Cisco Secure Endpoint vs Tanium comparison

Read 16 Tanium reviews

6,211 Views
4,378 Comparison Views

73% willing to recommend

Cisco Secure Endpoint

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Tanium and Cisco Secure Endpoint are prominent contenders in the endpoint security market. Cisco Secure Endpoint's comprehensive features make it a preferred choice for many users.

Features: Tanium is known for its scalability, real-time data collection to enhance visibility and control, and robust endpoint management capabilities. Cisco Secure Endpoint features advanced threat detection, seamless integration with Cisco’s security ecosystem, and a user-friendly experience.

Room for Improvement: Tanium users often mention the steep learning curve, need for better third-party tool integration, and usability challenges. Cisco Secure Endpoint users suggest improvements in reporting features, system performance, and customization options for alerts.

Ease of Deployment and Customer Service: Tanium requires a more elaborate setup process, which may be time-consuming for large-scale deployments. Cisco Secure Endpoint offers a quicker, straightforward deployment experience, often praised for its efficiency. Both products receive positive feedback on customer support, with Cisco Secure Endpoint’s support highlighted as more responsive.

Pricing and ROI: Tanium’s pricing model is on the higher end, impacting smaller organizations, but delivering significant ROI with its robust functionalities. Cisco Secure Endpoint is seen as reasonably priced, offering balanced value in terms of cost and ROI.

To learn more, read our detailed Cisco Secure Endpoint vs. Tanium Report (Updated: February 2025).

Cisco Secure Endpoint vs. Tanium

February 2025

Download the complete report

Helped 844,944 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cisco Secure Endpoint

Ranking in Endpoint Protection Platform (EPP)

13th

Ranking in Endpoint Detection and Response (EDR)

12th

Average Rating

8.6

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Cisco Security Portfolio (5th)

Tanium

Ranking in Endpoint Protection Platform (EPP)

37th

Ranking in Endpoint Detection and Response (EDR)

26th

Average Rating

7.4

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Server Monitoring (10th), Vulnerability Management (22nd)

Mindshare comparison

As of April 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of Cisco Secure Endpoint is 1.5%, down from 1.9% compared to the previous year. The mindshare of Tanium is 2.5%, up from 2.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP)

Featured Reviews

Mark Broughton

Level 2 tech at a tech services company with 11-50 employees

Tighter integration with Umbrella and Firepower gave us eye-opening information

We were using a third-party help desk. One of the ways that they were fixing problems was to delete the client and then add the client back if there was an issue where the client had stopped communicating. Any improvement in the client communicating back to the server would be good, particularly for machines that are offline for a couple of weeks. A lot of our guys were working on a rotation where the machine might be offline for that long. They were also terrible about rebooting their machines, so those network connections didn't necessarily get refreshed. So, anything that could improve that communication would be good. Also, an easier way to do deduplication of machines, or be alerted to the fact that there's more than one instance of a machine, would be useful. If you could say, "Okay, we've got these two machines. This one says it's not reporting and this one says it's been reporting. Obviously, somebody did a reinstall," it would help. That way you could get a more accurate device count, so you're not having an inflated number. Not that Cisco was going to come down on you and say, "Oh, you're using too many licenses," right away. But to have a much more accurate license usage count by being able to better dedupe the records would be good. I also sent over a couple of other ideas to our technical rep. A lot of that had to do with the reporting options. It would be really nice to be able to do a lot more in the reporting. You can't really drill down into the reports that are there. The reporting and the need for the documentation to be updated and current would be my two biggest areas of complaint. Also, there was one section when I was playing with the automation where it was asking for the endpoint type rather than the machine name. If I could have just put in the machine name, that would have been great. So there are some opportunities, when it comes to searching, to have more options. If I wanted to search, for example, by a Mac address because, for some reason, I thought there was a duplication and I didn't have the machine name, how could I pull it up with the Mac address? When you're getting to that level, you're really starting to get into the ticky tacky. I would definitely put the reporting and documentation way ahead of that.

