Cybereason Endpoint Detection &amp; Response vs Zscaler Client Connector comparison

Cybereason Endpoint Detection & Response vs. Zscaler Client Connector

Download the complete report

Helped 884,933 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of March 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of Cybereason Endpoint Detection & Response is 1.2%, up from 1.0% compared to the previous year. The mindshare of Zscaler Client Connector is 0.6%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.4%
Cybereason Endpoint Detection & Response	1.2%
Zscaler Client Connector	0.6%
Other	94.8%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Ivan Burke

Head of Research Development and Innovation at CSIR

Offers useful threat hunting and response capabilities but struggles to justify cost for smaller deployments

I mostly work with incident response, so I work with a bunch of them interchangeably, but mostly with the EDR components; I also get involved with some of the XDR components, especially for the cloud. Regarding analysis features, such as deep behavioral detection, I do use it sometimes; I usually don't use the automated version of it, as I prefer threat hunting directly, depending on if the season is available. I know some of them have pretty good analytics engines, but I tend to do the threat hunting on my own. I manage incident response for a bunch of companies, so some of them have Cybereason Endpoint Detection & Response integrated into Sentinel, some into Fortinet, and others into various tools. When considering cost-effectiveness, their pricing structure works such that if you're a large organization with more than a thousand endpoints to deploy to, then Cybereason Endpoint Detection & Response is worthwhile. But for anything less than 300, it's too expensive; obviously, the more you buy, the better the price, making it cheaper for you. Cybereason Endpoint Detection & Response best fits enterprise-level businesses such as huge corporations; however, we are in the process of removing it from many of our endpoint clients because it's not really showing enough value for them at the moment. We're trying to see how we can improve it with some of our clients, but at the moment, it's struggling compared to other EDR solutions that we have deployed. On a scale of one to ten, I rate Cybereason Endpoint Detection & Response a six.

Read full review

Dimitrios Arvanitakis

IT Support Admin at Kuehne+Nagel

Client activity has been monitored efficiently through in-depth log analysis and traffic filtering

I use the Zscaler speed test, and it is very nice. We use some logs from Zscaler Client Connector to collect data and see what is happening, such as if there is an interruption or something. There is a specific tunnel version that we have to use because, depending on the internet provider, some of them have lower speed, so we have some issues. This is because of the provider, not from Zscaler. We use Office 365 services and Office applications, and because some connections are slow and they do not have full coverage from the internet provider, we have some issues. If the speed is slow for Zscaler Client Connector connection, then we have issues because if the speed is not good, then Zscaler Client Connector goes down. This may be because they put some policy. Of course, if you use Office 365 services such as Outlook, the minimum bandwidth is 5 megabits and more, so this causes issues if the users do not have a good remote connection. This depends on the companies and the users, so they need to fix it. This is not from us or our company. It is very useful, and the logs are very helpful. When we go to logs, we understand what is happening.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We've had a significant increase in blocking with a decrease in false positives, because it's looking at how the files work, not just a list of files that it's been told to look for."

"The information the dashboard provides is very clear."

"The product's most valuable features are massive user and feature intelligence exploit detection."

"After deploying Traps, we saw the performance of the network improve by 65 to 70 percent."

"It's a perfect solution. It integrates well into the environment."

"It's very stable. I've never experienced downtime for the ASM console or ASM core."

"Best solution for avoiding security breaches, malware attacks, and other kinds of security issues."

"Traps is quite a stable product. Once it was properly deployed and configured, you have nothing to be worried about."

More Cortex XDR by Palo Alto Networks pros

"The solution is efficient."

"In terms of pricing, it's a good solution."

"The most valuable feature is the capability of the command used by the machine so that we see the kind of performance that is running."

"What I like most about Cybereason Endpoint Detection & Response is the support because the support is good. The solution is also easy to use, and it has a dashboard. Everything is good, and there's no problem with it."

"We are monitoring it by ourselves as well, however, their SOC team is monitoring and pre-alerting us all the time, every day."

"What I find most valuable is the clarity of the platform. It is very straightforward."

"If one supports the notion that layered security needs to focus on inside out risk instead of trying to securing the perimeter - a very compelling tool for where to focus your infosec/forensic brain power."

"They do a very good job of providing multi-stage visualizations of malicious operations that immediately show all attack details across all devices and users. Since it is MalOp-centric model, you can see if there has been a similar operation across multiple machines. If it is the same thing appearing on multiple machines, you see all the machines and users affected in one screen."

