Morphisec vs Symantec Endpoint Security comparison

Why PeerSpot?

Morphisec and Broadcom are both solutions in the Endpoint Protection Platform (EPP) category. Morphisec is ranked #45, while Broadcom is ranked #8 with an average rating of 7.2. Morphisec holds a 1.1% mindshare in EPP, compared to Broadcom’s 3.7% mindshare. Additionally, 100% of Morphisec users are willing to recommend the solution, compared to 80% of Broadcom users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Symantec Endpoint Security and Morphisec both compete in endpoint protection. Morphisec appears to have the upper hand due to its innovative features and proactive defense strategies that users find justified in terms of cost.

Features: Symantec Endpoint Security provides robust threat detection, real-time analytics, and a comprehensive protection suite. Morphisec is recognized for advanced prevention capabilities, a lightweight design, and its unique method of stopping attacks before they execute.

Room for Improvement: Symantec Endpoint Security could improve performance speed, reduce system resource usage, and enhance user interface intuitiveness. Morphisec could benefit from better integration with other security tools, more comprehensive reporting features, and an increase in scalability options.

Ease of Deployment and Customer Service: Symantec Endpoint Security offers flexible deployment options and responsive customer service. Morphisec stands out for its straightforward, rapid deployment process without extensive configuration. While Morphisec's customer support is well-rated, Symantec's extensive support infrastructure provides a slight advantage.

Pricing and ROI: Symantec Endpoint Security generally has higher setup costs, but users note a good ROI due to its wide range of features. Morphisec, with lower initial costs and significant value in thwarting advanced threats, delivers excellent ROI.

To learn more, read our detailed Morphisec vs. Symantec Endpoint Security Report (Updated: September 2026).

Buyer's Guide

Morphisec vs. Symantec Endpoint Security

September 2026

Download the complete report

Helped 913,683 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of September 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.8% compared to the previous year. The mindshare of Morphisec is 1.1%, up from 0.5% compared to the previous year. The mindshare of Symantec Endpoint Security is 3.7%, up from 3.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.8%
Symantec Endpoint Security	3.7%
Morphisec	1.1%
Other	91.4%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Rick Schibler

VP of Information Technology at Kentucky Trailer

Offers in-memory protection at a lower price than competitors

Morphisec's in-memory protection is probably the most valuable feature because it stops malicious activity from occurring. If something tries to install or act as a sleeper agent, Morphisec will detect and stop it. Morphisec's Moving Target Defense is critical to hardening our attack surface. If it detects something, it indicates whether it's valid. That means you've got a breach requiring investigation. It detects anomalies but doesn't necessarily point to what caused them. You still need to do that work. The solution is reasonably easy to administer. They made some changes last year, adding a cloud-based monitoring solution that makes deploying and monitoring our endpoints easy.

Read full review

Abhimanyu Das

Senior Cybersecurity Engineer at Kyndryl

Behavioral protection has blocked ransomware and now saves extensive recovery and audit time

The best feature of Symantec Endpoint Security is its effectiveness in malware protection. Its malware protection capabilities stand out due to their ease of management. Although multiple tools assist in this process, managing them all can sometimes be challenging. In terms of malware protection, Symantec Endpoint Security performs well, and its mechanisms, tactics, and techniques are effective. Symantec Endpoint Security offers robust features such as advanced reporting capabilities with a customizable dashboard that integrates EDR timelines, threat maps, and compliance metrics into a single view. Additionally, reports can be exported to PDF or CSV formats, making reporting one of its strong points. It also provides comprehensive device control features, which block unauthorized USB devices and support whitelisting. This helps prevent data exfiltration and phishing scenarios without disrupting user workflows.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The anti-exploit is impenetrable."

"I've found the solution to be highly scalable for enterprises."

"Palo Alto is the core of the security infrastructure in the environment."

"They have a new GUI which is just fantastic."

"We use Cortex XDR by Palo Alto Networks for its ability to detect based on behavior rather than simple virus scan to prevent malicious activities."

