No more typing reviews! Try our Samantha, our new voice AI agent.

Cynet vs Proofpoint Insider Threat Management comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 4, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Cynet
Average Rating
8.8
Reviews Sentiment
7.2
Number of Reviews
46
Ranking in other categories
Security Information and Event Management (SIEM) (19th), Endpoint Protection Platform (EPP) (19th), User Entity Behavior Analytics (UEBA) (8th), Endpoint Detection and Response (EDR) (18th), Threat Deception Platforms (1st), Network Detection and Response (NDR) (10th), Extended Detection and Response (XDR) (11th), Ransomware Protection (4th)
Proofpoint Insider Threat M...
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
6
Ranking in other categories
User Activity Monitoring (3rd), User Entity Behavior Analytics (UEBA) (7th), Insider Risk Management (6th)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Vishal Salve - PeerSpot reviewer
manager at a financial services firm with 201-500 employees
Automation has transformed threat detection and incident response and improves team efficiency
Cynet can be improved by enhancing third-party integrations, improving reporting and dashboard customization, and providing more advanced AI-driven analytics. Customization for automated response workflows would also help organizations tailor the platform to their specific security needs. There is room for improvement in reporting customization, third-party integration, and advanced analytics. I had to spend additional time tuning the alerts during the initial deployment to reduce false positives and align the detection with our environment, but these were minor challenges, and the platform has performed well for our specific needs. Regarding Cynet's AI capabilities, its governance and security capabilities are effective, but greater transparency into AI decision-making and additional customization options would further enhance confidence and control. There is still room for improvement in predictive analytics and better transparency into how certain detections are generated.
reviewer1271289 - PeerSpot reviewer
Cyber Security Leader at a tech services company with 201-500 employees
Good value, easy to use, and easy to deploy
In terms of what can be improved, that is a question I think the end users can tell you better. I'm not the end-user for this system. However, I can say that it needs to be more scalable. I think they already have a good value proposition in terms of being a hybrid model, and the reporting is okay, as well. It could have better integration with other SIEMs, but this integration has to come from the SIEM side, not ObserveIT.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Based on my experience, I would recommend Cortex XDR by Palo Alto Networks to other people."
"The most valuable features are the fact that it was running in the background and it would intercept any weird stuff, and the fact that it would send things directly to the cloud for sandboxing. It's quite practical."
"I've found the solution to be highly scalable for enterprises."
"Cortex XDR by Palo Alto Networks has helped us a lot with securing the whole environment and the whole IT structure, giving us full knowledge of what is happening on the client and enabling us to take action right away from a single point for managing security operations on the hosts."
"If any application performs suspicious activities, such as changing registries or modifying other applications, Cortex XDR detects and blocks the entire application."
"Stability is one of the features we like the most."
"We can use Cortex XDR to get the entire graph of the incidents from source to destination, and we can take remedial action."
"It has pretty much everything we need and works well within the Palo Alto ecosystem."
"It is a very stable solution...It is a very scalable solution...The initial setup of Cynet was easy."
"The solution's most valuable aspect is the complete coverage as well as automation of protection and response, including its complimentary 24/7 SOC service, CyOps."
"It is quite stable. I would rate the stability of the solution a nine out of ten."
"The interface is exceptionally clear and easy to understand."
"The most effective features of Cynet are its ransomware protection and lateral movement deception."
"Its ability to revert back from a previous state is quite notable. This feature is particularly valuable because, for maintaining integrity, it can inspect the socket for any firewall modifications. In practice, it allows us to return to a previous configuration when everything was functioning correctly."
"Technical support staff were very responsive and very helpful."
"They really have a solid product that will save companies a lot of money in licensing costs if they give them a try."
"Meta data search Alert generation."
"Customer Service: The ObserveIT professional services team has been excellent, extremely engaged and genuinely concerned with our success."
"Overall, it gives a consistent and really good return on investment."
"It resolved security issues of the organization by providing audit reports and records to our customers."
"ObserveIT is small, easy to use, easy to deploy, and is not complicated, so it's more generally suited for only SMBs. It's a good value with a cheaper price."
"All my clients are very pleased with this product as it helps them to keep track of what partners and employees are doing on the servers."
"Record videos that have a very small file size Management interface is very convenient and intuitive"
 

