Fidelis Elevate vs Microsoft Defender Experts for Hunting comparison

Fidelis Elevate vs. Microsoft Defender Experts for Hunting

Download the complete report

Helped 913,806 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Mostafa Ameen

Information Security Engineer at ICT Misr

Advanced threat detection capabilities with comprehensive incident response features providing robust cybersecurity for organizations

The initial aspect concerns two engines. The first one mentioned is available for searching behaviors directly. The second engine involves the Google Ade tool, which operates on the machine. The challenge arises when attempting to rectify protection rules, causing confusion. It would be beneficial to enhance Rigixs Query. I encounter difficulty removing certain entries in behavior or alerts; likewise, I am unable to add specific calls.

Read full review

Mondher-Smii

Cybersecurity Manager at Insomea

Has supported clients in managing incidents through clear pricing and hybrid deployment options

What really stands out about Microsoft Defender Experts for Hunting is that it's easy to use. The cost is clear, and the pricing is transparent. The onboarding of the product on the customer's environment is straightforward. We can use it in a hybrid environment, in the cloud, or on-premise environment. This is the main advantage regarding this product. If it's configured correctly, everything will be good, resilient, and secure, which supports threat mitigation efforts depending on the configuration on the tenant and the parameters on Microsoft Defender Experts for Hunting. Threat intelligence updates have some impact on our overall security posture. They give us external eyes regarding threat actors, which is good. It's very helpful to enrich the SIEM, which is Microsoft Sentinel. It's a good feature that we can include threat intel on the product.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Palo Alto is constantly adding new features."

"Cortex XDR is a very capable solution for protecting large networks and a lot of endpoints. It's very useful because the automation is very high, and if you combine it with the features on Palo Alto firewalls, it provides very strong protection."

"From a single pane of glass, you can easily manage all of your endpoints."

"We've had a significant increase in blocking with a decrease in false positives, because it's looking at how the files work, not just a list of files that it's been told to look for."

"Traps pays for itself within the first 16 months of a three-year subscription."

"It'll not slow down your system when compared to others."

"Palo Alto is the core of the security infrastructure in the environment."

"The product is mostly automated, and we do not have to make decisions, because all the decisions are made by the product itself and we are not required to create any custom policies since the policies that are created are well defined in the product itself."

More Cortex XDR by Palo Alto Networks pros

"The technical support is very helpful."

"There are many valuable features. The NDR gives very good network visibility, and the endpoint module has a great feature called "Live Connect" for remote connections. They also have "Tasks" that can be run on endpoints to gather specific information or retrieve logs."

"After rack and stack, devices were up and running base configurations within two hours. As with any IPS, tuning is required to stop false positives. This is no different, but the ease of use of the interface allowed my team to start making adjustments within a few hours."

"It is used as our primary in-line IDS/IPS system, replacing FireEye NX, and it catches more, looks at more ports than FireEye NX, and is a scalable appliance, unlike our NX which was saturated and shut itself down."

"The solution is pretty scalable; you buy a lot of features, a known product, and you want it to run in any environment, and it does, so it's scalable enough."

"It has also improved our hunt ability with quick search tools, to zone in on malware or other anomalies. It is able to link items to incidents from other consoles, and works natively with the SIEM."

"What I like the most about this solution is the complexity. It covers a lot of areas, unlike other solutions."

"It ensures the stability of network behavior across various aspects of our network and offers responsive capabilities to address incidents promptly"

More Fidelis Elevate pros

"Easy to use is what my customers say is the biggest benefit of Microsoft Defender Experts for Hunting for them."

"The best feature of this solution is that it is an integrated and comprehensive solution for the entire Microsoft ecosystem."

"The solution helps to detect some suspicious items for us and our clients."

"Microsoft Defender Experts for Hunting helps my customers detect or prevent emerging threats that are not yet published but Microsoft has visibility into."

"What really stands out about Microsoft Defender Experts for Hunting is that it's easy to use, the cost is clear, and the pricing is transparent, with straightforward onboarding in hybrid, cloud, or on-premise environments."

Cons

"Cortex XDR could improve its sales support team, including better commission structures and referral programs."

"The solution should force customers to integrate with network traffic to see the full benefits of XDR."

"It'll help if customization was easier."

"Previously, the endpoint would leave the environment, not being on our VPN, essentially unable to interact with the server to upload files. It was unable to retrieve new file verdicts. It was using a thing called "local analysis" to determine if something was a malicious file or not. There was no dynamic analysis."