"The positive impacts I see from Cortex XDR by Palo Alto Networks include a complete 360-degree view of our security posture altogether, being a uniform platform where we are ingesting logs from multiple resources."

"On a scale from one to ten, I would rate Cortex XDR by Palo Alto Networks a nine."

"Based on my experience with Cortex XDR by Palo Alto Networks, I highly recommend it due to its quick response to zero-day attacks and low utilization from end-user devices."

More Cortex XDR by Palo Alto Networks pros

"We have not had one machine that has been taken down due to malware now in almost four and a half years, with 600 machines that we don't have routine infections on because nothing can execute."

"Since using Morphisec we have seen a downturn in attacks because Morphisec protects us versus Defenders and whatnot that are signature-based. I know we have not had any issues with ransomware or other zero-day attacks that we've seen with machines that, all of a sudden, have become before we instituted the product. Now the machine had to be re-imaged and there was a loss of data because something was on the machine. You couldn't really determine what was on the machine because nothing was picking it up. The products we were using weren't picking it up."

"Morphisec makes it very easy for IT teams of any size to prevent breaches of critical systems because of the design of their tool. When we evaluated Morphisec, the CIO and I sat and listened. What attracted us to them is the fact that it stops activity at the point of detection. That saves a lot of time because now we are not investigating and trying to trace down what to turn off. We have already prevented it, which makes it very much safer and more secure."

"It provides full visibility into security events and from both solutions in one dashboard. I'm not a big security guy, if I have a threat that looks like there's a problem, I will ask Morphisec to dissect it for me, and tell me what might be happening. Because it tends to be all hash codes, so I can tell what's going on. They've been pretty good with that."

"If you have the ability to get Morphisec into their environment, it's going to be a hundred percent return on investment."

"The simplicity of the solution, how easy it is to deploy and how small it is when deployed as an agent on a device, is probably the biggest aspect, given what it can do."

"Morphisec has been a real lifesaver."

"Morphisec makes use of deterministic attack prevention that doesn’t require investigation of security alerts. It changes the memory locations of where certain applications run. If you think of Excel, opening a PDF, running an Excel macro, or opening a webpage and clicking on a link, all of those actions run in a certain area of memory. Morphisec changes the memory locations of where those run."

More Morphisec pros

"One of the most valuable features is its antivirus database, which is current and updated daily. Another valuable feature is its capacity to be managed by a single server. The solution is managed by a secure server, so all the endpoints are managed from a central point."

"Symantec End-User Endpoint Security is easy to deploy."

"The features I find the most valuable are the protection, the encryption, and the DLP."

"The most useful features are the antivirus, anti-spyware, and the firewall feature. It also provides application control and Host Integrity, which is a very unique feature."

"The solution is completely scalable."

"It is very easy to managing everything in relation to the implementation and processing. The initial setup is very easy."

"The antivirus and antimalware features are good."

"It just works, we have a console and I can see it at a glance, I don't have any problems with it at all, and all the antivirus updates are managed from a single central point."

More Symantec Endpoint Security pros

Cons

"It tends to do 99.9% of things. The only thing I'd like is single sign-on authentication into their cloud platform so that my users can be properly authenticated against it."

"The product's pricing could be better."

"It is not a suitable solution if you are looking for a single product with multiple features such as DLP, encryption, rollback, etc."

"We would also like to have advanced tech protection and email scanning."

"Cortex XDR by Palo Alto Networks can improve mobile integration to allow access to the console."

"I would like to see improvement in the tool's user interface, particularly in the area of managing alerts and providing more reporting capabilities."

"The server sometimes stops continuously to check things so it would be helpful to receive access updates or technical reasons."

"The solution lags to the real-time scenarios here and there."

More Cortex XDR by Palo Alto Networks cons

"If anything, tech support might be their weakest link. The process of getting someone involved sometimes takes a little time. It seems to me that they should have all the data they need to let me know whether an alert is legitimate or not, but they tend to need a lot of information from me to get to the bottom of something. It usually takes a little longer than I would expect."

