Try our new research platform with insights from 80,000+ expert users

Huntress Managed EDR vs Lookout comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 28, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Detection and Response (EDR)
7th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
108
Ranking in other categories
Endpoint Protection Platform (EPP) (5th), Extended Detection and Response (XDR) (6th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (2nd)
Huntress Managed EDR
Ranking in Endpoint Detection and Response (EDR)
5th
Average Rating
9.4
Reviews Sentiment
7.5
Number of Reviews
57
Ranking in other categories
Managed Detection and Response (MDR) (1st)
Lookout
Ranking in Endpoint Detection and Response (EDR)
51st
Average Rating
7.6
Reviews Sentiment
7.1
Number of Reviews
3
Ranking in other categories
Threat Intelligence Platforms (TIP) (27th), Mobile Threat Defense (3rd)
 

Mindshare comparison

As of March 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of Huntress Managed EDR is 3.3%, up from 2.0% compared to the previous year. The mindshare of Lookout is 0.7%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
Huntress Managed EDR3.3%
Cortex XDR by Palo Alto Networks3.4%
Lookout0.7%
Other92.6%
Endpoint Detection and Response (EDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
JefferyGiddens - PeerSpot reviewer
Director, Information Technology & Cybersecurity at a financial services firm with 51-200 employees
Improving alert visibility and reporting has reduced workload and strengthened security posture
Huntress Managed EDR could be improved by providing more visibility into each alert that comes in and what action was taken on it. There have been times when an alert was received through Microsoft Defender indicating an account was accessed, when in reality it was blocked by a conditional access policy, yet when checking the Huntress portal, that event does not appear at all, lacking indication that it was raised and investigated as not a threat. The reporting in Huntress Managed EDR is fairly basic, as the only available report is effectively an executive summary. Although it contains useful information, other platforms have reporting engines that are much more robust and customizable, functionality that appears to be missing in Huntress.
DB
IT Manager at NHS Trust
Enhanced mobile security with visibility into app and website usage, but installation challenges remain
We use Lookout for mobile devices, such as phones It has reduced our risk around mobile devices. I like the security features and being able to see what apps and websites people are using. There is nothing we have come across that we've desired. We have been using Lookout for one year. The…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The ability to kind of stitch everything together and see the actual complete picture is very useful. I guess you'd call it a playbook. Some people call it the forensics analysis of what was happening on particular endpoints when they detected some malicious behavior, and what transpired before that to cause that. It is also very user friendly. The way they have done everything and integrated all the solutions that they've purchased over the years to make it a very seamless, effective product is very good. One thing about Palo Alto is that they take the products or services that they purchase and make them seamless for the end user as compared to some companies that purchase other companies and then just kind of have their products off to the side or keep different interfaces. Palo Alto doesn't do that."
"The most valuable features are incident creation, policy-based protection, IP whitelisting, and device encryption. These are beneficial for endpoint and server security."
"The live terminal is probably the best thing ever. It gives you the access to get straight onto any machine."
"My advice for others looking into using Cortex is that it is very easy to use and very useful for the customer environment, whether it's a public or private one."
"Traps pays for itself within the first 16 months of a three-year subscription."
"But overall, when we speak about security and protection, they are one of the top providers."
"The management capabilities, allow an IT organization to get quite a good picture of attempted cyber attacks."
"One of the main benefits of the solution is its intelligence to correlate the events into an incident."
"For us, Huntress Managed EDR has been a game changer for the SMB market."
"After deployment, it takes some time to scan and process everything. Huntress has effectively flagged issues such as password files on desktops, which it identifies as low-level alerts. It also handles more significant threats effectively."
"I would absolutely recommend Huntress to other users. If you are considering it, go for it."
"Foothold detection is a valuable feature, acting as a valuable second set of eyes for both us and our clients."
"The automatic remediation feature of Huntress Managed EDR is very effective because at midnight, around 2:00 AM, if there is an alert while I am sleeping, I know my organization remains safe."
"Using Huntress Managed EDR has helped reduce the need for expensive security tools or hiring additional security analysts since I can use that as the first port of call versus trying to get an external SOC."
"We don’t have the required staff to watch the issues that are happening. It is good to have a team from Huntress who can watch the logs 24/7. The tool’s automatic remediation is also fantastic. The solution’s interface is also nice and easy to use. The Huntress team saves us time by going through the issues."
"Users usually note improvements in a matter of days. In others, it is immediately. It varies according to the environment."
"The protection offered by the product is the most valuable feature. It detects vulnerabilities or traps on our users' phones and then prompts them to clean up their devices. Tools we used previously would only discover, which required us to gather information on the backend, so Lookout is a welcome upgrade."
"The most valuable features are the antivirus as a whole, the anti-malware, and all of the protection features that scan our enterprise devices."
"We have not had any issues with bugs or breakdowns."
 

