Best Enterprise Extended Detection and Response (XDR) Platforms

How Many Extended Detection and Response (XDR) Platforms Products Does G2 Track?

Total Products under this Category: 103

Category Stats (Sep 2026)

  • Average Rating: 4.55/5 (↑0.01 vs Aug 2026) The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Singularity AI SIEM (+3.53%) - Among all products in this category, Singularity AI SIEM recorded the largest rating increase compared to last month

Last updated: September 15, 2026

How Does G2 Rank Extended Detection and Response (XDR) Platforms Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 6,500+ Authentic Reviews
  • 103+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Extended Detection and Response (XDR) Platforms

G2 Grid® for Extended Detection and Response (XDR) Platforms plotting products by satisfaction and market presence

Highlighted products: TrendAI Vision One, CrowdStrike Falcon Cloud Security, CrowdStrike Falcon Endpoint Protection Platform, Sophos Endpoint, Cortex XDR, Wiz, Palo Alto Cortex XSIAM, and Microsoft Defender XDR.

Underlying data: [Grid® JSON](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms/grids.json?focus%5B%5D=trendai-vision-one&focus%5B%5D=crowdstrike-falcon-cloud-security&focus%5B%5D=crowdstrike-falcon-endpoint-protection-platform&focus%5B%5D=sophos-endpoint&focus%5B%5D=palo-alto-networks-cortex-xdr&focus%5B%5D=wiz-wiz&focus%5B%5D=palo-alto-cortex-xsiam&focus%5B%5D=microsoft-defender-xdr&segment=enterprise)

TrendAI Vision One

TrendAI Vision One is a cloud-native security operations platform, serving cloud, hybrid, and on-premises environments. It combines ASM and XDR in a single console to effectively manage cyber risk across your organization. The platform provides powerful risk insights, earlier threat detection, and automated risk and threat response options. Utilize the platform’s predictive machine learning and advanced security analytics for a broader perspective and advanced context. TrendAI Vision One integrates with its own expansive protection platform portfolio and industry-leading global threat intelligence, in addition to a broad ecosystem of purpose-built and API-driven third-party integrations.

Average Rating: 4.7/5.0

Total Reviews: 246

How Do G2 Users Rate TrendAI Vision One?

  • Has the product been a good partner in doing business?: 9.0/10 (Category avg: 9.2/10)
  • Unified Visibility: 9.1/10 (Category avg: 9.0/10)
  • Threat Hunting: 9.0/10 (Category avg: 9.2/10)
  • Rule-Based Detection: 8.9/10 (Category avg: 8.8/10)

Who Is the Company Behind TrendAI Vision One?

  • Seller: TrendAI
  • Company Website:
  • Year Founded: 1988
  • HQ Location: Tokyo
  • LinkedIn® Page: www.linkedin.com
    7,996 employees on LinkedIn®
  • Ownership: OTCMKTS:TMICY

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 52% Large, 34% Medium

What Do G2 Reviewers Say About TrendAI Vision One?

AI-generated summary from verified user reviews

Pros
  • Users benefit from centralized visibility across environments, enhancing risk management and simplifying security analysis and monitoring.
  • Users appreciate the intuitive and unified security dashboard of TrendAI Vision One for seamless monitoring and response.
  • Users appreciate the ease of use of TrendAI Vision One, simplifying security management with intuitive dashboards and automation.
  • Users value the centralized cloud management of TrendAI Vision One, highlighting its ease of setup and integration.
  • Users value the unified threat detection capabilities of TrendAI Vision One, enhancing cybersecurity and reducing alert fatigue.
Cons
  • Users find the interface complex and suggest improving third-party integrations for better usability and accessibility.
  • Users experience integration issues with third-party tools, making the platform less flexible and user-friendly.
  • Users face a steep learning curve with TrendAI Vision One, which complicates setup and effective usage of features.
  • Users note the high cost of TrendAI Vision One compared to competitors, impacting overall value perception.
  • Users feel the limited features of TrendAI Vision One hinder reporting capabilities and integration options.

What Are Recent G2 Reviews of TrendAI Vision One?

What Are G2 Users Discussing About TrendAI Vision One?

CrowdStrike Falcon Endpoint Protection Platform

Organizations today face a serious challenge: managing numerous security vendors and tools while confronting an ever-evolving threat landscape. Sophisticated adversaries are becoming smarter, faster, and more evasive, launching complex attacks that can strike in minutes or even seconds. Traditional security approaches struggle to keep pace, leaving businesses vulnerable. The CrowdStrike Falcon Platform addresses this by offering a unified, cloud-native solution. It consolidates previously siloed security solutions and incorporates third-party data into a single platform with one efficient and resource-conscious agent, leveraging advanced AI and real-time threat intelligence. This approach simplifies security operations, speeds analyst decision making, and enhances protection to stop the breach, allowing organizations to reduce risk with less complexity and lower costs. CrowdStrike's Falcon Platform includes: - Endpoint Security: Secure the endpoint, stop the breach - Identify Protection: Identity is the front line, defend it - Next-Gen SIEM: The future of SIEM, today - Data Protection: Real-time data protection from endpoint to cloud - Exposure Management: Understand risk to stop breaches - Charlotte AI: Powering the next evolution of the SOC

Average Rating: 4.7/5.0

Total Reviews: 544

How Do G2 Users Rate CrowdStrike Falcon Endpoint Protection Platform?

  • Has the product been a good partner in doing business?: 9.3/10 (Category avg: 9.2/10)
  • Unified Visibility: 9.2/10 (Category avg: 9.0/10)
  • Threat Hunting: 9.3/10 (Category avg: 9.2/10)
  • Rule-Based Detection: 9.5/10 (Category avg: 8.8/10)

Who Is the Company Behind CrowdStrike Falcon Endpoint Protection Platform?