More Cybereason Endpoint Detection & Response pros

"I'd rate the solution nine out of ten."

"The real-time analytics feature in Zscaler Client Connector is another valuable feature called Digital Experience, or ZDX, which can easily identify the root cause of issues accessing public or internal resources and provide good analysis so relevant teams can quickly resolve them, making it a very good tool that helps customers."

"It is very important to see what is happening between the user and the applications that we have, and to filter the traffic from outbound traffic and inside traffic."

"It is very useful, and the logs are very helpful; when we go to logs, we understand what is happening."

"It is very important to see what is happening between the user and the applications that we have, and to filter the traffic from outbound traffic and inside traffic."

"The solution operates in the background seamlessly without the user noticing."

"Zscaler Client Connector has eliminated VPN bottlenecks and outages, improved user productivity with instant secure access, and reduced help desk tickets related to VPN issues, overcoming 60% of VPN-related problems while allowing faster onboarding of remote users and better enforcement of zero-trust security policies."

"The best features of Zscaler Client Connector are that it gives the client a much more transparent experience, as they don't have to worry about connecting to a VPN."

More Zscaler Client Connector pros

Cons

"Although I would say this product is highly-rated, it could probably do more because nothing does everything that you want."

"They are charging for Network Traffic Analyzer (NTA) services, so if the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better."

"It tends to do 99.9% of things. The only thing I'd like is single sign-on authentication into their cloud platform so that my users can be properly authenticated against it."

"Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth."

"I would like to see some additional features related to email protection included."

"A little bit more automation would be nice."

"The solution eats memory of the computer, unlike anything I've ever seen."

"Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth."

More Cortex XDR by Palo Alto Networks cons

"Technical support needs to improve."

"They need to improve their technical support services."

"I feel it is a shame that I cannot create groups of groups with inheritance."

"I feel that the product lacks reporting features and needs improvement."

"It should be more stable, and the sensor needs improvement in terms of connectivity."

"The technical support will need to be improved."

"The network coverage becomes an issue most of the time."

"The deployment on individual endpoints is more geared toward larger organizations. It might prove to be a bit too complicated for a smaller organization. You need to know what you're doing when you're deploying the sensor."

More Cybereason Endpoint Detection & Response cons

"If the speed is slow for Zscaler Client Connector connection, then we have issues because if the speed is not good, then Zscaler Client Connector goes down."

"Zscaler Client Connector is not low in cost; it is definitely on the higher side."

"There is room for improvement regarding the price of Zscaler Client Connector, as it is one of the most expensive solutions available."

"There is a hard learning curve for Zscaler Client Connector; their support isn't the greatest all the time."

"I rate this product nine out of ten because I have seen some minor instability issues after updates and some room for UI improvement for deeper analytics, with instances of major issues after updating the GCC that required rollbacks."

"If the speed is slow for Zscaler Client Connector connection, then we have issues because if the speed is not good, then Zscaler Client Connector goes down."

More Zscaler Client Connector cons

Pricing and Cost Advice

"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."

"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."

"The solution is expensive. It's pricing is on a yearly-basis."

"I don't recall what the cost was, but it wasn't really that expensive."

"We pay about $50,000 USD per year for a bundle that includes Cortex XDR."

"I don't have any issues with the pricing. We are satisfied with the price."

"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."

"Cortex XDR by Palo Alto Networks is an expensive solution."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"In terms of pricing, it's a good solution."

"I do not have experience with the licensing of the product."

"I had to go through a third-party to purchase it, which I wasn't really pleased about."

"The pricing is manageable."

"In terms of cost, this is a good choice for our needs."

"We considered a few other solutions. Some were ridiculously overpriced, while others didn't have solutions for Mac endpoints. That was a deal-breaker because most of our organization is on Mac. It came down to two vendors: Cybereason and another. They had similar pitches and almost identical approaches, but in the end, Cybereason gave us the best value for our money."

"On a scale of one to ten, where one is cheap and ten is expensive, I rate the pricing an eight."

"This product is somewhat expensive and should be cheaper."

More Cybereason Endpoint Detection & Response pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

884,933 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

Manufacturing Company

Financial Services Firm

Comms Service Provider

Financial Services Firm

12%

Computer Software Company

11%

Manufacturing Company

10%

Outsourcing Company

Manufacturing Company

23%

Government

12%

Comms Service Provider

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	47

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	4
Large Enterprise	13

By reviewers
Company Size	Count
Small Business	2
Large Enterprise	5

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What is your primary use case for Cybereason Endpoint Detection & Response?

