Deep Instinct Prevention Platform vs Morphisec comparison

Why PeerSpot?

Deep Instinct and Morphisec are both solutions in the Endpoint Protection Platform (EPP) category. Deep Instinct is ranked #25 with an average rating of 10.0, while Morphisec is ranked #45. Deep Instinct holds a 1.1% mindshare in EPP, compared to Morphisec’s 1.1% mindshare. Additionally, 100% of Deep Instinct users are willing to recommend the solution, compared to 100% of Morphisec users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Deep Instinct Prevention Platform and Morphisec are advanced cybersecurity solutions. Based on user feedback, Morphisec has the upper hand with superior features, making it worth the price.

Features: Deep Instinct Prevention Platform has robust threat detection, deep learning for proactive protection, and strong pricing and support. Morphisec is lightweight, offers effective memory protection, and has refined, user-friendly features.

Room for Improvement: Deep Instinct Prevention Platform needs better integration with other security tools, improved reporting capabilities, and more deployment flexibility. Morphisec users suggest better detection response rates, expanded threat intelligence features, and enhanced scalability.

Ease of Deployment and Customer Service: Deep Instinct Prevention Platform offers straightforward deployment but sometimes slow customer service. Morphisec provides quick, flexible deployment and reliable customer service.

Pricing and ROI: Deep Instinct Prevention Platform is cost-effective with good ROI. Morphisec, although pricier, provides excellent ROI through its advanced features and comprehensive protection capabilities.

To learn more, read our detailed Deep Instinct Prevention Platform vs. Morphisec Report (Updated: August 2026).

Buyer's Guide

Deep Instinct Prevention Platform vs. Morphisec

August 2026

Download the complete report

Helped 912,753 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of September 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.8% compared to the previous year. The mindshare of Deep Instinct Prevention Platform is 1.1%, up from 0.7% compared to the previous year. The mindshare of Morphisec is 1.1%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.8%
Deep Instinct Prevention Platform	1.1%
Morphisec	1.1%
Other	94.0%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Tom Foal

CTO at Klaatu IT Security Ltd

Stops ransomware before it executes and reduces response time for the team

A potential area of improvement for Deep Instinct Prevention Platform is their focus on file uploads and large data storage, backups, and other related areas. It is difficult to think of what they could improve, but low information provided by the system when it detects something is one area, particularly in scripting. Deep Instinct Prevention Platform detects malicious scripts but it needs better measures, perhaps signing scripts, so we can be sure that a script is created by a client, not by some malware. It is really about helping us triage incidents effectively, so a bit more help with the analysis of incidents, particularly what the Deep Instinct Prevention Platform agent has discovered, would be beneficial. We need to know what it has spotted that makes it suspect malware.

Read full review

Rick Schibler

VP of Information Technology at Kentucky Trailer

Offers in-memory protection at a lower price than competitors

Morphisec's in-memory protection is probably the most valuable feature because it stops malicious activity from occurring. If something tries to install or act as a sleeper agent, Morphisec will detect and stop it. Morphisec's Moving Target Defense is critical to hardening our attack surface. If it detects something, it indicates whether it's valid. That means you've got a breach requiring investigation. It detects anomalies but doesn't necessarily point to what caused them. You still need to do that work. The solution is reasonably easy to administer. They made some changes last year, adding a cloud-based monitoring solution that makes deploying and monitoring our endpoints easy.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Automation and playbooks have helped me significantly, as Cortex Xnor's playbooks predefine the workflow of the automation, such as response processes, alert triggering, and enriching the context, efficiently detecting and blocking malicious attacks with firewalls while eliminating workload and speeding responses for next-generation operations."

"The solution's most valuable feature is its ability to rapidly detect certain hardware files."

"I like the centralized console and the predictive analysis it does of malware. It is very stable and also scalable."

"The solution's most valuable feature is the user interface."

"The biggest positive impact I see from Cortex XDR by Palo Alto Networks is a significant reduction in the number of people required to manage it."

