Try our new research platform with insights from 80,000+ expert users

Cynet vs Lumu comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Extended Detection and Response (XDR)
6th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
108
Ranking in other categories
Endpoint Protection Platform (EPP) (5th), Endpoint Detection and Response (EDR) (7th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (2nd)
Cynet
Ranking in Extended Detection and Response (XDR)
9th
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
45
Ranking in other categories
Security Information and Event Management (SIEM) (11th), Endpoint Protection Platform (EPP) (13th), User Entity Behavior Analytics (UEBA) (3rd), Endpoint Detection and Response (EDR) (12th), Threat Deception Platforms (2nd), Network Detection and Response (NDR) (4th), Ransomware Protection (3rd)
Lumu
Ranking in Extended Detection and Response (XDR)
16th
Average Rating
9.2
Reviews Sentiment
7.5
Number of Reviews
9
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (10th), Network Detection and Response (NDR) (6th)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Roshan Jadhav - PeerSpot reviewer
Technical Consultant at Vincacyber
Has improved threat detection and streamlined incident analysis through centralized control and AI-driven insights
People are looking for Cynet because it has next-generation threat protection that detects zero-day threats. It has UEBA (user entity behavior analysis), threat hunting features, and storage device control where we can create profiles and block unauthorized USB storage devices. We can also create threat protection policies to detect malware, ransomware, and many other threats. The most valuable feature is the UBA (User behavior analysis). It has integration with SIEM solutions, allowing us to share our logs to third-party SIEM servers. Cynet has AI integration which showcases complete forensic data about threats, making it very easy to understand what happened with the system and what type of incident was detected. Autonomous breach protection is a feature of Cynet which can detect and mitigate known and unknown threats based on signatures. If there are any signature-less files, malware, or ransomware, it will detect them based on autonomous breach protection capabilities. The centralized management console provides a dashboard where we can see four types of attack vectors and incident counts in real-time. It continuously scans the radar and shows open alerts related to files, hosts, users, or networks. We can easily export these alerts and send reports via email.
JJ
Director, Information Technology at a educational organization with 201-500 employees
Constant monitoring and analysis boosts network security
There is always room for improvement. I am not giving it a perfect score because I am sure there is something that could be enhanced.Having some sort of certification or training, along with more periodic webinars might be helpful. Having a larger support network would be beneficial. Nobody I know has heard of Lumu, so they are in the same space as Darktrace or CrowdStrike, but people give blank stares. As the community grows for Lumu then that will improve, but that is not really a criticism of Lumu, they simply have not been around that long.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is an easy-to-use tool."
"The multi-layered approach to the product gives you confidence that it will stop exploits, ransomware, worms, or viruses from compromising endpoints, essentially providing peace of mind."
"Provides behavior-based detection which offers many benefits over signature-based detection."
"Its interface and pricing are most valuable. It is better than other vendors in terms of security."
"Cortex XDR by Palo Alto Networks's ability to block sophisticated threats in real time is quite good and is on par with SentinelOne's."
"The product's most valuable features are massive user and feature intelligence exploit detection."
"We've had a significant increase in blocking with a decrease in false positives, because it's looking at how the files work, not just a list of files that it's been told to look for."
"After deploying Traps, we saw the performance of the network improve by 65 to 70 percent."
"The valuable aspects of Cynet are its EDR and XDR components, which are available at a reasonable price point."
"The visibility it gives is excellent."
"The level of automation is very good because the majority of the time, it blocks the attacks without requiring anything from our side. The technicians don't have to do anything. They are just alerted about what happened. So, the user intelligence works quite well."
"I like that it is possible to use the solution to check more information about the users' devices."
"This solution requires less management and is very easy to use."
"I like that you can implement it in the managed service portfolio."
"It provides good protection from ransomware and malware attacks. It is very good as compared to other products. If any threat is there, their support is very good. They immediately respond to the users and do a follow-up. They call us and also provide email support."
"I have found the continued support and pretty much all the features to be valuable. They all stand out as being positive. It continues to detect unusual activity when it's supposed to, and so far we haven't had any issues."
"The tool's support team helps partners resolve any problems with the product."
"Lumu protects against threats immediately and handles them in time."
"Most of it is automated, so I do not have to watch it to get alerts."
"The context provided by the tool is very complete, it includes the miter matrix, playbooks, links, hashes, and much more."
"I like Lumu's simple user interface. When we deployed it, we got full access, allowing us to identify IP addresses on the network and connect machine names to users. It helped us identify and block threats via the firewall. I also appreciate the chat support and ticket closure process. We're currently reviewing network detection solutions, and my recommendations include Lumu, Sentinel, and a few others. Regarding functionality and user-friendliness, I would recommend Lumu over the others."
"You can access external links, playbooks, MITRE Matrix, and a lot of information."
"Lumu has impacted my organization positively by providing continuous visibility into network compromise, allowing us to detect threats that were previously unnoticed, significantly reducing our mean time to detect and improving our ability to quickly validate and respond to incidents."
"The automated response to incidents works effectively out of the box, and the number of interfaces and platforms it can work with is impressive."
 

Cons

"If he is using a smaller company, he can depend on some other tools because Cortex XDR by Palo Alto Networks is a bit expensive."
"Whenever the tool releases a new version when deploying the product across the organization, I feel like there are some disturbances in the CPU usage after upgrading the tool to the latest version."
"Cortex XDR could be improved with more GUI features."
"It takes time to scan the servers and devices."
"Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth."
"The tool needs to be improved in terms of integration and interface."
"Cortex XDR should have a lightweight agent, and the agent size should not be heavy."
"If you compare it to SentinelOne, which has more functionalities and detection capabilities on an open platform, the pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks."
"An administration feature will be useful for Cynet."
"I think the technical support could be better."
"Their technical support can be improved in terms of speed when opening a ticket."
"I suppose everybody's working on AI these days. So, I would like to see more about AI-based threats."
"There is room for improvement in terms of support. The support should be faster to respond."
"Increased application for SOAR abilities across interconnected devices would be a welcome improvement."
"One area where Cynet needs improvement is tamper protection for Mac and Linux agents."
"In terms of what could be improved, I would say the usability of this product for new threats. Meaning, not everything which is new is properly seen by the product and not all the required actions are taken."
"The integration with different vendors and endpoints could be improved."
"It would be good if we could access the physical logs."
"The reports need improvement."
"Having a larger support network would be beneficial. Nobody I know has heard of Lumu, so they are in the same space as Darktrace or CrowdStrike, but people give blank stares."
"Nothing so far needs to be improved."
"I am happy with the current features. However, one important one is to improve the reports."
"Lumu is solid for compromise detection, but there are a few areas where it could be improved, including deeper integration with SIEM and XDR, asset context enrichment, custom detection tuning, automated response capabilities, and reporting customization."
"The free version is minimal compared to the full version."
 

Pricing and Cost Advice

"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."
"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."
"I am using the Community edition."
"The price was fine."
"I don't have any issues with the pricing. We are satisfied with the price."
"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."
"It has reasonable pricing for the use cases it provides to the company."
"I feel it is fairly priced."
"Our billing is on a quarterly basis, but they have monthly or annual billing availability."
"Cynet is cheaper than other solutions in the market."
"It gives you a high level of protection at a very good price."
"It costs us 20,000 to 28,000 per year."
"It costs 18,000 per year, but we have the whole package with not only Cynet but also the Perception Point for emails. There are also some small security courses for our users."
"it's not cheap, but I would rate it a three out of ten. If one is cheap and ten is expensive."
"The price should not be less than $100 which is quite reasonable for this solution because you are getting multiple components."
"This solution is expensive. I would rate the price as a three out of five when compared to similar products."
"The tool is available at a good price. The tool offers a good and competitive price for customers."
"It is the cheapest solution we found."
"Compared to Lumu, other solutions are more expensive. SentinelOne was a bit cheaper, and another provider's price structure is unclear, but Lumu fit our budget nicely. SentinelOne's cost depends on the number of devices, and it might be similar to Lumu's, depending on deployment."
report
Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
884,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
9%
Manufacturing Company
9%
Financial Services Firm
9%
Comms Service Provider
7%
Manufacturing Company
10%
Financial Services Firm
9%
Computer Software Company
9%
Comms Service Provider
9%
Financial Services Firm
10%
Insurance Company
9%
Comms Service Provider
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise20
Large Enterprise47
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise7
Large Enterprise12
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise1
Large Enterprise4
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
When evaluating User Activity Monitoring, what aspect do you think is the most important to look for?
The support team that stands behind the detection and response. Is there adequate expertise and are they behind you ...
What do you like most about Cynet?
In terms of incident response, Cynet can contain attacks, offer a trial period to customers, and uninstall if not con...
What is your experience regarding pricing and costs for Cynet?
Cynet is not very costly. We can refer it to other customers because Cynet does not ask for additional costs for add-...
What do you like most about Lumu?
Lumu protects against threats immediately and handles them in time.
What needs improvement with Lumu?
There is always room for improvement. I am not giving it a perfect score because I am sure there is something that co...
What is your primary use case for Lumu?
We use it as our managed SOC instead of contracting with an MSP. It coordinates endpoint and gives us a single pane o...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Meuhedet, East Boston Neighborhood Health Center
Information Not Available
Find out what your peers are saying about Cynet vs. Lumu and other solutions. Updated: March 2026.
884,873 professionals have used our research since 2012.