Datto Endpoint Detection and Response (EDR) vs Microsoft Defender XDR comparison

Datto Endpoint Detection and Response (EDR) vs. Microsoft Defender XDR

Download the complete report

Helped 892,487 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of May 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of Datto Endpoint Detection and Response (EDR) is 1.3%, down from 2.2% compared to the previous year. The mindshare of Microsoft Defender XDR is 2.6%, down from 2.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.4%
Microsoft Defender XDR	2.6%
Datto Endpoint Detection and Response (EDR)	1.3%
Other	92.7%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

reviewer2406663

Director at a computer software company with 11-50 employees

Effective risk response, easy deployment, and enhanced security

They use Datto EDR as part of the solutions that we supply Datto EDR has helped reduce overall security incident costs by fifteen percent. The ease of deployment has been good, and the responsiveness of the application to risks has been quite effective. The inclusion of web filtering would be…

Read full review

Shivam Dhang

IT Infrastructure & Cloud Manager at Softcell Technologies Limited

Unified security view has reduced incident response time and improves cross-domain threat hunting

From a customer perspective, given that we are using Microsoft Defender XDR at a company with multiple cloud environments, I would like to see more intelligent alert tuning. Sometimes we still get noise, so better prioritization would help. I also wish the advanced hunting interface was more streamlined, especially for large-scale queries. Finally, deeper integrations with third-party tools would help us get a more complete picture across our stack. Onboarding can be complex if Microsoft 365 identity and endpoints are not properly aligned. Initial setup requires good planning. Overall, the platform is strong, but onboarding should be planned according to your specific needs.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Cortex XDR by Palo Alto Networks saves time in various ways, although the user interface is fairly standard."

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."

"Palo Alto is the core of the security infrastructure in the environment."

"Its ability to react to cyber data attacks is awesome."

"If any application performs suspicious activities, such as changing registries or modifying other applications, Cortex XDR detects and blocks the entire application."

"I've found the solution to be highly scalable for enterprises."

"We use Cortex XDR by Palo Alto Networks for its ability to detect based on behavior rather than simple virus scan to prevent malicious activities."

"There are a lot of lead solutions in this space, however, Palo Alto is number one."

More Cortex XDR by Palo Alto Networks pros

"The insight that the solution provides is the most valuable aspect. The security scanning they do is excellent."

"The insight that the solution provides is the most valuable aspect."

"Datto Endpoint Detection and Response is a perfect product for endpoint security."

"The most valuable feature of Datto EDR is the visibility of the endpoints."

"The ease of deployment has been good."

"The EDR features are valuable. By getting the EDR features, we have more control over the device. We have information about events in real-time and more protection against zero-day threats and zero-day vulnerabilities. We can monitor every event or action that a device is going through. We can get an idea if it is something malicious or if we have to take any actions."

"Microsoft 365 Defender is a stable solution."

"We use Microsoft 365 Defender to help secure threats of the Office package, such as Word, Excel, and PowerPoint, and additionally, it can fix issues."

"The email protection feature is the most valuable because our risks primarily lie there, and it seems to be the most popular target."

"The feature I find most valuable is Defender for Endpoint."

"Vulnerability assessment and just-in-time access are some valuable features of Defender for server plans."

"Instead of using three or four tools for security, we can use one."

"The native capabilities are quite good as it slips in seamlessly as part of our integration and gives a lot of flexibility in terms of configuration and customization as per the business requirements."

More Microsoft Defender XDR pros

Cons

"There's an overall lack of features."

"Cortex XDR could improve its sales support team, including better commission structures and referral programs."

"They are charging for Network Traffic Analyzer (NTA) services, so if the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better."

"It is not easy to sell Cortex XDR, not because it isn't a good tool."

"I would like to see improvement in the tool's user interface, particularly in the area of managing alerts and providing more reporting capabilities."

"The encryption is not up to the mark."

"They've been having some issues with updating their endpoint agents, and it has been quite frustrating."

"It is not easy to sell Cortex XDR, not because it isn't a good tool. Its marketing needs to be improved."

