Deep Instinct Prevention Platform vs Morphisec comparison

Deep Instinct and Morphisec are both solutions in the Endpoint Protection Platform (EPP) category. Deep Instinct is ranked #31 with an average rating of 10.0, while Morphisec is ranked #48. Deep Instinct holds a 1.0% mindshare in EPP, compared to Morphisec’s 0.7% mindshare. Additionally, 100% of Deep Instinct users are willing to recommend the solution, compared to 100% of Morphisec users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Deep Instinct Prevention Platform and Morphisec are advanced cybersecurity solutions. Based on user feedback, Morphisec has the upper hand with superior features, making it worth the price.

Features: Deep Instinct Prevention Platform has robust threat detection, deep learning for proactive protection, and strong pricing and support. Morphisec is lightweight, offers effective memory protection, and has refined, user-friendly features.

Room for Improvement: Deep Instinct Prevention Platform needs better integration with other security tools, improved reporting capabilities, and more deployment flexibility. Morphisec users suggest better detection response rates, expanded threat intelligence features, and enhanced scalability.

Ease of Deployment and Customer Service: Deep Instinct Prevention Platform offers straightforward deployment but sometimes slow customer service. Morphisec provides quick, flexible deployment and reliable customer service.

Pricing and ROI: Deep Instinct Prevention Platform is cost-effective with good ROI. Morphisec, although pricier, provides excellent ROI through its advanced features and comprehensive protection capabilities.

To learn more, read our detailed Deep Instinct Prevention Platform vs. Morphisec Report (Updated: April 2026).

Buyer's Guide

Deep Instinct Prevention Platform vs. Morphisec

April 2026

Download the complete report

Helped 886,906 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of April 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.6%, down from 4.0% compared to the previous year. The mindshare of Deep Instinct Prevention Platform is 1.0%, up from 0.7% compared to the previous year. The mindshare of Morphisec is 0.7%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.6%
Deep Instinct Prevention Platform	1.0%
Morphisec	0.7%
Other	94.7%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Tom Foal

CTO at Klaatu IT Security Ltd

Stops ransomware before it executes and reduces response time for the team

A potential area of improvement for Deep Instinct Prevention Platform is their focus on file uploads and large data storage, backups, and other related areas. It is difficult to think of what they could improve, but low information provided by the system when it detects something is one area, particularly in scripting. Deep Instinct Prevention Platform detects malicious scripts but it needs better measures, perhaps signing scripts, so we can be sure that a script is created by a client, not by some malware. It is really about helping us triage incidents effectively, so a bit more help with the analysis of incidents, particularly what the Deep Instinct Prevention Platform agent has discovered, would be beneficial. We need to know what it has spotted that makes it suspect malware.

Read full review

Rick Schibler

VP of Information Technology at Kentucky Trailer

Offers in-memory protection at a lower price than competitors

Morphisec's in-memory protection is probably the most valuable feature because it stops malicious activity from occurring. If something tries to install or act as a sleeper agent, Morphisec will detect and stop it. Morphisec's Moving Target Defense is critical to hardening our attack surface. If it detects something, it indicates whether it's valid. That means you've got a breach requiring investigation. It detects anomalies but doesn't necessarily point to what caused them. You still need to do that work. The solution is reasonably easy to administer. They made some changes last year, adding a cloud-based monitoring solution that makes deploying and monitoring our endpoints easy.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The ability to kind of stitch everything together and see the actual complete picture is very useful. I guess you'd call it a playbook. Some people call it the forensics analysis of what was happening on particular endpoints when they detected some malicious behavior, and what transpired before that to cause that. It is also very user friendly. The way they have done everything and integrated all the solutions that they've purchased over the years to make it a very seamless, effective product is very good. One thing about Palo Alto is that they take the products or services that they purchase and make them seamless for the end user as compared to some companies that purchase other companies and then just kind of have their products off to the side or keep different interfaces. Palo Alto doesn't do that."

