No more typing reviews! Try our Samantha, our new voice AI agent.

Kaspersky Next EDR Foundations vs Zscaler Client Connector comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 9, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Detection and Response (EDR)
5th
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Kaspersky Next EDR Foundations
Ranking in Endpoint Detection and Response (EDR)
31st
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
15
Ranking in other categories
Ransomware Protection (9th)
Zscaler Client Connector
Ranking in Endpoint Detection and Response (EDR)
23rd
Average Rating
8.8
Reviews Sentiment
5.9
Number of Reviews
6
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, down from 3.8% compared to the previous year. The mindshare of Kaspersky Next EDR Foundations is 1.1%, up from 0.7% compared to the previous year. The mindshare of Zscaler Client Connector is 0.7%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.8%
Zscaler Client Connector0.7%
Kaspersky Next EDR Foundations1.1%
Other94.4%
Endpoint Detection and Response (EDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
HM
Cyber Security Manager at Greater Cairo Water Company (GCWC)
Centralized endpoint control has strengthened defense in depth across our distributed branches
When considering features or capabilities of Kaspersky Next EDR Foundations that I have found most valuable, it appears similar to other vendors, and I don't find a unique feature in it as it looks comparable to any other EDR solution. However, we purchased it because we have had Kaspersky Endpoint for 10 years, so it has fantastic integration between EDR and the endpoint. Additionally, Kaspersky is one of the famous leaders in endpoint protection in the world. The centralized management console of Kaspersky Next EDR Foundations has helped me streamline my security protocols significantly. This helps me a great deal because we are a large enterprise and we need centralization. It simplifies operations for us. We have many branches around Cairo, which is the capital of Egypt, and because we need centralization, we cannot perform our tasks without it.
DA
IT Support Admin at Kuehne & Nagel Inc.
Client activity has been monitored efficiently through in-depth log analysis and traffic filtering
I use the Zscaler speed test, and it is very nice. We use some logs from Zscaler Client Connector to collect data and see what is happening, such as if there is an interruption or something. There is a specific tunnel version that we have to use because, depending on the internet provider, some of them have lower speed, so we have some issues. This is because of the provider, not from Zscaler. We use Office 365 services and Office applications, and because some connections are slow and they do not have full coverage from the internet provider, we have some issues. If the speed is slow for Zscaler Client Connector connection, then we have issues because if the speed is not good, then Zscaler Client Connector goes down. This may be because they put some policy. Of course, if you use Office 365 services such as Outlook, the minimum bandwidth is 5 megabits and more, so this causes issues if the users do not have a good remote connection. This depends on the companies and the users, so they need to fix it. This is not from us or our company. It is very useful, and the logs are very helpful. When we go to logs, we understand what is happening.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I like the centralized console and the predictive analysis it does of malware. It is very stable and also scalable."
"The solution allows us to gain remote access without the user's knowledge and take the necessary actions on the device."
"Cortex XDR alerts us on the dashboard when there's a threat, which allows us to restrict that user and helps secure our infrastructure."
"The product's most valuable features are massive user and feature intelligence exploit detection."
"Based on my experience with Cortex XDR by Palo Alto Networks, I highly recommend it due to its quick response to zero-day attacks and low utilization from end-user devices."
"When the pandemic started, Palo Alto came up with many solutions, which helped with the quick shift from on-premises to the cloud."
"It's a perfect solution. It integrates well into the environment."
"Monitoring is most valuable."
"I would say that Kaspersky Endpoint Security Cloud is one of the best, very effective software because of its vulnerability assessment and threat assessments."
"We had the cloud suite of KasperskyEndpoint Security Cloud, and its monitoring was fine."
"Kaspersky Endpoint Security Cloud is a very good solution for endpoint protection."
"In Kaspersky Endpoint Security Cloud, anti-phishing and anti-malware are two very powerful aspects."
"The platform's ability to update the database from my device and manage user profiles is quite effective."
"I find the EDR service valuable as it adds extra protection and provides a centralized view."
"The AI-driven threat intelligence has helped my threat management significantly, as it helps me catch many threats."
"It is a powerful tool for zero-day attack prevention."
"It is very useful, and the logs are very helpful; when we go to logs, we understand what is happening."
"The solution operates in the background seamlessly without the user noticing."
"The real-time analytics feature in Zscaler Client Connector is another valuable feature called Digital Experience, or ZDX, which can easily identify the root cause of issues accessing public or internal resources and provide good analysis so relevant teams can quickly resolve them, making it a very good tool that helps customers."
"The best features of Zscaler Client Connector are that it gives the client a much more transparent experience, as they don't have to worry about connecting to a VPN."
"It is very important to see what is happening between the user and the applications that we have, and to filter the traffic from outbound traffic and inside traffic."
"Zscaler Client Connector is quite scalable, and I would rate its scalability as nine or ten out of ten."
"I'd rate the solution nine out of ten."
"Zscaler Client Connector has eliminated VPN bottlenecks and outages, improved user productivity with instant secure access, and reduced help desk tickets related to VPN issues, overcoming 60% of VPN-related problems while allowing faster onboarding of remote users and better enforcement of zero-trust security policies."
 

