We just raised a $30M Series A: Read our story

Compare Cortex XDR by Palo Alto Networks vs. Malwarebytes

Cancel
You must select at least 2 products to compare!
Featured Review
Find out what your peers are saying about Cortex XDR by Palo Alto Networks vs. Malwarebytes and other solutions. Updated: November 2021.
553,954 professionals have used our research since 2012.
Quotes From Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros
"The threat Grid with the ability to observe the sandboxing, analyze, and perform investigations of different malicious files has been great.""It doesn't impact the devices. It is an agent-based solution, and we see no performance knock on cell phones. That was a big thing for us, especially in the mobile world. We don't see battery degradation like you do with other solutions which really drain the battery, as they're constantly doing things. That can shorten the useful life of a device.""One of the best features of AMP is its cloud feature. It doesn't matter where the device is in regards to whether it's inside or outside of your network environment, especially right now when everybody's remote and taken their laptops home. You don't have to be VPNed into the environment for AMP to work. AMP will work anywhere in the world, as long as it has an Internet connection. You get protection and reporting with it. No matter where the device is, AMP has still got coverage on it and is protecting it. You still have the ability to manage and remediate things. The cloud feature is the magic bullet. This is what makes the solution a valuable tool as far as I'm concerned.""It is a very stable program.""Another of my favorite features is called the Device Trajectory, where it shows everything that's going on, on a computer. It shows the point in time when a virus is downloaded, so you can see if the user was surfing the internet or had a program open. It shows every running process and file access on the computer and saves it like a snapshot when it detects something malicious. It also has a File Trajectory, so you can even see if that file has been found on any of your other computers that have AMP.""The ability to detonate a particular problem in a sandbox environment and understand what the effects are, is helpful. We're trying, for example, to determine, when people send information in, if an attachment is legitimate or not. You just have to open it. If you can do that in a secure sandbox environment, that's an invaluable feature. What you would do otherwise would be very risky and tedious.""If somebody has been compromised, the question always is: How has it affected other devices in the network? Cisco AMP gives you a very neat view of that.""Among the most valuable features are the exclusions. And on the scalability side, we can integrate well with the SIEM orchestration engine and a number of applications that are proprietary or open source."

More Cisco Secure Endpoint Pros »

"It's a nice product that's stable and scalable.""The behavior-based detection feature is valuable.""Stability is one of the features we like the most.""One of the main benefits of the solution is its intelligence to correlate the events into an incident.""Provides behavior-based detection which offers many benefits over signature-based detection.""Its ability to react to cyber data attacks is awesome. That is pretty much the use of it. What blows your mind is the ability to access your assets remotely and see what is actually going on with them. You can not only see them in a console. You can also react very rapidly to your assets that are compromised.""The most valuable for us is the correlation feature.""It collects and caches and the knowledge of machine learning from different customers to take to the cloud. It makes it better to use for everybody. It allows for quick learning and updates and can, therefore, offer zero-day malware security. This sharing of metadata helps make the solution very safe."

More Cortex XDR by Palo Alto Networks Pros »

"The protection is really good with Malwarebytes. It's also user friendly and quite easy to set up.""I like the solution's ability to detect potentially unwanted programs. For some reason, it seems superior to other solutions, or at least in comparison to McAfee.""It is intuitive and easy to use. For the most part, it does a good job of catching things. It is good at stopping stuff. I did a couple of tests with a password cracker. I tried to load that on, and Malwarebytes didn't let me do that, which was pretty good. It has a rollback feature that I haven't seen with any other company. If one of your endpoints are hit with mass ransomware, you could actually roll it back. I watched a demo of them do that, and it was pretty sweet.""The solution is very good at scanning.""The installation process is very easy, especially since it is on the cloud.""Being able to cloud manage it from just a cloud login is valuable. We can get to it from anywhere, which is really helpful. The fact that we can remediate from the cloud console is one of our favorite features.""The dashboard actually is good and it is simple.""Being able to carry out a full scan on your system."