"Monitoring is most valuable."

"Previously, we had to install endpoint protection per machine and then scan and update, but Cortex XDR basically does that centrally and predictably, so we have more time to do day-to-day work rather than spend time chasing those endpoints."

"The scalability of Cortex XDR by Palo Alto Networks is very good."

"If any application performs suspicious activities, such as changing registries or modifying other applications, Cortex XDR detects and blocks the entire application."

"They did what they said. This solution could apply to any scenario."

"Traps pays for itself within the first 16 months of a three-year subscription."

"It's very stable. I've never experienced downtime for the ASM console or ASM core."

More Cortex XDR by Palo Alto Networks pros

"The support is very good, they reply and respond very quickly."

"Stability-wise, I rate the solution a ten out of ten."

"It has given us a more structured approach for detecting and preventing threats, with machine learning-based detection and prevention whose engines, even in older versions, are able to pick viruses and malware, supported by many online use cases for detecting different viruses and malware that have been out for many years."

"Deep Instinct has helped us to be a lot more proactive on the security front, rather than reactive, saving us a lot of time in incident response and significantly reducing our SOC’s endpoint protection management time and false positives."

"Deep Instinct is very light; it doesn't take too much CPU attention or memory, it doesn't slow down the performance, and you don't really realize any change in the performance, which makes it very different from other solutions that are usually heavy for the users."

"I like the dashboard. It looks very simple."

"We think of this product as a fishing net that fits into the computer and has all of the capabilities and understanding of what ransomware and malware look like."

"The beauty about Deep Instinct is that you can set and forget it; you don't really have to deal with it, unlike other solutions where you have to constantly have an IT administrator who manages it day in, day out."

More Deep Instinct Prevention Platform pros

"We haven't had any cybersecurity incidents on machines running Morphisec."

"Morphisec has absolutely helped save money on our security stack; the ransomware at the end of the day can cost organizations millions upon millions of dollars, and if I can spend $10,000 in a year to protect assets that could be ransomed for $20,000,000, that's definitely a bet that one should pursue."

"Morphisec has absolutely helped save money on our security stack. The ransomware at the end of the day can cost organizations millions upon millions of dollars. Investing in tools like Morphisec is a great reduction in that cost. If I can spend $10,000 in a year to protect assets that could be ransomed for $20,000,000, that's definitely a bet that one should pursue. Morphisec absolutely it's worth the investment."

"Since we started using Morphisec, that hasn't happened even once."

"What's valuable is really the whole kit and caboodle of the Morphisec agent. What it does is genius, in a way, until the bad guys get wise to it. You set it up and then you watch the dashboard. There isn't really much tinkering."

"All the alerts are on the dashboard, which is quite simple and useful for us. You can easily check all the alerts that are being blocked or allowed, or whatever the action is. You can easily see that and you can take the necessary actions. You can add a PowerShell extension or any activities for blocking at your network level or for endpoints."

"With Morphisec, at least when it does happen, I feel confident that we have in place solutions that will not only prevent it, but also let us know when something has happened."

"It also provides full visibility into security events from Microsoft Defender and Morphisec in one dashboard. We've always had that capability with Morphisec. The more recent version appears to do that even a little bit more natively and it's given us visibility that we didn't have otherwise."

More Morphisec pros

Cons

"It's very time-consuming to log support issues and the people that answer the tickets aren't very knowledgeable."

"There are some false positives. What our guys would have liked is that it would have been easier to manipulate as soon as they found a false positive that they knew was a false positive. How to do so was not obvious. Some people complained about it. The interface, the ESM, is not user-friendly."

"It takes time to scan the servers and devices."

"Cortex XDR could improve its sales support team, including better commission structures and referral programs."

"We had a problem with getting our older endpoints up to date, but their newest updates have been really good. I've been pleased with it in terms of what our needs are. It's doing what we want it to do."