Read full review

Mo Vermeiren

Cybersecurity Business & Technology Consultant at Capgemini

Is able to make several campaigns work in parallel, but the user interface needs improvement

It's mainly used by the cybersecurity team for Windows patching and deployment of some software solutions I like the fact that you can create patching campaigns depending on the area of your network that you want to address first. I like the ability it has to make several campaigns that work in…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Integration is a key selling factor for Cisco security products. We have a Cisco Enterprise Agreement with access to Cisco Email Security, Cisco Firepower, Cisco Stealthwatch, Cisco Talos, Cisco Threat Grid, Cisco Umbrella, and also third-party solutions. This is key to our security and maximizing operations. Because we do have the Email Security appliance and it is integrated with Threat Response, we have everything tied together. Additionally, we are using the Cisco SecureX platform, as we were a beta test for that new solution. With SecureX, we are able to pull all those applications into one pane for visibility and maintenance. This greatly maximizes our security operations."

"Cisco has definitely improved our organization a lot. In terms of business, our company feels safer. We actually switched from legacy signature-based solutions to threat intelligence-based and machine learning-based solutions, which is Cisco Secure. This has improved our security significantly, from 10% of signature-based technology security to 99.9% of the current one which we are running. We were happy."

"The most valuable feature is signature-based malware detection."

"The visibility and insight this solution gives you into threats is pretty granular. It has constant monitoring. You can get onto the device trajectory to look at a threat, but you can also see what happened prior to the threat. You can see what happened after the threat. You can see what other applications were incorporated into the execution of the threat. For example, you have the event, but you see that the event was launched by Google Chrome, which was launched by something else. Then, after the event, something else was launched by whatever the threat was. Therefore, it gives you great detail, a timeline, and continuity of events leading up to whatever the incident is, and then, after. This helps you understand and nail down what the threat is and how to fix it."

"The product's initial setup phase was very simple."

"The most valuable feature at this moment is that Cisco AMP or Cisco Secure Endpoint solution is delivering a lot of things, and I always say to a lot of customers that if we didn't have Cisco AMP, we probably would have had ransomware somewhere. So, it's protecting us very well from a lot of hackers, malware, and especially ransomware."

"Real-time threat prevention using sandboxing, file trajectory, and retrospective security."

"appreciate the File Trajectory feature, as it's excellent for an analyst or mobile analyst. I can track everything that happens on our server from my PC or device. Integration with SecureX is a welcome feature because it connects Cisco's integrated security portfolio with our complete infrastructure. Sandboxing is helpful, and integration with the Cisco environment is excellent as we use many of their products, and that's very valuable for us."

More Cisco Secure Endpoint pros

"Tanium's most valuable features are patch management, inventory, and distribution software."

"Tanium's most valuable feature is its instant discovery aspect."

"Threat hunting is a very good feature on Tanium. We have just started using it and have not used it extensively."

"For incident response tasks, all these tasks can get done in minutes with minimal disruption to the end-user."

"Tanium’s linear-chain architecture is valuable."

"When I push a quick update, it's done right away, and I can rescan immediately to confirm completion within minutes."

"The product is granular and can build complex roles compared to other EDR vendors."

"I would say Tanium is the best tool for vulnerability management."

More Tanium pros

Cons

"The product does not provide options like tunnel creation or virtual appliances."

"...the greatest value of all, would be to make the security into a single pane of glass. Whilst these products are largely integrated from a Talos perspective, they're not integrated from a portal perspective. For example, we have to look at an Umbrella portal and a separate AMP portal. We also have to look at a separate portal for the firewalls. If I could wave a magic wand and have one thing, I would put all the Cisco products into one, simple management portal."