More Malwarebytes Pros »

Cons
"The GUI needs improvement, it's not good.""The connector updates are very easily done now, and that's improving. Previously, the connector had an issue, where almost every time it needed to be updated, it required a machine reboot. This was always a bit of an inconvenience and a bug. Because with a lot of software now, you don't need to do that and shouldn't need to be rebooting all the time.""Maybe there is room for improvement in some of the automated remediation. We have other tools in place that AMP feeds into that allow for that to happen, so I look at it as one seamless solution. But if you're buying AMP all by itself, I don't know if it can remove malicious software after the fact or if it requires the other tools that we use to do some of that.""We have had some problems with updates not playing nice with our environment. This is important, because if there is a new version, we need to test it thoroughly before it goes into production. We cannot just say, "There's a new version. It's not going to give us any problems." With the complexity of the solution using multiple engines for multiple tasks, it can sometimes cause performance issues on our endpoints. Therefore, we need to test it before we deploy. That takes one to three days before we can be certain that the new version plays nice with our environment.""I would like to see integration with Cisco Analytics.""In Orbital, there are tons of prebuilt queries, but there is not a lot of information in lay terms. There isn't enough information to help us with what we're looking for and why we are looking for it with this query. There are probably a dozen queries in there that really focus on what I need to focus on, but they are not always easy to find the first time through.""The technical support is very slow.""The room for improvement would be on event notifications. I have mine tuned fairly well. I do feel that if you subscribe to all the event notification types out-of-the-box, or don't really go through and take the time to filter out events, the notifications can become overwhelming with information. Sometimes, when you're overwhelmed with information, you just say, "I'm not going to look at anything because I'm receiving so much." I recommend the vendor come up with a white paper on the best practices for event notifications."

More Cisco Secure Endpoint Cons »

"Being able to filter the events to see those that are related to the actual alert would save time spent by the engineer.""Cortex does not offer an on-premises solution. However, some customers would prefer not to be on the cloud. It would be ideal if it could offer something on-prem as well.""There are some third-party solutions that are difficult to integrate with, which is something that can be improved.""I would like to see some additional features related to email protection included.""The installation should be easier and the Palo Alto pre-sales and sales teams should have more information on the product because they don't know what they are selling.""It would be better if they could educate the customers more. Some sort of seminars and roadshows will help educate the customers and show what the product can do. The price could be better. It would also help if they had a team for deployment and support.""There's an overall lack of features.""It is not very strong in terms of endpoint management. It should have additional features like DLP, encryption, or advanced device control. Currently, Cortex is good in terms of the security of the endpoints, but it is not as good as other vendors in terms of the management of the endpoint."

More Cortex XDR by Palo Alto Networks Cons »

"If they want to compete with bigger players, they should consider adding items like threat detection and website warnings.""I would like to see a little more detail in the log. So, when an event occurs, I'd like to know not just when it happened and on what device, but what activity was taking place on the machine at the time so that we can drill down. If we get a false positive, we have to do a lot of research and go back and forth with our end-users to know why it was a false positive. So, having a little more detail around detections and events would probably be my most asked feature.""The product has major problems in almost every facet of setup and use including setup, configuration, lack of functionality, lack of stability, false positives, questionable reporting, inability to protect from randsomeware and poor technical support and development.""We have noticed that when the solution is doing the scanning, all the scanning activities make the device heavier. It slows down your machine.""They can include advanced scanning and improve reporting. I scan malware on the pen drive. Some more reports need to be added for that. It should also provide better protection because we have a new version of the malware.""Overall, I haven't found any ways the solution lacks in features or usability.""Requires increased efficiency in terms of detecting false positives.""Notifications are lacking."