"Data privacy is a matter of concern. You have to be careful with data privacy, it can be sensitive and Cortex can have most of your access."

"The dashboard is the area that needs to improve so that we can have the ability to drill down without having to go elsewhere to verify results."

"The dashboard could use some significant improvement, just making it more useful with more information."

More Cortex XDR by Palo Alto Networks cons

"The interface on the endpoint could be a little more descriptive and more valuable. It doesn't always tell you the data you need to see. Improvement there would be very helpful."

"Its support for Linux and Unix operating systems can be improved. Currently, they cover macOS and Windows, but they don't cover Linux and some of the Unix products. Pricing is also an issue. Its pricing is not as aggressive as it could be, and its price makes it difficult to sell. Customers feel that they can get an antivirus for a lower price, even though it is not a similar product. It is technically different. Their SLAs can be better. They have to give you 24/7 support, but their SLAs are not very good. They should be better documented, and the offerings should also be a little bit better. What happens is that the SLAs end up in the hands of the intermediary, seller, or the local partner of Deep Instinct in a country. The customers want very fast SLAs in a very short time, but Deep Instinct doesn't give them at the same speed. Having said that, SLAs are important when you have a lot of issues, but this product doesn't have too many issues, so it is not a big concern. However, for a customer who doesn't know the product, it could be a concern."

"The interface on the endpoint could be a little more descriptive and more valuable."

"Deep Instinct Prevention Platform detects malicious scripts but it needs better measures, perhaps signing scripts, so we can be sure that a script is created by a client, not by some malware."

"Reporting on incidents needs improvement. It doesn't give very much information compared to Sophos."

"There's an issue in the installation process where you can't install it unless you disable the built-in Windows Bitdefender antivirus. So, you have to manually disable Microsoft Bitdefender in order to install Deep Instinct. So, that makes it impossible to do a network rollout unless you manually visit each computer, which is ridiculous."

"Some of the features are very resource intensive, such as the ransomware detection. It consumed so much of the resource on the endpoints that we have disabled those functions."

"If the client is working remotely and doesn't have a VPN then the deployment is difficult to do."

More Deep Instinct Prevention Platform cons

"Right now, it's just their auto-update feature. I know they are currently working on that. When they release a new version of the threat prevention platform, I do have to update that, rolling out to every computer. They have said, "From version 5, you would be able to do an auto-update." While this is very minor, that is the only thing that I would say needs to be upgraded. It would just make life a lot easier for other IT teams. However, I have simplified the process, so all I need to do is just download one file."

"It would be useful for them if they had some kind of network discovery."

"We started in the Linux platform and we deployed to Linux. The licensing of that has been confusing between Linux licensing and Windows licensing."

"Sometimes it generates false positive alerts. They need to continue working on that."

"It would be nice if they could integrate Morphisec with other traditional antivirus solutions beyond Microsoft Defender. That is probably my biggest gripe."

"We sometimes have to depend on the support team to know what action we should take."

"The only problem is that their support lives in Israel, so the time zones are a bit off, but I've never had any complaint beyond that."

"At this time, it is able to recognize vulnerabilities and reporting them to us, but it's not actually resolving them."

More Morphisec cons

Pricing and Cost Advice

"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."

"The price of the product is not very economical."

"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."

"Our customers have expressed that the price is high."

"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."

"It has a yearly renewal."

"The solution is expensive. It's pricing is on a yearly-basis."

"It is "expensive" and flexible."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"One thing about their licensing program that I like is that just one covers the server as well as on the endpoint as well as mobile devices. There is no complexity in calculating how many SKUs I need for mobile, for laptop, for desktop, and for servers. It's very simple and that makes it much easier to budget."

"Their pricing is very competitive. It is good, fair, and a lot cheaper than what we were doing with Cylance."

"There is a need for customers of the product to pay towards the licensing costs of the tool."

"The pricing is a little bit expensive but we are satisfied with DI's performance."

"If I include the false positive rate and the detection rate in the comparison, Deep Instinct is worth its price."