  • Seller: CrowdStrike
  • Company Website:
  • Year Founded: 2011
  • HQ Location: Sunnyvale, CA
  • Twitter: @CrowdStrike
    110,809 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    21,058 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Security Analyst, Security Engineer
  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 46% Large, 40% Medium

What Do G2 Reviewers Say About CrowdStrike Falcon Endpoint Protection Platform?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the lightweight performance and powerful threat detection of CrowdStrike Falcon, enhancing security without slowing down systems.
  • Users commend the effective threat detection capabilities of CrowdStrike Falcon, ensuring robust security without system slowdowns.
  • Users appreciate the ease of use of CrowdStrike Falcon, benefiting from its lightweight impact and efficient incident management.
  • Users appreciate the advanced real-time threat protection of CrowdStrike Falcon, ensuring efficient security without system performance issues.
  • Users praise the exceptional threat detection of CrowdStrike Falcon, noting its effectiveness against both known and unknown threats.
Cons
  • Users find the cost prohibitive for smaller organizations, especially with additional modules increasing overall expenses.
  • Users find the complexity of the user interface and additional costs challenging, complicating their overall experience.
  • Users face a steep learning curve with CrowdStrike’s query language, making transitions from other platforms challenging.
  • Users find the limited features challenging, especially concerning cost and technical accessibility for smaller businesses.
  • Users find that pricing can be a barrier for smaller organizations, complicating access to advanced features.

What Are Recent G2 Reviews of CrowdStrike Falcon Endpoint Protection Platform?

What Are G2 Users Discussing About CrowdStrike Falcon Endpoint Protection Platform?

CrowdStrike Falcon Cloud Security

Crowdstrike Falcon Cloud Security is the only CNAPP to stop breaches in the cloud Built for today’s hybrid and multi-cloud environments, Falcon Cloud Security protects the entire cloud attack surface - from code to runtime - by combining continuous agentless visibility with real-time detection and response. At runtime, Falcon Cloud Security delivers best-in-class cloud workload protection and real-time cloud detection and response (CDR) to stop active threats across hybrid environments. Integrated with the CrowdStrike Falcon platform, it correlates signals across endpoint, identity, and cloud to detect sophisticated cross-domain attacks that point solutions miss—enabling teams to respond faster and stop breaches in progress. To reduce risk before attacks occur, Falcon Cloud Security also delivers agentless-driven posture management that proactively shrinks the cloud attack surface. Unlike typical solutions, Crowdstrike enriches cloud risk detections with adversary intelligence and graph-based context, enabling security teams to prioritize exploitable exposures and prevent breaches before they happen. Customers using Falcon Cloud Security consistently see measurable results: 89% faster cloud detection and response 100x reduction in false positives by prioritizing exploitable, business-critical risk 83% reduction in cloud security licenses due to elimination of redundant tools

Average Rating: 4.5/5.0

Total Reviews: 215

How Do G2 Users Rate CrowdStrike Falcon Cloud Security?

  • Has the product been a good partner in doing business?: 9.0/10 (Category avg: 9.2/10)
  • Unified Visibility: 5.0/10 (Category avg: 9.0/10)
  • Threat Hunting: 9.0/10 (Category avg: 9.2/10)
  • Rule-Based Detection: 8.3/10 (Category avg: 8.8/10)

Who Is the Company Behind CrowdStrike Falcon Cloud Security?

  • Seller: CrowdStrike
  • Company Website:
  • Year Founded: 2011
  • HQ Location: Sunnyvale, CA
  • Twitter: @CrowdStrike
    110,809 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    21,058 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 48% Large, 33% Medium

What Do G2 Reviewers Say About CrowdStrike Falcon Cloud Security?

AI-generated summary from verified user reviews

Pros
  • Users value the real-time threat detection of CrowdStrike Falcon Cloud Security, enhancing their protection in cloud environments.
  • Users value the real-time threat detection of CrowdStrike Falcon Cloud Security, enhancing their cloud security management significantly.
  • Users value the real-time detection efficiency of CrowdStrike Falcon Cloud Security for enhanced cloud threat management.
  • Users value the real-time vulnerability detection of CrowdStrike Falcon Cloud Security, enhancing proactive risk management and security.
  • Users appreciate the ease of use of CrowdStrike Falcon Cloud Security, making it a top choice for cloud cybersecurity.
Cons
  • Users find CrowdStrike Falcon Cloud Security to be expensive, particularly challenging for small businesses with budget constraints.
  • Users face issues with alert fatigue and response lag, calling for improved prioritization and better support resources.
  • Users experience alert fatigue and desire improved response times and better training resources for CrowdStrike Falcon.
  • Users find the feature complexity of CrowdStrike Falcon Cloud Security can overwhelm new users and necessitate a learning curve.
  • Users report a challenging learning curve with CrowdStrike Falcon, especially for those unfamiliar with similar tools.

What Are Recent G2 Reviews of CrowdStrike Falcon Cloud Security?

Sophos Endpoint

Sophos Endpoint is the world’s most comprehensive endpoint protection solution. Built to stop the widest range of attacks, Sophos Endpoint has been proven to prevent even the most advanced ransomware and malware by leveraging a unique combination of next-generation techniques. This includes the ability to detect never-before-seen malware with deep learning, stop ransomware with Sophos anti-ransomware technology, and deny attacker tools with signatureless exploit prevention. Sophos Endpoint also includes root cause analysis to provide insight into threats, and instant malware removal to ensure no attack remnants remain.

Average Rating: 4.7/5.0

Total Reviews: 794

How Do G2 Users Rate Sophos Endpoint?