More Cortex XDR by Palo Alto Networks cons

"The inclusion of web filtering would be good."

"The solution should allow the automation of playbooks."

"The deployment of the solution right now is terrible. We find it to be very bad. It could be improved enormously."

"The solution could improve by having more deployment methods."

"The deployment of the solution right now is terrible. We find it to be very bad."

"For Microsoft Defender XDR, there is currently no ability to reset passwords for on-premises accounts, which is a key challenge."

"The documentation on their website is somewhat outdated and doesn't show properly. I wanted to try a query in Microsoft Defender 365. When I opened the related documentation from the security blog on the Microsoft website, the figures were not showing. It was difficult to understand the article without having the figures. The figures were there in the article, but they were not getting loaded, which made the article obsolete."

"The mobile app support for Android and iOS is difficult and needs improvement."

"Stability could be improved by avoiding frequent changes to the interface."

"It would be beneficial to reduce the number of clicks required to navigate between blades, as the current navigation and breadcrumb system can be a bit confusing."

"It would be beneficial to have a more seamless experience with everything consolidated in one place, particularly when dealing with aspects related to the Exchange console."

"The technical support from Microsoft Defender XDR has been disappointingly slow, to the point that I am considering not renewing my unified support contract."

"The logs could be better."

More Microsoft Defender XDR cons

Pricing and Cost Advice

"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."

"The price is on the higher side, but it's okay."

"The price was fine."

"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."

"Cortex XDR's pricing is ok."

"The tool's price is moderate."

"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."

"The price of the solution is high for the license and in general."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"Datto Endpoint Detection and Response is not an expensive solution."

"There is an annual license to use this solution. The price of the solution can be expensive depending on the company."

"Microsoft purposely makes its license combinations complex and includes combinations like Microsoft 365 E3 and Microsoft 365 E5, Office 365 E3, Office 365 E5, and Office 365 E1, so you get confused. Microsoft tries to sell you a bundle of a lot of things together."

"Defender plan 1 is tenant-wise, and Defender plan 2 is per-user, which makes it more expensive. To have certain features, you would need to purchase the E5 license. For all of the capabilities that the tool provides, the price, though it can be high, is fair."

"I believe that the pricing of the licensing is fair."

"Understanding the subscription model has been a bit challenging, as every feature or requirement comes with an additional cost."

"Purchasing Microsoft Defender XDR as part of a Microsoft 365 bundle can be cost-effective, but acquiring it as a standalone product may be more expensive."

"Microsoft 365 Defender offers competitive pricing."

"It is fairly priced because we get complete integrated services with the E5 license."

"The functionality is fantastic, but for medium and small-sized companies it's overpriced. It would be better if it were a little bit cheaper."

More Microsoft Defender XDR pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

892,487 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

12%

Financial Services Firm

12%

Comms Service Provider

Manufacturing Company

Comms Service Provider

13%

Computer Software Company

12%

Manufacturing Company

Retailer

Computer Software Company

11%

Financial Services Firm

Manufacturing Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	45
Midsize Enterprise	20
Large Enterprise	48

No data available

By reviewers
Company Size	Count
Small Business	46
Midsize Enterprise	27
Large Enterprise	40

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What is your experience regarding pricing and costs for Infocyte HUNT?

The price is quite low. On a scale of one to ten, I would rate it a four, meaning it is quite cheap.

What needs improvement with Infocyte HUNT?

The inclusion of web filtering would be good.

What is your primary use case for Infocyte HUNT?

They use Datto EDR as part of the solutions that we supply.

What do you like most about Microsoft 365 Defender?

Microsoft Defender XDR provides strong identity protection with comprehensive insights into risky user behavior and p...

What is your experience regarding pricing and costs for Microsoft 365 Defender?

My experience with the pricing, setup costs, and licensing of Microsoft Defender XDR is that we are on an E5 license,...

What needs improvement with Microsoft 365 Defender?