More Malwarebytes Cons »

Pricing and Cost Advice
"The Enterprise Agreement is like an all-you-can-eat buffet of Cisco products. In that vein, it was very affordable.""We have a license for 3,000 users and if we get up to 3,100 users, it doesn't stop working, but on the next renewal date you're supposed to go in there and add that extra 100 licenses. It's really good that they let you grow and expand and then pay for it. Sometimes, with other products, you overuse a license and they just don't work.""Our company was very happy with the price of Cisco AMP. It was about a third of what we were paying for System Center Endpoint Protection.""There is also the Cisco annual subscription plus my management time in terms of what I do with the Cisco product. I spend a minimal amount of time on it though, just rolling out updates as they need them and monitoring the console a couple of times a day to ensure nothing is out of control. Cost-wise, we are quite happy with it.""Whenever you are doing the licensing process, I would highly advise to look at what other Cisco solutions you have in your organization, then evaluate if an Enterprise Agreement is the best way to go. In our case, it was the best way to go. Since we had so many other Cisco products, we were able to tie those in. We were actually able to get several Cisco security solutions for less than if we had bought three or four Cisco security solutions independently or ad hoc.""The pricing and licensing are reasonable. The cost of AMP for Endpoints is inline with all the other software that has a monthly endpoint cost. It might be a little bit higher than other antivirus type products, but we're only talking about a dollar a month per user. I don't see that cost as being an issue if it's going to give us the confidence and security that we're looking for. We have had a lot of success and happiness with what we're using, so there's no point in changing.""The visibility that we have into the endpoint and the forensics that we're able to collect give us value for the price. This is not an overly expensive solution, considering all the things that are provided. You get great performance and value for the cost.""There are a couple of different consumption models: Pay up front, or if you have an enterprise agreement, you can do a monthly thing. Check your licensing possibilities and see what's best for your organization."

More Cisco Secure Endpoint Pricing and Cost Advice »

"It's about $55 per license on a yearly basis.""If one wishes to work with another team or large number of users at a future point, he must purchase a license for them.""We pay about $50,000 USD per year for a bundle that includes Cortex XDR.""The pricing is okay, although direct support can be expensive.""I don't have any issues with the pricing. We are satisfied with the price.""Every customer has to pay for a license because it doesn't work with what you get from a managed services provider.""The price of the solution is high for the license and in general.""The pricing is a little high. It is per user per year."

More Cortex XDR by Palo Alto Networks Pricing and Cost Advice »

"The cost may be something in the ballpark of $20-25 a year per computer.""It is expensive.""I would say that it's affordable. It costs much less than Sentinel One, CrowdStrike, or anything of that nature. But, at the same time, you are getting what you pay for. So I would say it's one of the best when you're comparing traditional NextGen AVs like Webroot that aren't the best in the bunch.""It is really expensive. We've got between 30 and 40 licenses every year, and for the number of licenses that we have, we're finding that Malwarebytes on average costs between $900 and $1,000 more per year than comparable options. We're paying about $3,300 per year for these licenses. There are no additional costs beyond the standard licensing fee.""Its cost is around $60 a machine. The cost of the total solution for 250 people is about $8,500 a year. If we add EDR to it, it will bring that cost up to about $15,000. The cost for Carbon Black is about $25,000, which is $10,000 more, but you get all AI functions with it."

More Malwarebytes Pricing and Cost Advice »

report
Use our free recommendation engine to learn which Endpoint Protection for Business (EPP) solutions are best for your needs.
553,954 professionals have used our research since 2012.
Questions from the Community
Top Answer: The most valuable feature is signature-based malware detection.
Top Answer: Licensing fees are on a yearly basis and I am happy with the pricing.
Top Answer: The GUI needs improvement, it's not good. There are false positives in emails. At times, the emails are blocked and… more »
Top Answer: Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks.… more »
Top Answer: Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions… more »
Top Answer: Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface… more »
Top Answer: Provides successful ransomware shut down operations.
Top Answer: I would say that it's affordable. It costs much less than Sentinel One, CrowdStrike, or anything of that nature. But, at… more »
Top Answer: I'd like to see increased efficiency in terms of detecting false positives because we sometimes have cases where… more »
Comparisons
Also Known As
Cisco AMP for Endpoints
Cyvera, Cortex XDR, Palo Alto Networks Traps
Learn More
Overview

Advanced Malware Protection (AMP) is subscription-based, managed through a web-based management console, and deployed on a variety of platforms that protects endpoints, network, email and web Traffic. AMP key features include the following: Global threat intelligence to proactively defend against known and emerging threats, Advanced sandboxing that performs automated static and dynamic analysis of files against more than 700 behavioral indicators, Point-in-time malware detection and blocking in real time and Continuous analysis and retrospective security regardless of the file's disposition and Continuous analysis and retrospective security.

