No more typing reviews! Try our Samantha, our new voice AI agent.

CrowdStrike Falcon vs Deepwatch comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 11, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in AI-Powered Cybersecurity Platforms
1st
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
115
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (4th), Ransomware Protection (2nd)
CrowdStrike Falcon
Ranking in AI-Powered Cybersecurity Platforms
3rd
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
138
Ranking in other categories
Security Information and Event Management (SIEM) (6th), Endpoint Protection Platform (EPP) (3rd), Threat Intelligence Platforms (TIP) (2nd), Endpoint Detection and Response (EDR) (2nd), Extended Detection and Response (XDR) (2nd), Attack Surface Management (ASM) (2nd), Identity Threat Detection and Response (ITDR) (1st)
Deepwatch
Ranking in AI-Powered Cybersecurity Platforms
13th
Average Rating
8.0
Reviews Sentiment
7.7
Number of Reviews
1
Ranking in other categories
Managed Detection and Response (MDR) (25th)
 

Mindshare comparison

As of August 2026, in the AI-Powered Cybersecurity Platforms category, the mindshare of Cortex XDR by Palo Alto Networks is 11.0%, up from 10.9% compared to the previous year. The mindshare of CrowdStrike Falcon is 15.6%, down from 20.1% compared to the previous year. The mindshare of Deepwatch is 0.4%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
AI-Powered Cybersecurity Platforms Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks11.0%
CrowdStrike Falcon15.6%
Deepwatch0.4%
Other73.0%
AI-Powered Cybersecurity Platforms
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Dipak M Gohil - PeerSpot reviewer
IT Manager at Jord International Pty Ltd
Efficient threat detection and seamless deployment improve overall security
The single panel console of CrowdStrike Falcon is very user-friendly, which is what we are looking for. Having multiple administrators between various offices with this single console gives us the ability to see all offices, branch offices, and partners, making it very useful to detect machines, identify machines, and check security risks. Everything in the single console is very useful. CrowdStrike Falcon has positively impacted our organization in terms of efficiency because it's very lightweight, easy to deploy, easy to manage, and works very efficiently. It quickly detects issues and doesn't have a signature-based system, so it works fast and takes immediate action.
Pranay Jain - PeerSpot reviewer
Senior software engineer at Simplifyvms
Continuous monitoring has strengthened payment security and now reduces incident impact quickly
There are specific details that can be improved in Deepwatch. After implementing it, we tracked both response time and threat detection accuracy using the SIEM dashboard. We measured response time using MTTD and MTTR. There are areas that can be improved, such as every alert having a timestamp for detection time and acknowledgment. We observed the MTTR dropping from a few hours to under one hour after using Deepwatch, so baseline metrics can be enhanced. Deepwatch can reduce alert fatigue since sometimes it generates a high volume of alerts that overwhelm our team. This can create too many alerts in a short amount of time, making it hard for our team to understand what to do. Additionally, the dashboard can be improved for better user-friendliness for end-users, requiring better visualization of MTTR, threat trends, and risk scoring. Improvements can also be made in more automated playbooks for automated response to common threats, and there is room for deeper integration capabilities, as integration with some internal tools may require additional effort.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."
"We think that this product will help us grow, as it meets our needs currently and we can grow with it over time."
"My advice for others looking into using Cortex is that it is very easy to use and very useful for the customer environment, whether it's a public or private one."
"Cortex XDR by Palo Alto Networks is easy to use and does not consume a lot of hardware resources."
"The policy configuration is great, the granularity of policies that are available is very helpful, it is straightforward to set up, and it has pretty much everything we need and works well within the Palo Alto ecosystem."
"On a scale from one to ten, I would rate Cortex XDR by Palo Alto Networks a nine."
"The most valuable feature of Cortex XDR by Palo Alto Networks is its machine-learning capabilities. Additionally, there is full integration with other solutions."
"It is an easy-to-use tool."
"We are happy with CloudStrike's ease of use and touch notification."
"Falcon's best feature is its detection and blocking of threats."
"CrowdStrike Falcon is effortless to use, and it's a cloud-specific platform."
"Easy to use, intelligent, and stable threat detection software."
"The initial setup was straightforward."
"I like Falcon's threat detection and endpoint investigation features. It's a user-friendly solution."
"Scalability is good. We have had no issues with it."
"It's given me a level of confidence that my network is secure — the fact that it's not finding anything; however, I am not experiencing the issues that competitors are saying I should be experiencing."
"Deepwatch positively impacts our organization by reducing incident response time because previously, there was no mechanism to follow up on incidents, such as any security breach in the payment gateway, and it has reduced response time by 40 to 60 percent while significantly improving threat detection accuracy with 24/7 monitoring even after business hours."
 

