No more typing reviews! Try our Samantha, our new voice AI agent.

Fidelis Elevate vs Microsoft Defender Experts for Hunting comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Fidelis Elevate
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
7
Ranking in other categories
Endpoint Detection and Response (EDR) (56th), Threat Deception Platforms (8th), SSL/TLS Decryption (4th), Network Detection and Response (NDR) (22nd), Managed Detection and Response (MDR) (32nd), Extended Detection and Response (XDR) (45th)
Microsoft Defender Experts ...
Average Rating
9.0
Reviews Sentiment
6.3
Number of Reviews
5
Ranking in other categories
Managed Detection and Response (MDR) (18th)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Mostafa Ameen - PeerSpot reviewer
Information Security Engineer at ICT Misr
Advanced threat detection capabilities with comprehensive incident response features providing robust cybersecurity for organizations
The initial aspect concerns two engines. The first one mentioned is available for searching behaviors directly. The second engine involves the Google Ade tool, which operates on the machine. The challenge arises when attempting to rectify protection rules, causing confusion. It would be beneficial to enhance Rigixs Query. I encounter difficulty removing certain entries in behavior or alerts; likewise, I am unable to add specific calls.
Joe Cicero - PeerSpot reviewer
Chief Marketing Officer at a computer software company with 201-500 employees
Proactive threat hunting has strengthened our defenses and provides expert support for incidents
Proactive threat hunting as well as the Ask an Expert feature, which is a button inside of the XDR portal that becomes available when the customer owns Microsoft Defender Experts for Hunting, are the best features it offers. If a customer or one of our analysts needs extra support or has a question about a Microsoft Defender Experts for Hunting notification, they can click on that button and chat directly with a Microsoft security analyst to get more information or fill in any gaps regarding the Ask an Expert feature. Improved detection rates are one of the specific outcomes that show the positive impact because Microsoft Defender Experts for Hunting is a second set of eyes or a second team looking for emerging threats within a shared customer's environment. For us, the proactive approach that Microsoft Defender Experts for Hunting is always running is valuable, and we see those alerts pop up inside of our incident queues in Microsoft Sentinel and we respond and acknowledge them. In many cases, Microsoft might see an alert from a zero-day that we aren't even aware of yet or the industry isn't aware of yet and we see that tagged within our incident queue, which allows us to follow up with it much sooner than had we had to search and detect for it ourselves. Microsoft Defender Experts for Hunting helps my customers detect or prevent emerging threats that are not yet published but Microsoft has visibility into. Microsoft Defender Experts for Hunting's reporting and analytics are clear and actionable, and the fact that it's tied to the MITRE framework puts it all in a common language. Microsoft Defender Experts for Hunting helps my customers comply with industry regulations or standards, though I am unsure how, but many have requirements for threat hunting and this checks that box. Microsoft Defender Experts for Hunting helps my team respond to incidents by providing a backstop, which does speed up the process and improve outcomes.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"There has been a significant reduction of approximately 70% to 80% in our internal MTTR and MTTD metrics, now around five to eight minutes whereas previously it was hours, which has helped tremendously."
"Its ability to react to cyber data attacks is awesome. That is pretty much the use of it. What blows your mind is the ability to access your assets remotely and see what is actually going on with them. You can not only see them in a console. You can also react very rapidly to your assets that are compromised."
"It is a simple platform to use."
"From the Palo Alto side, whatever they buy, they integrate that really well into their integration suite, and that makes a massive difference."
"Palo Alto is one of the tech vendors that always provides top-of-the-line products."
"Cortex XDR's most valuable feature is its intelligence-based dashboards."
"One of the things that I enjoy the most is using policy extensions. It's like having host firewalls to control USB connections. I think it's a wonderful tool to restrict use when connecting to our computers. Another important tool is Home Insights. That is an add-on to the Cortex solution. I like that because we can see all the vulnerabilities in the environment and control what assets are connected to our network."
"The integrations are out-of-the-box, as are the playbooks."
"It is used as our primary in-line IDS/IPS system, replacing FireEye NX, and it catches more, looks at more ports than FireEye NX, and is a scalable appliance, unlike our NX which was saturated and shut itself down."
"Reporting is great, it is easy to do a quick search through 45 days of data for something of interest."
"What I like the most about this solution is the complexity. It covers a lot of areas, unlike other solutions."
"Compared to similar solutions, it's quite scalable. You just need to add more storage to scale-up."
"It has also improved our hunt ability with quick search tools, to zone in on malware or other anomalies. It is able to link items to incidents from other consoles, and works natively with the SIEM."
"It has a rating system now so you can rate things up or down, depending on your environment. This means alerting can be customized, yet still pick up anomalies."
"The technical support is very helpful."
"The solution's technical support is perfect, so I rate the technical support a ten out of ten"
"What really stands out about Microsoft Defender Experts for Hunting is that it's easy to use, the cost is clear, and the pricing is transparent, with straightforward onboarding in hybrid, cloud, or on-premise environments."
"The best feature of this solution is that it is an integrated and comprehensive solution for the entire Microsoft ecosystem."
"Easy to use is what my customers say is the biggest benefit of Microsoft Defender Experts for Hunting for them."
"Microsoft Defender Experts for Hunting helps my customers detect or prevent emerging threats that are not yet published but Microsoft has visibility into."
"The solution helps to detect some suspicious items for us and our clients."
 