"Palo Alto is the core of the security infrastructure in the environment."

"Traps is quite a stable product. Once it was properly deployed and configured, you have nothing to be worried about."

"Monitoring is most valuable."

More Cortex XDR by Palo Alto Networks pros

"The product offers integration capabilities and is also easy to use."

"Instead of having features like rollback and after-event actionable stuff, the whole premise and the context of the solution is to actually prevent these malicious attacks from happening to begin with.... The ability to prevent threats is the most appealing aspect. It absolutely, 100 percent helps with real-time prevention of unknown malware. That's the strength of the product."

"Deep Instinct’s prevention-first approach to stopping unknown ransomware and malware is the reason why we purchased the product. The pre-execution versus post-execution is a big piece for us where it is able to stop something before it even hits the box or desktop. That was one of the big reasons why we went with Deep Instinct."

"No valuable quote available from the provided review sections."

"The CPU consumption is low compared to what I have been using in my current environment, which is Sophos. The footprint is a lot smaller, about a quarter of Sophos. It is very small."

"Its false positives are very low, because the behavior analysis engine double checks them."

"It has a very low false-positive ratio. That is important because it means we're not wasting time... We're able to run that entire 20,000-endpoint base with just a handful of engineers."

"Deep Instinct's detection rate is close to 100 percent."

More Deep Instinct Prevention Platform pros

"The biggest feature is that it hides everything from your operating system that's running in-memory from anything to try to run against it. That's the most unique thing that's on the market. There's nothing else out there that's quite like that. That's a big selling point and why we went with it. It does exactly what the design does. If you can't find it, you can't execute against it."

"Morphisec provides full visibility into security events from Microsoft Defender and Morphisec in one dashboard. Defender and Morphisec are integrated. It's important because it lowers the total cost of maintenance on the engineer's time, more or less. So the administrative time is dramatically reduced in maintaining the product. This saves an engineer around four to five hours a week."

"Morphisec's in-memory protection is probably the most valuable feature because it stops malicious activity from occurring. If something tries to install or act as a sleeper agent, Morphisec will detect and stop it."

"Morphisec has given our security team's operations peace of mind and more time for patching."

"Morphisec gives me even more than Microsoft can give me, even if I were to pay."

"The product has absolutely worked flawlessly; we have had basically no issues, either with the product or with any type of virus or zero-day attacks, ransomware, nothing, as it has caught everything."

"The fact that Morphisec uses deterministic attack prevention that does not require human intervention has affected our security team's operations by making things much simpler. We don't have to really track down various alerts anymore, they've just stopped. At that point, we can go in and we can clean up whatever needs to be cleaned up. There are some things that Morphisec detects that we can't really remove, it's parts of Internet Explorer, but it's being blocked anyway. So we're happy with that."

"We have not had one machine that has been taken down due to malware now in almost four and a half years, with 600 machines that we don't have routine infections on because nothing can execute."

More Morphisec pros

Cons

"Limited remote connection."

"The solution should offer more dashboards and they should be better customized."

"We have found that there are times Cortex XDR by Palo Alto Networks does not detect some of the viruses, we have to use another protection solution called Kaspersky."

"The solution lacks real-time, on-demand antivirus."

"The installation should be easier and the Palo Alto pre-sales and sales teams should have more information on the product because they don't know what they are selling."

"Cortex does not offer an on-premises solution. However, some customers would prefer not to be on the cloud. It would be ideal if it could offer something on-prem as well."

"There are some limitations on the Traps agents."

"It would be good to have a better way to search for a file within the UI."

More Cortex XDR by Palo Alto Networks cons

"The Deep Instinct client stops working when you have two servers and you add high availability or Windows Failover Cluster mode."

"Some features are too resource intensive."

"Deep Instinct Prevention Platform detects malicious scripts but it needs better measures, perhaps signing scripts, so we can be sure that a script is created by a client, not by some malware."

"I would like a little more training for the admins."

