No more typing reviews! Try our Samantha, our new voice AI agent.

Automox vs Tanium comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Protection Platform (EPP)
4th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
112
Ranking in other categories
Endpoint Detection and Response (EDR) (6th), Extended Detection and Response (XDR) (4th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Automox
Ranking in Endpoint Protection Platform (EPP)
36th
Average Rating
8.8
Reviews Sentiment
7.0
Number of Reviews
14
Ranking in other categories
Vulnerability Management (38th), Enterprise Mobility Management (EMM) (15th), Patch Management (13th)
Tanium
Ranking in Endpoint Protection Platform (EPP)
17th
Average Rating
7.8
Reviews Sentiment
6.2
Number of Reviews
22
Ranking in other categories
Server Monitoring (4th), Vulnerability Management (26th), Endpoint Detection and Response (EDR) (22nd), Unified Endpoint Management (UEM) (7th)
 

Mindshare comparison

As of June 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.7%, down from 3.8% compared to the previous year. The mindshare of Automox is 0.4%, up from 0.3% compared to the previous year. The mindshare of Tanium is 2.4%, down from 2.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.7%
Tanium2.4%
Automox0.4%
Other93.5%
Endpoint Protection Platform (EPP)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Naqash Ahmed - PeerSpot reviewer
Senior Data Reporting Analyst at University of Bradford
Automation has saved time and improves secure, centralized patching across all our devices
While Automox has very good features, I think there's still room for improvement. I want the custom reports to be even more detailed, specifically where I can add more details. It would be nice to have more filters in reports based on location and department more easily. Secondly, the notifications could be more customizable. Many times notifications come, but we don't have control over which notification is urgent and which is not. For example, if there's an alert of a critical update or pending approval, it can help me focus better. An alert of a security threat could be another type of notification that tells me something is important. Customized notifications would be much better. I would say the user interface could be improved as well. Some parts of the dashboard are a bit hard to understand. If they could be improved to be more intuitive, for example, if it could be easy to navigate between devices and reports, that would be great. I would say if Automox could also provide automation templates, that would help. I know there are templates, but I want more templates. Having ready-made worklets for common tasks can save a lot of time. Lastly, it should also support the interface for mobile screens.
MA
Division Manager, Information Technology at a legal firm with 51-200 employees
Centralized policies have improved remote endpoint control and have simplified data visibility
The integration is not simple and easy. It requires experienced users or people who have done the implementation. When certain policies are applied, they do not immediately push the policies. For example, we manage endpoint device USB access. We set a policy to block it, but it does not come into effect immediately. Sometimes it takes three or four days for it to reflect. That is a pain point. I have raised this issue with support as well, but they said that I need to limit the number of devices in the policy. In terms of application deployment, for us, it was seamless.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Has great threat detection capabilities."
"Cortex XDR can integrate the firewalls and determine the tendencies of the attacks. It's a new generation antivirus, with protection endpoints and detection response. It is very easy to use and everybody can operate the solution."
"Cortex XDR by Palo Alto Networks is specifically designed to prevent zero-day attacks and is part of an ecosystem of Palo Alto, providing customers with a long-term vision to modify and redesign how security is applied in their company."
"The product has an intuitive dashboard."
"On a scale from one to ten, I would rate Cortex XDR by Palo Alto Networks a nine."
"After deploying Traps, we saw the performance of the network improve by 65 to 70 percent."
"The initial setup isn't too bad."
"The biggest positive impact I see from Cortex XDR by Palo Alto Networks is a significant reduction in the number of people required to manage it."
"Automox has positively impacted my organization with significant time-saving, improved our security posture by automatically patching vulnerabilities, and is easy to manage and deploy while offering Automox University as a great resource for learning the platform."
"Automox provides complete visibility for any laptop, desktop or server in our environment, regardless of whether the person is on the train, in the cloud or on the move."
"Automox has eased our operations; it is very simple to use and does not have heavy workflows."
"Coming from prior solutions that were a lot more effort, Automox's patch management abilities are transformational."
"Coming from prior solutions that were a lot more effort, Automox's patch management abilities are transformational. When I took over patching at my company, they were using on-premise architecture to patch. As the workforce shifted from being in the office into their home offices, I was able to lift and shift with no effort other than deploying the new agent out into the environment."
"Out of all these features, if I had to pick one which I'm relying on the most, I would say the automatic patching, because it saves a lot of time and ensures all devices are updated."
"It is a flexible solution that does a majority of the tasks."
"Previously, we would run a report, scan it, and compare it. We were spending 15 to 30 minutes a month on each machine on this stuff because you would find stuff that wasn't up to date, then you had to fix it. This solution takes that time down to minutes. Automox saves us easily many hours a month."
"Tanium has made the process of detecting threats more proactive with its detection. So, the process is easier and more efficient."
"For inventory purposes, it's from one of the best things on the scene, as you can get live inventory."
"When I push a quick update, it's done right away, and I can rescan immediately to confirm completion within minutes."
"For incident response tasks, all these tasks can get done in minutes with minimal disruption to the end-user."
"I like the fact that you can create patching campaigns depending on the area of your network that you want to address first. I like the ability it has to make several campaigns that work in parallel."
"It's definitely not complex, it is pretty user-friendly and it's a solid tool enterprise to use."
"Threat hunting is a very good feature on Tanium. We have just started using it and have not used it extensively."
"Tanium’s best features include support for any Windows, Linux, or Mac endpoint, regardless of where it is, and the ability to do IT operations and security operations."
 

Cons

"The downsides of Cortex XDR by Palo Alto Networks are that in many incidents, when I enter the causality chain, there are numerous logs."
"Currently, we are monitoring all USB drives and ports but we would like to improve our device control capabilities."
"A potential area of improvement for Cortex XDR by Palo Alto Networks is the cost."
"Cortex XDR by Palo Alto Networks is a very good product, but financially, it is very expensive, so the company should look into that area."
"Cortex does not offer an on-premises solution. However, some customers would prefer not to be on the cloud. It would be ideal if it could offer something on-prem as well."
"A better pricing plan would make this product more competitive."
"There are some limitations on the Traps agents."
"It should support more mobile operating systems. That is one of the cons of their infrastructure right now."
"We would like to see additional detailed reporting for Service providers like us. We had to build our own reports via their APIs to meet our needs."
"When we bring on a new client, we need to go into that client and manually set up my account, my chief engineer's account, three technicians' accounts, and a billing person's account all over again, which is annoying."
"As concerns the patching concepts, there's a bit of a learning curve in terms of working out how Automox wants you to work within the console, not only splitting up everything into groups, but then having the various policies assigned."
"They need to improve the automation features."
"It should have integrated workstation access. So, there should be a remote desktop feature."
"I would add that remote support for iOS could be better, and remote support of Linux is also lacking."
"When we bring on a new client, we need to go into that client and manually set up my account, my chief engineer's account, three technicians' accounts, and a billing person's account all over again, which is annoying. We have probably up to 15 or 16 of our clients on Automox now. For every single one of those, we have had to go in and set this up. Then, if anything changes, we have to remember to go to Automox and change it 15 or 16 times. So, we just want inheritable permissions, and that is it. We have talked to them about this, and they are like, "Yeah, we hear a lot of complaints about it." I am thinking, "Guys, I have been complaining about this for a year and a half. When are you going to do it?" It must be some tricky thing or not an easy fix, because I can only assume if it were easy, then they would have done it by now."
"The stability has come a long way from what it was like when it started and now it's really good."
"Tanium required local admin or root rights on Mac devices, which did not comply with our security policies. This made the solution less suitable for our restrictive environment."
"Our biggest issue with the solution is its lack of mobility."
"Any movement into a SaaS solution has challenges since the processes and data flows are not well defined. Hence, you need to build it at the same time."
"There are some bugs in the product. The tool needs to improve in the area of reporting."
"We had some issues with the solution's OS upgrade."
"When working with Tanium, there are some older devices that haven't been patched for a long time, and certain patches are not included in Tanium. I have to search outside to download patches, create bundles, and then perform the task."
"I would like to have more integrations and custom plugins to input. Integration is always a big deal in a lot of different environments."
"There are downsides and drawbacks in Tanium, and there is room for improvement from my perspective."
 

Pricing and Cost Advice

"It's about $55 per license on a yearly basis."
"The solution is expensive. It's pricing is on a yearly-basis."
"We pay about $50,000 USD per year for a bundle that includes Cortex XDR."
"This is an expensive solution."
"Cortex XDR's pricing is ok."
"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."
"Its pricing is kind of in line with its competitors and everybody else out there."
"It has a yearly renewal."
"We are on the premium licensing, which is the one that has the API capability that we use."
"The pricing and licensing costs have been great for us... My advice to others who are evaluating or thinking of implementing Automox is to give it a shot. If a free trial is still available, definitely use it, because it makes life a lot easier."
"Automox just charges us a set amount per user, per month, for using the product. That is very important to us. Because it's a cloud-native solution, you're saving on the cost of hosting an on-premises solution on your servers."
"The product is a great value."
"There are no additional costs in addition to the extended licensing fees with Automox. You get your support and your per endpoint license with what you purchased."
"The cost is very reasonable compared to the competition."
"We're doing it annually directly through Automox. It is per endpoint. It is $2 and some change per endpoint, but I believe the cost is right around $28,000. Everything is covered in this fee."
"Its licensing for a year was nine grand. There was no additional fee."
"The product's pricing differs from region to region depending on negotiations and the number of endpoints."
"It's an expensive solution. It would be nice if the cost were lower."
"It is higher than some competitors in the market."
"The solution offers value for money."
"The solution is expensive but it's a good investment."
"Tanium is a more expensive solution in Latin America than some of the competitors, such as BigFix."
"There is an annual license required to use this solution."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
899,052 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
12%
Financial Services Firm
11%
Manufacturing Company
11%
Comms Service Provider
9%
Financial Services Firm
11%
Manufacturing Company
9%
Government
8%
Outsourcing Company
7%
Financial Services Firm
14%
Government
11%
Manufacturing Company
9%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business47
Midsize Enterprise20
Large Enterprise51
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise3
Large Enterprise11
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise3
Large Enterprise12
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Automox?
The cost is very affordable. We have been able to save a lot of time, approximately 30%. Cost reduction has been noti...
What needs improvement with Automox?
From an enterprise perspective, Automox could have better compliance reporting, which is needed for audit readiness, ...
What is your primary use case for Automox?
Automox is used in our system primarily to manage patch management. It helps in managing Windows updates, third-party...
What needs improvement with Tanium?
While there is always room for improvement, I am pleased with Tanium.
What is your primary use case for Tanium?
The primary use case for Tanium ( /products/tanium-reviews ) is compliance, patching, and inventory as part of the co...
What advice do you have for others considering Tanium?
For smaller companies, Tanium is quite a big investment, and one needs to have a considerable setup to make it econom...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
Tanium Inc Cloud, Tanium XEM
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
JPMorgan Chase, eBay, Amazon, US Bank, MetLife, pwc, Cerner, Delphi, MGM Grand, New York Life
Find out what your peers are saying about Automox vs. Tanium and other solutions. Updated: April 2026.
899,052 professionals have used our research since 2012.