TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Palo Alto Networks Cortex XDR

    Score8.4 out of 10
    N/ACortex XDR (formerly Traps) replaces traditional antivirus with multi-method prevention, a proprietary combination of malware and exploit prevention methods that protect users and endpoints from known and unknown threats.N/A

    Sophos Intercept X

    Score9 out of 10
    N/ASophos Endpoint Protection (Sophos EPP) with Intercept X is an endpoint security product providing an antivirus / antimalware solution that when upgraded with Intercept X or Intercept X Advanced provides advanced threat detection and EDR capabilities.

    $28

    per year per user

    Pricing
    Palo Alto Networks Cortex XDRSophos Intercept X
    Editions & Modules
    No answers on this topic
    Intercept X Advanced
    $28
    per year per user
    Intercept X Advanced with XDR
    $48
    per year per user
    Sophos Managed Threat Response
    $79
    per year per user
    Offerings
    Pricing Offerings
    Palo Alto Networks Cortex XDRSophos Intercept X
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional DetailsPricing is for a 3-year commitment. Government and Education pricing available.
    More Pricing Information
    Community Pulse
    Palo Alto Networks Cortex XDRSophos Intercept X
    Considered Both Products
    Palo Alto Networks
    Chose Palo Alto Networks Cortex XDR
    Traps and its integration with central management tools by Palo Alto and wildfire was a better fit for our environment. Others provided similar levels of protection but in some cases did not live up to expectations as traps did. Palo Alto also worked with us to better Traps, …
    Incentivized
    Sophos
    Chose Sophos Intercept X
    Sophos is by far the simplest of the products to setup and going in a very short period of time at a very similar price point. Trend is overly complex and relied on an appliance for each ESX node meaning you lose one appliance and then you lose protection across multiple …
    Incentivized
    Chose Sophos Intercept X
    Sophos is a leader in endpoint protection, the product does what is intended well with strong support from their threat team working to create new signatures. Sophos also is less resource intensive than many endpoint protection suites. No current signature-based endpoint …
    Incentivized
    Key User Insights
    Would buy again
    89%
    Would buy again
    8 Answers
    90%
    Would buy again
    18 Answers
    Delivers good value for the price
    88%
    Delivers good value for the price
    7 Answers
    100%
    Delivers good value for the price
    20 Answers
    Happy with the feature set
    89%
    Happy with the feature set
    8 Answers
    100%
    Happy with the feature set
    20 Answers
    Lived up to sales and marketing promises
    86%
    Lived up to sales and marketing promises
    6 Answers
    100%
    Lived up to sales and marketing promises
    18 Answers
    Implementation went as expected
    88%
    Implementation went as expected
    7 Answers
    89%
    Implementation went as expected
    17 Answers
    Features
    Palo Alto Networks Cortex XDRSophos Intercept X
    Endpoint Security
    Comparison of Endpoint Security features of Palo Alto Networks Cortex XDR and Sophos Intercept X
    Feature
    Palo Alto Networks Cortex XDR
    -
    Ratings
    Sophos Intercept X
    8.9
    18 Ratings
    4% above category average
    Anti-Exploit Technology00 Ratings7.118 Ratings
    Endpoint Detection and Response (EDR)00 Ratings9.018 Ratings
    Centralized Management00 Ratings10.018 Ratings
    Hybrid Deployment Support00 Ratings8.03 Ratings
    Infection Remediation00 Ratings10.018 Ratings
    Vulnerability Management00 Ratings8.44 Ratings
    Malware Detection00 Ratings10.018 Ratings
    Best Alternatives
    Palo Alto Networks Cortex XDRSophos Intercept X
    Small Businesses
    Sophos Intercept X for Server
    Score7.3 out of 10
    Acronis Cyber Protect Cloud
    Score9.1 out of 10
    Medium-sized Companies
    InsightIDR
    Score9.5 out of 10
    Watchguard Endpoint Security
    Score8.8 out of 10
    Enterprises
    Kaspersky EDR Optimum
    Score9.2 out of 10
    ESET PROTECT
    Score9.1 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Palo Alto Networks Cortex XDRSophos Intercept X
    Likelihood to Recommend
    9.0
    (13 ratings)
    9.0
    (35 ratings)
    Likelihood to Renew
    -
    (0 ratings)
    10.0
    (1 ratings)
    Usability
    7.0
    (2 ratings)
    9.0
    (2 ratings)
    Support Rating
    10.0
    (3 ratings)
    8.1
    (12 ratings)
    Implementation Rating
    -
    (0 ratings)
    9.0
    (1 ratings)
    User Testimonials
    Palo Alto Networks Cortex XDRSophos Intercept X
    Likelihood to Recommend
    Palo Alto Networks
    Malware that doesn’t leave files behind has become widely available. Anyone who can afford to reverse this trend should purchase technology. Application whitelisting isn’t for everyone, and Palo Alto Networks Traps can help. Enterprises looking for a low-affected, next-generation solution with high protection should consider it. PAN Traps is a great product at a reasonable price, and I highly recommend it.
    Incentivized
    Read full review
    Sophos
    To be frank, this product is fairly expensive. So I would recommend this to companies that are mid-sized or larger to condone the cost of the purchase. It does save me a significant amount of time in my day - being able to glance at the dashboard and see if there are any outstanding issues that require my attention, as not much digging must be done to accomplish this. So for our company, with a short-staffed IT department, it's incredibly helpful to us. We also qualify for Educational pricing which brings the cost down - which helps tremendously
    Incentivized
    Read full review
    Pros
    Palo Alto Networks
    • Direct Access to devices via Live Terminal which provides operations with scripting, triage, and preservation of artifacts.
    • Behavioral Indicators of Compromise which provides alerts on events regarding groups of hosts and their signatures.
    • Querying complex data sets involving a variety of devices for network connections, hashes, DNS, etc.
    Incentivized
    Read full review
    Sophos
    • Sophos Intercept X is great at preventing malware infections and rolling back their effects. I have seen this happen hundreds of times since we installed it
    • When combined with Sophos Central, you have an easy to use dashboard where you can manage all installations from a single pane of glass.