"Enhancing UI simplicity and playbook flexibility are areas that could benefit from more low-code automation options for smoother integrations."

"I recommend adding a data loss prevention (DLP) solution to Cortex XDR by Palo Alto Networks. The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products."

"In reporting they should have a customizable dashboard due to the fact that C-level people don't like reporting to the IT department. They prefer to have a real-time dashboard. That kind of dashboard needs to have various customizations."

"In the next release, I would like to see more UI improvements. Their UI is a bit basic. When we are speaking about Palo Alto Networks they are the big company, so they can improve the UI a little bit. The UI, the reports, the log system can all be improved."

More Cortex XDR by Palo Alto Networks cons

"The interface bug needs to be squashed once and for all."

"The interface bug needs to be squashed once and for all. This has been the predominant issue with an otherwise stellar product. It reboots itself unscheduled, about once a month, due to a memory buffer flaw in the interface."

"I encounter difficulty removing certain entries in behavior or alerts; likewise, I am unable to add specific calls."

"We position the solution as an antivirus, but this part of the solution needs improvement. They need to generally enhance the features that they have, rather than adding anything new."

"Configuration, in terms of building the collector and communicating with endpoints, is complex."

"Fidelis Endpoint is an expensive product making it one of its shortcomings that needs improvement."

"The reports in the endpoint area of Elevate can be improved."

"There is room for improvement in email security. It's a security issue. If you're aiming for XDR, covering the entire threat landscape is crucial."

"The price of the solution is costly, which I find significant."

"The solution’s user interface could be improved."

"There is a lot of change in a small period. This might not be helpful for IT administrators and users."

"We tried the proactive threat hunting feature, but it was not a good experience with Microsoft Defender Experts for Hunting. It created more trouble than expected with false positives and non-expected answers."

"As a partner, Microsoft Defender Experts for Hunting could be improved by getting earlier threat detection signals so we could proactively research on our own end and help support a campaign to raise awareness as well as proactive response."

Pricing and Cost Advice

"This is an expensive solution."

"Compared to CrowdStrike, Cortex XDR is an expensive solution."

"The price was fine."

"Very costly product."

"Cortex XDR’s pricing is very reasonable."

"The solution is expensive. It's pricing is on a yearly-basis."

"We pay about $50,000 USD per year for a bundle that includes Cortex XDR."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"It's quite expensive but we can customize it to reduce the price."

"Fidelis Endpoint is an expensive product. My company makes yearly payments toward the licensing cost of the solution."

"You license by the number of days of logs you need to maintain visibility for. Forty-five days is a good solid number for a company with around a 10k user base."

"It's somehow expensive. From one to ten, I would rate it a five. They need to improve the prices. It's very high."

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.

See recommendations

913,806 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

12%

Comms Service Provider

12%

Construction Company

11%

Financial Services Firm

12%

Construction Company

12%

Comms Service Provider

12%

Manufacturing Company

10%

Computer Software Company

21%

Financial Services Firm

11%

Comms Service Provider

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	47
Midsize Enterprise	21
Large Enterprise	55

By reviewers
Company Size	Count
Small Business	6
Large Enterprise	2

No data available

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What needs improvement with Microsoft Defender Experts for Hunting?

Ask a question

Earn 20 points

As a partner, Microsoft Defender Experts for Hunting could be improved by getting earlier threat detection signals so...

What is your primary use case for Microsoft Defender Experts for Hunting?

As a working security partner, my main use case for Microsoft Defender Experts for Hunting is that many of our custom...

What advice do you have for others considering Microsoft Defender Experts for Hunting?

As a partner, there can be some concern that Microsoft Defender Experts for Hunting is taking away some of our busine...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 14% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

CrowdStrike Falcon vs Fidelis Elevate

Compared 8% of the time

Trellix Endpoint Security Platform vs Fidelis Elevate

Compared 5% of the time

VMware Carbon Black Endpoint vs Fidelis Elevate

Compared 4% of the time

SentinelOne Wayfinder Threat Detection and Response vs Fidelis Elevate

Compared 3% of the time

SentinelOne Singularity Endpoint vs Fidelis Elevate

Compared 2% of the time

More Fidelis Elevate Competitors

SentinelOne Wayfinder Threat Detection and Response vs Microsoft Defender Experts for Hunting

Compared 18% of the time

Arctic Wolf Managed Detection and Response vs Microsoft Defender Experts for Hunting