Cons

"I have run into some detection issues with Cortex XDR. It needs to be better at detection of internal attacks."
"Additionally, I think the price is very high, and if it can be adjusted, I believe it will be a very good solution."
"If you compare it to SentinelOne, which has more functionalities and detection capabilities on an open platform, the pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks."
"The dashboard is the area that needs to improve so that we can have the ability to drill down without having to go elsewhere to verify results."
"The deployment is pretty hard."
"The solution should force customers to integrate with network traffic to see the full benefits of XDR."
"There is also no recovery feature; if some endpoint is under attack there must be the possibility of recovering it or restoring it to a normal state."
"I recommend adding a data loss prevention (DLP) solution to Cortex XDR by Palo Alto Networks. The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products."
"Cynet is capable and cloud-based, however, enterprise organizations often prefer on-premises servers for managing entire organizations."
"Maybe they should add more cloud-to-cloud integrations and also focus on integrations with local, on-premises services."
"Functions-wise, at present the times for events are not a user's local time, but we assume that will be corrected soon."
"Cynet can be improved by enhancing third-party integrations, improving reporting and dashboard customization, and providing more advanced AI-driven analytics."
"The reporting is a little weak and could be improved."
"I cannot provide more details about Cynet's automation features. While Cynet claims to be automated, the specifics of this automation are unclear. They claim to have a high capability to detect and block attacks, but I am cautious about companies that claim to solve every problem without limitations. It does help in identifying malware on the network but doesn't specifically identify vulnerabilities."
"There could be more customization options and detailed information provided in the reports."
"Their deployment needs some work, especially with integration with remote monitoring management systems like Datto AutoTask or ConnectWise Automate."
"ObserveIT is not scalable and it's not for the medium to large corporations. It's for the smaller environments. For the larger corporations, we have other scalable solutions."
"OCR capability, support for Mainframe, Ticketing and Incident workflow."
"I had some problems with an instance of ObserveIT in a Proof of Concept, when I installed ObserveIT with an SQL Express instance and the DB used all provisioned space."
"Ticketing and issue management. Based on the new system, one needs to go through the sales people."
"The tool is still not providing records of tunnels established - we would like to see it in future versions."
 

Pricing and Cost Advice

"I am using the Community edition."
"We pay about $50,000 USD per year for a bundle that includes Cortex XDR."
"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."
"The tool's price is moderate."
"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."
"I don't recall what the cost was, but it wasn't really that expensive."
"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."
"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."
"It gives you a high level of protection at a very good price."
"Cynet is very affordable."
"Its licensing is on a monthly basis."
"We purchase the product’s yearly license."
"Cynet is cheap."
"Cynet is cheaper than other solutions in the market."
"The price should not be less than $100 which is quite reasonable for this solution because you are getting multiple components."
"The price is very competitive."
Information not available
report
Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Financial Services Firm
12%
Manufacturing Company
12%
Comms Service Provider
9%
Construction Company
8%
Construction Company
10%
Manufacturing Company
9%
Media Company
9%
Performing Arts
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise9
Large Enterprise12
No data available
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
When evaluating User Activity Monitoring, what aspect do you think is the most important to look for?
The support team that stands behind the detection and response. Is there adequate expertise and are they behind you ...
What is your experience regarding pricing and costs for Cynet?
Cynet is not very costly. We can refer it to other customers because Cynet does not ask for additional costs for add-...
What needs improvement with Cynet?
Cynet can be improved by enhancing third-party integrations, improving reporting and dashboard customization, and pro...
Looking for recommendations and a pros/cons template for software to detect insider threats
In addition to responsesfrom Xavier Suriol and reviewer1324719, also consider ObserveIT from Proofpoint.
Looking for recommendations and a pros/cons template for software to detect insider threats
Hello All,I hope you had a merry Christmas.In this case it is as simple as it is.Just take Proofpoint ObserveIT - ma...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
ObserveIT
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Meuhedet, East Boston Neighborhood Health Center
Coca Cola, Allianz, Premiere League, Xerox, AIG, Cigna, Starbucks, Revlon, Toshiba, Nissan and more.
Find out what your peers are saying about Cynet vs. Proofpoint Insider Threat Management and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.