"Reporting on incidents needs improvement."

"The Management Console is not localized."

"The Deep Instinct client stops working when you have two servers and you add high availability or Windows Failover Cluster mode. It doesn't work in a clustered mode. I haven't yet had time to go back and talk with their support and get it fixed. It would be good if they can make the installation independent of an actual user. Currently, its installation is dependent on the actual user being logged in. For example, a computer has to be logged in for the installation to happen. If it is not logged in, then on the cloud platform, it is going to show that the client is offline. On the management side of the cloud platform, we would like to have the administrators segregated by logical entities. We have told them that on their cloud management platform, we would like to be able to segregate clients into different logical entities or organizations so that the administrators are able to manage only those entities that are within their designated organization."

"I think it's probably the administration, especially the administration platform, which could be improved in the solution. It's clunky and hard to navigate, especially for inexperienced technicians."

More Deep Instinct Prevention Platform cons

"It would be useful for them if they had some kind of network discovery. That kind of functionality I think would give IT administrators a little bit more confidence that they have 100 percent coverage, and it gives them something to audit against. Network discovery would be one area I would definitely suggest that they put some effort into."

"Overall, I don't know 100% if it's increasing our security posture, but it does give us a nice peace of mind."

"The weakest point of this product is how difficult it is to understand the reasons for an alert. This is a problem because it is hard to determine whether an attack is real or not."

"I haven't been able to get the cloud deployment to work. When there's an update, I'm supposed to be able to roll it out for the cloud solution, but right now I'm continuing to use our SCCM solution to update it."

"Some of the filters for the console need improvement. There are alerts that show up and just being able to acknowledge that we've seen those and not turn them off, but dismiss them, would be a huge benefit."

"Right now, it's just their auto-update feature. I know they are currently working on that. When they release a new version of the threat prevention platform, I do have to update that, rolling out to every computer. They have said, "From version 5, you would be able to do an auto-update." While this is very minor, that is the only thing that I would say needs to be upgraded. It would just make life a lot easier for other IT teams. However, I have simplified the process, so all I need to do is just download one file."

"It would be useful for them if they had some kind of network discovery."

"We wanted to have multi-tenants in their cloud platform, so every entity can look into their own systems and not see other systems in other entities. I have a beta version on that now. I would like them to incorporate that in the cloud solution."

More Morphisec cons

Pricing and Cost Advice

"The price was fine."

"The price of the solution is high for the license and in general."

"It has a yearly renewal."

"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."

"I am using the Community edition."

"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."

"It is "expensive" and flexible."

"The cost depends on your chosen license type, like Pro or other licenses."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"Their pricing is very competitive. It is good, fair, and a lot cheaper than what we were doing with Cylance."

"There is a need for customers of the product to pay towards the licensing costs of the tool."

"The pricing is a little bit expensive but we are satisfied with DI's performance."

"There are no additional costs on the price, and our company has a support contract, which bundles in those services anyway."

"One thing about their licensing program that I like is that just one covers the server as well as on the endpoint as well as mobile devices. There is no complexity in calculating how many SKUs I need for mobile, for laptop, for desktop, and for servers. It's very simple and that makes it much easier to budget."

"Its pricing is too high, but that is not because of the product. It is expensive because of the cost of the console. You need a console to control the whole thing, but the console is expensive. You have to split this cost among all possible users. Normally, to be able to make it economically attractive, you need at least 1,000 agents, PCs, or users. If you have a customer with 300 to 500 agents, PCs, or users, it becomes too pricey."

"In comparison to the other products out there, it's exceptionally competitively priced. When you consider the lower administrative overhead that it facilitates, it's an absolute value."

"Pricing and licensing are very straightforward. It's two SKUs, one is for the console and the other is for the client."