"We have had some problems with updates not playing nice with our environment. This is important, because if there is a new version, we need to test it thoroughly before it goes into production. We cannot just say, "There's a new version. It's not going to give us any problems." With the complexity of the solution using multiple engines for multiple tasks, it can sometimes cause performance issues on our endpoints. Therefore, we need to test it before we deploy. That takes one to three days before we can be certain that the new version plays nice with our environment."

"Cisco Meraki could benefit from AI assistance or intelligent assistance features. Compared to competitors like Juniper, Cisco Meraki currently lacks a digital network assistant, which is an area Cisco is reportedly working on."

"One of the things that Cisco Secure Endpoint really needs is that it's not just Secure Endpoint, it's a point product, and I think we really need to move into solution-based selling, designing, and architecting. So that we're not worried about putting things on endpoints and selling 'x' amount of endpoints, but to provide a solution that covers all of the remote access and sell them as solutions that cover multiple things."

"In terms of the user experience, if the UX design could be much simpler [that would improve things]... if they could make it more intuitive for someone who is not an engineer so that they still can read what's going on in their webpage and understand, that would be something."

"Integration and dashboard are areas with certain shortcomings in Cisco Secure Endpoint."

"This product has issues with the number of false positives that it reports."

More Cisco Secure Endpoint cons

"The performance could improve in future releases. We have had performance issues in specialized web environments, but overall I think the problems are less than 2% of the computer systems being used."

"I would like to have more integrations and custom plugins to input. Integration is always a big deal in a lot of different environments."

"The solution can give a lot of false positives."

"They could improve the UI."

"The solution needs to improve the reporting and tracking capabilities."

"Tanium’s scalability could be improved."

"The reporting could be improved."

"Tanium's limitations should be improved because although it is a great tool, it is limited to only a few classes during a session."

More Tanium cons

Pricing and Cost Advice

"It can always be cheaper."

"Pricing can be more expensive than similar software that does less functionality, but not recognized by customers."

"Whenever you are doing the licensing process, I would highly advise to look at what other Cisco solutions you have in your organization, then evaluate if an Enterprise Agreement is the best way to go. In our case, it was the best way to go. Since we had so many other Cisco products, we were able to tie those in. We were actually able to get several Cisco security solutions for less than if we had bought three or four Cisco security solutions independently or ad hoc."

"It is an expensive solution."

"Licensing fees are on a yearly basis and I am happy with the pricing."

"Our company was very happy with the price of Cisco AMP. It was about a third of what we were paying for System Center Endpoint Protection."

"It is quite cost-effective. I would rate it ten out of ten."

"The pricing and licensing are reasonable. The cost of AMP for Endpoints is inline with all the other software that has a monthly endpoint cost. It might be a little bit higher than other antivirus type products, but we're only talking about a dollar a month per user. I don't see that cost as being an issue if it's going to give us the confidence and security that we're looking for. We have had a lot of success and happiness with what we're using, so there's no point in changing."

More Cisco Secure Endpoint pricing and cost advice

"The product's pricing differs from region to region depending on negotiations and the number of endpoints."

"The solution is expensive but it's a good investment."

"There is an annual license required to use this solution."

"It is higher than some competitors in the market."

"The solution offers value for money."

"Tanium is a more expensive solution in Latin America than some of the competitors, such as BigFix."

"It's an expensive solution. It would be nice if the cost were lower."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

844,944 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

18%

Government

Financial Services Firm

Manufacturing Company

Financial Services Firm

17%

Government

13%

Computer Software Company

10%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Cisco Secure Endpoint?

The product's initial setup phase was very simple.

What is your experience regarding pricing and costs for Cisco Secure Endpoint?

I am not entirely sure about the exact licensing cost. It ranges from 2,000 to 2,500 INR annually.

What needs improvement with Cisco Secure Endpoint?

Previously, there were options to uninstall the agent without a password if you had admin access, and this could be improved. It may require a password for uninstalling clients, which would be help...

What do you like most about Tanium?

Tanium’s linear-chain architecture is valuable.