Compared 9% of the time

Managed XDR vs Microsoft Defender Experts for Hunting

Compared 6% of the time

Field Effect MDR vs Microsoft Defender Experts for Hunting

Compared 5% of the time

Carbon Black Managed Detection and Response vs Microsoft Defender Experts for Hunting

Compared 3% of the time

More Microsoft Defender Experts for Hunting Competitors

Product Reports

Cortex XDR by Palo Alto Networks

Download Cortex XDR by Palo Alto Networks product report

Fidelis Elevate

Download Fidelis Elevate product report

Microsoft Defender Experts for Hunting

Download Microsoft Defender Experts for Hunting product report

Microsoft Defender Experts for Hunting report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Fidelis Elevate Platform, Fidelis Enterprise, Fidelis Cloud, Fidelis Managed Detection and Response, Fidelis Deception, Fidelis Decryption, Fidelis Endpoint, Fidelis Network

No data available

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Fidelis Elevate offers advanced network and endpoint detection with valuable features such as anomaly detection for reduced false positives, customizable alerts, and efficient reporting, providing comprehensive threat response capabilities across multiple platforms.

Fidelis Elevate is trusted for its robust network visibility and remote connection capabilities. It integrates data across network security platforms, supporting endpoint threat response. Businesses rely on it for in-line IDS/IPS systems that exceed competitors by examining more ports. Its use in anomaly detection and fast data searches is appreciated by those seeking complex solutions covering multiple areas, with endpoint script execution and tools for incident response enhancing its offering.

What important features does Fidelis Elevate offer?

NDR for network visibility: Enhances monitoring and threat detection with deep insights.
Live Connect: Facilitates secure remote connections for troubleshooting and support.
Tasks for information gathering: Streamlines endpoint data collection to support analysis.
Anomaly detection: Minimizes false positives, increasing detection accuracy.
Customizable alerts: Tailors notifications for specific threat scenarios.
Efficient reporting: Enables rapid and detailed data searches.

What benefits and ROI can Fidelis Elevate provide?

Comprehensive threat view: Integrates data for a holistic security perspective.
Enhanced endpoint security: Prevents fileless attacks and provides essential evidence.
Efficient incident response: Offers tools aiding quick response across environments.

Fidelis Elevate is implemented across industries for its comprehensive monitoring capabilities. Companies leverage its network visibility and remote connectivity in endpoint and network detection, effectively preventing threats within complex environments. Its holistic integration serves as an essential asset for security analysts focused on incident response.

Fidelis Security

Microsoft Defender Experts for Hunting empowers businesses with advanced threat detection and incident response capabilities, leveraging proactive threat hunting and expert consultation to enhance cybersecurity posture across diverse environments.

Microsoft Defender Experts for Hunting provides a comprehensive cybersecurity solution that integrates well with Microsoft tools, enabling organizations to detect, explain, and manage threats efficiently. It uses the MITRE framework for reporting, enhancing detection strategies and regulatory compliance efforts, offering increased protection against nation-state and financially motivated cyber threats. With tools like KQL query capability, direct access to security analysts via the Ask an Expert button, and automation features, it enhances threat intel updates and saves significant man-hours for security teams.

What key features set Microsoft Defender Experts for Hunting apart?

KQL Query Capability: Provides powerful data querying to identify potential threats.
Proactive Threat Hunting: Enables security teams to detect threats before they cause harm.
Ask an Expert Button: Allows direct chat with security analysts for expert insight.
Improved Detection Rates: Utilizes advanced algorithms to enhance threat detection accuracy.
Integration with MITRE Framework: Utilizes a robust framework for thorough threat identification.
Strategic Ecosystem Integration: Compatible with Microsoft tools for a cohesive cybersecurity strategy.

What benefits should organizations expect from using Microsoft Defender Experts for Hunting?

Increased Threat Detection Precision: Provides reliable detection backed by Microsoft's extensive data.
Enhanced Operational Efficiency: Saves manpower through automation, allowing teams to focus on impactful tasks.
Regulatory Compliance Support: Assists in meeting compliance requirements through structured reporting.
Streamlined Incident Response: Reduces incident handling time with expert insights and integrated tools.

Industries employing Microsoft Defender Experts for Hunting integrate it with Azure Sentinel and other cybersecurity tools to bolster threat response strategies. Entities benefit from advanced threat signals, enhancing protection against sophisticated cyber threats, particularly useful for sectors facing threats from nation-state and financially supported actors.

Microsoft

Sample Customers

CBI Health Group, University Honda, VakifBank

First Midwest Bank

Information Not Available

Fidelis Elevate vs. Microsoft Defender Experts for Hunting