Cortex XDR by Palo Alto Networks is the world's first detection and response app that natively integrates network, endpoint and cloud data to stop sophisticated attacks. Cortex XDR by Palo Alto Networks accurately detects threats with behavioral analytics and reveals the root cause to speed up investigations.

Malwarebytes Endpoint Protection is delivered via Malwarebytes cloud-based endpoint management platform, is an advanced threat prevention solution for endpoints that uses a layered approach with multiple detection techniques. Malwarebytes Endpoint Protection employs multiple techniques to identify and defend against attacks at all stages of the attack chain using a highly effective mix of signature-less and matching-technology layers working both pre- and post-execution. Malwarebytes Endpoint Protection leverages our Linking Engine technology to remove all traces of infections and related artifacts - not just the primary threat payload. Its Endpoint Protection technology reduces the vulnerability surface, making the endpoint more resilient.

Offer
Learn more about Cisco Secure Endpoint
Learn more about Cortex XDR by Palo Alto Networks
Learn more about Malwarebytes
Sample Customers
Heritage Bank, Mobile County Schools, NHL University, Thunder Bay Regional, Yokogawa Electric, Sam Houston State University, First Financial Bank
CBI Health Group, University Honda, VakifBank
Knutson Construction
Top Industries
REVIEWERS
Healthcare Company19%
Government13%
Manufacturing Company13%
Financial Services Firm6%
VISITORS READING REVIEWS
Comms Service Provider24%
Computer Software Company23%
Government7%
Financial Services Firm5%
REVIEWERS
Financial Services Firm13%
Computer Software Company13%
Consumer Goods Company13%
Healthcare Company8%
VISITORS READING REVIEWS
Computer Software Company24%
Comms Service Provider22%
Government7%
Energy/Utilities Company4%
VISITORS READING REVIEWS
Comms Service Provider25%
Computer Software Company19%
Government7%
Educational Organization6%
Company Size
REVIEWERS
Small Business36%
Midsize Enterprise18%
Large Enterprise46%
VISITORS READING REVIEWS
Small Business27%
Midsize Enterprise21%
Large Enterprise52%
REVIEWERS
Small Business44%
Midsize Enterprise20%
Large Enterprise36%
VISITORS READING REVIEWS
Small Business36%
Midsize Enterprise15%
Large Enterprise49%
REVIEWERS
Small Business59%
Midsize Enterprise18%
Large Enterprise24%
Find out what your peers are saying about Cortex XDR by Palo Alto Networks vs. Malwarebytes and other solutions. Updated: November 2021.
553,954 professionals have used our research since 2012.

Cortex XDR by Palo Alto Networks is ranked 6th in Endpoint Protection for Business (EPP) with 28 reviews while Malwarebytes is ranked 21st in Endpoint Protection for Business (EPP) with 12 reviews. Cortex XDR by Palo Alto Networks is rated 8.2, while Malwarebytes is rated 7.8. The top reviewer of Cortex XDR by Palo Alto Networks writes "Has a centralized console and does predictive analysis of malware". On the other hand, the top reviewer of Malwarebytes writes "I can access it from anywhere and remediate quickly from the cloud console, but there should be a little more detail around detections and events and better pricing". Cortex XDR by Palo Alto Networks is most compared with CrowdStrike Falcon, Microsoft Defender for Endpoint, Symantec End-User Endpoint Security, SentinelOne and Check Point Harmony Endpoint, whereas Malwarebytes is most compared with Microsoft Defender for Endpoint, SentinelOne, CrowdStrike Falcon, Blackberry Protect and Webroot Business Endpoint Protection. See our Cortex XDR by Palo Alto Networks vs. Malwarebytes report.

See our list of best Endpoint Protection for Business (EPP) vendors.

We monitor all Endpoint Protection for Business (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.