No more typing reviews! Try our Samantha, our new voice AI agent.

Cynet vs RSA enVision comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Cynet
Average Rating
8.8
Reviews Sentiment
7.2
Number of Reviews
46
Ranking in other categories
Security Information and Event Management (SIEM) (19th), Endpoint Protection Platform (EPP) (19th), User Entity Behavior Analytics (UEBA) (8th), Endpoint Detection and Response (EDR) (18th), Threat Deception Platforms (1st), Network Detection and Response (NDR) (10th), Extended Detection and Response (XDR) (11th), Ransomware Protection (4th)
RSA enVision
Average Rating
7.2
Reviews Sentiment
6.7
Number of Reviews
6
Ranking in other categories
Security Information and Event Management (SIEM) (51st)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Vishal Salve - PeerSpot reviewer
manager at a financial services firm with 201-500 employees
Automation has transformed threat detection and incident response and improves team efficiency
Cynet can be improved by enhancing third-party integrations, improving reporting and dashboard customization, and providing more advanced AI-driven analytics. Customization for automated response workflows would also help organizations tailor the platform to their specific security needs. There is room for improvement in reporting customization, third-party integration, and advanced analytics. I had to spend additional time tuning the alerts during the initial deployment to reduce false positives and align the detection with our environment, but these were minor challenges, and the platform has performed well for our specific needs. Regarding Cynet's AI capabilities, its governance and security capabilities are effective, but greater transparency into AI decision-making and additional customization options would further enhance confidence and control. There is still room for improvement in predictive analytics and better transparency into how certain detections are generated.
SF
Président at ARS Solutions
Support both French and English, which is important for us and adapted to the evolving security landscape over time in my experience
You need a skilled engineer to deploy it because you can do anything with this tool. You can see everything on the network. A good engineer will be surprised and have fun using this tool because it's very powerful. Deployment process: You need to build a recipe/layout when you want to deploy something. Once the recipe is done, you just have to copy it. So you really need a good engineer at first, but then any other technician can copy the recipe. You don't need to be an expert once the recipe is finalized. So, once you have it set up, it's easy to deploy. But you need a good engineer to deploy it correctly. You will get alerts from the system, but if you want to fully explore and maximize the tool, the engineering needs are different.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Its interface and pricing are most valuable, and it is better than other vendors in terms of security."
"We have a complete overview of all our PCs and it's very easy to handle and to use the interface. It has a lot of benefits for us."
"The dashboard is customizable."
"The best feature of Cortex XDR by Palo Alto Networks is that it collects logs from different sections such as the endpoint, the network, and the cloud, making it easy to investigate alerts, collect some of the investigation packages related to the infected machines, and provide live response."
"The most valuable for us is the correlation feature."
"It is easy to use."
"Cortex is the best tool for endpoint detection, and I have used it to verify hashes or domains to identify malicious activity, trigger playbooks that automate and gather endpoint logs, block malicious processes, and update incident tickets, showcasing end-to-end processes with automation in investigation and reducing the analysis workflow."
"It has pretty much everything we need and works well within the Palo Alto ecosystem."
"We have definitely seen an ROI because we have very sensitive information, and we never had any viruses."
"The product did not utilize much memory or resources from the background, which was a significant advantage."
"The combination of automated response, centralized visibility, and MDR support has been particularly valuable in improving our detection and response capabilities while reducing manual effort for the security team."
"Advanced detection and protection against ransomware paired with SOC monitoring are the most valuable features. They have 24/7 SOC monitoring and file activity. It is a very robust tool."
"My clients have used Cynet since it is a very automated solution with excellent detection capabilities."
"This is a very good solution for discovering malware and checking the behavior at user endpoints."
"The level of automation is very good because the majority of the time, it blocks the attacks without requiring anything from our side. The technicians don't have to do anything. They are just alerted about what happened. So, the user intelligence works quite well."
"I like that you can implement it in the managed service portfolio."
"RSA enVision provides the full system visibility of your events within your IT ecosystem."
"The most valuable feature is the management features. It's capable of managing large enterprises."
"The most valuable feature of this solution is the reporting."
"We developed around this solution and received excellent support from the company."
"The ease of log collection and stability of the platform are the most valuable features."
"The configuration part is very easy...The technical support was sincere in their responses...I rate the technical support a nine out of ten."
"The custom dashboard and correlation alerts in this solution improved our incident response process."
 