"Pricing and licensing are very straightforward. It's two SKUs, one is for the console and the other is for the client."

"There are no additional costs on the price, and our company has a support contract, which bundles in those services anyway."

"We are a nonprofit. The MSP had provides pretty decent nonprofit rates for us. This was one of the key factors that made us choose Deep Instinct over its competitors who were significantly more expensive."

More Deep Instinct Prevention Platform pricing and cost advice

"Price-wise, it's on the higher side. A traditional antivirus solution is cheaper, but in terms of security and manageability, its ROI is better than a traditional antivirus. I would recommend it to anybody evaluating or considering an antivirus solution. If your system gets compromised, the cost of ransom would be a lot more. This way, it saves a lot of cost."

"Licenses are per endpoint, and that's true for the cloud version as well. The only difference is that there is a little extra charge for the cloud version."

"It is an annual subscription basis per device. For the devices that we have in scope right now, it is about $25,000 a year."

"It does not have multi-tenants. If South Africa wants to show only the machines that they have, they need their own cloud incidence. It is not possible to have that in a single cloud incidence with multiple tenants in it, instead you need to have multiple cloud incidences. Then, if you have that, it will be more expensive. However, they are going to change that, which is good."

"Our licensing is tied into our contract. Because we have a long-term contract, our pricing is a little bit lower. It is per year, so we don't get charged per endpoint, but we do have a cap. Our cap is 80 endpoints. If we were to go over 80, when we renewed our contract, which is not until three years are over. Then, they would reevaluate, and say, "Well, you have more than 80 devices active right now. This is going to be the price change." They know that we are installing and replacing computers, so the numbers will be all over the place depending on whether you archive or don't archive, which is the reason why we just have to keep up on that stuff."

"Morphisec is reasonably priced because our parent company's other subsidiaries use different products like CrowdStrike. CrowdStrike is four or five times more expensive than Morphisec. The competitive pricing saves us money in our overall security stack."

"We are still using a separate tool. I know for our 600 or I think we're actually licensed for up to 700 users, it runs me 23 or $24,000 a year. When you're talking to that many users plus servers being protected, that's well worth the investment for that dollar amount."

"The pricing is definitely fair for what it does."

More Morphisec pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

886,906 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

13%

Financial Services Firm

12%

Comms Service Provider

Manufacturing Company

Computer Software Company

12%

Construction Company

Financial Services Firm

Manufacturing Company

Outsourcing Company

17%

Construction Company

10%

Manufacturing Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	45
Midsize Enterprise	20
Large Enterprise	48

By reviewers
Company Size	Count
Small Business	11
Midsize Enterprise	4
Large Enterprise	5

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	8
Large Enterprise	8

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What is your experience regarding pricing and costs for Deep Instinct?

The price for Deep Instinct Prevention Platform is reasonable. It is about the same price as any other antivirus.

See all answers

What needs improvement with Deep Instinct?

A potential area of improvement for Deep Instinct Prevention Platform is their focus on file uploads and large data s...

See all answers

What is your primary use case for Deep Instinct?

Deep Instinct Prevention Platform is basically a stopper that prevents any malware, including zero-days. The main ben...

See all answers

Ask a question

Earn 20 points

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 8% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

SentinelOne Singularity Endpoint vs Deep Instinct Prevention Platform

Compared 8% of the time

Microsoft Defender for Endpoint vs Deep Instinct Prevention Platform

Compared 7% of the time

BlackBerry Cylance Cybersecurity vs Deep Instinct Prevention Platform

Compared 6% of the time

CrowdStrike Falcon vs Deep Instinct Prevention Platform

Compared 5% of the time

Bitdefender GravityZone EDR vs Deep Instinct Prevention Platform

Compared 3% of the time

More Deep Instinct Prevention Platform Competitors

Halcyon vs Morphisec

Compared 6% of the time

CrowdStrike Falcon vs Morphisec

Compared 5% of the time

FortiCNAPP vs Morphisec

Compared 5% of the time

SentinelOne Singularity Endpoint vs Morphisec

Compared 4% of the time

Microsoft Defender for Endpoint vs Morphisec

Compared 3% of the time

More Morphisec Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

April 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Deep Instinct Prevention Platform

April 2026

Deep Instinct Prevention Platform report

Download Deep Instinct Prevention Platform product report

Buyer's Guide

Morphisec

April 2026

Download Morphisec product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

No data available

Morphisec, Morphisec Moving Target Defense

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Deep Instinct PREVENTS >99% of UNKNOWN threats like ransomware and zero-days before they land inside your environment – not after. With both an agentless and agent-based approach, we ensure file-based and fileless attacks are prevented. To achieve this, Deep Instinct is pioneering the use of deep learning AI to prevent threats in <20ms, without requiring calls to the cloud for threat intelligence. Our ability to scale to the needs of the enterprise is unprecedented as is our delivery of the industry’s lowest false positive rate of <0.1%.

The Deep Instinct Prevention Platform combines industry-leading static analysis based on the only deep learning framework dedicated to cybersecurity and includes two solutions:

Deep Instinct Prevention for Applications is a flexible, containerized and highly scalable solution, deployed via API or ICAP, to scan million so files per day and prevent malicious files from entering storage environments.

Deep Instinct for Endpoints complements EDR solutions by preventing threats pre-execution, minimizing false positives, improving the productivity of SOC teams, and increasing the efficiency of the security stack.

To learn more, visit: https://www.deepinstinct.com.

Deep Instinct

Morphisec delivers signatureless endpoint-specific protection, effectively blocking zero-day threats and ransomware without affecting performance, making it a preferred choice for enhancing security strategies.

Morphisec empowers users by providing comprehensive protection against advanced threats with its innovative signatureless and in-memory security features. Its seamless integration with Microsoft Defender ensures complete visibility and automatic threat blocking through a unified dashboard. The Moving Target Defense technology enhances deployment efficiency while its lightweight design maintains system performance. Despite some challenges in cloud deployment and feature updates, users find value in its ease of use and minimal administrative effort.

What are the key features of Morphisec?

Signatureless Protection: Blocks threats without relying on signatures, ensuring up-to-date defense.
In-Memory Protection: Prevents attacks targeting system memory to safeguard endpoints.
Zero-Day Threat Blocking: Offers proactive defense against undiscovered threats.
Unified Dashboard: Provides comprehensive security event visibility and integration with Microsoft Defender.
Lightweight Design: Ensures smooth operation without system performance issues.

What benefits can users expect when evaluating Morphisec?

Enhanced Security: Strengthens defense layers against ransomware and memory attacks.
Seamless Integration: Works alongside existing antivirus solutions like Microsoft Defender.
Minimal Administration: Requires low maintenance due to its set-and-forget nature.
Automatic Updates: Keeps protection current without manual intervention.
Broad Coverage: Suitable for desktops, servers, and cloud platforms.

In industries with high security needs, deploying Morphisec adds a robust defense against advanced threats. Its compatibility with antivirus solutions and cloud platforms makes it adaptable to diverse environments, ensuring effective threat mitigation and detection.

Morphisec

Sample Customers

CBI Health Group, University Honda, VakifBank

Information Not Available

Lenovo/Motorola, TruGreen, Covenant Health, Citizens Medical Center

Buyer's Guide

Deep Instinct Prevention Platform vs. Morphisec

April 2026

Free Report: Deep Instinct Prevention Platform vs. Morphisec

Find out what your peers are saying about Deep Instinct Prevention Platform vs. Morphisec and other solutions. Updated: April 2026.

DOWNLOAD NOW

886,906 professionals have used our research since 2012.

See our Deep Instinct Prevention Platform vs. Morphisec report.

See our list of best Endpoint Protection Platform (EPP) vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.