"The only area that really needs improvement is the reporting functionality."

"We have only had four attacks in the last year, "attacks" being some benign PDF from a vendor that, for some reason, were triggered. There were no actual attacks. They were just four false positives, or something lowly like adware. There have been false positives with both the on-premises solution and the cloud solution."

"It might be a bit much to ask, but we are now beginning to use Morphisec Scout, which provides vulnerability information. At this time, it's recognizing vulnerabilities and reporting them to us, but it's not necessarily resolving them. There's still a separate manual process to resolve those vulnerabilities, primarily through upgrades. We have to do that outside of Morphisec. If Morphisec could somehow have that capability built into it, that would be very effective."

"The dashboard is the area that requires the most improvement. We have about, I would say 5,500 computers currently, and searching through all of those takes some time to filter. So as soon as you apply the filter, it takes a few seconds. It crunches, it thinks, and then it brings up the clients that match."

"Automating reports needs improvement. I would like to have better reporting capabilities within it or automated reporting to be a little bit more dynamic. That's something I know they're working on. We literally are in the process. We started the process a week and a half ago of going to their latest version, so I've not seen their latest one up and running yet."

"Sometimes it generates false positive alerts. They need to continue working on that. They have provided solutions for it and have fixed issues with updated versions. The service is quite good but they need to work on it more so that there are no false positive alerts."

"The only area that really needs improvement is the reporting functionality. Gathering the detailed information that is in the system for an executive, or for me as a director, could be better. Some of the interface and reporting aspects are a little bit dated. They're working on it."

More Morphisec cons

"It would be interesting if Symantec Endpoint protection could also manage Windows Defender. If they were to add a feature, it would be nice if you could see the Symantec client and the Windows Defender client in case you choose to deploy both."

"We have not had a positive experience with technical support."

"If a machine is infected by ransomware, it's hard to recover the data. We don't have any data on the client, so we're not overly concerned about that. Still, it would be nice to have this feature if there are any future problems."

"I would less likely recommend this product to users who only have average RAM and CPU power."

"We are not satisfied with this solution. It needs a lot of improvements. It doesn't detect the most recent malware and unknown threats. With most of the users working from home these days, there is also a need for some extra security layer. That's why we are thinking of going for a better solution that will take care of all of our endpoints and work from home situation. Symantec also has to work on EDI technology. Vendors like Palo Alto and Cisco are coming with their own intelligence and cloud infrastructure in which unknown threats are regularly watched and monitored, and they are reported to the admin."

"It can be improved in terms of features and integration. It should have more advanced features and more integration."

"They're just starting to get into this now, but I think they can do better - they're just starting out with I think is called the SEP Cloud Console. It has more limited functionality. It will be good once we can run SEP from the cloud. That would be good."

"Zero-day threat and device management or device control can be better."

More Symantec Endpoint Security cons

Pricing and Cost Advice

"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."

"Cortex XDR's pricing is ok."

"The pricing is okay, although direct support can be expensive."

"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."

"This is an expensive solution."

"The price is on the higher side, but it's okay."

"Its pricing is kind of in line with its competitors and everybody else out there."

"Traps pays for itself within the first 16 months of a three-year subscription. This is attributed to OPEX savings, as security teams spent less time trying to identify and isolate malware for analysis as a result of a reduction in malware incidents, false positives, and breach avoidance."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"It does not have multi-tenants. If South Africa wants to show only the machines that they have, they need their own cloud incidence. It is not possible to have that in a single cloud incidence with multiple tenants in it, instead you need to have multiple cloud incidences. Then, if you have that, it will be more expensive. However, they are going to change that, which is good."

"The pricing is definitely fair for what it does."

"It is a little bit more expensive than other security products that we use, but it does provide us good protection. So, it is a trade-off."

"Compared to their competitors, the price of Morphisec is not that high. You can easily deploy it on a large-scale or small-scale network."

"Licenses are per endpoint, and that's true for the cloud version as well. The only difference is that there is a little extra charge for the cloud version."

"Morphisec is reasonably priced because our parent company's other subsidiaries use different products like CrowdStrike. CrowdStrike is four or five times more expensive than Morphisec. The competitive pricing saves us money in our overall security stack."

"We are still using a separate tool. I know for our 600 or I think we're actually licensed for up to 700 users, it runs me 23 or $24,000 a year. When you're talking to that many users plus servers being protected, that's well worth the investment for that dollar amount."

"It is priced correctly for what it does. They end up doing a good deal of discounting, but I think it is priced appropriately."

More Morphisec pricing and cost advice

"The licensing is okay. Symantec has a very granular licensing model, so you only buy what you need."

"The pricing is pretty much at the market standard... Symantec is not that cheap and it's not that expensive compared to CrowdStrike. I would put them in the 'middle block.'"

"Regarding the licensing, it was important negotiate a long contract to get a more attractive price, including advanced support in case of crisis."

"Symantec Endpoint Security's pricing is okay. It is cheaper compared to other products."

"It is the better product, even if it is a little on the higher side."

"I rate the product's pricing a six out of ten."

"The price of Symantec is on the higher end. They face some competition from a company called Quick Heal, which is much cheaper than Endpoint Security. They offer three years of protection at just 900 rupees."

"The pricing was one of the factors that led us to choose this product."

More Symantec Endpoint Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

913,683 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

12%

Comms Service Provider

12%

Construction Company

11%

Financial Services Firm

Outsourcing Company

15%

Manufacturing Company

13%

Construction Company

12%

Comms Service Provider

Outsourcing Company

13%

Comms Service Provider

13%

Financial Services Firm

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	47
Midsize Enterprise	21
Large Enterprise	55

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	8
Large Enterprise	8

By reviewers
Company Size	Count
Small Business	69
Midsize Enterprise	32
Large Enterprise	63

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

Ask a question

Earn 20 points

Which is better - Cortex XDR or Symantec End-User Endpoint Security?

Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...

See all answers

Which offers better endpoint security - Symantec or Microsoft Defender?

We use Symantec because we do not use MS Enterprise products, but in my opinion, Microsoft Defender is a superior sol...

See all answers

What is your experience regarding pricing and costs for Symantec End-User Endpoint Security?

Symantec Endpoint Security's pricing is better than most offerings based on my research. It seems to be half the cost...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 14% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Trellix Endpoint Security Platform vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

FortiCNAPP vs Morphisec

Compared 5% of the time

CrowdStrike Falcon vs Morphisec

Compared 4% of the time

Orca Security vs Morphisec

Compared 3% of the time

Prisma Cloud by Palo Alto Networks vs Morphisec

Compared 3% of the time

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Morphisec

Compared 3% of the time

More Morphisec Competitors

Microsoft Defender for Endpoint vs Symantec Endpoint Security

Compared 8% of the time

Trellix Endpoint Security Platform vs Symantec Endpoint Security

Compared 5% of the time

Kaspersky Next XDR Optimum vs Symantec Endpoint Security

Compared 4% of the time

CrowdStrike Falcon vs Symantec Endpoint Security

Compared 4% of the time

Tanium vs Symantec Endpoint Security

Compared 4% of the time

More Symantec Endpoint Security Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

September 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Morphisec

September 2026

Download Morphisec product report

Buyer's Guide

Symantec Endpoint Security

August 2026

Download Symantec Endpoint Security product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Morphisec, Morphisec Moving Target Defense

Symantec EPP, Symantec Endpoint Protection (SEP)

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Morphisec enhances security with its signatureless attack prevention, integrating smoothly with Microsoft Defender. Users benefit from real-time threat detection and seamless system integration, protecting against zero-day threats and ransomware across networks.