More Deep Instinct Prevention Platform pricing and cost advice

"Our licensing is tied into our contract. Because we have a long-term contract, our pricing is a little bit lower. It is per year, so we don't get charged per endpoint, but we do have a cap. Our cap is 80 endpoints. If we were to go over 80, when we renewed our contract, which is not until three years are over. Then, they would reevaluate, and say, "Well, you have more than 80 devices active right now. This is going to be the price change." They know that we are installing and replacing computers, so the numbers will be all over the place depending on whether you archive or don't archive, which is the reason why we just have to keep up on that stuff."

"It is a little bit more expensive than other security products that we use, but it does provide us good protection. So, it is a trade-off."

"Price-wise, it's on the higher side. A traditional antivirus solution is cheaper, but in terms of security and manageability, its ROI is better than a traditional antivirus. I would recommend it to anybody evaluating or considering an antivirus solution. If your system gets compromised, the cost of ransom would be a lot more. This way, it saves a lot of cost."

"Morphisec is reasonably priced because our parent company's other subsidiaries use different products like CrowdStrike. CrowdStrike is four or five times more expensive than Morphisec. The competitive pricing saves us money in our overall security stack."

"We are still using a separate tool. I know for our 600 or I think we're actually licensed for up to 700 users, it runs me 23 or $24,000 a year. When you're talking to that many users plus servers being protected, that's well worth the investment for that dollar amount."

"It does not have multi-tenants. If South Africa wants to show only the machines that they have, they need their own cloud incidence. It is not possible to have that in a single cloud incidence with multiple tenants in it, instead you need to have multiple cloud incidences. Then, if you have that, it will be more expensive. However, they are going to change that, which is good."

"The pricing is definitely fair for what it does."

"Licenses are per endpoint, and that's true for the cloud version as well. The only difference is that there is a little extra charge for the cloud version."

More Morphisec pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

912,753 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

12%

Comms Service Provider

12%

Construction Company

11%

Financial Services Firm

10%

Outsourcing Company

13%

Construction Company

12%

Financial Services Firm

10%

Manufacturing Company

Outsourcing Company

16%

Manufacturing Company

12%

Construction Company

12%

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	47
Midsize Enterprise	21
Large Enterprise	54

By reviewers
Company Size	Count
Small Business	11
Midsize Enterprise	4
Large Enterprise	5

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	8
Large Enterprise	8

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What is your experience regarding pricing and costs for Deep Instinct?

The price for Deep Instinct Prevention Platform is reasonable. It is about the same price as any other antivirus.

See all answers

What needs improvement with Deep Instinct?

A potential area of improvement for Deep Instinct Prevention Platform is their focus on file uploads and large data s...

See all answers

What is your primary use case for Deep Instinct?

Deep Instinct Prevention Platform is basically a stopper that prevents any malware, including zero-days. The main ben...

See all answers

Ask a question

Earn 20 points

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 14% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Trellix Endpoint Security Platform vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

VMware Carbon Black Endpoint vs Deep Instinct Prevention Platform

Compared 8% of the time

SentinelOne Singularity Endpoint vs Deep Instinct Prevention Platform

Compared 8% of the time

Check Point Harmony Endpoint vs Deep Instinct Prevention Platform

Compared 6% of the time

Microsoft Defender for Endpoint vs Deep Instinct Prevention Platform

Compared 6% of the time

TrendAI Vision One – Endpoint Security vs Deep Instinct Prevention Platform

Compared 2% of the time

More Deep Instinct Prevention Platform Competitors

Symantec Endpoint Security vs Morphisec

Compared 9% of the time

FortiCNAPP vs Morphisec

Compared 5% of the time

CrowdStrike Falcon vs Morphisec

Compared 4% of the time

Orca Security vs Morphisec

Compared 4% of the time

Prisma Cloud by Palo Alto Networks vs Morphisec

Compared 3% of the time

More Morphisec Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

September 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Deep Instinct Prevention Platform

September 2026

Deep Instinct Prevention Platform report

Download Deep Instinct Prevention Platform product report

Buyer's Guide

Morphisec

August 2026

Download Morphisec product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

No data available

Morphisec, Morphisec Moving Target Defense

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Deep Instinct Prevention Platform offers a prevent-first solution with a focus on detecting zero-day threats, featuring user-friendly deployment and robust cross-platform functionality. It integrates well with other security tools to enhance threat detection capabilities.