Cons

"If he is using a smaller company, he can depend on some other tools because Cortex XDR by Palo Alto Networks is a bit expensive."
"There's room for improvement with Mac device installations, which can be challenging."
"One thing that was missing was the integration part. Currently, they don't have out-of-box integration with IBM QRadar, or if they have the integration, the integration doesn't work well."
"On the pricing aspect, Cortex XDR by Palo Alto Networks needs to have a more reasonable rate, particularly for customers in Sri Lanka and Asian countries."
"The connection to the internet has not performed as expected."
"It's very time-consuming to log support issues and the people that answer the tickets aren't very knowledgeable."
"A better pricing plan would make this product more competitive."
"If they had pulse rate detection, it would be better."
"Sometimes, the tool consumes a lot of resources from the endpoints, making it an area of concern where improvements are required since it currently consumes a little bit of RAM."
"Recent upgrades have occurred, but some customers question why certain options are disabled."
"Certain shortcomings in the anti-ransomware part of the solution need improvement. XDR and MDR, along with threat hunting, a big step in cybersecurity today, need improvement."
"Its high CPU usage also slows down devices, particularly those with lower specifications like Core i3."
"The solution’s stability could be improved because we earlier faced an issue where the solution was not detecting file-less malware."
"The tool's update management can be better. In future releases, the addition of a DLP module would be valuable."
"Recently, there was a company which was attacked by phishing emails, and out of 10, it was only blocking three emails."
"Kaspersky's cloud solution should be improved because the on-premises features are unavailable in the cloud."
"There is room for improvement regarding the price of Zscaler Client Connector, as it is one of the most expensive solutions available."
"If the speed is slow for Zscaler Client Connector connection, then we have issues because if the speed is not good, then Zscaler Client Connector goes down."
"The stability of Zscaler Client Connector needs improvement, as it often disconnects and reconnects."
"There is a hard learning curve for Zscaler Client Connector; their support isn't the greatest all the time."
"I rate this product nine out of ten because I have seen some minor instability issues after updates and some room for UI improvement for deeper analytics, with instances of major issues after updating the GCC that required rollbacks."
"Zscaler Client Connector is not low in cost; it is definitely on the higher side."
 

Pricing and Cost Advice

"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."
"Its pricing is kind of in line with its competitors and everybody else out there."
"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."
"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."
"Our customers have expressed that the price is high."
"The pricing is a little high. It is per user per year."
"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."
"It is present, but when compared to other competitive products, I would say it is not less expensive; however, when all of the other added values are considered, the price is reasonable."
"The product is averagely priced."
"The pricing is favorable, and there are no additional expenses associated with using the product."
"We had to pay an annual licensing fee for KasperskyEndpoint Security Cloud."
"The solution is moderately priced and cannot be considered an expensive or cheap tool."
"The product’s price is flexible."
"The platform is expensive."
"The solution is reasonably priced."
"I find Kaspersky Endpoint Security Cloud more accessible in terms of pricing."
Information not available
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Outsourcing Company
17%
Comms Service Provider
16%
Construction Company
8%
Financial Services Firm
7%
Manufacturing Company
17%
Comms Service Provider
10%
Financial Services Firm
8%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise4
Large Enterprise3
By reviewers
Company SizeCount
Small Business3
Large Enterprise5
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What needs improvement with KasperskyEndpoint Security Cloud?
Kaspersky Next EDR Foundations could be improved if it depended more on artificial intelligence, as other vendors suc...
What is your primary use case for KasperskyEndpoint Security Cloud?
I use Kaspersky Next EDR Foundations for endpoint detection and response.
What is your experience regarding pricing and costs for Zscaler Client Connector?
My experience with pricing, setup cost, and licensing is that the pricing is fair, though it is a bit costly. It oper...
What needs improvement with Zscaler Client Connector?
For Zscaler Client Connector, I would appreciate more granular control over the client update rollout and slightly fa...
What is your primary use case for Zscaler Client Connector?
My main use case of Zscaler Client Connector is to provide secure, seamless access to the internet and internal appli...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Information Not Available
Find out what your peers are saying about Kaspersky Next EDR Foundations vs. Zscaler Client Connector and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.