What needs improvement with Tanium?

When working with Tanium, there are some older devices that haven't been patched for a long time, and certain patches are not included in Tanium. I have to search outside to download patches, creat...

What is your primary use case for Tanium?

We primarily use Tanium for patching, focusing on vulnerabilities. Our major goal with Tanium is to patch based on vulnerabilities detected by our other vulnerability tools.

Microsoft Defender for Endpoint vs Cisco Secure Endpoint

Comparisons

Compared 15% of the time

CrowdStrike Falcon vs Cisco Secure Endpoint

Compared 13% of the time

Cortex XDR by Palo Alto Networks vs Cisco Secure Endpoint

Compared 6% of the time

SentinelOne Singularity Complete vs Cisco Secure Endpoint

Compared 5% of the time

Check Point Harmony Endpoint vs Cisco Secure Endpoint

Compared 4% of the time

More Cisco Secure Endpoint Competitors

CrowdStrike Falcon vs Tanium

Compared 16% of the time

Microsoft Defender for Endpoint vs Tanium

Compared 9% of the time

Microsoft Configuration Manager vs Tanium

Compared 9% of the time

ServiceNow Discovery vs Tanium

Compared 6% of the time

BigFix vs Tanium

Compared 6% of the time

More Tanium Competitors

Product Reports

Download Cisco Secure Endpoint product report

Cisco Secure Endpoint

March 2025

Download Tanium product report

March 2025

Also Known As

Cisco AMP for Endpoints

No data available

Overview

Cisco Secure Endpoint is a comprehensive endpoint security solution that natively includes open and extensible extended detection and response (XDR) and advanced endpoint detection and response (EDR) capabilities. Secure Endpoint offers relentless breach protection that enables you to be confident, be bold, and be fearless with one of the industry’s most trusted endpoint security solutions. It protects your hybrid workforce, helps you stay resilient, and secures what’s next with simple, comprehensive endpoint security powered by unique insights from 300,000 security customers and deep visibility from the networking leader.

Cisco Secure Endpoint was formerly known as Cisco AMP for Endpoints.

Reviews from Real Users

Cisco Secure Endpoint stands out among its competitors for a number of reasons. Two major ones are its ability to enable developers to easily secure their endpoints with one single operation using its management console and its advanced alerting techniques.

Tim C., an IT manager at Van Der Meer Consulting, writes, "The solution makes it possible to see a threat once and block it everywhere across all endpoints and the entire security platform. It has the ability to block right down to the file and application level across all devices based on policies, such as, blacklisting and whitelisting of software and applications. This is good. Its strength is the ability to identify threats very quickly, then lock them and the network down and block the threats across the organization and all devices, which is what you want. You don't want to be spending time working out how to block something. You want to block something very quickly, letting that flow through to all the devices and avoiding the same scenario on different operating systems."

Wouter H., a technical team lead network & security at Missing Piece BV, notes, "Any alert that we get is an actionable alert. Immediately, there is information that we can just click through, see the point in time, what happened, what caused it, and what automatic actions were taken. We can then choose to take any manual actions, if we want, or start our investigation. We're no longer looking at digging into information or wading through hundreds of incidents. There's a list which says where the status is assigned, e.g., under investigation or investigation finished. That is all in the console. It has taken away a lot of the administration, which we would normally be doing, and integrated it into the console for us."

Cisco

Tanium Endpoint Platform reduces security risk, improves agility & increases efficiency, a fundamentally new approach to endpoint security's threat detection, indicent response, vulnerability assessment and configuration compliance & with management's software distribution, asset utilization, asset inventory and patch management.

Sample Customers

Heritage Bank, Mobile County Schools, NHL University, Thunder Bay Regional, Yokogawa Electric, Sam Houston State University, First Financial Bank

JPMorgan Chase, eBay, Amazon, US Bank, MetLife, pwc, Cerner, Delphi, MGM Grand, New York Life