  • Has the product been a good partner in doing business?: 9.3/10 (Category avg: 9.2/10)
  • Unified Visibility: 9.1/10 (Category avg: 9.0/10)
  • Threat Hunting: 9.4/10 (Category avg: 9.2/10)
  • Rule-Based Detection: 9.3/10 (Category avg: 8.8/10)

Who Is the Company Behind Sophos Endpoint?

  • Seller: Sophos
  • Company Website:
  • Year Founded: 1985
  • HQ Location: Oxfordshire
  • Twitter: @Sophos
    36,759 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    5,550 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: IT Manager, IT Director
  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 60% Medium, 18% Small

What Do G2 Reviewers Say About Sophos Endpoint?

AI-generated summary from verified user reviews

Pros
  • Users find Sophos Endpoint easy to use, enhancing deployment and monitoring efficiency while ensuring robust protection.
  • Users value the robust protection offered by Sophos Endpoint against threats like ransomware, ensuring their data's safety.
  • Users appreciate the robust threat protection of Sophos Endpoint, ensuring efficient security for enterprise endpoints.
  • Users value the strong real-time threat detection of Sophos Endpoint, enabling quick response and effective protection.
  • Users value the easy management of Sophos Endpoint, which simplifies monitoring and policy enforcement across devices.
Cons
  • Users experience slow performance with Sophos Endpoint, particularly on older systems, affecting overall usability.
  • Users experience high resource usage with Sophos Endpoint, causing system slowdowns and impacting productivity during critical tasks.
  • Users report a steep learning curve with Sophos Endpoint's advanced configuration and troubleshooting, complicating effective use.
  • Users find the difficult configuration of Sophos Endpoint overwhelming for new administrators and complex for initial setups.
  • Users have noted that Sophos Endpoint has high CPU usage, especially during scans and on older hardware, affecting performance.

What Are Recent G2 Reviews of Sophos Endpoint?

What Are G2 Users Discussing About Sophos Endpoint?

Cortex XDR

Cortex XDR is the industry’s first extended detection and response platform that stops modern attacks by integrating data from any source. With Cortex XDR, you can harness the power of AI, analytics and rich data to detect stealthy threats. Your SOC team can cut through the noise and focus on what matters most with intelligent alert grouping and incident scoring. Cross-data insights accelerate investigations, so you can streamline incident response and recovery. Cortex XDR delivers peace of mind with best-in-class endpoint protection that achieved the highest combined protection and detection scores in the MITRE ATT&CK® round 3 evaluation. The Cortex XDR platform collects and analyzes all data, so you can gain complete visibility and holistic protection to secure what’s next.

Average Rating: 4.5/5.0

Total Reviews: 82

How Do G2 Users Rate Cortex XDR?

  • Has the product been a good partner in doing business?: 9.0/10 (Category avg: 9.2/10)
  • Unified Visibility: 9.5/10 (Category avg: 9.0/10)
  • Threat Hunting: 9.6/10 (Category avg: 9.2/10)
  • Rule-Based Detection: 7.7/10 (Category avg: 8.8/10)

Who Is the Company Behind Cortex XDR?

  • Seller: Palo Alto Networks
  • Company Website:
  • Year Founded: 2005
  • HQ Location: Santa Clara, CA
  • Twitter: @PaloAltoNtwks
    128,951 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    23,492 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 41% Medium, 40% Large

What Do G2 Reviewers Say About Cortex XDR?

AI-generated summary from verified user reviews

Pros
  • Users value the important alert notifications from Cortex XDR, which enhance security without overwhelming them.
  • Users find the ease of use of Cortex XDR exceptional, appreciating its intuitive interface and effective management.
  • Users love the unique features of Cortex XDR, especially its effective threat detection without compromising system speed.
  • Users value the rapid and accurate threat detection capabilities of Cortex XDR, enhancing their cybersecurity experience.
  • Users value the unified detection and response capability of Cortex XDR, enhancing threat investigation efficiency and accuracy.
Cons
  • Users find limited features in Cortex XDR, with restrictions affecting core OS functionalities and usability issues on lower-end systems.
  • Users experience a noticeable performance impact on lower-end systems when using the Cortex XDR agent.
  • Users face compatibility issues with Cortex XDR, limiting the installation of certain essential software on their systems.
  • Users find the complexity of Cortex XDR challenging, especially when customizing detections and tuning policies.
  • Users find the management complexity of Cortex XDR challenging, with a steep learning curve for policy tuning.

What Are Recent G2 Reviews of Cortex XDR?

What Are G2 Users Discussing About Cortex XDR?

Wiz

Wiz transforms cloud security for customers – including more than 50% of the Fortune 100 – by enabling a new operating model. With Wiz, organizations can democratize security across the development lifecycle, empowering them to build fast and securely. Its Cloud Native Application Protection Platform (CNAPP) consolidates CSPM, KSPM, CWPP, Vulnerability management, IaC scanning, CIEM, DSPM into a single platform. Wiz drives visibility, risk prioritization, and business agility. Protecting Your Cloud Environments Requires a Unified, Cloud Native Platform. Wiz connects to every cloud environment, scans every layer, and covers every aspect of your cloud security - including elements that normally require installing agents. Its comprehensive approach has all of these cloud security solutions built in. Hundreds of organizations worldwide, including 50 percent of the Fortune 100, to rapidly identify and remove critical risks in cloud environments. Its customers include Salesforce, Slack, Mars, BMW, Avery Dennison, Priceline, Cushman & Wakefield, DocuSign, Plaid, and Agoda, among others. Wiz is backed by Sequoia, Index Ventures, Insight Partners, Salesforce, Blackstone, Advent, Greenoaks, Lightspeed and Aglaé. Visit https://www.wiz.io for more information.