My main use case for Cybereason Endpoint Detection & Response is mostly for incident response.

What needs improvement with Cybereason Endpoint Detection & Response?

When it comes to advanced threats, it sometimes helps me with finding them and hunting them down with threat detectio...

What advice do you have for others considering Cybereason Endpoint Detection & Response?

I mostly work with incident response, so I work with a bunch of them interchangeably, but mostly with the EDR compone...

What is your experience regarding pricing and costs for Zscaler Client Connector?

Zscaler Client Connector is notably costly, with pricing rated at five out of ten in terms of affordability, reflecti...

What needs improvement with Zscaler Client Connector?

Zscaler continues to strengthen the Zscaler Client Connector by introducing new features and expanding the platform’s...

What is your primary use case for Zscaler Client Connector?

I’m not working directly for Zscaler; I work with a partner organization as a Systems Integrator. Our work is not lim...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 9% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

CrowdStrike Falcon vs Cybereason Endpoint Detection & Response

Compared 10% of the time

SentinelOne Singularity Complete vs Cybereason Endpoint Detection & Response

Compared 7% of the time

Fortinet FortiEDR vs Cybereason Endpoint Detection & Response

Compared 4% of the time

Intercept X Endpoint vs Cybereason Endpoint Detection & Response

Compared 4% of the time

Trellix Endpoint Security Platform vs Cybereason Endpoint Detection & Response

Compared 3% of the time

More Cybereason Endpoint Detection & Response Competitors

Microsoft Defender for Endpoint vs Zscaler Client Connector

Compared 12% of the time

Huntress Managed EDR vs Zscaler Client Connector

Compared 10% of the time

Cisco Secure Endpoint vs Zscaler Client Connector

Compared 7% of the time

Tanium vs Zscaler Client Connector

Compared 7% of the time

More Zscaler Client Connector Competitors

Product Reports

Cortex XDR by Palo Alto Networks

Download Cortex XDR by Palo Alto Networks product report

Cybereason Endpoint Detection & Response

Download Cybereason Endpoint Detection & Response product report

Cybereason Endpoint Detection & Response report

Download Zscaler Client Connector product report

Zscaler Client Connector

February 2026

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Cybereason EDR, Cybereason Deep Detect & Respond

No data available

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Cybereason's Endpoint Detection and Response platform detects in real-time both signature and non-signature-based attacks and accelerates incident investigation and response. Cybereason connects together individual pieces of evidence to form a complete picture of a malicious operation.

LevelBlue

Zscaler Client Connector enhances network security by providing seamless access to applications, ensuring a safe and efficient digital experience. It is designed for businesses needing comprehensive protection and optimized resource access within a unified platform.

Organizations deploy Zscaler Client Connector to securely connect users to applications while maintaining robust data protection standards. It eliminates the need for traditional gateways by offering direct-to-cloud security, which enhances performance and reduces complexity. This solution is ideal for remote work environments where secure and efficient application access is required. It simplifies IT infrastructures, allowing businesses to scale without compromising security.

What are the key features of Zscaler Client Connector?

Zero Trust Access: Provides secure connectivity by validating user identities and context.
Cloud Firewall: Ensures robust protection by inspecting all traffic for potential threats.
Bandwidth Control: Manages network resources to optimize application performance.
Seamless User Experience: Integrates smoothly into existing environments with minimal disruption.
Comprehensive Visibility: Offers detailed analytics and reporting for informed decision-making.

What are the benefits users should expect?

Improved Security Posture: Strengthens defenses against cyber threats with advanced protocols.
Cost Efficiency: Reduces operational costs by streamlining IT management and reducing hardware dependencies.
Scalability: Easily adapts to organizational growth or changes in IT requirements.
Enhanced Productivity: Increases workflow efficiency by ensuring secure and rapid access to necessary applications.
Reduced Latency: Direct-to-cloud connectivity minimizes lag and improves user experience.

Zscaler Client Connector is widely adopted across industries such as finance, healthcare, and retail, where secure data transmission and compliance are critical. In finance, it supports secure transactions and data protection. For healthcare, it ensures HIPAA compliance, and in retail, it simplifies secure customer-facing services. Each industry benefits from tailored implementations that address specific security and connectivity challenges.

Zscaler

Sample Customers

CBI Health Group, University Honda, VakifBank

Lockheed Martin, Spark Capital, DocuSign, Softbank Capital

Information Not Available

Cybereason Endpoint Detection & Response vs. Zscaler Client Connector