    • It's easy to deploy on machines and stays updated.
    • Good reporting features including alerts sent to the admin if there's ever something wrong with it.
    Incentivized
    Read full review
    Cons
    Palo Alto Networks
    • Traps doesn't seem to function as a traditional A/V very well, so it's better as another layer to your endpoint protection
    • Traps can cause issues with some legacy or custom programs, so exceptions may have to be made
    • Traps falsely identifies things as malicious at times, this is not often though
    Incentivized
    Read full review
    Sophos
    • Sophos OOTB policies are very strict and they don't offer anything less strict without you creating new custom policies. I'm sure this is deliberate because the product starts you out in the safest way possible but it means that you will have lots of calls to your tech support desk when you first deploy it unless you do somewhat extensive testing beforehand.
    • Sophos Intercept X is currently broken (at least the DLP component) by having secure boot turned on in the UEFI/BIOS. If any user wants to be able to write data to a USB drive or floppy from their PC (yes we still have a couple users who need to use floppies) we have to turn off secure boot on their PC, even if the DLP policy for that user/PC combination specifies that the user and PC are allowed to write to USB/floppy. This would be a very serious problem if it weren't for the fact that we have very few users who need to write files to USB. For us it's OK but I bet it would be a deal-breaker for others.
    • I don't see a whole lot of evidence that Intercept X is any different than any other anti-virus, so maybe their admin alerts just don't clearly identify when they have identified a zero-day threat or maybe we just haven't had any zero-day threats.
    Incentivized
    Read full review
    Likelihood to Renew
    Palo Alto Networks
    No answers on this topic
    Sophos
    We have gotten a great product for the price. Easy to maintain and set up on new devices. Support is great and easy to work with and understand.
    Incentivized
    Read full review
    Usability
    Palo Alto Networks
    Cortex XDR does a very good job of blocking suspicious and threatening items. However, as with all software of this nature, it will sometimes block known-good items. The difficulty is in manually whitelisting these known-good items. The interface to whitelist is confusing even for a seasoned IT professional and has been the single most frustrating experience of using Cortex XDR
    Incentivized
    Read full review
    Sophos
    The usability has never been a problem. Sophos Intercept X is a program you can install and let protect your company without much intervention. Apart from a few policies, Sophos will keep you protected better than most any product on the market. Sophos Intercept X works quite well when you are looking to "tighten your grip" on user's access to websites, programs, and add-ons.
    Read full review
    Support Rating
    Palo Alto Networks
    The support we receive from Palo Alto is one of the best aspects of Traps. It is very easy to recommend their support. It seems much easier to connect directly with someone with a deep understanding of the product rather than other companies where you basically have to make an airtight case that it is some kind of non-standard issue that can't be solved with existing documentation. Palo Alto digs deep and helps with advanced troubleshooting to get things working.
    Incentivized
    Read full review
    Sophos
    Most of the support reps are fantastic. There have been a few though that have had to be escalated via Account Manager when they haven't followed up but this is a rare instance, and often followed up by the Support Manager for APAC.
    Incentivized
    Read full review
    Implementation Rating
    Palo Alto Networks
    No answers on this topic
    Sophos
    Best thing was the help pushing out via group policy and was able to get instructions for that on sophos site
    Incentivized
    Read full review
    Alternatives Considered
    Palo Alto Networks
    Traps is the slickest interface, easy to use and intuitive rule making, and the rest just didn't quite stack up to the performance level of Traps. McAfee and Kaspersky just hog processor and RAM power. I didn't like the interface and functionality of SentinelOne as much as Traps. Palo Alto really put a lot of time into the development of this software, and had some of the founding fathers of IT Security heading the development process. Can't beat that.
    Incentivized
    Read full review
    Sophos
    Webroot Endpoint Protection is not even in the same league as Sophos Intercept-X. I have tested and compared both sides by side, run simulations and it's not even close. Plus the Sophos central management is so much better. Easier to view user activities and apply policies and remediate threats. Sophos is the clear winner between these two products.
    Incentivized
    Read full review
    Return on Investment
    Palo Alto Networks
    • After putting Palo Alto Networks Cortex XDR on a user's system, users came back with a positive response that there are no performance issues now.
    • We are able to track and control granular suspicious and malicious activities.
    • Web controls are missing, which if they would have been there would have been very helpful.
    Incentivized
    Read full review
    Sophos
    • Once our technical and commercial areas got certified, the ROI over the time spent, is great. Actual customers, and/or new ones with other tools, feel safe and advised, once they get in touch with us.
    • When Sophos EndPoint is being compared against Web Management Tools (competitors), we have failed to deliver, nevertheless, there is a version of Sophos Central (Cloud) which achieves this requirement at 100% and more, since is Cloud Based (on AWS).
    • We are grateful to be on Sophos "Radar" as a Platinum Partner, and "The Americas" valued partner, we have seen our business grow, thanks to this kind of technology, throughout the years.
    Incentivized
    Read full review
    ScreenShots

    Palo Alto Networks Cortex XDR Screenshots

    Screenshot of a Cortex XDR overviewScreenshot of a view of the Cortex XDR dashboardScreenshot of a view of the Cortex XDR dashboardScreenshot of a view of the Cortex XDR dashboard

    Sophos Intercept X Screenshots

    Product screenshotProduct screenshotProduct screenshot