Cons

"The setup is quite easy. We had appropriate support from the manager. One thing that was missing was the integration part."
"It is a complex solution to implement."
"We had a problem with getting our older endpoints up to date, but their newest updates have been really good. I've been pleased with it in terms of what our needs are. It's doing what we want it to do."
"It'll help if customization was easier."
"A potential area of improvement for Cortex XDR by Palo Alto Networks is the cost."
"We have found that there are times Cortex XDR by Palo Alto Networks does not detect some of the viruses, we have to use another protection solution called Kaspersky."
"While using Cortex, I noticed some aspects that could be improved, such as increasing the synchronization speed between XDR and Xnor."
"The downside to the solution is that there are a large number of false positives."
"The product is quite expensive."
"The console is a little cluttered and at times, finding what you're looking for is not intuitive."
"In the six months that I have been using CrowdStrike, it has not been able to detect anything."
"Forensic controls have room for improvement."
"The support for different OS versions needs improvement because sometimes due to business conditions, updating our OS is impossible."
"Dashboard creation is one of the areas for improvement in CrowdStrike Falcon. Sometimes, management asks for a custom dashboard, so my team has to collect data from CrowdStrike Falcon, integrate that in Splunk, then create the dashboard in Splunk."
"We'd like to see more integration capabilities."
"We encounter occasional issues, such as when disabling network access for a host that uses CrowdStrike."
"Deepwatch can reduce alert fatigue since sometimes it generates a high volume of alerts that overwhelm our team."
 

Pricing and Cost Advice

"Cortex XDR by Palo Alto Networks is an expensive solution."
"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."
"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."
"I don't have any issues with the pricing. We are satisfied with the price."
"I don't recall what the cost was, but it wasn't really that expensive."
"Our license will require renewal in August, after which the maintenance will continue as usual."
"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."
"Very costly product."
"The cost is usually a challenge in the industry. I think we pay around sixty-eight dollars."
"The more endpoints an organization adds the cheaper the cost."
"I would like them to further reduce the price, because it is quite pricey at the moment."
"The pricing and licensing are fairly good. It is definitely not a cheap product, but I have felt that it is worth the money that we spent. So, we have discussed it in the past, and were like, "Yes, it is probably pricier than some other solutions, but we also feel they really are the leader. We are very comfortable with their level of expertise. So, it's kind of worth the price that we pay.""
"The pricing of CrowdStrike Falcon is competitive."
"I do not have experience with the cost or licensing of the product."
"This solution has a very competitive price."
"The solution's pricing is great for us."
Information not available
report
Use our free recommendation engine to learn which AI-Powered Cybersecurity Platforms solutions are best for your needs.
908,800 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
13%
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
10%
Financial Services Firm
11%
Manufacturing Company
10%
Computer Software Company
9%
Government
5%
Construction Company
27%
Manufacturing Company
11%
Media Company
10%
Healthcare Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise21
Large Enterprise54
By reviewers
Company SizeCount
Small Business54
Midsize Enterprise34
Large Enterprise63
No data available
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing u...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never pu...
Is Crowdstrike Falcon better than Trend Micro Deep Security?
I like that Crowdstrike allows me to easily correlate data between my firewalls. What’s most useful for my needs is t...
What needs improvement with Deepwatch?
There are specific details that can be improved in Deepwatch. After implementing it, we tracked both response time an...
What is your primary use case for Deepwatch?
Deepwatch provides continuous rest monitoring, detection, and response to protect our organization from cyberattacks....
What advice do you have for others considering Deepwatch?
My advice for others considering using Deepwatch is that if someone has an application where security threats are com...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface, CrowdStrike Falcon Platform
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Premise Health, Dover, Follett, Genuine Parts Company
Find out what your peers are saying about Palo Alto Networks, SentinelOne, CrowdStrike and others in AI-Powered Cybersecurity Platforms. Updated: July 2026.
908,800 professionals have used our research since 2012.