Average Rating: 4.7/5.0

Total Reviews: 841

How Do G2 Users Rate Wiz?

  • Has the product been a good partner in doing business?: 9.4/10 (Category avg: 9.2/10)
  • Unified Visibility: 9.2/10 (Category avg: 9.0/10)
  • Threat Hunting: 9.2/10 (Category avg: 9.2/10)
  • Rule-Based Detection: 9.6/10 (Category avg: 8.8/10)

Who Is the Company Behind Wiz?

  • Seller: Wiz
  • Company Website:
  • Year Founded: 2020
  • HQ Location: New York, US
  • Twitter: @wiz_io
    24,733 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    3,147 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CISO, Security Engineer
  • Top Industries: Financial Services, Computer Software
  • Company Size: 53% Large, 39% Medium

What Do G2 Reviewers Say About Wiz?

AI-generated summary from verified user reviews

Pros
  • Users value the robust APIs and user-friendly UI, appreciating ongoing improvements and a wealth of insightful issues.
  • Users value the continuous enhancement of security features by Wiz, appreciating the support and innovation in their tool.
  • Users appreciate the ease of use of Wiz, benefiting from its user-friendly interface and seamless integration.
  • Users value the comprehensive visibility Wiz provides, enhancing security and prioritizing essential aspects of their cloud environment.
  • Users appreciate the easy setup of Wiz, enabling a quick and seamless integration into their workflows.
Cons
  • Users find a significant learning curve in mastering Wiz's extensive features, which can hinder initial usage.
  • Users find the feature limitations of Wiz frustrating, especially with complex management and reporting challenges.
  • Users note that improvement is needed for laggy query responses and better dashboard reporting capabilities.
  • Users identify improvements needed in dashboard reporting and feature streamlining for better usability and budgeting.
  • Users find the interface overwhelming initially, facing a steep learning curve and complex licensing issues.

What Are Recent G2 Reviews of Wiz?

Palo Alto Cortex XSIAM

Product Description: Palo Alto Networks' Cortex XSIAM is an AI-driven security operations platform designed to transform traditional Security Operations Centers by integrating and automating key functions such as data centralization, threat detection, and incident response. By leveraging machine learning and automation, it enables organizations to detect and respond to threats more efficiently, reducing manual workloads and improving overall security posture. Key Features and Functionality: - Data Centralization: Aggregates data from various sources into a unified platform, providing comprehensive visibility across the enterprise. - AI-Powered Threat Detection: Utilizes machine learning algorithms to identify anomalies and potential threats in real-time. - Automated Incident Response: Streamlines response processes through automation, enabling rapid mitigation of security incidents. - Integrated SOC Capabilities: Combines functions such as Extended Detection and Response , Security Orchestration, Automation, and Response , Attack Surface Management , and Security Information and Event Management into a cohesive platform, eliminating the need for multiple disparate tools. - Scalability: Designed to handle large volumes of data and adapt to the evolving needs of modern enterprises. Primary Value and Problem Solved: Cortex XSIAM addresses the challenges of disjointed data, weak threat defense, and heavy reliance on manual work in traditional SOCs. By centralizing data and automating security operations, it simplifies processes, enhances threat detection accuracy, and accelerates incident response times. This transformation enables organizations to proactively outpace threats, reduce operational costs, and achieve a more robust security posture.

Average Rating: 4.5/5.0

Total Reviews: 96

How Do G2 Users Rate Palo Alto Cortex XSIAM?

  • Has the product been a good partner in doing business?: 8.5/10 (Category avg: 9.2/10)
  • Unified Visibility: 7.9/10 (Category avg: 9.0/10)
  • Threat Hunting: 8.3/10 (Category avg: 9.2/10)
  • Rule-Based Detection: 9.3/10 (Category avg: 8.8/10)

Who Is the Company Behind Palo Alto Cortex XSIAM?

  • Seller: Palo Alto Networks
  • Company Website:
  • Year Founded: 2005
  • HQ Location: Santa Clara, CA
  • Twitter: @PaloAltoNtwks
    128,951 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    23,492 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 40% Large, 36% Medium

What Do G2 Reviewers Say About Palo Alto Cortex XSIAM?

AI-generated summary from verified user reviews

Pros
  • Users value the best-in-class log management of Palo Alto Cortex XSIAM, benefiting from its effective alerting and integration features.
  • Users find the user-friendly dashboard of Palo Alto Cortex XSIAM essential for monitoring and understanding alerts effectively.
  • Users value the real-time monitoring capabilities of Palo Alto Cortex XSIAM, enhancing threat detection and response efficiency.
  • Users value the simple and user-friendly interface of Palo Alto Cortex XSIAM, making monitoring effortless.
  • Users value the good dashboard creation tools in Palo Alto Cortex XSIAM, enhancing ease of use and implementation.
Cons
  • Users note that Palo Alto Cortex XSIAM requires significant resources, impacting implementation time and increasing infrastructure costs.
  • Users find the complexity of implementation for Palo Alto Cortex XSIAM to be time-consuming and resource-intensive.
  • Users find the cost of Palo Alto Cortex XSIAM to be high, especially for smaller businesses.
  • Users face dashboard issues with XSIAM, finding it difficult to monitor assets and navigate the interface.
  • Users face difficult setup issues with Palo Alto Cortex XSIAM, requiring expertise and extensive time for initial implementation.

What Are Recent G2 Reviews of Palo Alto Cortex XSIAM?

What Are G2 Users Discussing About Palo Alto Cortex XSIAM?

Microsoft Defender XDR

Microsoft Defender XDR is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks.

Average Rating: 4.5/5.0

Total Reviews: 271

How Do G2 Users Rate Microsoft Defender XDR?