From my perspective, Microsoft Defender XDR can be improved with better visibility in certain areas where I can trigg...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 9% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

TrendAI Vision One vs Cortex XDR by Palo Alto Networks

Compared 2% of the time

More Cortex XDR by Palo Alto Networks Competitors

SentinelOne Singularity Endpoint vs Datto Endpoint Detection and Response (EDR)

Compared 14% of the time

CrowdStrike Falcon vs Datto Endpoint Detection and Response (EDR)

Compared 11% of the time

Microsoft Defender for Endpoint vs Datto Endpoint Detection and Response (EDR)

Compared 8% of the time

Intercept X Endpoint vs Datto Endpoint Detection and Response (EDR)

Compared 5% of the time

Check Point Harmony Endpoint vs Datto Endpoint Detection and Response (EDR)

Compared 2% of the time

More Datto Endpoint Detection and Response (EDR) Competitors

CrowdStrike Falcon vs Microsoft Defender XDR

Compared 10% of the time

Wazuh vs Microsoft Defender XDR

Compared 6% of the time

SentinelOne Singularity Endpoint vs Microsoft Defender XDR

Compared 4% of the time

Microsoft Defender for Cloud vs Microsoft Defender XDR

Compared 4% of the time

Microsoft Sentinel vs Microsoft Defender XDR

Compared 2% of the time

More Microsoft Defender XDR Competitors

Product Reports

Cortex XDR by Palo Alto Networks

Download Cortex XDR by Palo Alto Networks product report

Endpoint Detection and Response (EDR)

Download Datto Endpoint Detection and Response (EDR) product report

Datto Endpoint Detection and Response (EDR) report

Microsoft Defender XDR

Download Microsoft Defender XDR product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Infocyte HUNT

Microsoft 365 Defender, Microsoft Threat Protection, MS 365 Defender

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Datto Endpoint Detection and Response (EDR) offers comprehensive cybersecurity capabilities, specifically designed to protect endpoints from potential threats. With features like real-time monitoring and automated threat response, it provides essential protection for IT infrastructures.

Datto EDR delivers an integrated approach to endpoint security, focusing on detecting threats in real time and providing automated response mechanisms. It efficiently safeguards systems by leveraging advanced threat intelligence and analytics. This EDR solution is instrumental for IT professionals seeking robust endpoint protection and seamless integration with existing systems, promoting a proactive security posture.

What Are the Key Features of Datto Endpoint Detection and Response?

Real-Time Monitoring: Continuously checks endpoints for suspicious activity.
Automated Threat Response: Instantly reacts to identified threats to minimize risk.
Threat Intelligence: Utilizes advanced data to preemptively manage threats.
Seamless Integration: Easily connects with current IT environments for smooth operation.

What Benefits and ROI Should Be Expected?

Enhanced Security: Protects against threats efficiently, reducing potential breach costs.
Time Savings: Automation reduces manual intervention, saving valuable time.
Cost-Effective: Lower overhead by minimizing security breaches and recovery efforts.
Improved Resilience: Strengthens defenses, ensuring business continuity.

Datto EDR implementation is prevalent in sectors like healthcare and finance, where security and compliance are critical. Its ability to integrate with industry-specific IT systems makes it a preferred choice to safeguard sensitive data and maintain operational integrity.

datto

Microsoft Defender XDR is a comprehensive security solution designed to protect against threats in the Microsoft 365 environment.

It offers robust security measures, comprehensive threat detection capabilities, and an efficient incident response system. With seamless integration with other Microsoft products and a user-friendly interface, it simplifies security management tasks.

Users have found it effective in detecting and preventing various types of attacks, such as phishing attempts, malware infections, and data breaches.

Watch the Microsoft demo video here: Microsoft Defender XDR demo video.

Microsoft

Sample Customers

CBI Health Group, University Honda, VakifBank

Check Point Software, PwC, Grant Thornton, AT&T, DHL, U.S. Department of Defense

Accenture, Deloitte, ExxonMobil, General Electric, IBM, Johnson & Johnson and many others.

Datto Endpoint Detection and Response (EDR) vs. Microsoft Defender XDR