Deep Instinct leverages deep learning for advanced malware and ransomware prevention. Its lightweight design and easy deployment make it a favored choice for endpoint protection. While praised for its compatibility and minimal updates, challenges exist with Linux support, high resource use in ransomware detection, and the need for better control in administration. Organizations implementing Deep Instinct enjoy real-time prevention against threats like phishing and zero-day exploits.

What are the key features?

Prevent-First Approach: Focusing on preventing threats before they occur.
Deep Learning: Utilizing deep learning for superior malware detection.
User-Friendly Interface: Easy to navigate and deploy across platforms.
Minimal Updates: Requires fewer updates, ensuring consistent protection.
Cross-Platform Functionality: Supports multiple platforms for wider applicability.

What benefits should you consider?

Excellent Accuracy: High accuracy in detecting threats with minimal false positives.
Resource Efficiency: Optimized for low resource consumption during operation.
Integration Capability: Seamlessly integrates with other security strategies.
Real-Time Prevention: Offers real-time responses to emerging threats.

Deep Instinct finds implementation in industries needing robust endpoint protection, adopted by security consultants and resellers for client solutions. It serves managed services aiming to replace traditional antiviruses and safeguards against malware and phishing attacks.

Deep Instinct

Morphisec enhances security with its signatureless attack prevention, integrating smoothly with Microsoft Defender. Users benefit from real-time threat detection and seamless system integration, protecting against zero-day threats and ransomware across networks.

Morphisec's security solution focuses on preventing cyber threats without requiring threat signatures or user action. Its integration with Microsoft Defender offers simplified visibility and management while delivering quick responses. Lightweight in nature, Morphisec ensures zero performance degradation and employs in-memory protection along with Moving Target Defense. This approach effectively counters zero-day threats and ransomware, maintaining a user-centric dashboard that eases administrative workloads. Morphisec's easy deployment also enables small teams to manage risks and uphold robust security measures efficiently.

What are Morphisec's key features?

Signatureless Threat Prevention: Stops attacks without threat signatures or user interaction.
Microsoft Defender Integration: Provides unified management and quick response capabilities.
In-Memory Protection: Shields against zero-day and ransomware threats efficiently.
Moving Target Defense: Minimizes exposure to in-memory attacks.
User-Friendly Dashboard: Simplifies administration by reducing burdens.
Easy Deployment: Facilitates straightforward setup for small teams.

What benefits and ROI should be considered in user reviews?

Real-Time Detection: Immediate identification of threats enhances proactive threat management.
Seamless Integration: Compatible with existing systems, reducing delay risks.
Cloud-Based Updates: Ensures current protection with minimal manual input.
Multi-Layered Security: Adds a solid last defense layer, supplementing other antivirus solutions.

Morphisec is widely used across industries like financial services, healthcare, and manufacturing to bolster defenses against malware and ransomware. Its deployment spans workstations and servers, integrating efficiently into existing infrastructures. Industries value real-time threat detection, ease of deployment, and cloud-based updates, noting its ability to identify threats missed by other antivirus solutions.

Morphisec

Sample Customers

CBI Health Group, University Honda, VakifBank

Information Not Available

Lenovo/Motorola, TruGreen, Covenant Health, Citizens Medical Center

Buyer's Guide

Deep Instinct Prevention Platform vs. Morphisec

August 2026

Free Report: Deep Instinct Prevention Platform vs. Morphisec

Find out what your peers are saying about Deep Instinct Prevention Platform vs. Morphisec and other solutions. Updated: August 2026.

DOWNLOAD NOW

912,753 professionals have used our research since 2012.

See our Deep Instinct Prevention Platform vs. Morphisec report.

See our list of best Endpoint Protection Platform (EPP) vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.