  • Has the product been a good partner in doing business?: 8.9/10 (Category avg: 9.2/10)
  • Unified Visibility: 8.7/10 (Category avg: 9.0/10)
  • Threat Hunting: 9.0/10 (Category avg: 9.2/10)
  • Rule-Based Detection: 8.8/10 (Category avg: 8.8/10)

Who Is the Company Behind Microsoft Defender XDR?

  • Seller: Microsoft
  • Year Founded: 1975
  • HQ Location: Redmond, Washington
  • Twitter: @microsoft
    13,091,739 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    232,750 employees on LinkedIn®
  • Ownership: MSFT

Who Uses This Product?

  • Who Uses This: Software Engineer, Security Consultant
  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 39% Large, 38% Medium

What Do G2 Reviewers Say About Microsoft Defender XDR?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the automation of response and remediation in Microsoft Defender XDR, enhancing their security management efficiency.
  • Users appreciate the quick and responsive customer support of Microsoft Defender XDR, enhancing their overall experience.
  • Users value the powerful defense of Microsoft Defender XDR against diverse cyber threats, enhancing their overall security.
  • Users appreciate the ease of deployment of Microsoft Defender XDR, finding it user-friendly and straightforward to set up.
  • Users appreciate the detection efficiency of Microsoft Defender XDR, highlighting effective isolation and ease of deployment.
Cons
  • Users are concerned about the high licensing costs and the complexity of setup and management with Microsoft Defender XDR.
  • Users find the steep learning curve of Microsoft Defender XDR can complicate initial setup and effective use.
  • Users often struggle with the steep learning curve of Microsoft Defender XDR, making setup and management time-consuming.
  • Users report high licensing costs and a complex setup that can hinder efficient implementation of Microsoft Defender XDR.
  • Users report slow performance during implementation, which varies by user but affects overall experience.

What Are Recent G2 Reviews of Microsoft Defender XDR?

What Are G2 Users Discussing About Microsoft Defender XDR?

SentinelOne Singularity Endpoint

SentinelOne® Singularity™ Endpoint is an autonomous endpoint security platform that stops threats in real-time. It unifies endpoint protection (EPP), endpoint detection and response (EDR), and autonomous remediation to stop ransomware, zero-day exploits, supply chain attacks, and fileless malware. Singularity Endpoint protects workstations, mobile devices, servers, and cloud workloads across SaaS, on-premises, hybrid, and air-gapped environments. Behavioral and static AI detection models stop known and unknown threats by identifying how threats behave, not just what they look like. SentinelOne catches what signatures miss, without waiting on updates. Storyline® automatically correlates telemetry into one visual attack story, and patented one-click rollback restores systems to a trusted state in seconds. The result is stronger protection with fewer incidents and less operational overhead: lower dwell time, fewer false positives, and faster response. With Purple AI™, teams accelerate triage, threat hunting, and investigation. From alert to verdict without manual investigation. Purple AI's Agentic Investigation runs the analysis, surfaces the evidence, and tells your team exactly what to do next. The same SentinelOne agent that protects endpoints also defends every identity behind them. Detect credential abuse, shrink your attack surface, and contain identity threats from one console. Seamless integration of endpoint, identity, cloud, and third-party telemetry eliminates blind spots. Built AI-native from day one, Singularity Endpoint delivers best-in-industry coverage across Windows, macOS, Linux, and mobile operating systems, including legacy OSes. Trusted by more than 11,500 customers, SentinelOne is a six-time Gartner® Magic Quadrant™ Leader for Endpoint Protection.

Average Rating: 4.7/5.0

Total Reviews: 205

How Do G2 Users Rate SentinelOne Singularity Endpoint?

  • Has the product been a good partner in doing business?: 9.2/10 (Category avg: 9.2/10)
  • Unified Visibility: 9.2/10 (Category avg: 9.0/10)
  • Threat Hunting: 9.4/10 (Category avg: 9.2/10)
  • Rule-Based Detection: 9.1/10 (Category avg: 8.8/10)

Who Is the Company Behind SentinelOne Singularity Endpoint?

  • Seller: SentinelOne
  • Company Website:
  • Year Founded: 2013
  • HQ Location: Mountain View, CA
  • Twitter: @SentinelOne
    57,863 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    6,571 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 45% Medium, 36% Large

What Do G2 Reviewers Say About SentinelOne Singularity Endpoint?

AI-generated summary from verified user reviews

Pros
  • Users value the tool efficiency of SentinelOne Singularity Endpoint, appreciating its user-friendly interface and effective threat detection.
  • Users find the ease of integration with Nable RMM and setup straightforward for daily operations.
  • Users praise the exceptional malware protection of SentinelOne, effectively stopping threats before they can cause harm.
  • Users find SentinelOne Singularity Endpoint to be a highly useful tool for incident notification and investigation.
  • Users appreciate the quick alerts and feature-rich capabilities of SentinelOne, enhancing security management and support.
Cons
  • Users face update issues with SentinelOne Singularity, leading to login problems and cumbersome agent management.
  • Users find the difficult learning curve of SentinelOne Singularity Endpoint challenging, especially for beginners navigating its features.
  • Users find the frequent updates challenging, as rapid changes lead to login issues and a steep learning curve.
  • Users report challenges with agent removal issues impacting application functionality and requiring improvement in uninstallation processes.
  • Users report ineffective alerts that hinder troubleshooting and prevent them from addressing application issues effectively.

What Are Recent G2 Reviews of SentinelOne Singularity Endpoint?

What Are G2 Users Discussing About SentinelOne Singularity Endpoint?

Check Point Endpoint Security

Harmony Endpoint is a complete endpoint security solution offering a fleet of advanced endpoint threat prevention capabilities so you can safely navigate today’s menacing threat landscape. It provides a comprehensive system to proactively prevent, detect, and remediate evasive malware attacks.

