No more typing reviews! Try our Samantha, our new voice AI agent.

Intercept X Endpoint vs Sangfor Endpoint Secure comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Detection and Response (EDR)
5th
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Intercept X Endpoint
Ranking in Endpoint Detection and Response (EDR)
13th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
110
Ranking in other categories
Endpoint Protection Platform (EPP) (15th), ZTNA (12th), Managed Detection and Response (MDR) (15th), Extended Detection and Response (XDR) (16th), Ransomware Protection (3rd)
Sangfor Endpoint Secure
Ranking in Endpoint Detection and Response (EDR)
54th
Average Rating
8.2
Reviews Sentiment
7.4
Number of Reviews
11
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, down from 3.8% compared to the previous year. The mindshare of Intercept X Endpoint is 2.1%, up from 1.8% compared to the previous year. The mindshare of Sangfor Endpoint Secure is 0.9%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.8%
Intercept X Endpoint2.1%
Sangfor Endpoint Secure0.9%
Other93.2%
Endpoint Detection and Response (EDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Ashutosh Jha - PeerSpot reviewer
Project engineer at IT Solution india private limited
Endpoint protection has prevented attacks and keeps our daily work productive and secure
I rate Intercept X Endpoint a 10 out of 10 because it is working very fine for my environment and has prevented loss of productivity. I choose 10 out of 10 because Intercept X Endpoint protects my environment well, featuring web control, peripheral control, Threat Analysis Center, application control, and DLP alongside being accessible from cloud services. I advise others looking into using Intercept X Endpoint to choose Sophos for a cloud solution due to its AI and behavior-based detection capabilities. I believe Intercept X Endpoint is the best EDR solution, and I would always recommend it to customers because it is very effective. My overall review rating for Intercept X Endpoint is 10 out of 10.
HD
Cloud Engineer at REDtone Digital Services
Robust security with features like antivirus protection and centralized management, but it may have limitations in supporting migrations from public clouds
While it excels in migrating VMs from on-premises and local infrastructure, it does not provide support for public cloud migrations. Attempting to migrate from public clouds like AWS encountered challenges, and Sangfor's support team clarified that they don't offer assistance for migrations from public cloud environments. It would be much more convenient if the migration tool could be installed directly on the customer's VMs, enabling a smoother migration process to the new infrastructure, with potential restrictions addressed accordingly.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features are the fact that it was running in the background and it would intercept any weird stuff, and the fact that it would send things directly to the cloud for sandboxing. It's quite practical."
"The anti-exploit is impenetrable."
"Its interface and pricing are most valuable, and it is better than other vendors in terms of security."
"The most valuable features of this product are the management capabilities, which allow an IT organization to get quite a good picture of attempted cyber attacks, and its out-of-the-box investigation capabilities."
"Traps pays for itself within the first 16 months of a three-year subscription."
"Once you become familiar with it, Cortex XDR by Palo Alto Networks is a more powerful tool and I would say that I prefer it over MDE because it is a stronger tool for me."
"The initial setup is pretty easy."
"The level of security I get for my endpoints and servers is extremely valuable."
"The most valuable feature of Intercept X its ability to stay ahead of the infection. By the time the ransomware spreads to the next machine in line, the data has already been encrypted on that workstation. It didn't matter what the ransomware did because could go in and get it back."
"The deployment is quick. It just depends on the environment and what you may be replacing."
"Intercept X helps with internal alerts, application access, and triggering support teams."
"It's a complete antivirus solution that has everything in it."
"For someone contemplating implementing the solution who is looking for a single product containing many features, Sophos Intercept X is the best available."
"Customer service is good, they're knowledgeable and customer friendly. They provide good support."
"Technical support is responsive and adept."
"The most valuable features of Sophos Intercept X are the ease of use and the policy options that are simple to understand. Overall, the protection is good."
"The product's initial setup phase was straightforward."
"The real-time monitoring feature of Sangfor Endpoint Secure is truly real-time, with no delay compared to other solutions."
"The most valuable feature I have found in the system is its comprehensive end-to-end protection."
"What stands out to me is the dual-end user interface they provide."
"Sangfor Endpoint Secure has some good policy certificates."
"The user-friendliness of Sangfor Endpoint Secure is particularly impressive. Even with basic technical knowledge, users can easily navigate the system, make changes, and implement updates."
"We use the product for network protection from any malicious threat."
"I like the tool's honeypot feature. Some features include having a honeypot to detect attacks in a certain area. Additionally, there is RDP protection, which means that when we remote into our server or any endpoint, we must enter a password as a second layer of security. It can also integrate with next-generation firewalls."
 

