No more typing reviews! Try our Samantha, our new voice AI agent.

Cynet vs Morphisec comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Protection Platform (EPP)
4th
Ranking in Endpoint Detection and Response (EDR)
5th
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Cynet
Ranking in Endpoint Protection Platform (EPP)
19th
Ranking in Endpoint Detection and Response (EDR)
18th
Average Rating
8.8
Reviews Sentiment
7.2
Number of Reviews
46
Ranking in other categories
Security Information and Event Management (SIEM) (19th), User Entity Behavior Analytics (UEBA) (8th), Threat Deception Platforms (1st), Network Detection and Response (NDR) (10th), Extended Detection and Response (XDR) (11th), Ransomware Protection (4th)
Morphisec
Ranking in Endpoint Protection Platform (EPP)
45th
Ranking in Endpoint Detection and Response (EDR)
62nd
Average Rating
9.2
Reviews Sentiment
7.4
Number of Reviews
21
Ranking in other categories
Vulnerability Management (54th), Advanced Threat Protection (ATP) (29th), Cloud Workload Protection Platforms (CWPP) (33rd), Threat Deception Platforms (13th)
 

Mindshare comparison

As of November 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.6% compared to the previous year. The mindshare of Cynet is 1.3%, up from 1.3% compared to the previous year. The mindshare of Morphisec is 1.1%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.8%
Cynet1.3%
Morphisec1.1%
Other93.8%
Endpoint Protection Platform (EPP)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Vishal Salve - PeerSpot reviewer
manager at a financial services firm with 201-500 employees
Automation has transformed threat detection and incident response and improves team efficiency
Cynet can be improved by enhancing third-party integrations, improving reporting and dashboard customization, and providing more advanced AI-driven analytics. Customization for automated response workflows would also help organizations tailor the platform to their specific security needs. There is room for improvement in reporting customization, third-party integration, and advanced analytics. I had to spend additional time tuning the alerts during the initial deployment to reduce false positives and align the detection with our environment, but these were minor challenges, and the platform has performed well for our specific needs. Regarding Cynet's AI capabilities, its governance and security capabilities are effective, but greater transparency into AI decision-making and additional customization options would further enhance confidence and control. There is still room for improvement in predictive analytics and better transparency into how certain detections are generated.
Rick Schibler - PeerSpot reviewer
VP of Information Technology at Kentucky Trailer
Offers in-memory protection at a lower price than competitors
Morphisec's in-memory protection is probably the most valuable feature because it stops malicious activity from occurring. If something tries to install or act as a sleeper agent, Morphisec will detect and stop it. Morphisec's Moving Target Defense is critical to hardening our attack surface. If it detects something, it indicates whether it's valid. That means you've got a breach requiring investigation. It detects anomalies but doesn't necessarily point to what caused them. You still need to do that work. The solution is reasonably easy to administer. They made some changes last year, adding a cloud-based monitoring solution that makes deploying and monitoring our endpoints easy.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We've had a significant increase in blocking with a decrease in false positives, because it's looking at how the files work, not just a list of files that it's been told to look for."
"Cortex XDR by Palo Alto Networks has changed the way my security team detects, investigates, and responds to threats, as we are able to see the files, unwanted files, unsecured files, and unauthorized files, so we are quarantining them."
"Everything is organized straightforwardly; all the incidents are clearly described and everything you need is essentially in one menu and one UI interface, which is quite beneficial for me and also for the customer."
"The solution helps find bugs, and it is safe to use to prevent attacks by hackers."
"The product's initial setup phase is very easy."
"After installing this solution, it identified, blocked, and provided the complete attack chain, which was very helpful."
"We can use Cortex XDR to get the entire graph of the incidents from source to destination, and we can take remedial action."
"It is easy to use."
"It provides good protection from ransomware and malware attacks. It is very good as compared to other products. If any threat is there, their support is very good. They immediately respond to the users and do a follow-up. They call us and also provide email support."
"The initial setup is simple and user-friendly."
"The solution provided an immediate return on investment; we've stopped several cyberattacks within hours, and we stopped one ongoing cyberattack within one day of deploying to a new client."
"The clients are surprised at the coverage and the peace of mind they get where they don't have to worry about certain things."
"I like that it is possible to use the solution to check more information about the users' devices."
"It is a very stable solution...It is a very scalable solution...The initial setup of Cynet was easy."
"For overall satisfaction, I rate Cynet between nine to ten out of ten, and I wholeheartedly recommend it to other users."
"This solution requires less management and is very easy to use."
"It provides full visibility into security events and from both solutions in one dashboard. I'm not a big security guy, if I have a threat that looks like there's a problem, I will ask Morphisec to dissect it for me, and tell me what might be happening. Because it tends to be all hash codes, so I can tell what's going on. They've been pretty good with that."
"The ability to stop attacks without having to detect or have a signature for the attack is the most valuable feature."
"Morphisec provides full visibility into security events from Microsoft Defender and Morphisec in one dashboard. Defender and Morphisec are integrated. It's important because it lowers the total cost of maintenance on the engineer's time, more or less. So the administrative time is dramatically reduced in maintaining the product. This saves an engineer around four to five hours a week."
"Morphisec stops attacks without needing to know what type of threat it is, just that it is foreign. It is based on injections, so it would know when a software launches. If a software launches and something else also launches, then it would count that as anomalous and block it. Because the software looks at the code, and if it executes something else that is not related, then Morphisec would block it. That is how it works."
"Morphisec has enabled us to become a lot less paranoid when it comes to staff clicking on things or accessing things that they shouldn't that could infect the whole system. Our original ransomware attack that happened came from someone's Google drive and then just filtered on through that. It has put our minds at ease a lot more in running it. It's also another layer of security that has been proven to be effective for us."
"The product has absolutely worked flawlessly; we have had basically no issues, either with the product or with any type of virus or zero-day attacks, ransomware, nothing, as it has caught everything."
"Morphisec as the last line of defense is as good as you can get."
"If you have the ability to get Morphisec into their environment, it's going to be a hundred percent return on investment."
 

Cons

"It is not very strong in terms of endpoint management. It should have additional features like DLP, encryption, or advanced device control. Currently, Cortex is good in terms of the security of the endpoints, but it is not as good as other vendors in terms of the management of the endpoint."
"Whenever the tool releases a new version when deploying the product across the organization, I feel like there are some disturbances in the CPU usage after upgrading the tool to the latest version."
"The solution should force customers to integrate with network traffic to see the full benefits of XDR."
"I have seen lagging with Cortex XDR by Palo Alto Networks. There was one time when we faced a threat actor trying to gain access to our system. When our team utilized the tool, we were all on the same dashboard and we faced a lag issue at that time of around five minutes, which was quite significant."
"For working with the solution, you only really need a web browser, however, we've found that working on Chrome, for example, is horrible."
"In an upcoming release, the solution could improve by proving hard disk encryption. If it could support this it would be a complete solution."
"It's very time-consuming to log support issues and the people that answer the tickets aren't very knowledgeable."
"I would like to see them include NDR (Network Detection Response). Then it would work well with SIEM Response."
"After only one month of implementation, an overall rating is premature."
"Most of their times are in Greenwich Mean Time. I would like to see more local time zones."
"I have had a bit of trouble in the commercial support as a reseller in a country where we started to sell Cynet."
"It is an endpoint agent, but they don't have a probe for checking the network traffic. They could improve from this point of view."
"There could be more customization options and detailed information provided in the reports."
"There have to be more integrations with other firewalls and domain controllers of the network."
"They have automated response capability, and they're moving more and more into SOAR capability. They have built-in deception technology with host-file users, phantoms, etc. We used to call them honeypots. So, they're on target. They're doing a really good job, and they should continue to improve with SOAR."
"I suppose everybody's working on AI these days. So, I would like to see more about AI-based threats."
"Some of the filters for the console need improvement. There are alerts that show up and just being able to acknowledge that we've seen those and not turn them off, but dismiss them, would be a huge benefit."
"Having to have an on-prem server required a lot of administration."
"I haven't been able to get the cloud deployment to work. When there's an update, I'm supposed to be able to roll it out for the cloud solution, but right now I'm continuing to use our SCCM solution to update it."
"The dashboard is the area that requires the most improvement. We have about, I would say 5,500 computers currently, and searching through all of those takes some time to filter. So as soon as you apply the filter, it takes a few seconds. It crunches, it thinks, and then it brings up the clients that match."
"In the Windows Defender integration, they have put in a report of computers that need Windows Defender updates. If those updates could be kicked off directly from the dashboard, instead of having to go to another system entirely, that would be good."
"The only problem is that their support lives in Israel, so the time zones are a bit off, but I've never had any complaint beyond that."
"We sometimes have to depend on the support team to know what action we should take."
"Right now, it's just their auto-update feature. I know they are currently working on that."
 

Pricing and Cost Advice

"Our customers have expressed that the price is high."
"Every customer has to pay for a license because it doesn't work with what you get from a managed services provider."
"Cortex XDR by Palo Alto Networks is an expensive solution."
"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."
"This is an expensive solution."
"It is present, but when compared to other competitive products, I would say it is not less expensive; however, when all of the other added values are considered, the price is reasonable."
"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."
"The price is on the higher side, but it's okay."
"it's not cheap, but I would rate it a three out of ten. If one is cheap and ten is expensive."
"There is an extra cost if you want the support of Cynet."
"Pricing wise, Cynet seems to be very competitive. The cost is probably lower than that offered by many of its competitors for all the functions and features it offers."
"It costs 18,000 per year, but we have the whole package with not only Cynet but also the Perception Point for emails. There are also some small security courses for our users."
"Our billing is on a quarterly basis, but they have monthly or annual billing availability."
"The licensing for Cynet is yearly. The solution pricing depends on the customer, but it is not very expensive."
"Its licensing is on a monthly basis."
"Cynet is cheap."
"Our licensing is tied into our contract. Because we have a long-term contract, our pricing is a little bit lower. It is per year, so we don't get charged per endpoint, but we do have a cap. Our cap is 80 endpoints. If we were to go over 80, when we renewed our contract, which is not until three years are over. Then, they would reevaluate, and say, "Well, you have more than 80 devices active right now. This is going to be the price change." They know that we are installing and replacing computers, so the numbers will be all over the place depending on whether you archive or don't archive, which is the reason why we just have to keep up on that stuff."
"We are still using a separate tool. I know for our 600 or I think we're actually licensed for up to 700 users, it runs me 23 or $24,000 a year. When you're talking to that many users plus servers being protected, that's well worth the investment for that dollar amount."
"Morphisec is reasonably priced because our parent company's other subsidiaries use different products like CrowdStrike. CrowdStrike is four or five times more expensive than Morphisec. The competitive pricing saves us money in our overall security stack."
"Price-wise, it's on the higher side. A traditional antivirus solution is cheaper, but in terms of security and manageability, its ROI is better than a traditional antivirus. I would recommend it to anybody evaluating or considering an antivirus solution. If your system gets compromised, the cost of ransom would be a lot more. This way, it saves a lot of cost."
"It does not have multi-tenants. If South Africa wants to show only the machines that they have, they need their own cloud incidence. It is not possible to have that in a single cloud incidence with multiple tenants in it, instead you need to have multiple cloud incidences. Then, if you have that, it will be more expensive. However, they are going to change that, which is good."
"It is priced correctly for what it does. They end up doing a good deal of discounting, but I think it is priced appropriately."
"It is an annual subscription basis per device. For the devices that we have in scope right now, it is about $25,000 a year."
"Compared to their competitors, the price of Morphisec is not that high. You can easily deploy it on a large-scale or small-scale network."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Financial Services Firm
12%
Manufacturing Company
12%
Comms Service Provider
9%
Construction Company
8%
Manufacturing Company
13%
Outsourcing Company
13%
Construction Company
13%
Comms Service Provider
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise9
Large Enterprise12
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise8
Large Enterprise8
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
When evaluating User Activity Monitoring, what aspect do you think is the most important to look for?
The support team that stands behind the detection and response. Is there adequate expertise and are they behind you ...
What is your experience regarding pricing and costs for Cynet?
Cynet is not very costly. We can refer it to other customers because Cynet does not ask for additional costs for add-...
What needs improvement with Cynet?
Cynet can be improved by enhancing third-party integrations, improving reporting and dashboard customization, and pro...
Ask a question
Earn 20 points
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
Morphisec, Morphisec Moving Target Defense
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Meuhedet, East Boston Neighborhood Health Center
Lenovo/Motorola, TruGreen, Covenant Health, Citizens Medical Center
Find out what your peers are saying about Cynet vs. Morphisec and other solutions. Updated: October 2026.
920,769 professionals have used our research since 2012.