Average Rating: 4.5/5.0

Total Reviews: 255

How Do G2 Users Rate Check Point Endpoint Security?

  • Has the product been a good partner in doing business?: 8.8/10 (Category avg: 9.2/10)

Who Is the Company Behind Check Point Endpoint Security?

Who Uses This Product?

  • Who Uses This: Network Engineer, Cyber Security Engineer
  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 53% Medium, 28% Large

What Do G2 Reviewers Say About Check Point Endpoint Security?

AI-generated summary from verified user reviews

Pros
  • Users value the strong security features of Check Point Endpoint Security, enhancing threat prevention and management efficiency.
  • Users appreciate the integration simplicity of Check Point Endpoint Security, effectively combining multiple protective features into one solution.
  • Users value the comprehensive multilayered threat prevention offered by Check Point Endpoint Security for effective protection.
  • Users value the comprehensive protection offered by Check Point Endpoint Security, ensuring secure collaboration and data integrity.
  • Users appreciate the ease of management of Check Point Endpoint Security, ensuring seamless protection without system slowdowns.
Cons
  • Users face slow performance due to Check Point Endpoint Security's heavy resource usage, impacting older devices and workflows.
  • Users often experience high resource usage with Check Point Endpoint Security, leading to slower performance on older devices.
  • Users find the difficult configuration process challenging, often requiring expert knowledge for initial setup and policies.
  • Users feel the product is expensive, especially when compared to similar security solutions on the market.
  • Users report a steep learning curve for setup and policy tuning, particularly impacting smaller teams without IT support.

What Are Recent G2 Reviews of Check Point Endpoint Security?

What Are G2 Users Discussing About Check Point Endpoint Security?

Cynet

Cynet is the unified, AI-powered cybersecurity platform that delivers robust and comprehensive protection for security teams while maximizing operational efficiency for managed service providers (MSPs). This platform consolidates a wide array of security capabilities into a single, user-friendly interface, ensuring that organizations can effectively safeguard their digital assets without the complexity often associated with multi-solution environments. Cynet’s platform simplifies security management by integrating various functionalities, such as endpoint protection, threat detection, and incident response, into one cohesive system. This integration not only streamlines operations but also allows organizations to allocate their resources more effectively, ultimately enhancing their overall security posture. One of the standout features of Cynet’s platform is its remarkable performance in the MITRE ATT&CK Evaluations. Cynet delivered 100% visibility and 100% analytic coverage without requiring any configuration changes three years in a row. This capability ensures that organizations can monitor their environments comprehensively and respond to threats with precision. The platform’s built-in analytics and reporting tools provide actionable insights, enabling users to make informed decisions about their cybersecurity strategies. Additionally, Cynet offers 24/7 expert support, which is crucial for organizations that may not have in-house cybersecurity expertise. This round-the-clock assistance ensures that users can quickly address any security incidents or concerns, minimizing potential downtime and damage. The combination of advanced technology and dedicated support positions Cynet as a valuable partner for SMEs and service providers looking to enhance their cybersecurity measures. In summary, Cynet’s unified, AI-powered cybersecurity platform stands out in the crowded cybersecurity market by offering a unified solution tailored to the needs of MSPs. Its comprehensive features, exceptional performance in industry evaluations, and continuous expert support make it a compelling choice for organizations seeking to bolster their cybersecurity defenses while maintaining operational efficiency.

Average Rating: 4.7/5.0

Total Reviews: 218

How Do G2 Users Rate Cynet?

  • Has the product been a good partner in doing business?: 9.5/10 (Category avg: 9.2/10)
  • Unified Visibility: 9.0/10 (Category avg: 9.0/10)
  • Threat Hunting: 9.3/10 (Category avg: 9.2/10)
  • Rule-Based Detection: 9.3/10 (Category avg: 8.8/10)

Who Is the Company Behind Cynet?

  • Seller: Cynet
  • Company Website:
  • Year Founded: 2014
  • HQ Location: Boston, MA
  • LinkedIn® Page: www.linkedin.com
    335 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: SOC Analyst, Technical Engineer
  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 58% Medium, 30% Small

What Do G2 Reviewers Say About Cynet?

AI-generated summary from verified user reviews

Pros
  • Users value the ease of use of Cynet, appreciating its straightforward yet comprehensive functionalities for effective protection.
  • Users value the unified platform of Cynet, which offers effective security through streamlined endpoint protection and detection.
  • Users praise Cynet for its effective threat detection and seamless monitoring, enhancing overall cybersecurity effortlessly.
  • Users commend Cynet for its exceptional customer support, ensuring a smooth and efficient deployment experience.
  • Users praise Cynet for its flawless threat monitoring and detection, enhancing overall cybersecurity effectiveness effortlessly.
Cons
  • Users find limited customization options in reporting and dashboards, affecting their ability to present necessary data.
  • Users note a lack of customization in reports, wishing for more options to tailor data presentation.
  • Users find the reporting features lacking, with requests for better customization and visualization tools.
  • Users find feature limitations in Cynet, with a desire for more customization options and broader integrations.
  • Users note limited features, such as basic reporting and few third-party integrations, impacting customization and deeper controls.

What Are Recent G2 Reviews of Cynet?

What Are G2 Users Discussing About Cynet?