Cons

"There are some limitations on the Traps agents."
"If he is using a smaller company, he can depend on some other tools because Cortex XDR by Palo Alto Networks is a bit expensive."
"We would also like to have advanced tech protection and email scanning."
"The GUI could be improved."
"Cortex XDR by Palo Alto Networks could improve by adding a sandbox feature to better compete with their competitors which have it."
"If they had pulse rate detection, it would be better."
"The solution lacks real-time, on-demand antivirus."
"Every 30 or 40 days, there's a new version and we need to go and make sure our customer's laptops are upgraded."
"Regarding Huntress Managed EDR, they could add more features when compared to another EDR platform, SentinelOne."
"Installing Huntress on a Mac presents a challenge for end users due to the operating system's security features, which require administrator privileges for installation."
"The integration with Autotask could be improved."
"To enhance the platform, I suggest adding a feature to forward Huntress's recommended response directly to the client, ensuring their clear understanding of the gathered information."
"In the next release, I'd like to see more intuitive dashboards."
"I also would love for them to make their new SIEM tool reports much more robust. They are currently way too simplified, and we need to have something better to send to our compliance clients."
"Reporting for Huntress Managed EDR could be better."
"Huntress should have a more user-friendly interface because it takes some understanding to work our way through the interfaces."
"The initial setup requires a little bit of experience with configuration."
"From the analysis that we've done, they do seem to be maybe a step behind in trying to enter the market with a new solution. But when they do pick up, they do come out with some good products."
"We just submitted an enhancement request reflecting the main area we want to see improvement in; the APIs. Currently, we're able to build dashboards, but it's somewhat backward because we use our MDM API to create them. Lookout should provide API to customers so we can query our data and use it in our cloud, and this is the only outstanding area for improvement with the product right now."
 

Pricing and Cost Advice

"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."
"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."
"This is an expensive solution."
"The price is on the higher side, but it's okay."
"Its pricing is kind of in line with its competitors and everybody else out there."
"Traps pays for itself within the first 16 months of a three-year subscription. This is attributed to OPEX savings, as security teams spent less time trying to identify and isolate malware for analysis as a result of a reduction in malware incidents, false positives, and breach avoidance."
"Cortex XDR's pricing is ok."
"This is an expensive solution."
"It is fair. They provide good value for the product that they deliver. I have had one price increase in the entire time I have used them. They added a bunch of features and then said that they have to increase our price a little bit. That is a fair way to handle it."
"The tool’s price is very good. You just need to pay for the standard license. However, you need to pay the additional cost for Microsoft Defender."
"Regarding the pricing for Huntress Managed EDR, I was amazed when I heard the price; I thought it was going to be way more than what it is based on the quality."
"Huntress is an easy sell to clients because it does all the heavy lifting. Sometimes, they will buck a little at the price because they want a free antivirus or EDR. We tell them that we use Huntress on all our machines. That is our standard process for all the machines we roll out. When we give that advice, people are pretty willing to say okay."
"We haven't had any problems with Huntress' pricing. We're at 250 workstations, and we've grown considerably this year. They've been able to handle everything that we've thrown at them within that time frame. They're also reducing the price based on how many endpoints we add."
"Huntress has a favourable pricing structure, and I appreciate the cost-effectiveness compared to previous solutions."
"Huntress Managed EDR offers a fair pricing model."
"I rate the product's price a five or six on a scale of one to ten, where one is cheap, and ten is expensive since it is a fairly priced product."
"The pricing is fair; it's comparable to our previous solution, and we carried out multiple POCs and POVs (proof of value). The product is worth the money we pay for it."
"Lookout is definitely on the lower end when it comes to price point and that seems to be the only differentiator. The technology is in place in this space and it's really about who is coming in at the better price point now."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
884,933 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
9%
Manufacturing Company
9%
Financial Services Firm
9%
Comms Service Provider
7%
Computer Software Company
13%
Manufacturing Company
8%
Insurance Company
6%
Financial Services Firm
5%
Computer Software Company
15%
Manufacturing Company
10%
Financial Services Firm
9%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise20
Large Enterprise47
By reviewers
Company SizeCount
Small Business55
Midsize Enterprise4
By reviewers
Company SizeCount
Small Business2
Large Enterprise5
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What do you like most about Huntress?
It is very easy to use. It is a great solution. They are one of the better vendors that I have ever worked with since...
What needs improvement with Huntress?
One downside of Huntress Managed EDR, compared to the CrowdStrike agent, is that it takes a longer time to push it ou...
What is your primary use case for Huntress?
Our current use cases for Huntress Managed EDR involve replacing CrowdStrike as our endpoint protection in our K-12 s...
What is your experience regarding pricing and costs for Lookout?
The pricing is a little expensive. We are currently looking at comparisons with other solutions, including Umbrella.
What needs improvement with Lookout?
There is nothing we have come across that we've desired.
What is your primary use case for Lookout?
We use Lookout for mobile devices, such as phones.
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
CipherCloud
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Information Not Available
Find out what your peers are saying about Huntress Managed EDR vs. Lookout and other solutions. Updated: March 2026.
884,933 professionals have used our research since 2012.