Kaspersky Anti-Targeted Attack Platform vs NetWitness NDR comparison

Kaspersky Anti-Targeted Attack Platform vs. NetWitness NDR

Download the complete report

Helped 884,933 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of March 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of Kaspersky Anti-Targeted Attack Platform is 0.7%, up from 0.1% compared to the previous year. The mindshare of NetWitness NDR is 0.8%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.4%
Kaspersky Anti-Targeted Attack Platform	0.7%
NetWitness NDR	0.8%
Other	95.1%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

FarkhundAbbas

Security Engineer at adcb

The tool provides excellent sandboxing and email security features, but the backup and recovery features are not good

If my primary solution is down, no backup solution is available to restore it. It is one of the biggest weaknesses of the platform. If I need to update the solution, there is no option to pick the events and the logs from it and deploy it in another solution. The backup and recovery features of the product are not good. I need backup. If the tool is down for some time, I cannot get the logs at that particular time.

Read full review

reviewer1799727

Manager, IT Security Operations at a non-profit with 11-50 employees

Reliable and good support but can be expensive

I have no real complaints about the solution. Threat detection could be better. They need to enhance their threat intelligence feeds. We would like to have more IOCs or more trade intelligence to not only rely on the intelligence of the engineer in charge but to have some threat intelligence and some seeds of IOCs and to have the host have some artificial intelligence to reduce the number of false positives. I don't see this solution being very scalable. The solution is pricey.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution allows us to gain remote access without the user's knowledge and take the necessary actions on the device."

"Implementing Cortex XDR by Palo Alto Networks has had a significant impact on my security analyst workload because it becomes much easier."

"There has been a significant reduction of approximately 70% to 80% in our internal MTTR and MTTD metrics, now around five to eight minutes whereas previously it was hours, which has helped tremendously."

"The initial setup is easy."

"Since they've done their most recent update, the ease to isolate endpoints is valuable. If we find one where there is a virus on it, we can easily isolate it. We don't even have to contact the user. We don't have to manually take them off the network. We can easily isolate them."

"The most valuable feature of Cortex XDR by Palo Alto Networks is its machine-learning capabilities. Additionally, there is full integration with other solutions."

"Best solution for avoiding security breaches, malware attacks, and other kinds of security issues."

"Provides behavior-based detection which offers many benefits over signature-based detection."

More Cortex XDR by Palo Alto Networks pros

"Kaspersky Anti-Targeted Attack Platform is stable and runs all the time."

"The most valuable use is detailing metadata collection from the endpoint and network."

"I feel the anti-ransomware update is one of the tool's valuable features."

"The product's deployment phase is easy."

"The solution is very easy to use. Its interface is very simple, and you can build IOC's indicators. You can use your rules to detect these attacks because you can leverage threat intelligence. Y"

"The email security feature is really good."

"I would highly recommend the solution. Just go ahead and get it."

"The most valuable feature of RSA NetWitness Network is the single unified dashboard from which you can manage all the different products of RSA. Additionally, the integration with native applications is good."

"The most valuable feature is the way it captures the traffic, and it contains every detail of the communication."

"The stability of the RSA NetWitness Endpoint is very good."

"One of the most valuable features is the Orchestrator."

"We've contacted technical support several times. They've been very good. They have been able to help us resolve our issues."

"The interface of this solution is very flexible and easy to use."

"Technical support is knowledgeable."

More NetWitness NDR pros

Cons

"Managing the product should be easier."

"Cortex does not offer an on-premises solution. However, some customers would prefer not to be on the cloud. It would be ideal if it could offer something on-prem as well."

"It takes time to scan the servers and devices."

"I would like to see improvement in the tool's user interface, particularly in the area of managing alerts and providing more reporting capabilities."

"I recommend adding a data loss prevention (DLP) solution to Cortex XDR by Palo Alto Networks. The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products."

"Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth."

"We have found that there are times Cortex XDR by Palo Alto Networks does not detect some of the viruses, we have to use another protection solution called Kaspersky."

"They've been having some issues with updating their endpoint agents, and it has been quite frustrating."

More Cortex XDR by Palo Alto Networks cons

"The blind spot or gap in the platform is network analysis functionality."

"The solution lacks cloud integrations."

"I think the tool is still not really good enough for integration compared to other products."

"The backup and recovery features of the product are not good."

"Kaspersky Anti-Targeted Attack Platform is not a good product. We had problems with endpoints and the solution did not detect it. We didn't get any alerts about the attack."

"In some of the places I have come across, even though they use Kaspersky, the ransomware enters their system."

"The solution is modular, for example you can buy the RSA ePack, which you buy as a module is not part of the conduit solution. They could include it and have it as an all-in-one solution."

"Its price could be improved. It is an expensive product. Its training is also too expensive. It would be great if they can have a better pricing scheme for the training."

"The integration of the solution needs to be improved. The dashboard needs lots of updates as well. In the next release, we would like to see advanced fraud detection features."

"The initial setup requires a high level of skill."

"I would like to see Security Orchestration and Response Automation (SOAR) integration."

