


Kaspersky Endpoint Detection and Response Expert and Symantec Endpoint Detection and Response compete in the cybersecurity space, focusing on endpoint protection and network security. Kaspersky appears to have an edge in advanced threat detection and ease of management, particularly appealing to financial institutions, while Symantec offers strong threat hunting and managed services suitable for enterprises with extensive deployment needs.
Features: Kaspersky Endpoint Detection and Response Expert is known for its comprehensive endpoint protection, machine learning, and network monitoring. It also excels in intrusion prevention capabilities. Symantec Endpoint Detection and Response provides robust threat hunting, managed service offerings, and application and device control, supplemented by network isolation and deception technology.
Room for Improvement: Kaspersky users recommend enhancing system resource optimization, improving technical support, and adding extended detection and response (XDR) features. Symantec can improve its reporting and automation features, better incident management, and platform integration. Both products should focus on boosting their stability, security, and scalability to tackle evolving cybersecurity threats.
Ease of Deployment and Customer Service: Kaspersky supports primarily on-premises deployments and is noted for its scalability, but it is seen as resource-intensive. Customer service has room for improvement with feedback on delayed responses. Symantec supports various deployment models, including hybrid cloud, though customer support has suffered unclear communication since the Broadcom acquisition. Both could enhance their service efficiency.
Pricing and ROI: Kaspersky's pricing is mixed, perceived as competitive by some, though affected by currency fluctuations. Its ROI is generally positive for medium-sized networks. Symantec, while sometimes considered expensive, remains cheaper than rivals like CrowdStrike. It offers flexible pricing and comprehensive maintenance packages, though on-premises deployment costs may impact ROI. Both solutions are generally viewed as worthwhile investments.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
In Cortex XDR by Palo Alto Networks, most of the remediation is automated and the accuracy is quite good.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
I rate the technical support from Kaspersky a 10, as they respond quickly with engineers joining the conversation within three to five minutes.
I have my own independent team for Kaspersky deployment and operational support, so I am not dependent on Kaspersky's backend technical support.
From my perspective, the local team and the support team of Kaspersky Endpoint Detection and Response Expert need to be more accurate and more responsible.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
I think scalability for Cortex XDR by Palo Alto Networks is good.
Kaspersky Endpoint Detection and Response Expert is very scalable, working with high availability techniques across three main data centers in my organization.
I believe Kaspersky Endpoint Detection and Response Expert is scalable, as I can keep adding agents without hard limitations.
Cortex remains fast and responsive, even with increasing data and alerts.
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Cortex XDR is stable, offering high quality and reliable performance.
It effectively detects new applications and requires whitelisting based on assessments discussed with the technical teams or vendors.
Customers using Kaspersky Endpoint Detection and Response Expert can manage environments with as few as 100 endpoints or as many as 5,000 endpoints very effectively.
I haven't found any issues with this particular solution, and there's no room for improvement for Kaspersky Endpoint Detection and Response Expert.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
If the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better.
A centralized dashboard is a primary requirement, as it would facilitate easier management without needing to install multiple agents.
Deployment with the console directly, without depending on other workers to deploy the agents, would be beneficial.
Compared to my previous product, Kaspersky Endpoint Detection and Response Expert is not up to the mark; it's below my rating.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Cortex XDR is perceived as expensive by some customers, yet offers dynamic pricing.
The pricing is nominal when we compare it with other solutions.
Compared to other products, the pricing for Kaspersky Endpoint Detection and Response Expert is almost the same.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
The ATP functionality is quite strong because it utilizes the behavioral analytics engine in the backend, which employs machine learning mechanisms to identify any kind of vulnerability or exploit running on the operating system level and the network level.
Almost all our clients use the Patch Management, vulnerability, and integration feature.
The product is strong enough and capable of handling the type of detections as protection and security.
| Product | Mindshare (%) |
|---|---|
| Cortex XDR by Palo Alto Networks | 3.4% |
| Kaspersky Endpoint Detection and Response Expert | 1.3% |
| Symantec Endpoint Detection and Response | 0.7% |
| Other | 94.6% |


| Company Size | Count |
|---|---|
| Small Business | 44 |
| Midsize Enterprise | 20 |
| Large Enterprise | 48 |
| Company Size | Count |
|---|---|
| Small Business | 30 |
| Midsize Enterprise | 4 |
| Large Enterprise | 18 |
| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 7 |
| Large Enterprise | 9 |
Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.
Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.
What are the key features of Cortex XDR?Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.
Kaspersky Endpoint Detection and Response Expert is a robust cybersecurity tool that delivers protection against cyberthreats while enhancing visibility and response capabilities for IT security teams.
This comprehensive solution integrates with Endpoint Protection Platform to block and detect cyberthreats while providing tools for IT security professionals. Backed by 30 years of experience, it is trusted by over 600 enterprise customers, safeguarding more than 2.5 million endpoints across the globe. The system is built with a powerful set of detection engines, enabling proactive threat investigation with clear visualization. It features an open architecture supporting broad integration capabilities, making it versatile for diverse IT environments.
What are the key features of Kaspersky Endpoint Detection and Response Expert?In industries such as finance, healthcare, and corporate IT, Kaspersky Endpoint Detection and Response Expert is employed for network and endpoint security, shielding against malware, zero-day threats, and unauthorized access. It empowers these sectors with enhanced threat intelligence, secure data protection, and effective patch management, facilitating robust protection across diverse ecosystems.
Symantec Endpoint Detection and Response (EDR) is a powerful security solution designed to help organizations proactively detect, investigate, and mitigate advanced threats across their endpoint environments. As part of Broadcom's cybersecurity portfolio, Symantec EDR provides comprehensive visibility into endpoint activities, enabling security teams to quickly identify and respond to threats that evade traditional defenses.
Symantec EDR leverages machine learning, behavioral analysis, and global threat intelligence from Symantec's vast network to detect sophisticated threats, including zero-day attacks, ransomware, and advanced persistent threats (APTs). This allows organizations to identify malicious activities early and respond swiftly to mitigate potential damage. The solution offers automated response options that enable security teams to contain and remediate threats quickly.
Symantec EDR provides detailed forensic capabilities, allowing security analysts to dive deep into endpoint data, investigate incidents thoroughly, and understand the scope and impact of attacks. Features such as timeline analysis, incident graphing, and the ability to isolate endpoints enhance investigative efforts and support effective remediation strategies.
With its centralized management console, Symantec EDR offers visibility across the entire endpoint environment, regardless of the operating systems or whether endpoints are on-premise or remote. Symantec EDR seamlessly integrates with other Symantec security solutions, enhancing its detection capabilities and enabling a unified approach to threat management. Its scalable architecture ensures that businesses of all sizes can benefit from its advanced security features without compromising performance.
Quickly discover and resolve threats with deep endpoint visibility and superior detection analytics, reducing mean time to remediation. Overcome cyber security skills shortages and streamline SOC operations with extensive automation and built-in integrations for sandboxing, SIEM, and orchestration.
Fortify security teams with the unmatched expertise and global scale of Symantec Managed Endpoint Detection and Response services.
Roll out Endpoint Detection and Response (EDR) across Windows, macOS, and Linux devices using Symantec Endpoint Protection (SEP)-integrated EDR or a dissolvable agent.
We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.