Cons

"The GUI could be improved."
"The MAC agent is not as robust feature-wise as the PC version."
"Additionally, I think the price is very high, and if it can be adjusted, I believe it will be a very good solution."
"The technical support is not very good. I find the process difficult."
"The GUI could be improved. It's a little bit cumbersome. It could be more user-friendly."
"It takes time to scan the servers and devices."
"They have the worst support, as a company, that I have ever worked with, as they are difficult to get a hold of and keep on the phone. They don't know what they are talking about when you get them on the phone. They don't like to respond to messages when you send them to them. They like to "research problems" for weeks on end, then pass you off to somebody else."
"This is a very costly product."
"We position the solution as an antivirus, but this part of the solution needs improvement. They need to generally enhance the features that they have, rather than adding anything new."
"Fidelis Endpoint is an expensive product making it one of its shortcomings that needs improvement."
"Configuration, in terms of building the collector and communicating with endpoints, is complex."
"I encounter difficulty removing certain entries in behavior or alerts; likewise, I am unable to add specific calls."
"The reports in the endpoint area of Elevate can be improved."
"The interface bug needs to be squashed once and for all. This has been the predominant issue with an otherwise stellar product. It reboots itself unscheduled, about once a month, due to a memory buffer flaw in the interface."
"The interface bug needs to be squashed once and for all."
"There is room for improvement in email security. It's a security issue. If you're aiming for XDR, covering the entire threat landscape is crucial."
"There is a lot of change in a small period. This might not be helpful for IT administrators and users."
"The solution’s user interface could be improved."
"As a partner, Microsoft Defender Experts for Hunting could be improved by getting earlier threat detection signals so we could proactively research on our own end and help support a campaign to raise awareness as well as proactive response."
"The price of the solution is costly, which I find significant."
"We tried the proactive threat hunting feature, but it was not a good experience with Microsoft Defender Experts for Hunting. It created more trouble than expected with false positives and non-expected answers."
 

Pricing and Cost Advice

"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."
"The price of the solution is high for the license and in general."
"Cortex XDR by Palo Alto Networks is an expensive solution."
"Every customer has to pay for a license because it doesn't work with what you get from a managed services provider."
"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."
"The price of the product is not very economical."
"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."
"I feel it is fairly priced."
"It's quite expensive but we can customize it to reduce the price."
"It's somehow expensive. From one to ten, I would rate it a five. They need to improve the prices. It's very high."
"Fidelis Endpoint is an expensive product. My company makes yearly payments toward the licensing cost of the solution."
"You license by the number of days of logs you need to maintain visibility for. Forty-five days is a good solid number for a company with around a 10k user base."
Information not available
report
Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.
920,929 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Comms Service Provider
13%
Financial Services Firm
13%
Construction Company
12%
Manufacturing Company
10%
Computer Software Company
20%
Financial Services Firm
11%
Manufacturing Company
7%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
By reviewers
Company SizeCount
Small Business6
Large Enterprise2
No data available
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
Ask a question
Earn 20 points
What needs improvement with Microsoft Defender Experts for Hunting?
As a partner, Microsoft Defender Experts for Hunting could be improved by getting earlier threat detection signals so...
What is your primary use case for Microsoft Defender Experts for Hunting?
As a working security partner, my main use case for Microsoft Defender Experts for Hunting is that many of our custom...
What advice do you have for others considering Microsoft Defender Experts for Hunting?
As a partner, there can be some concern that Microsoft Defender Experts for Hunting is taking away some of our busine...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Fidelis Elevate Platform, Fidelis Enterprise, Fidelis Cloud, Fidelis Managed Detection and Response, Fidelis Deception, Fidelis Decryption, Fidelis Endpoint, Fidelis Network
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
First Midwest Bank
Information Not Available
Find out what your peers are saying about Fidelis Elevate vs. Microsoft Defender Experts for Hunting and other solutions. Updated: September 2026.
920,929 professionals have used our research since 2012.