"The threat intelligence could improve in RSA NetWitness Endpoint."

"The initial setup requires a high level of skill, then the setup is good and smooth."

"We would like to see the hunting and investigation features of this solution improved, in order to provide better visibility of issues."

More NetWitness NDR cons

Pricing and Cost Advice

"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."

"Cortex XDR by Palo Alto Networks is quite an expensive solution."

"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."

"Compared to CrowdStrike, Cortex XDR is an expensive solution."

"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."

"The pricing is a little high. It is per user per year."

"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."

"I am using the Community edition."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"Kaspersky is one of the cheaper solutions."

"The solution has competitive pricing."

"Kaspersky Anti-Targeted Attack Platform is cheap."

"They can easily adjust if you have the requirements which are required. If you have a budget cut or a budget constraint, they can bend."

"It is an expensive product."

"We are on a three-year contract to use RSA NetWitness Network."

"It is highly scalable. It can be bought based on your requirements."

"I do not have any opinion on the pricing or licensing of the product."

"NetWitness Endpoint is less costly than its competitors, but it offers fewer features."

"The pricing is not very economical. It is a quite costly product for India. One thing is that when you purchase it, you have to purchase a module separately."

"The price of the solution depends on the environment. If the environment is large then it will cost more. However, the larger the environment with more endpoints, you will receive an increased discount. If the environment is very small, then you might think it is expensive. It is always better to buy in bulk to receive a discount. The minimum number of assets is usually 500, with discounts on 1000 and 2000."

More NetWitness NDR pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

884,933 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

Manufacturing Company

Financial Services Firm

Comms Service Provider

Computer Software Company

13%

Comms Service Provider

10%

Government

10%

Financial Services Firm

10%

Computer Software Company

Financial Services Firm

Manufacturing Company

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	47

No data available

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	2
Large Enterprise	5

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What do you like most about Kaspersky Anti-Targeted Attack Platform?

The solution is very easy to use. Its interface is very simple, and you can build IOC's indicators. You can use your ...

What is your experience regarding pricing and costs for Kaspersky Anti-Targeted Attack Platform?

Its price is reasonable; it's neither very high nor very low, considering its capabilities.

What needs improvement with Kaspersky Anti-Targeted Attack Platform?

I think the tool is still not really good enough for integration compared to other products. If you need to integrate...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Ask a question

Earn 20 points

Comparisons

Compared 9% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

HP Wolf Security vs Kaspersky Anti-Targeted Attack Platform

Compared 10% of the time

TrendAI Vision One vs Kaspersky Anti-Targeted Attack Platform

Compared 7% of the time

ESET Inspect vs Kaspersky Anti-Targeted Attack Platform

Compared 7% of the time

SanerNow CyberHygiene Platform vs Kaspersky Anti-Targeted Attack Platform

Compared 6% of the time

Morphisec vs Kaspersky Anti-Targeted Attack Platform

Compared 6% of the time

More Kaspersky Anti-Targeted Attack Platform Competitors

Darktrace vs NetWitness NDR

Compared 6% of the time

Trellix Endpoint Security Platform vs NetWitness NDR

Compared 6% of the time

ServiceNow Security Operations vs NetWitness NDR

Compared 4% of the time

ExtraHop Reveal(x) vs NetWitness NDR

Compared 4% of the time

SentinelOne Singularity Complete vs NetWitness NDR

Compared 2% of the time

More NetWitness NDR Competitors

Product Reports

Cortex XDR by Palo Alto Networks

Download Cortex XDR by Palo Alto Networks product report

Kaspersky Anti-Targeted Attack Platform

Download Kaspersky Anti-Targeted Attack Platform product report

Kaspersky Anti-Targeted Attack Platform report

NetWitness NDR

Download NetWitness NDR product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Kaspersky Anti Targeted Attack

RSA ECAT, NetWitness Network

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Today’s cybercriminals constantly design unique and innovative methods of penetration and compromise. To avoid perimeter prevention technologies they use social engineering, non-malware and supply chain attacks to operate under the radar of security designed to catch ‘bad’ traces. It’s not enough to just ‘know’ what’s bad or dangerous – enterprises need to understand what’s normal, and use AI-driven techniques that simplify and automate this process. Targeted Attack Analyzer is a machine learning engine that involves self-learning to establish the baseline of normal, legitimate activities of an entire network. Through continuous network telemetry collection it finds deviations, detects suspicious activities and predicts further malicious actions at the initial stages of multilayered attacks.

Kaspersky

Using a centralized combination of network and endpoint analysis, behavioral analysis, data science techniques and threat intelligence, NetWitness NDR helps analysts detect and resolve known and unknown attacks while automating and orchestrating the incident response lifecycle. With these capabilities on one platform, security teams can collapse disparate tools and data into a powerful, blazingly fast user interface.

NetWitness

Sample Customers

CBI Health Group, University Honda, VakifBank

Republic of Serbia, Goods.ru, Tael, Insolar

ADP, Ameritas, Partners Healthcare

Kaspersky Anti-Targeted Attack Platform vs. NetWitness NDR