Morphisec's security solution focuses on preventing cyber threats without requiring threat signatures or user action. Its integration with Microsoft Defender offers simplified visibility and management while delivering quick responses. Lightweight in nature, Morphisec ensures zero performance degradation and employs in-memory protection along with Moving Target Defense. This approach effectively counters zero-day threats and ransomware, maintaining a user-centric dashboard that eases administrative workloads. Morphisec's easy deployment also enables small teams to manage risks and uphold robust security measures efficiently.

What are Morphisec's key features?

Signatureless Threat Prevention: Stops attacks without threat signatures or user interaction.
Microsoft Defender Integration: Provides unified management and quick response capabilities.
In-Memory Protection: Shields against zero-day and ransomware threats efficiently.
Moving Target Defense: Minimizes exposure to in-memory attacks.
User-Friendly Dashboard: Simplifies administration by reducing burdens.
Easy Deployment: Facilitates straightforward setup for small teams.

What benefits and ROI should be considered in user reviews?

Real-Time Detection: Immediate identification of threats enhances proactive threat management.
Seamless Integration: Compatible with existing systems, reducing delay risks.
Cloud-Based Updates: Ensures current protection with minimal manual input.
Multi-Layered Security: Adds a solid last defense layer, supplementing other antivirus solutions.

Morphisec is widely used across industries like financial services, healthcare, and manufacturing to bolster defenses against malware and ransomware. Its deployment spans workstations and servers, integrating efficiently into existing infrastructures. Industries value real-time threat detection, ease of deployment, and cloud-based updates, noting its ability to identify threats missed by other antivirus solutions.

Morphisec

Symantec Endpoint Security is a comprehensive protection tool designed for antimalware and antivirus defense. Providing centralized management and smooth deployment, it effectively secures environments from small businesses to extensive networks.

Symantec Endpoint Security serves organizations by offering robust protection with features like rapid deployment and centralized management, critical for securing workstations and servers. While appreciated for efficient resource utilization and stable operation, some users report issues with virus detection and cumbersome updates. Pricing is often considered high. It is a popular choice among IT consultants, academic institutions, and service providers for its ability to manage broad and varied security needs efficiently.

What are the key features of Symantec Endpoint Security?

Centralized Management: Streamlines security operations for ease of handling across networks.
Malware and Antivirus Protection: Provides real-time threat detection and EDR capabilities.
Application and Device Control: Manages access and control policies effectively.
SONAR and IPS: Enhances proactive malware scanning and intrusion prevention.
Active Directory Integration: Supports seamless integration with existing systems.

What benefits should be considered when evaluating Symantec Endpoint Security?

Reliable Support: Offers assistance which, while helpful, can vary in effectiveness.
Advanced Reporting: Enables detailed security analysis, though customization is limited.
Efficient Resource Usage: Provides stable performance across platforms with minimal impact.
Proactive Scanning: Ensures threats are detected early, enhancing security measures.

In industries like academia and IT consulting, Symantec Endpoint Security fulfills specific needs for robust endpoint protection. Its centralized management and application control make it suitable for educational institutions managing large network systems, while service providers benefit from its flexible deployment options.

Broadcom

Sample Customers

CBI Health Group, University Honda, VakifBank

Lenovo/Motorola, TruGreen, Covenant Health, Citizens Medical Center

Audio Visual Dynamics, Red Deer Advocate, Asia Pacific Telecom Co. Ltd., Kibbutz Ein Gedi, and AMETEK, Inc.

Buyer's Guide

Morphisec vs. Symantec Endpoint Security

September 2026

Free Report: Morphisec vs. Symantec Endpoint Security

Find out what your peers are saying about Morphisec vs. Symantec Endpoint Security and other solutions. Updated: September 2026.

DOWNLOAD NOW

913,683 professionals have used our research since 2012.

See our Morphisec vs. Symantec Endpoint Security report.

See our list of best Endpoint Protection Platform (EPP) vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.