Try our new research platform with insights from 80,000+ expert users

Intercept X Endpoint vs Wazuh comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Intercept X Endpoint
Ranking in Extended Detection and Response (XDR)
11th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
103
Ranking in other categories
Endpoint Protection Platform (EPP) (7th), Endpoint Detection and Response (EDR) (8th), ZTNA (9th), Managed Detection and Response (MDR) (8th), Ransomware Protection (3rd)
Wazuh
Ranking in Extended Detection and Response (XDR)
3rd
Average Rating
7.4
Reviews Sentiment
6.6
Number of Reviews
45
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (2nd)
 

Mindshare comparison

As of February 2025, in the Extended Detection and Response (XDR) category, the mindshare of Intercept X Endpoint is 1.5%, down from 3.7% compared to the previous year. The mindshare of Wazuh is 12.9%, up from 9.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Extended Detection and Response (XDR)
 

Featured Reviews

Khandokar Rabbi - PeerSpot reviewer
Used for endpoint security, ransomware protection, virus protection, and server security
Intercept X Endpoint is deployed on the cloud in our organization. Previously, we had two ransomware attacks when we were using Kaspersky as an endpoint security. We didn't face any ransomware attacks after using Intercept X Endpoint for endpoint security. Intercept X Endpoint has simplified our malware detection. Since we have already implemented the policies in the cloud, all the malware is automatically detected. The solution also detects and removes new malware that can also come from the cloud AI engine. Integrating Intercept X Endpoint with our current security infrastructure was very easy. In my opinion, Sophos is a better solution because we are using Sophos endpoint security and network security. These two things sync with each other and monitor the packets and network traffic. No other vendor has simultaneous devices to check everything. I would recommend the solution to other users. Overall, I rate the solution an eight out of ten.
Sandip_Patel - PeerSpot reviewer
Evaluating robust file monitoring with insights for community support improvements
Wazuh's most valuable features include file monitoring and compliance reporting, which do not require excessive costs. These aspects are vital as they provide alerts for changes and facilitate the monitoring of compliance. The platform is also relatively easy to set up and operate. Reports are straightforward to extract and prove useful for compliance requirements.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Technical support is responsive and adept."
"The solution protects us."
"Intercept X helps with internal alerts, application access, and triggering support teams."
"It is an intelligent tool."
"The solution is overall quite good, the services are performing well. It is very good for those who are using standard PC configurations. It does not block their system up by taking up a lot of resources."
"The client isolation feature is a very effective feature."
"There do not seem to be any limitations to the scalability of this product."
"The EDR (Enhanced Data Detection and Response) and the DLP (Data Loss Prevention) components are valuable assets."
"The configuration assessment and Pile integrity monitoring features are decent."
"One of the most beneficial features of Wazuh, particularly in the context of security needs, is the machine learning data handling capability."
"Integrates with various open-source and paid products, allowing for flexibility in customization based on use cases."
"Its cost-effectiveness is the most valuable aspect."
"The product's initial setup phase was easy."
"The most valuable feature of Wazuh is its EDR capabilities."
"I like that the solution is on top of the Kubernetes stack."
"Wazuh is simple to use for PCI compliance."
 

Cons

"The tool should be made compatible with Linux and Microsoft operating systems."
"There should be a report including a flowchart or diagram. It will be useful to evaluate the software’s effectiveness."
"Sophos Intercept X doesn't have its own firewall that utilizes the Windows Firewall or intrusion prevention."
"It would be beneficial if you could expand support for Windows 7 and Windows Server 2008 without charging an additional fee."
"The ADR functionalities feel like they aren't mature enough. It hasn't been a long time since Sophos has offered reproduction. Due to the fact that it's so young, it has fewer functionalities than other and more mature ADR solutions."
"When we load Intercept X, it puts a load on the device. When it is scanning, it slows down the device. A system with basic specifications completely slows down till the scan is complete. They should improve this part."
"Installing Sophos Intercept X was not as straightforward, as we had to ask support and had to work with an integrator, though the process didn't take much time, e.g. it was completed within one hour."
"The customer service and support could be improved in regards to response time. It could be faster."
"There could be a hardware monitoring tool for the solution."
"Alerts should be specific rather than repeatedly triggered by integrating multiple factors. This issue needs improvement to create a more efficient alert system."
"Some features, like alerting, are complex with Wazuh."
"We would like to see more improvements on the cloud."
"Wazuh doesn't cover sources of events as well as Splunk. You can integrate Splunk with many sources of events, but it's a painful process to take care of some sources of events with Wazuh."
"Wazuh should come up with more in-built rules and integrations for the cloud."
"The tool does not provide CTI to monitor darknet."
"An issue I noticed is with tag values in certain rules not functioning properly."
 

Pricing and Cost Advice

"The price of this solution is a little high compared to competitors because they do not have a proper pricing structure."
"The solution’s pricing is high."
"The price of Sophos Intercept X is expensive. The license is paid on an annual basis. There are extra features that can be added depending on the endpoints. The solution is priced twice as much as the Comodo solution."
"I would rate the price 7 out of 10, where 1 is most expensive and 10 is cheapest. Also, a little reduction in price can be a great move for Intercept X Endpoint."
"It was fairly and reasonably priced."
"You are able to purchase more licenses for the number of devices or servers that you require. There are many other features available but our license does not include them, such as XDR, which is endpoint detection and response. We have not explored the new features as of yet but plan to in the coming future."
"Licensing fees are paid monthly."
"As I am not responsible for paying the bills I cannot comment on the pricing."
"Wazuh is not an expensive solution."
"Wazuh is a cheaply priced product."
"There is not a license required for Wazuh."
"Wazuh is open-source, therefore it is free. You can purchase support for $1,000 a year."
"Wazuh is open-source, so I think it's an option for a small organization that cannot go for enterprise-grade solutions like Splunk."
"The solution's cost is above the average."
"Wazuh is a good tool, but the open-source version has scalability limitations."
"It is a free-of-cost solution."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
838,713 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
20%
Manufacturing Company
6%
Financial Services Firm
6%
Government
6%
Computer Software Company
16%
Comms Service Provider
8%
University
7%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Crodwstrike Falcon compare with Sophos Intercept X?
I like that Crowdstrike Falcon allows me to easily correlate data between my firewalls. Its detection and machine learning are very valuable features. Crowdstrike Falcon also successfully prevents ...
What do you like most about Wazuh?
Integrates with various open-source and paid products, allowing for flexibility in customization based on use cases.
What needs improvement with Wazuh?
I am investigating more about the community support for Wazuh. I can't provide a definitive answer yet. An issue I noticed is with tag values in certain rules not functioning properly. It's unclear...
What is your primary use case for Wazuh?
I am currently evaluating and using Wazuh for file monitoring and compliance reporting. We are in the process of conducting a POC to understand how the rules work. I lead this effort to explore and...
 

Also Known As

Sophos Intercept X
No data available
 

Overview

 

Sample Customers

Flexible Systems
Information Not Available
Find out what your peers are saying about Intercept X Endpoint vs. Wazuh and other solutions. Updated: January 2025.
838,713 professionals have used our research since 2012.