wide range of threats. It's been the most unique identifier for Sophos."
"It is a scalable platform."
"If you want something simple to work with, Sophos makes it very simple for you to use."
"In summary, this is a good product and I'm quite happy with it when it works."
 

Cons

"Based on our experience so far, its implementation is quite complex."
"The GUI could be improved."
"The negative aspect I see is the economic model used by Palo Alto."
"It is not very strong in terms of endpoint management. It should have additional features like DLP, encryption, or advanced device control. Currently, Cortex is good in terms of the security of the endpoints, but it is not as good as other vendors in terms of the management of the endpoint."
"The technical support is not very good. I find the process difficult."
"I recommend adding a data loss prevention (DLP) solution to Cortex XDR by Palo Alto Networks. The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products."
"The downsides of Cortex XDR by Palo Alto Networks are that in many incidents, when I enter the causality chain, there are numerous logs."
"Additionally, I think the price is very high, and if it can be adjusted, I believe it will be a very good solution."
"Scalability is lacking. If we want to do the same thing repeatedly, there's not much the solution offers; it isn't very strong."
"The functionalities could be improved, such as the isolation feature."
"We use cloud services quite a bit. Therefore, I would like to see integration with other security tools besides endpoint so that I'm not managing different tools separately. I would prefer to have a single security solution for my laptop and for managing other security things like passwords."
"The solution could be more stable."
"If we could bypass the first couple of levels of support when we have a problem then it would be easier and quicker when we need an issue resolved."
"I think there should be templates in place so I do not have to make everything from scratch; having templates for NATing, de-NATing, and LAN to WAN rules would save us time."
"The management console need improvement."
"The support could be improved. The response times are slow."
"Sometimes there are issues with the antivirus back logs."
"At this point, I wouldn't recommend the solution to others."
 

Pricing and Cost Advice

"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."
"I don't like that they have different types of licenses."
"Compared to CrowdStrike, Cortex XDR is an expensive solution."
"The price of the product is not very economical."
"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."
"We pay about $50,000 USD per year for a bundle that includes Cortex XDR."
"I am using the Community edition."
"It's about $55 per license on a yearly basis."
Information not available
"The solution's cost is reasonable."
"From my perspective, it is not the most expensive, it is aligned with the market."
"I rate the price of Sophos EPP Suite a four out of five."
"The product is inexpensive, and we receive good discount offers from our product partners."
"I would rate the price seven out of ten, for its cost-effectiveness."
"Price-wise, it is cheap. We need to pay 1,500 to 2,000 INR per user...On a scale of one to ten, where one is very cheap, and ten is very expensive, I rate the pricing a three out of ten."
"The license cost for Sophos EPP Suite depends on the features you want to use. For example, if you want to use advanced features, such as web application firewalling, the cost may be higher. In general, I believe the licensing cost is reasonable."
"We are on an annual license to use the solution."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Construction Company
14%
Comms Service Provider
11%
Manufacturing Company
10%
Computer Software Company
7%
Outsourcing Company
14%
Manufacturing Company
10%
Financial Services Firm
10%
Comms Service Provider
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
No data available
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise10
Large Enterprise15
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Coro?
The cost is reasonable because it is aimed at SMB customers, not enterprise customers. The prices are reasonable. We ...
What needs improvement with Coro?
At that time, we observed certain issues with the product. The functionalities could be improved, such as the isolati...
What is your primary use case for Coro?
We have not sold the product to any customers as of now. We are still in the testing phase, which means we, along wit...
What is your experience regarding pricing and costs for Sophos EPP Suite?
We did not purchase Sophos Endpoint through the AWS Marketplace. We are not familiar with that part because we are on...
What needs improvement with Sophos EPP Suite?
Sophos Endpoint can improve their agent utilization because after we install Sophos Endpoint agents, the endpoints ut...
What is your primary use case for Sophos EPP Suite?
When it comes to the customer requirement regarding an endpoint security solution, we choose Sophos Endpoint for that...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
EPP Suite
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Lenovo, Dropbox, T-Systems
EK Services
Find out what your peers are saying about SentinelOne, Microsoft, CrowdStrike and others in Endpoint Protection Platform (EPP). Updated: October 2026.
920,769 professionals have used our research since 2012.