ESET PROTECT

Stay one step ahead of known and emerging cyber threats with our AI-native, prevention-first approach. ESET combines the power of AI and human expertise to make protection easy and effective. Experience best-in-class protection thanks to our in-house global cyber threat intelligence, compiled and examined for over 30 years, which drives our extensive R&D network led by industry-acclaimed researchers. ESET PROTECT, our cloud-first XDR cybersecurity platform combines next-gen prevention, detection, and proactive threat hunting capabilities. ESET's highly customizable solutions include local support and have minimal impact on performance, identify and neutralize known and emerging threats before they can be executed, support business continuity, and reduce the cost of implementation and management. HOW YOUR ORGANIZATION WILL BENEFIT - Improved protection against ransomware and zero-day threats via cloud-based sandboxing technology. - Helps comply with data regulations thanks to full disk encryption capabilities on Windows and macOS. - Easily accessible ESET PROTECT console improves TCO of security management. - Single-pane-of-glass remote management for visibility of threats, users, and quarantined items. - Company endpoints and mobiles are protected via advanced multilayered technology, now with brute-force attack protection.

Average Rating: 4.6/5.0

Total Reviews: 961

How Do G2 Users Rate ESET PROTECT?

  • Has the product been a good partner in doing business?: 8.9/10 (Category avg: 9.2/10)
  • Unified Visibility: 9.7/10 (Category avg: 9.0/10)
  • Threat Hunting: 9.8/10 (Category avg: 9.2/10)
  • Rule-Based Detection: 9.7/10 (Category avg: 8.8/10)

Who Is the Company Behind ESET PROTECT?

  • Seller: ESET
  • Company Website:
  • Year Founded: 1992
  • HQ Location: Bratislava, Slovak Republic
  • Twitter: @ESET
    275,702 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    2,014 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: IT Manager, Network Administrator
  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 47% Medium, 45% Small

What Do G2 Reviewers Say About ESET PROTECT?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the straightforward installation of ESET PROTECT, making it easy for anyone to get started.
  • Users commend ESET PROTECT for its robust ransomware protection, ensuring comprehensive security across multiple endpoints.
  • Users commend the reliability of ESET PROTECT, especially its strong protection against ransomware across multiple platforms.
  • Users value the great security of ESET PROTECT, ensuring computer safety with minimal impact on performance.
  • Users value the centralized management of ESET PROTECT, enabling effortless device oversight and enhanced threat detection.
Cons
  • Users find a learning curve with ESET PROTECT, as some features are complex and require expensive licenses.
  • Users find the difficult configuration process of ESET PROTECT time-consuming and sometimes overly complex for setup and management.
  • Users find the dashboard not user-friendly, citing excessive clicks for accessing necessary data and managing settings.
  • Users report a lack of clarity in policy management and task handling, complicating effective security oversight.
  • Users find difficult navigation in ESET PROTECT, requiring advanced skills and patience during implementation and setup.

What Are Recent G2 Reviews of ESET PROTECT?

What Are G2 Users Discussing About ESET PROTECT?

Sophos Fusion

Sophos Fusion is a comprehensive, cloud-based cybersecurity management platform that unifies all Sophos next-generation security solutions into a single, intuitive interface. Designed to simplify and enhance cybersecurity management, it enables organizations to efficiently oversee and secure their IT infrastructure with advanced AI-driven protection and real-time data insights. Key Features and Functionality: - Unified Management Console: Provides centralized control over all Sophos security products, including endpoint, server, mobile, public cloud, firewall, email, wireless, and Zero Trust Network Access (ZTNA). - AI-Powered Cyber Defenses: Utilizes advanced artificial intelligence to deliver proactive threat detection and automated incident response, ensuring robust protection against evolving cyber threats. - Deep Data Analytics: Offers synchronized cross-product telemetry and access to SophosLabs Intelix threat intelligence, facilitating comprehensive cross-product investigations and informed decision-making. - High Availability and Scalability: Built on a cloud-native architecture hosted on public cloud platforms like AWS and Azure, ensuring high availability, seamless failover, and the ability to scale security measures as organizational needs grow. - Secure Architecture: Features a secure design with global services for identity and session management, scalable regional API and product services, and strict access controls to maintain data integrity and confidentiality. Primary Value and Solutions Provided: Sophos Fusion addresses the challenges IT administrators face in managing multiple security tools, responding to complex threats, and ensuring consistent protection across networks. By consolidating security management into a single platform, it reduces administrative burden, automates threat responses, and provides real-time insights, leading to: - Time and Effort Savings: Customers report a 50% reduction in time and effort spent managing IT security. - Enhanced Security Posture: Achieves an 85% reduction in security incidents through integrated and automated defenses. - Faster Issue Identification: Realizes a 90% reduction in time to identify issues, enabling swift remediation and minimizing potential damage. By integrating all security solutions into a cohesive system, Sophos Fusion empowers organizations to proactively defend against cyber threats, streamline security operations, and adapt to the dynamic cybersecurity landscape effectively.

Average Rating: 4.4/5.0

Total Reviews: 62

How Do G2 Users Rate Sophos Fusion?

  • Has the product been a good partner in doing business?: 8.7/10 (Category avg: 9.2/10)
  • Unified Visibility: 8.9/10 (Category avg: 9.0/10)
  • Threat Hunting: 9.4/10 (Category avg: 9.2/10)
  • Rule-Based Detection: 9.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Sophos Fusion?

  • Seller: Sophos
  • Year Founded: 1985
  • HQ Location: Oxfordshire
  • Twitter: @Sophos
    36,759 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    5,550 employees on LinkedIn®
  • Ownership: LSE:SOPH

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 55% Medium, 30% Small

What Do G2 Reviewers Say About Sophos Fusion?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Sophos Central, benefiting from its centralized and intuitive management platform.
  • Users value the strong security features of Sophos Central, ensuring effective protection for their endpoints.
  • Users appreciate the all-in-one solution of Sophos Central, enjoying seamless management of diverse cybersecurity tools.
  • Users value the easy integration of Sophos Central, enabling effective management of varied security aspects effortlessly.
  • Users value the effective management capabilities of Sophos Central, enhancing visibility and security for their operations.
Cons
  • Users experience slow performance with Sophos Central, particularly on lower-end devices, hindering efficient operation.
  • Users report update issues with Sophos Central, leading to device vulnerabilities and requiring manual interventions for fixes.
  • Users experience device limitations with Sophos Central, including memory usage and lack of on-premises options.
  • Users face access issues with Sophos Central, complicating management and limiting flexibility for multiple clients.
  • Users report alert issues with Sophos Central, including false positives and inconsistent sender approvals, causing frustration.