Cons

"I recommend adding a data loss prevention (DLP) solution to Cortex XDR by Palo Alto Networks. The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products."
"Whenever the tool releases a new version when deploying the product across the organization, I feel like there are some disturbances in the CPU usage after upgrading the tool to the latest version."
"They've been having some issues with updating their endpoint agents, and it has been quite frustrating."
"The GUI could be improved. It's a little bit cumbersome. It could be more user-friendly."
"Product might have some bugs."
"The dashboard could use some significant improvement, just making it more useful with more information. It has a limited amount of information right now. It is customizable, but I'd love to see a better out-of-box dashboard."
"It would be better if they could educate the customers more. Some sort of seminars and roadshows will help educate the customers and show what the product can do. The price could be better. It would also help if they had a team for deployment and support."
"If you compare it to SentinelOne, which has more functionalities and detection capabilities on an open platform, the pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks."
"Cynet can be improved by enhancing third-party integrations, improving reporting and dashboard customization, and providing more advanced AI-driven analytics."
"I suppose everybody's working on AI these days. So, I would like to see more about AI-based threats."
"One thing to note is that I highly recommend adding a deep learning-based prevention environment as an additional layer to Cynet. However, I always advise my customers to start with Cynet or XDR, for example, and then focus on the people, technology, and processes involved. This is the best approach to ensure that you are not breached with ransomware. While Cynet can prevent most attacks, there have been cases where ransomware has been quicker than Cynet's detection capabilities. In these situations, an additional tool is necessary to ensure complete protection, and that is what I sell as well."
"Maybe they should add more cloud-to-cloud integrations and also focus on integrations with local, on-premises services."
"Their deployment needs some work, especially with integration with remote monitoring management systems like Datto AutoTask or ConnectWise Automate."
"An administration feature will be useful for Cynet."
"There could be more customization options and detailed information provided in the reports."
"There are some shortcomings in Cynet's integration capabilities that need improvement."
"In general, the solution currently isn't user-friendly."
"Whenever you perform the query, it takes too long."
"RSA enVision log manager is out of date and is not in use anymore."
"There is no future for this solution. It does not exist anymore."
"Licensing could be improved to be more oriented towards Managed Service Providers (MSPs)."
"The integration could be easier, it should support more products."
"Sometimes the investigation panel and reporting engine work very slowly."
 

Pricing and Cost Advice

"It has a yearly renewal."
"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."
"Cortex XDR’s pricing is very reasonable."
"The price of the solution is high for the license and in general."
"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."
"It has reasonable pricing for the use cases it provides to the company."
"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."
"The cost depends on your chosen license type, like Pro or other licenses."
"This solution is expensive. I would rate the price as a three out of five when compared to similar products."
"Our billing is on a quarterly basis, but they have monthly or annual billing availability."
"it's not cheap, but I would rate it a three out of ten. If one is cheap and ten is expensive."
"I don't have specific information about integration capabilities or licensing costs."
"It is extremely affordable. I'll give it a five out of five in terms of price. It was half the cost of the next closest competitor, and the competitor didn't provide SOC services."
"There is an extra cost if you want the support of Cynet."
"Cynet is cheap."
"It costs us 20,000 to 28,000 per year."
"On a scale of one to ten, where one is low, and ten is high price, I rate the pricing a six."
"We no longer pay a licensing fee because it is out of date and don't pay for support."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Financial Services Firm
12%
Manufacturing Company
12%
Comms Service Provider
9%
Construction Company
8%
Comms Service Provider
15%
Manufacturing Company
13%
Outsourcing Company
13%
Construction Company
12%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise9
Large Enterprise12
No data available
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
When evaluating User Activity Monitoring, what aspect do you think is the most important to look for?
The support team that stands behind the detection and response. Is there adequate expertise and are they behind you ...
What is your experience regarding pricing and costs for Cynet?
Cynet is not very costly. We can refer it to other customers because Cynet does not ask for additional costs for add-...
What needs improvement with Cynet?
Cynet can be improved by enhancing third-party integrations, improving reporting and dashboard customization, and pro...
Ask a question
Earn 20 points
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Meuhedet, East Boston Neighborhood Health Center
BPS (SUISSE), Hypovereinsbank Germany, MAX Hamburgers, Infoplex, Neotel, Telus
Find out what your peers are saying about Cynet vs. RSA enVision and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.