No more typing reviews! Try our Samantha, our new voice AI agent.

Intercept X Endpoint vs ReliaQuest GreyMatter comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Extended Detection and Response (XDR)
3rd
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (5th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Intercept X Endpoint
Ranking in Extended Detection and Response (XDR)
16th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
110
Ranking in other categories
Endpoint Protection Platform (EPP) (15th), Endpoint Detection and Response (EDR) (13th), ZTNA (12th), Managed Detection and Response (MDR) (15th), Ransomware Protection (3rd)
ReliaQuest GreyMatter
Ranking in Extended Detection and Response (XDR)
32nd
Average Rating
9.0
Reviews Sentiment
7.1
Number of Reviews
3
Ranking in other categories
Digital Risk Protection (11th), Managed Detection and Response (MDR) (19th)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Ashutosh Jha - PeerSpot reviewer
Project engineer at IT Solution india private limited
Endpoint protection has prevented attacks and keeps our daily work productive and secure
I rate Intercept X Endpoint a 10 out of 10 because it is working very fine for my environment and has prevented loss of productivity. I choose 10 out of 10 because Intercept X Endpoint protects my environment well, featuring web control, peripheral control, Threat Analysis Center, application control, and DLP alongside being accessible from cloud services. I advise others looking into using Intercept X Endpoint to choose Sophos for a cloud solution due to its AI and behavior-based detection capabilities. I believe Intercept X Endpoint is the best EDR solution, and I would always recommend it to customers because it is very effective. My overall review rating for Intercept X Endpoint is 10 out of 10.
Omkar Korulkar - PeerSpot reviewer
Technology Analyst at a tech vendor with 10,001+ employees
Centralized visibility has improved SOC investigations and supports faster, more accurate incident response
I think ReliaQuest GreyMatter could be improved further in a few areas. First, I want to see more flexibility in dashboard customization so analysts can configure views based on their roles and investigation requirements. Second, improving alert correlation accuracy and reducing overall false positive rates would help analysts focus on genuine possible threats rather than spending time validating repetitive low-priority alerts or false positives. Third, more detailed investigation timelines, better reporting capabilities, and simpler investigation integration configuration would make the platform more effective. I suggest continuously improving automation workflows to reduce repetitive manual tasks while allowing analysts to maintain control over critical response actions. Overall, I think these enhancements can make the platform more user-friendly and improve the efficiency of SOC operations. One additional improvement would be enhancing the investigation experience by providing more detailed context directly within the alert. For example, having a clear incident timeline, related alerts, historical activity, and threat intelligence information available in one place would make investigations easier. I believe these improvements would make day-to-day SOC operations smoother and allow analysts to focus more on proactive threat hunting and other complex investigations.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We have a complete overview of all our PCs and it's very easy to handle and to use the interface. It has a lot of benefits for us."
"The good thing about the product is that it's always scanning."
"We use Cortex XDR by Palo Alto Networks for its ability to detect based on behavior rather than simple virus scan to prevent malicious activities."
"The solution allows us to gain remote access without the user's knowledge and take the necessary actions on the device."
"The protection offered by this product is good, as is the endpoint reporting."
"We can use Cortex XDR to get the entire graph of the incidents from source to destination, and we can take remedial action."
"Cortex XDR by Palo Alto Networks has accelerated the response time for my security team, so we have been able to resolve issues faster than usual."
"Cortex is a very good total solution on the endpoints."
"It does its job — it protects us from viruses. We don't really interact with it very much."
"Anti-virus captures malicious threats and an aggressive next generation firewall."
"Sophos Intercept X is easy to install and has a lower price than similar solutions."
"It is very easy to set up and easy to use, it is also not resource-intensive, has been very stable, and has done a good job of stopping and preventing different threats from being triggered."
"The most valuable feature of Sophos Intercept X is cloud management."
"Overall, I would recommend this solution; it does its job as far as I'm aware."
"Technical support from Sophos is rated as nine out of ten, which represents high quality."
"The most valuable feature of Intercept X its ability to stay ahead of the infection. By the time the ransomware spreads to the next machine in line, the data has already been encrypted on that workstation. It didn't matter what the ransomware did because could go in and get it back."
"ReliaQuest GreyMatter has helped us to reduce security incidents by 89%, which is a significant amount of incidents we have seen."
"ReliaQuest GreyMatter saves around 60% of time or resources."
"One of the best features that ReliaQuest GreyMatter offers is the ability to bring together security tools and data that support threat investigation, detection, and response."
 

