No more typing reviews! Try our Samantha, our new voice AI agent.

Huntress Managed EDR vs Lookout comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 29, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Detection and Response (EDR)
7th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
109
Ranking in other categories
Endpoint Protection Platform (EPP) (5th), Extended Detection and Response (XDR) (6th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (2nd)
Huntress Managed EDR
Ranking in Endpoint Detection and Response (EDR)
5th
Average Rating
9.4
Reviews Sentiment
7.5
Number of Reviews
57
Ranking in other categories
Managed Detection and Response (MDR) (1st)
Lookout
Ranking in Endpoint Detection and Response (EDR)
51st
Average Rating
7.6
Reviews Sentiment
7.1
Number of Reviews
3
Ranking in other categories
Threat Intelligence Platforms (TIP) (27th), Mobile Threat Defense (3rd)
 

Mindshare comparison

As of April 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of Huntress Managed EDR is 3.3%, up from 2.0% compared to the previous year. The mindshare of Lookout is 0.7%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
Huntress Managed EDR3.3%
Cortex XDR by Palo Alto Networks3.4%
Lookout0.7%
Other92.6%
Endpoint Detection and Response (EDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
JefferyGiddens - PeerSpot reviewer
Director, Information Technology & Cybersecurity at a financial services firm with 51-200 employees
Improving alert visibility and reporting has reduced workload and strengthened security posture
Huntress Managed EDR could be improved by providing more visibility into each alert that comes in and what action was taken on it. There have been times when an alert was received through Microsoft Defender indicating an account was accessed, when in reality it was blocked by a conditional access policy, yet when checking the Huntress portal, that event does not appear at all, lacking indication that it was raised and investigated as not a threat. The reporting in Huntress Managed EDR is fairly basic, as the only available report is effectively an executive summary. Although it contains useful information, other platforms have reporting engines that are much more robust and customizable, functionality that appears to be missing in Huntress.
DB
IT Manager at NHS Trust
Enhanced mobile security with visibility into app and website usage, but installation challenges remain
We use Lookout for mobile devices, such as phones It has reduced our risk around mobile devices. I like the security features and being able to see what apps and websites people are using. There is nothing we have come across that we've desired. We have been using Lookout for one year. The…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"If any application performs suspicious activities, such as changing registries or modifying other applications, Cortex XDR detects and blocks the entire application."
"Threat identification and detection are the most valuable features of this solution."
"The stability is pretty good except for one or two cases, and based on the performance, it's been okay with pretty high performance, no bugs or glitches, and it doesn't crash or freeze."
"Automation and playbooks have helped me significantly, as Cortex Xnor's playbooks predefine the workflow of the automation, such as response processes, alert triggering, and enriching the context, efficiently detecting and blocking malicious attacks with firewalls while eliminating workload and speeding responses for next-generation operations."
"Cortex XDR alerts us on the dashboard when there's a threat, which allows us to restrict that user and helps secure our infrastructure."
"The multi-layered approach to the product gives you confidence that it will stop exploits, ransomware, worms, or viruses from compromising endpoints, essentially providing peace of mind."
"Traps has drastically reduced our endpoint attack surface via advanced detection capabilities, sandboxing of never before seen programs, and by drastically limiting where executables can launch in the first place."
"These days it's machine-learning technology and behavior-based analytics features that make us more secure."
"Huntress is extremely well-written software. I used to be a developer, and I see how they've written it. It's excellent. I've never had an issue with it crashing a machine. It's small, tight code."
"Huntress is easy to use. It immediately improved visibility and understanding of our security posture."
"Huntress Managed EDR has impacted my organization positively because it is time-saving and trustworthy, so we can believe that it can help us get a better reputation and more confidence as an MSP to serve our clients."
"Huntress helps us replace traditional antivirus solutions with an EDR. I like how easy it is to use and deploy. Support is good- they've responded quickly when I've had issues. I like it a lot so far. It reports valuable information and filters out things I don't need to know."
"Because of the pricing, performance, and usability, Huntress Managed EDR is without a doubt the best EDR solution for small businesses that I've ever seen."
"After deploying Huntress Managed EDR, it took no time to start improving my organization's security."
"The customer support provided by Huntress is impeccable. Their product is easy to deploy and manage, and the portal setup for Managed Service Providers is excellent. A lot of companies do not do that very well."
"Users usually note improvements in a matter of days. In others, it is immediately. It varies according to the environment."
"The most valuable features are the antivirus as a whole, the anti-malware, and all of the protection features that scan our enterprise devices."
"The protection offered by the product is the most valuable feature. It detects vulnerabilities or traps on our users' phones and then prompts them to clean up their devices. Tools we used previously would only discover, which required us to gather information on the backend, so Lookout is a welcome upgrade."
"We have not had any issues with bugs or breakdowns."
 

Cons

"We had a problem with getting our older endpoints up to date, but their newest updates have been really good."
"In the next release, I would like to see more UI improvements. Their UI is a bit basic. When we are speaking about Palo Alto Networks they are the big company, so they can improve the UI a little bit. The UI, the reports, the log system can all be improved."
"Previously, the endpoint would leave the environment, not being on our VPN, essentially unable to interact with the server to upload files. It was unable to retrieve new file verdicts. It was using a thing called "local analysis" to determine if something was a malicious file or not. There was no dynamic analysis."
"It is a complex solution to implement."
"It would be better if they could educate the customers more. Some sort of seminars and roadshows will help educate the customers and show what the product can do. The price could be better. It would also help if they had a team for deployment and support."
"While using Cortex, I noticed some aspects that could be improved, such as increasing the synchronization speed between XDR and Xnor."
"The main issue I could point out is the offline agents and the way that it is missing."
"For Cortex XDR by Palo Alto Networks, if I had to point out improvements, I would say the UI is still somewhat difficult for beginners."
"One area for improvement in Huntress would be to allow for PSA integration from a specific IP address or hostname for better security measures."
"One issue is the managed antivirus. Huntress takes control of the antivirus built into Windows Defender, but it doesn't if, for some reason, Defender isn't working properly and doesn't attempt to fix it. We have to fix it with some scripts so that Defender reports correctly to Huntress. It would be nice if they took that action on our behalf. If they saw a problem with Defender, they should roll out a fix."
"The integration with Autotask could be improved."
"Customer support for Huntress Managed EDR could have been better. Although there is a dedicated representative, after the initial onboarding conversation, there was not much follow-up until renewal came up."
"One thing they could improve is evolving from an EDR to an MDR, like Blackpoint."
"Reporting for Huntress Managed EDR could be better."
"I'd like it if Huntress could scan for software that's out of date or has open vulnerabilities. That would be useful for us. Scanning for vulnerable software would be helpful. Also, we've set it up to create a ticket in our ticketing system when there's an alert. It would be nice if closing that ticket would also close the Huntress alert. It doesn't do that right now, but they're working on adding that feature."
"Installing Huntress on a Mac presents a challenge for end users due to the operating system's security features, which require administrator privileges for installation."
"The initial setup requires a little bit of experience with configuration."
"We just submitted an enhancement request reflecting the main area we want to see improvement in; the APIs. Currently, we're able to build dashboards, but it's somewhat backward because we use our MDM API to create them. Lookout should provide API to customers so we can query our data and use it in our cloud, and this is the only outstanding area for improvement with the product right now."
"From the analysis that we've done, they do seem to be maybe a step behind in trying to enter the market with a new solution. But when they do pick up, they do come out with some good products."
 

Pricing and Cost Advice

"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."
"I am using the Community edition."
"I don't like that they have different types of licenses."
"The cost depends on your chosen license type, like Pro or other licenses."
"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."
"It is "expensive" and flexible."
"The price of the product is not very economical."
"Our customers have expressed that the price is high."
"I rate the product's price a five or six on a scale of one to ten, where one is cheap, and ten is expensive since it is a fairly priced product."
"It is simple. It is reasonable. They raised my prices this year. We never like price increases, but they continue to add value, so we just keep adding agents as we grow and as our clients grow."
"The tool’s price is very good. You just need to pay for the standard license. However, you need to pay the additional cost for Microsoft Defender."
"While other options have emerged since Huntress' arrival, I believe it still offers the best value for the features and services it provides."
"Regarding the pricing for Huntress Managed EDR, I was amazed when I heard the price; I thought it was going to be way more than what it is based on the quality."
"The pricing is competitive, in line with Huntress's offerings, and aligns well with our business model."
"I believe Huntress Managed EDR is fairly priced. The value I get from it in terms of peace of mind justifies the expense. You can justify it as a business expense."
"It is fair. They provide good value for the product that they deliver. I have had one price increase in the entire time I have used them. They added a bunch of features and then said that they have to increase our price a little bit. That is a fair way to handle it."
"Lookout is definitely on the lower end when it comes to price point and that seems to be the only differentiator. The technology is in place in this space and it's really about who is coming in at the better price point now."
"The pricing is fair; it's comparable to our previous solution, and we carried out multiple POCs and POVs (proof of value). The product is worth the money we pay for it."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
885,728 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
15%
Manufacturing Company
8%
Comms Service Provider
8%
Computer Software Company
8%
Computer Software Company
13%
Manufacturing Company
8%
Insurance Company
6%
Financial Services Firm
5%
Computer Software Company
14%
Manufacturing Company
10%
Financial Services Firm
9%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise20
Large Enterprise48
By reviewers
Company SizeCount
Small Business55
Midsize Enterprise4
By reviewers
Company SizeCount
Small Business2
Large Enterprise5
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What needs improvement with Huntress?
One downside of Huntress Managed EDR, compared to the CrowdStrike agent, is that it takes a longer time to push it ou...
What is your primary use case for Huntress?
Our current use cases for Huntress Managed EDR involve replacing CrowdStrike as our endpoint protection in our K-12 s...
What advice do you have for others considering Huntress?
Huntress Managed EDR is a great tool for the SMB market. There were many customizations and features I initially didn...
What is your experience regarding pricing and costs for Lookout?
The pricing is a little expensive. We are currently looking at comparisons with other solutions, including Umbrella.
What needs improvement with Lookout?
There is nothing we have come across that we've desired.
What is your primary use case for Lookout?
We use Lookout for mobile devices, such as phones.
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
CipherCloud
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Information Not Available
Find out what your peers are saying about Huntress Managed EDR vs. Lookout and other solutions. Updated: March 2026.
885,728 professionals have used our research since 2012.