Cons

"This is a very costly product."
"If Palo Alto reduces the pricing slightly for their products, it would make them more scalable in markets such as India and globally for cybersecurity."
"Additionally, I think the price is very high, and if it can be adjusted, I believe it will be a very good solution."
"Basically, they don't provide customer support tools just to investigate the logs."
"Cortex XDR by Palo Alto Networks could improve by offering remote management. It would be useful to look at the client's issue to fix it."
"Cortex XDR by Palo Alto Networks could improve its user interface, which is more complicated compared to competitors such as SentinelOne."
"The configuration could be simplified. I would like to see better protection, specifically to protect email applications."
"The solution should enhance the ADR and reporting."
"It should offer better security updates."
"I'd like to see more integration in the solution."
"They don't have the full stack of offerings as compared to the other competitive products that we see."
"The product defends very well on its own but could possibly use enhancement in giving users more controls."
"Intercept X Endpoint sometimes slows down machines due to high CPU utilization and significant RAM consumption during scanning."
"If Sophos Intercept allows users to restrict website access based on specific needs, such as streaming new videos for business purposes, we would prefer to use that."
"This product does not handle USB drives well."
"We would like more application control in order to be able to schedule times and access."
"I believe Sangfor Endpoint Secure could improve in terms of its user interface and management capabilities."
"It would be much more convenient if the migration tool could be installed directly on the customer's VMs, enabling a smoother migration process to the new infrastructure, with potential restrictions addressed accordingly."
"There are a few areas for improvement. We have encountered licensing issues on occasion, and sometimes updates don't apply properly."
"The interface has too many buttons, making it cluttered."
"Sangfor Endpoint Secure should include healing capabilities."
"Currently, the tool lacks reporting functionalities."
"Sometimes, the VPN is not secure and doesn't work properly in Sangfor Endpoint Secure."
"I face issues while migrating from Kaspersky to Sangfor Endpoint Secure."
 

Pricing and Cost Advice

"I feel it is fairly priced."
"Compared to CrowdStrike, Cortex XDR is an expensive solution."
"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."
"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."
"Our customers have expressed that the price is high."
"Every customer has to pay for a license because it doesn't work with what you get from a managed services provider."
"The price is on the higher side, but it's okay."
"The solution is expensive. It's pricing is on a yearly-basis."
"I am not sure about the cost. I would guess it to be between $50 to $60 per license. This would be the cost of the overall subscription. There is no additional fee."
"We have an annual subscription."
"We were able to eliminate the ransomware using the one-month, full-featured trial license."
"The solution offers both a three-year license and an annual license. I would rate the product's pricing a one out of ten."
"One can pay for the license annually, or at two and five year intervals."
"Compared to other solutions, such as CrowdStrike, we are most certainly happy with its pricing. We did a three year-business deal."
"The price of Sophos Intercept X is expensive. The license is paid on an annual basis. There are extra features that can be added depending on the endpoints. The solution is priced twice as much as the Comodo solution."
"It is not very expensive but I don't have specific pricing details. The licensing is usually done on yearly basis."
"Its "pay as you grow" model offers cost-effectiveness compared to major cloud providers."
"We were using Hyper-V. So, we switched to Sangfor because of the pricing."
"The product is expensive compared to other vendors."
"The solution is cheap. It is cheaper than other products by 15-20 percent."
"Price-wise, Sangfor Endpoint Secure can be considered a competitively priced product in the market as it offers quite low prices compared to other solutions."
"Sangfor Endpoint Secure's pricing is cheap. I rate it seven out of ten."
"Sangfor Endpoint Secure is not a cheap solution."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
920,929 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Outsourcing Company
12%
Construction Company
10%
Comms Service Provider
9%
Manufacturing Company
9%
Financial Services Firm
15%
Comms Service Provider
14%
Media Company
7%
Outsourcing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
By reviewers
Company SizeCount
Small Business76
Midsize Enterprise21
Large Enterprise22
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise3
Large Enterprise3
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
How does Crodwstrike Falcon compare with Sophos Intercept X?
I like that Crowdstrike Falcon allows me to easily correlate data between my firewalls. Its detection and machine lea...
What is your experience regarding pricing and costs for Sophos Intercept X?
Intercept X Endpoint has some impact on the budget. It is quite costly when measuring Intercept X Endpoint's protecti...
What needs improvement with Sophos Intercept X?
Intercept X Endpoint can be improved in several ways. Currently, it is only available on the cloud, and having it ava...
Ask a question
Earn 20 points
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Sophos Intercept X
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Flexible Systems
Information Not Available
Find out what your peers are saying about Intercept X Endpoint vs. Sangfor Endpoint Secure and other solutions. Updated: September 2026.
920,929 professionals have used our research since 2012.