Cons

"The solution can never really be an on-premises solution based simply on the way it is set up. It needs metadata to run and improve. Having an on-premises solution would cut it off from making improvements."
"Limited remote connection."
"In general, the price could be more competitive."
"I have faced some issues with Cortex XDR by Palo Alto Networks; there is room for improvement in the sense that certain options prevent us from seeing and segregating data."
"It would be better if they could educate the customers more. Some sort of seminars and roadshows will help educate the customers and show what the product can do. The price could be better. It would also help if they had a team for deployment and support."
"Cortex XDR is trickier to configure than other Palo Alto products. This is one area where we are not so satisfied."
"It tends to do 99.9% of things. The only thing I'd like is single sign-on authentication into their cloud platform so that my users can be properly authenticated against it."
"Cortex XDR by Palo Alto Networks could improve its user interface, which is more complicated compared to competitors such as SentinelOne."
"It would be a value-add if they can include integration with other technologies or solutions, like Fortinet, Blue Coat, etc."
"The support on offer isn't ideal. In terms of the support on offer, for example, if there was a zero-day kind of attack or something, the turnaround time that Sophos offers is not acceptable."
"The number one thing I would like is if their support could be a little faster and it would be a little easier to get a hold of support when you need them."
"It has a performance hit on a local laptop. There's an agent installed and we are bothered a lot by it because it seems to be using a lot of computer resources."
"I think this solution needs more flexible reporting, particularly for medium to large size companies and I'd like to see some varied options for making reports."
"If we can lower the price, it will be fantastic because it will generate more revenue for us."
"We should also be able to get through to their support team quickly. Currently, it takes more than half an hour to get through to a technical person, which is very challenging."
"In terms of the site-to-site VPN elements, they tend to concentrate. It's quite simple when there are Meraki devices at both ends of the VPN but if there is another user at one end, on another device, it can be a bit tricky. So they could really simplify that process a bit."
"ReliaQuest GreyMatter is stable to a certain extent, but there is still some room for improvement."
"Areas that have room for improvement include user interface and integration."
 

Pricing and Cost Advice

"It is present, but when compared to other competitive products, I would say it is not less expensive; however, when all of the other added values are considered, the price is reasonable."
"I don't recall what the cost was, but it wasn't really that expensive."
"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."
"The solution is expensive. It's pricing is on a yearly-basis."
"I am using the Community edition."
"Cortex XDR by Palo Alto Networks is quite an expensive solution."
"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."
"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."
"The cost of Sophos Intercept X is reasonable."
"One can pay for the license annually, or at two and five year intervals."
"The price of this solution is a little high compared to competitors because they do not have a proper pricing structure."
"Its price depends on the scenario. It is very expensive, but it is not more expensive than other vendors. The price of Check Point and other vendors is much higher than Sophos."
"As I am not responsible for paying the bills I cannot comment on the pricing."
"The price of this solution is reasonable."
"The price of Sophos Intercept X is expensive. The license is paid on an annual basis. There are extra features that can be added depending on the endpoints. The solution is priced twice as much as the Comodo solution."
"The pricing is average for software like this, but you can purchase additional services if you wish."
Information not available
report
Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.
920,929 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Outsourcing Company
12%
Construction Company
10%
Comms Service Provider
9%
Manufacturing Company
9%
Financial Services Firm
10%
Manufacturing Company
9%
Construction Company
8%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
By reviewers
Company SizeCount
Small Business76
Midsize Enterprise21
Large Enterprise22
No data available
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
How does Crodwstrike Falcon compare with Sophos Intercept X?
I like that Crowdstrike Falcon allows me to easily correlate data between my firewalls. Its detection and machine lea...
What is your experience regarding pricing and costs for Sophos Intercept X?
Intercept X Endpoint has some impact on the budget. It is quite costly when measuring Intercept X Endpoint's protecti...
What needs improvement with Sophos Intercept X?
Intercept X Endpoint can be improved in several ways. Currently, it is only available on the cloud, and having it ava...
What needs improvement with ReliaQuest GreyMatter?
Areas that have room for improvement include user interface and integration.
What is your primary use case for ReliaQuest GreyMatter?
I use ReliaQuest GreyMatter for detection and response, XDR, and SIEM. The best features I like about GreyMatter the ...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Sophos Intercept X
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Flexible Systems
Information Not Available
Find out what your peers are saying about Intercept X Endpoint vs. ReliaQuest GreyMatter and other solutions. Updated: September 2026.
920,929 professionals have used our research since 2012.