What Are Recent G2 Reviews of Sophos Fusion?

What Are G2 Users Discussing About Sophos Fusion?

Vectra AI Platform

The Vectra AI Platform helps security teams detect and stop real attacks that evade traditional security controls across network, identity, cloud, and SaaS environments. It provides real-time visibility into how attackers move through hybrid and multi-cloud environments, enabling teams to understand attack activity early and respond before incidents escalate. By correlating attacker behavior across the full attack lifecycle, the platform reduces alert noise and surfaces high-confidence threats that matter most. Analysts spend less time triaging isolated alerts and more time investigating complete attack stories with the context needed to take decisive action. Vectra AI unifies detection, investigation, and coordinated response across identity, endpoint, and network controls. Its approach is aligned with real-world defensive techniques, reflected in the highest number of vendor references in MITRE D3FEND and recognition as a Leader in the 2025 Gartner® Magic Quadrant™ for Network Detection and Response. Organizations worldwide rely on Vectra AI to detect attacks others miss and demonstrate measurable improvements in security operations.

Average Rating: 4.3/5.0

Total Reviews: 20

How Do G2 Users Rate Vectra AI Platform?

  • Has the product been a good partner in doing business?: 8.1/10 (Category avg: 9.2/10)
  • Unified Visibility: 10.0/10 (Category avg: 9.0/10)
  • Threat Hunting: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind Vectra AI Platform?

  • Seller: Vectra AI
  • Year Founded: 2011
  • HQ Location: San Jose, CA
  • Twitter: @Vectra_AI
    3,269 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    682 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 75% Large, 15% Medium

What Do G2 Reviewers Say About Vectra AI Platform?

AI-generated summary from verified user reviews

Pros
  • Users find the ease of understanding with the Vectra AI Platform enhances their learning experience significantly.
  • Users find Vectra AI Platform to have an easy-to-use interface and a clear learning method for new users.

What Are Recent G2 Reviews of Vectra AI Platform?

ExtraHop

ExtraHop is the cybersecurity partner enterprises trust to reveal cyber risk and build business resilience. The ExtraHop RevealX platform for network detection and response and network performance management uniquely delivers the instant visibility and unparalleled decryption capabilities organizations need to expose the cyber risks and performance issues that other tools can’t see. When organizations have full network transparency with ExtraHop, they can investigate smarter, stop threats faster, and keep operations running. RevealX deploys on premises or in the cloud. It addresses the following use cases: - Ransomware - Zero trust - Software supply chain attacks - Lateral movement and C2 communication - Security hygiene - Network and Application Performance Management - IDS - Forensics and more A few of our differentiators: Continuous and on-demand PCAP: Full packet processing is superior to NetFlow and yields higher quality detections. Strategic decryption across a variety of protocols, including SSL/TLS, MS-RPC, WinRM, and SMBv3, gives you better visibility into early-stage threats hiding in encrypted traffic as they attempt to move laterally across your network. Protocol coverage: RevealX decodes more than 70 network protocols. Cloud-scale machine learning: Rather than relying on limited "on-box" compute power for analysis and detections, RevealX uses sophisticated cloud-hosted and cloud-scale machine learning workloads to identify suspicious behavior in real time and create high-fidelity alerts. ExtraHop was named a Leader in The Forrester Wave™: Network Analysis and Visibility, Q2 2023. Key Technology Integration and Go-to-Market Partners: CrowdStrike: RevealX integrates with CrowdStrike Falcon® LogScale, Falcon Insight XDR, Falcon Threat Graph, and Falcon Intelligence. Splunk SOAR AWS Google Cloud Security Founded in 2007, ExtraHop is privately held and headquartered in Seattle, Wash. To learn more, visit www.extrahop.com.

Average Rating: 4.6/5.0

Total Reviews: 68

How Do G2 Users Rate ExtraHop?

  • Has the product been a good partner in doing business?: 9.3/10 (Category avg: 9.2/10)
  • Unified Visibility: 9.7/10 (Category avg: 9.0/10)
  • Threat Hunting: 9.6/10 (Category avg: 9.2/10)
  • Rule-Based Detection: 9.6/10 (Category avg: 8.8/10)

Who Is the Company Behind ExtraHop?

  • Seller: ExtraHop Networks
  • Year Founded: 2007
  • HQ Location: Seattle, Washington
  • Twitter: @ExtraHop
    10,695 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    774 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Hospital & Health Care, Transportation/Trucking/Railroad
  • Company Size: 69% Large, 26% Medium

What Do G2 Reviewers Say About ExtraHop?

AI-generated summary from verified user reviews

Pros
  • Users value the all-in-one monitoring solution of ExtraHop, appreciating its comprehensive visibility and insightful analysis of network traffic.
  • Users value the comprehensive monitoring capabilities of ExtraHop, enhancing network visibility and analysis effectively.
  • Users appreciate the easy deployment of ExtraHop, benefiting from seamless installation on both physical and virtual networks.
  • Users value the responsive support from ExtraHop's knowledgeable Customer Success teams, enhancing their overall experience and satisfaction.

What Are Recent G2 Reviews of ExtraHop?

What Are G2 Users Discussing About ExtraHop?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated