Cisco Secure Endpoint vs Deep Instinct Prevention Platform comparison

Cisco and Deep Instinct are both solutions in the Endpoint Protection Platform (EPP) category. Cisco is ranked #13 with an average rating of 8.3, while Deep Instinct is ranked #40 with an average rating of 9.0. Cisco holds a 1.5% mindshare in EPP, compared to Deep Instinct’s 0.7% mindshare. Additionally, 96% of Cisco users are willing to recommend the solution, compared to 100% of Deep Instinct users who would recommend it.

Cisco Secure Endpoint

Read 48 Cisco Secure Endpoint reviews

6,056 Views
3,717 Comparison Views

96% willing to recommend

Deep Instinct Prevention Pl...

Read 18 Deep Instinct Prevention Platform reviews

2,568 Views
1,613 Comparison Views

100% willing to recommend

Cisco Secure Endpoint

Deep Instinct Prevention Pl...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Cisco Secure Endpoint and Deep Instinct Prevention Platform are leading solutions in endpoint security. Cisco Secure Endpoint appears to have an upper hand in active threat response and customer service, while Deep Instinct shines in pre-execution prevention and accuracy.

Features: Cisco Secure Endpoint offers robust threat detection, remediation capabilities, and comprehensive reporting features. Deep Instinct Prevention Platform is known for AI-driven pre-execution prevention, a low false-positive rate, and its autonomous functions.

Room for Improvement: Cisco Secure Endpoint users suggest enhanced integration with other security tools, better offline protection, and interface improvements. Deep Instinct Prevention Platform could benefit from more robust data forensics, analytics capabilities, and enhanced reporting features.

Ease of Deployment and Customer Service: Cisco Secure Endpoint is often noted for a straightforward deployment process and faster, more responsive customer support. Deep Instinct Prevention Platform users also report smooth implementation due to its autonomous functions, though its customer service could improve in response times.

Pricing and ROI: Cisco Secure Endpoint has higher initial setup costs but provides substantial ROI with comprehensive threat management. Deep Instinct Prevention Platform offers competitive pricing and delivers strong ROI through reduced operational interference and advanced preventive measures.

To learn more, read our detailed Cisco Secure Endpoint vs. Deep Instinct Prevention Platform Report (Updated: January 2025).

Buyer's Guide

Cisco Secure Endpoint vs. Deep Instinct Prevention Platform

January 2025

Download the complete report

Helped 838,713 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cisco Secure Endpoint

Ranking in Endpoint Protection Platform (EPP)

13th

Average Rating

8.6

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Endpoint Detection and Response (EDR) (13th), Cisco Security Portfolio (5th)

Deep Instinct Prevention Pl...

Ranking in Endpoint Protection Platform (EPP)

40th

Average Rating

8.6

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Anti-Malware Tools (15th)

Mindshare comparison

As of February 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of Cisco Secure Endpoint is 1.5%, down from 1.9% compared to the previous year. The mindshare of Deep Instinct Prevention Platform is 0.7%, down from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP)

Featured Reviews

Mark Broughton

Level 2 tech at a tech services company with 11-50 employees

Tighter integration with Umbrella and Firepower gave us eye-opening information

We were using a third-party help desk. One of the ways that they were fixing problems was to delete the client and then add the client back if there was an issue where the client had stopped communicating. Any improvement in the client communicating back to the server would be good, particularly for machines that are offline for a couple of weeks. A lot of our guys were working on a rotation where the machine might be offline for that long. They were also terrible about rebooting their machines, so those network connections didn't necessarily get refreshed. So, anything that could improve that communication would be good. Also, an easier way to do deduplication of machines, or be alerted to the fact that there's more than one instance of a machine, would be useful. If you could say, "Okay, we've got these two machines. This one says it's not reporting and this one says it's been reporting. Obviously, somebody did a reinstall," it would help. That way you could get a more accurate device count, so you're not having an inflated number. Not that Cisco was going to come down on you and say, "Oh, you're using too many licenses," right away. But to have a much more accurate license usage count by being able to better dedupe the records would be good. I also sent over a couple of other ideas to our technical rep. A lot of that had to do with the reporting options. It would be really nice to be able to do a lot more in the reporting. You can't really drill down into the reports that are there. The reporting and the need for the documentation to be updated and current would be my two biggest areas of complaint. Also, there was one section when I was playing with the automation where it was asking for the endpoint type rather than the machine name. If I could have just put in the machine name, that would have been great. So there are some opportunities, when it comes to searching, to have more options. If I wanted to search, for example, by a Mac address because, for some reason, I thought there was a duplication and I didn't have the machine name, how could I pull it up with the Mac address? When you're getting to that level, you're really starting to get into the ticky tacky. I would definitely put the reporting and documentation way ahead of that.

Read full review

Elena Yau

Director Of Information Technology at a individual & family service with 201-500 employees

Prevention, in advance, saves us remediation time

We have a PHI (protected health information) committee, and some of the things that we review on a weekly basis are incidents. For example, if there was malware or adware or some kind of phishing attempt, or even ransomware, we would have to investigate and see if there was any PHI impact. We've seen small things because some kind of adware made its way through the browser from some malicious link, and it's really hard to prevent those. We're putting more levels of filtering around that. There are some product development ideas that we have been working on alongside the DI team, and they've been super helpful. There are definitely a lot more little areas of improvement for the interface. Also, we have talked with the DI team about adding the forensic piece, which is what we do a lot. That would be added value and they've just recently provided more individuals to think about the roadmap. That's part of their strategy and one of the good features that they want to bring on. Hopefully, they can bring that to fruition and that will ease our workflow a little bit more. The additional predictive and prevention capabilities in the 3.0 version, that don't require special rules and configuration, help our organization. The only caveat is that when things get done automatically, I would appreciate more logging of what's happening in the background, if it is doing some kind of intervention. If we need to do some forensics, we should be able to backtrack from the log that gets uploaded to our cloud instance and see, forensically, what the root cause was. We should be able to see what instigated that trigger by DI and what exactly was done. That's a missing piece. It does a good job of preventing, but then we don't know what were the symptoms of the prevention. Let's say that there was like a PowerShell block. We'll see an indicator on the dashboard and we'll look at the logs and investigate. Sometimes we find that the logs that are captured locally on the endpoint itself are not very thorough. We were coached through our training with DI that, when troubleshooting, the DI team would always ask for the logs from the endpoint. We know what we need to do to look at something. But the logging for DI doesn't capture everything. There are some things that are missing. When it comes to root-cause analysis, or kill-chain analysis, and figuring out exactly what happened, it's very hard to do that right now on the product. I have used Carbon Black before and they're pretty good with the forensic analysis. That does save some efforts of my one engineer and myself when we have to go through the PHI committee. Right now, with Di, that feels like a blind spot. Another area for development is making the license clean-up a little bit easier. We always have to manually uninstall agents. If there were some way to remove the licensing and do better license management on the platform, that would help my team as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Any alert that we get is an actionable alert. Immediately, there is information that we can just click through, see the point in time, what happened, what caused it, and what automatic actions were taken. We can then choose to take any manual actions, if we want, or start our investigation. We're no longer looking at digging into information or wading through hundreds of incidents. There's a list which says where the status is assigned, e.g., under investigation or investigation finished. That is all in the console. It has taken away a lot of the administration, which we would normally be doing, and integrated it into the console for us."

"Definitely, the best feature for Cisco Secure Endpoint is the integration with Talos. On the backend, Talos checks all the signatures, all the malware, and for any attacks going on around the world... Because Secure Endpoint has a connection to it, we get protected by it right then and there."

"It provides real-time visibility and control over endpoints, allowing its users to promptly respond to any security incidents and remediate any vulnerabilities."

"The entirety of our network infrastructure is Cisco and the most valuable feature is the integration."

"The console feature gives a centralized management of what's going on, and if something happens, it gives you an alert. So, that's the most important feature for me."

"Its most valuable features are its scalability and advanced threat protection for customers."

"The tool's most valuable feature is its integration with other Cisco products, such as switches and routers. This integration allows comprehensive coverage of security parameters across the customer's entire network. Customers find it easier to manage because they already know Cisco products. The cloud-based management is another valuable feature, enabling customers to manage their security from anywhere with an internet connection."

"Device Trajectory is one of the most valuable features. We're able to dig in and really understand how things came to be and where to focus our efforts."

More Cisco Secure Endpoint pros

"Its false positives are very low, because the behavior analysis engine double checks them."

"The most important thing is that it is for prevention. It prevents attacks of any type of malware. Normally, what we've seen in other products is that they are not for prevention. They isolate a possible threat that they don't understand or know about, and then they check it with our database to see if it needs any correction or elimination. This means that the threat is already inside a customer's base, whereas Deep Instinct prevents a threat from getting in. Prevention is basically done by an agent in each installation, PCU, or product. An agent has its own intelligence to be able to detect if it should stop a threat or not. It has been taught. It is like a brain that has been taught to react according to any possible threat. Deep Instinct is very light. It doesn't take too much CPU attention or memory. It doesn't slow down the performance. You don't really realize any change in the performance, which makes it very different from other solutions. They are usually heavy for the users."

"Deep Instinct was a strategic complement to our Open XDR platform."

"Stability-wise, I rate the solution a ten out of ten."

"The most valuable features are the static/dynamic analyses. Deep Instinct's predictive model has very high accuracy and provides threat information for unknown malware, such as malware classification, static analysis information, and sandbox information."

"Good detections for PowerShell. and good user interface."

"Deep Instinct's detection rate is close to 100 percent."

"When we were looking at Carbon Black and Sophos, the prevention pieces weren't as strong when compared to DI, which is why we decided to go with DI... I would rather have a product that does the prevention up front and saves me the effort of having to wipe someone's workstation."

More Deep Instinct Prevention Platform pros

Cons

"Maybe there is room for improvement in some of the automated remediation. We have other tools in place that AMP feeds into that allow for that to happen, so I look at it as one seamless solution. But if you're buying AMP all by itself, I don't know if it can remove malicious software after the fact or if it requires the other tools that we use to do some of that."

"One of the things that Cisco Secure Endpoint really needs is that it's not just Secure Endpoint, it's a point product, and I think we really need to move into solution-based selling, designing, and architecting. So that we're not worried about putting things on endpoints and selling 'x' amount of endpoints, but to provide a solution that covers all of the remote access and sell them as solutions that cover multiple things."

"The GUI needs improvement, it's not good."

"Due to the complexity of the technology that is used and its advanced threat detection capabilities, it is possible to encounter many delays in operation."

"The initial setup of Cisco Secure Endpoint is complex."

"We have had some problems with updates not playing nice with our environment. This is important, because if there is a new version, we need to test it thoroughly before it goes into production. We cannot just say, "There's a new version. It's not going to give us any problems." With the complexity of the solution using multiple engines for multiple tasks, it can sometimes cause performance issues on our endpoints. Therefore, we need to test it before we deploy. That takes one to three days before we can be certain that the new version plays nice with our environment."

"Its price is okay for us, but it can always be better. There's always room for improvement when it comes to pricing."

"The connector updates are very easily done now, and that's improving. Previously, the connector had an issue, where almost every time it needed to be updated, it required a machine reboot. This was always a bit of an inconvenience and a bug. Because with a lot of software now, you don't need to do that and shouldn't need to be rebooting all the time."

More Cisco Secure Endpoint cons

"The interface on the endpoint could be a little more descriptive and more valuable. It doesn't always tell you the data you need to see. Improvement there would be very helpful."

"I think it's probably the administration, especially the administration platform, which could be improved in the solution. It's clunky and hard to navigate, especially for inexperienced technicians."

"The Management Console is not localized."

"Some features are too resource intensive."

"The Deep Instinct client stops working when you have two servers and you add high availability or Windows Failover Cluster mode. It doesn't work in a clustered mode. I haven't yet had time to go back and talk with their support and get it fixed. It would be good if they can make the installation independent of an actual user. Currently, its installation is dependent on the actual user being logged in. For example, a computer has to be logged in for the installation to happen. If it is not logged in, then on the cloud platform, it is going to show that the client is offline. On the management side of the cloud platform, we would like to have the administrators segregated by logical entities. We have told them that on their cloud management platform, we would like to be able to segregate clients into different logical entities or organizations so that the administrators are able to manage only those entities that are within their designated organization."

"If the tool was able to provide fine-tuning capabilities from the product's end depending on the environment of its user, then it would be a good improvement in the solution."

"There's an issue in the installation process where you can't install it unless you disable the built-in Windows Bitdefender antivirus. So, you have to manually disable Microsoft Bitdefender in order to install Deep Instinct. So, that makes it impossible to do a network rollout unless you manually visit each computer, which is ridiculous."

"When things get done automatically, I would appreciate more logging of what's happening in the background... we should be able to backtrack from the log that gets uploaded to our cloud instance and see, forensically, what the root cause was."

More Deep Instinct Prevention Platform cons

Pricing and Cost Advice

"We had faced some license issues, but it has been improved. At the beginning of the implementation, we faced a lot of licensing issues, but now, we have EA licensing, which gives us an opportunity to grow."

"The price is very fair to the customer."

"In our case, it is a straightforward annual payment through our Enterprise Agreement."

"The price is very good."

"Cisco's pricing is reasonable. We also do not need to opt for niche players, which would have charged us significantly more than Cisco for ecosystem solutions. We are highly satisfied with the pricing structure of Cisco's solutions they are reasonable."

"It is quite cost-effective. I would rate it ten out of ten."

"It is an expensive solution."

"Whenever you are doing the licensing process, I would highly advise to look at what other Cisco solutions you have in your organization, then evaluate if an Enterprise Agreement is the best way to go. In our case, it was the best way to go. Since we had so many other Cisco products, we were able to tie those in. We were actually able to get several Cisco security solutions for less than if we had bought three or four Cisco security solutions independently or ad hoc."

More Cisco Secure Endpoint pricing and cost advice

"Their pricing is very competitive. It is good, fair, and a lot cheaper than what we were doing with Cylance."

"Pricing and licensing are very straightforward. It's two SKUs, one is for the console and the other is for the client."

"There is a need for customers of the product to pay towards the licensing costs of the tool."

"We are a nonprofit. The MSP had provides pretty decent nonprofit rates for us. This was one of the key factors that made us choose Deep Instinct over its competitors who were significantly more expensive."

"If I include the false positive rate and the detection rate in the comparison, Deep Instinct is worth its price."

"There are no additional costs on the price, and our company has a support contract, which bundles in those services anyway."

"One thing about their licensing program that I like is that just one covers the server as well as on the endpoint as well as mobile devices. There is no complexity in calculating how many SKUs I need for mobile, for laptop, for desktop, and for servers. It's very simple and that makes it much easier to budget."

"The pricing is a little bit expensive but we are satisfied with DI's performance."

More Deep Instinct Prevention Platform pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

838,713 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

18%

Government

Financial Services Firm

Manufacturing Company

Computer Software Company

22%

Financial Services Firm

11%

Healthcare Company

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Cisco Secure Endpoint?

The product's initial setup phase was very simple.

See all answers

What is your experience regarding pricing and costs for Cisco Secure Endpoint?

I am not entirely sure about the exact licensing cost. It ranges from 2,000 to 2,500 INR annually.

See all answers

What needs improvement with Cisco Secure Endpoint?

Previously, there were options to uninstall the agent without a password if you had admin access, and this could be improved. It may require a password for uninstalling clients, which would be help...

See all answers

What do you like most about Deep Instinct?

The product offers integration capabilities and is also easy to use.

See all answers

What is your experience regarding pricing and costs for Deep Instinct?

There is a need for customers of the product to pay towards the licensing costs of the tool.

See all answers

What needs improvement with Deep Instinct?

The solution's stability is good. If the tool was able to provide fine-tuning capabilities from the product's end depending on the environment of its user, then it would be a good improvement in th...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cisco Secure Endpoint

Compared 14% of the time

CrowdStrike Falcon vs Cisco Secure Endpoint

Compared 12% of the time

Check Point Harmony Endpoint vs Cisco Secure Endpoint

Compared 6% of the time

Cortex XDR by Palo Alto Networks vs Cisco Secure Endpoint

Compared 5% of the time

SentinelOne Singularity Complete vs Cisco Secure Endpoint

Compared 5% of the time

More Cisco Secure Endpoint Competitors

CrowdStrike Falcon vs Deep Instinct Prevention Platform

Compared 25% of the time

SentinelOne Singularity Complete vs Deep Instinct Prevention Platform

Compared 19% of the time

Microsoft Defender for Endpoint vs Deep Instinct Prevention Platform

Compared 10% of the time

BlackBerry Cylance Cybersecurity vs Deep Instinct Prevention Platform

Compared 7% of the time

Symantec Endpoint Security vs Deep Instinct Prevention Platform

Compared 3% of the time

More Deep Instinct Prevention Platform Competitors

Product Reports

Buyer's Guide

Cisco Secure Endpoint

February 2025

Download Cisco Secure Endpoint product report

Buyer's Guide

Deep Instinct Prevention Platform

February 2025

Deep Instinct Prevention Platform report

Download Deep Instinct Prevention Platform product report

Also Known As

Cisco AMP for Endpoints

No data available

Overview

Cisco Secure Endpoint is a comprehensive endpoint security solution that natively includes open and extensible extended detection and response (XDR) and advanced endpoint detection and response (EDR) capabilities. Secure Endpoint offers relentless breach protection that enables you to be confident, be bold, and be fearless with one of the industry’s most trusted endpoint security solutions. It protects your hybrid workforce, helps you stay resilient, and secures what’s next with simple, comprehensive endpoint security powered by unique insights from 300,000 security customers and deep visibility from the networking leader.

Cisco Secure Endpoint was formerly known as Cisco AMP for Endpoints.

Reviews from Real Users

Cisco Secure Endpoint stands out among its competitors for a number of reasons. Two major ones are its ability to enable developers to easily secure their endpoints with one single operation using its management console and its advanced alerting techniques.

Tim C., an IT manager at Van Der Meer Consulting, writes, "The solution makes it possible to see a threat once and block it everywhere across all endpoints and the entire security platform. It has the ability to block right down to the file and application level across all devices based on policies, such as, blacklisting and whitelisting of software and applications. This is good. Its strength is the ability to identify threats very quickly, then lock them and the network down and block the threats across the organization and all devices, which is what you want. You don't want to be spending time working out how to block something. You want to block something very quickly, letting that flow through to all the devices and avoiding the same scenario on different operating systems."

Wouter H., a technical team lead network & security at Missing Piece BV, notes, "Any alert that we get is an actionable alert. Immediately, there is information that we can just click through, see the point in time, what happened, what caused it, and what automatic actions were taken. We can then choose to take any manual actions, if we want, or start our investigation. We're no longer looking at digging into information or wading through hundreds of incidents. There's a list which says where the status is assigned, e.g., under investigation or investigation finished. That is all in the console. It has taken away a lot of the administration, which we would normally be doing, and integrated it into the console for us."

Cisco

Deep Instinct PREVENTS >99% of UNKNOWN threats like ransomware and zero-days before they land inside your environment – not after. With both an agentless and agent-based approach, we ensure file-based and fileless attacks are prevented. To achieve this, Deep Instinct is pioneering the use of deep learning AI to prevent threats in <20ms, without requiring calls to the cloud for threat intelligence. Our ability to scale to the needs of the enterprise is unprecedented as is our delivery of the industry’s lowest false positive rate of <0.1%.

The Deep Instinct Prevention Platform combines industry-leading static analysis based on the only deep learning framework dedicated to cybersecurity and includes two solutions:

Deep Instinct Prevention for Applications is a flexible, containerized and highly scalable solution, deployed via API or ICAP, to scan million so files per day and prevent malicious files from entering storage environments.

Deep Instinct for Endpoints complements EDR solutions by preventing threats pre-execution, minimizing false positives, improving the productivity of SOC teams, and increasing the efficiency of the security stack.

To learn more, visit: https://www.deepinstinct.com.

Deep Instinct

Sample Customers

Heritage Bank, Mobile County Schools, NHL University, Thunder Bay Regional, Yokogawa Electric, Sam Houston State University, First Financial Bank

Information Not Available

Buyer's Guide

Cisco Secure Endpoint vs. Deep Instinct Prevention Platform

January 2025

Free Report: Cisco Secure Endpoint vs. Deep Instinct Prevention Platform

Find out what your peers are saying about Cisco Secure Endpoint vs. Deep Instinct Prevention Platform and other solutions. Updated: January 2025.

DOWNLOAD NOW

838,713 professionals have used our research since 2012.

See our Cisco Secure Endpoint vs. Deep Instinct Prevention Platform report.

See our list of best Endpoint Protection Platform (EPP) vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.