Try our new research platform with insights from 80,000+ expert users

Cybereason Endpoint Detection & Response vs Palo Alto Networks Cortex XSOAR comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Cybereason Endpoint Detecti...
Average Rating
8.0
Number of Reviews
20
Ranking in other categories
Endpoint Protection Platform (EPP) (45th), Endpoint Detection and Response (EDR) (34th)
Palo Alto Networks Cortex X...
Average Rating
8.4
Number of Reviews
44
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (2nd), SOC as a Service (2nd)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Cybereason Endpoint Detection & Response is designed for Endpoint Detection and Response (EDR) and holds a mindshare of 1.3%, down 1.5% compared to last year.
Palo Alto Networks Cortex XSOAR, on the other hand, focuses on Security Orchestration Automation and Response (SOAR), holds 13.1% mindshare, down 15.0% since last year.
Endpoint Detection and Response (EDR)
Security Orchestration Automation and Response (SOAR)
 

Featured Reviews

AtulChaurasia - PeerSpot reviewer
Aug 28, 2023
Scalable platform with intuitive features for detecting malicious files
We use Cybereason Endpoint Detection & Response to scan and detect unusual processes and malicious files on the endpoint The product's threat-hunting feature is very intuitive and easy to use as it is GUI-based. We need to know the specific fields we want to scan. It gives the entire report of…
NikhilSharma2 - PeerSpot reviewer
Aug 23, 2024
Ability to multiple playbooks to fetch data from multiple firewalls and utomated several tasks, including vulnerability scans and SOCL (Security Orchestration, Automation
Recently, they started implementing microservices in XSOAR, which has improved quality and addressed previous issues. However, they should focus more on licensing costs. The user licensing fees are quite high. For example, I received a quote for XSOAR, and it was $12,000 per user per year. If you have a SOC team of 30 members/analysts, you're looking at a substantial expense. They should consider reducing these costs since this high pricing seems to be more about profit. So, there is room for improvement in the pricing. Moreover, the reporting and dashboard features are decent but could be improved. The user interface (UI) is quite heavy and takes time to load, which is a major drawback.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"They do a very good job of providing multi-stage visualizations of malicious operations that immediately show all attack details across all devices and users. Since it is MalOp-centric model, you can see if there has been a similar operation across multiple machines. If it is the same thing appearing on multiple machines, you see all the machines and users affected in one screen."
"The initial setup process is straightforward."
"The initial setup was straightforward."
"Immediately we can pick up the computers in the network if any malicious operation that is triggered."
"The solution is efficient."
"I haven't had any issues with the solution. Stability-wise, I rate the solution a ten out of ten."
"The dashboard is very good and you can consider it as an interactive UI."
"What I like most about Cybereason Endpoint Detection & Response is the support because the support is good. The solution is also easy to use, and it has a dashboard. Everything is good, and there's no problem with it."
"We use the solution to automate our SIEM tools and incidents."
"The product can automate security tasks."
"Palo Alto is easy to use."
"The most valuable features of Palo Alto Networks Cortex XSOAR are the remote controller from the workstation that can execute commands and isolate the systems outside of the network. Only the system with an internet connection can execute the task because the main console is in the cloud."
"The solution provides threat intelligence with EDR."
"The most valuable features are simplicity and ease of integration."
"The solution is very reliable."
"The most valuable features are the orchestration because of the way in which it coordinates the loss from all the devices and it provides us with a high-level overview of the critical log information."
 

Cons

"It initially took some time to deploy."
"Reporting could be a bit more granular so that we had the ability to check regions and countries. I just noticed that, for instance, if I look at our servers, it's either "contained" or it's "not contained". I don't have the option, for instance, to look at countries. It only allows me to look at users as one big group."
"There is room for improvement in the product features related to device control, particularly USB management."
"It should be more stable, and the sensor needs improvement in terms of connectivity."
"I feel that the product lacks reporting features and needs improvement."
"The reporting feature needs improvement."
"What needs to improve in Cybereason Endpoint Detection & Response and what I'd like to see in its next release is a centralized dashboard that allows you to view what is there, similar to what's on Symantec Endpoint Protection Manager: a beautiful display and reporting. Cybereason Endpoint Detection & Response has to start with the compliance, the homepage, etc. Everything should be there and should be customizable. The options should be there. The tool is very good currently, but visibility for IT administrators is lacking and needs to be worked on."
"While the product is very good, there are still some areas for improvement. The initial triage area could be a bit simpler. They get into the weeds real fast; it gets very detailed very fast. I am still looking for an easier triage layer on top with the ability to dig deeper."
"There should be an on-premise version available for customers to have different choices."
"There is room for improvement in support. The response time could be faster."
"The configuration of the solution could improve it is difficult."
"It's only one cloud right now. It might be helpful for some companies to have an on-premies option."
"The solution's technical support could be better."
"It doesn't offer automatic internet reports out of the box."
"Implementing this solution requires a lot of involvement from the vendor and it should be made easier for the partners."
"The solution is very expensive."
 

Pricing and Cost Advice

"In terms of pricing, it's a good solution."
"Though it is not the cheapest solution but it fits our budget. We pay an annual licensing fee."
"The pricing is manageable."
"I had to go through a third-party to purchase it, which I wasn't really pleased about."
"On a scale of one to ten, where one is cheap and ten is expensive, I rate the pricing an eight."
"I do not have experience with the licensing of the product."
"In terms of cost, this is a good choice for our needs."
"This product is somewhat expensive and should be cheaper."
"Palo Alto offers significant discounts to customers who purchase the products repeatedly."
"The price of Palo Alto Networks Cortex XSOAR is expensive."
"The price of Palo Alto Networks Cortex XSOAR could be reduced. We are always looking for a discount. There is an annual license needed to use this solution."
"The solution is expensive."
"The price of Palo Alto Networks Cortex XSOAR is comparable to other solutions in the market."
"My company did not make any payments towards the licensing costs attached to the product since we were only using its pilot version."
"When I first looked at Demisto, it had a price tag of $250,000 but when we finally purchased it, it was $345,000."
"It is expensive."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
814,649 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
19%
Financial Services Firm
8%
Manufacturing Company
8%
Government
6%
Financial Services Firm
14%
Computer Software Company
13%
Government
10%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your experience regarding pricing and costs for Cybereason Endpoint Detection & Response?
Comparison with other products showed it be cheaper than some larger competitors. Set up cost for us were cheaper as we already had users experienced with the product in other business units. Initi...
What is your primary use case for Cybereason Endpoint Detection & Response?
We use the product for enhancing security postures by leveraging behavioral analytics and security engines effectively minimizing false positives and detecting threats.
What is your experience regarding pricing and costs for Palo Alto Networks Cortex XSOAR?
I do not know about the pricing as it was handled by the salespeople.
What needs improvement with Palo Alto Networks Cortex XSOAR?
Creating complex playbooks using coding languages, such as Python, could be easier. Sometimes the process becomes tedious and requires manual tasks.
 

Also Known As

Cybereason EDR, Cybereason Deep Detect & Respond
Demisto Enterprise, Cortex XSOAR, Demisto
 

Learn More

Video not available
 

Overview

 

Sample Customers

Lockheed Martin, Spark Capital, DocuSign, Softbank Capital
Cellcom Israel, Blue Cross and Blue Shield of Kansas City, esri, Cylance, Flatiron Health, Veeva, ADT Cybersecurity
Find out what your peers are saying about CrowdStrike, Microsoft, SentinelOne and others in Endpoint Detection and Response (EDR). Updated: November 2024.
814,649 professionals have used our research since 2012.