No more typing reviews! Try our Samantha, our new voice AI agent.

Sophos Endpoint vs Stormshield Endpoint Security comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 19, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Protection Platform (EPP)
4th
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
120
Ranking in other categories
Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Sophos Endpoint
Ranking in Endpoint Protection Platform (EPP)
25th
Average Rating
8.2
Reviews Sentiment
7.3
Number of Reviews
66
Ranking in other categories
No ranking in other categories
Stormshield Endpoint Security
Ranking in Endpoint Protection Platform (EPP)
50th
Average Rating
8.0
Number of Reviews
3
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.7% compared to the previous year. The mindshare of Sophos Endpoint is 1.4%, up from 1.0% compared to the previous year. The mindshare of Stormshield Endpoint Security is 0.8%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.8%
Sophos Endpoint1.4%
Stormshield Endpoint Security0.8%
Other94.0%
Endpoint Protection Platform (EPP)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Ashutosh Jha - PeerSpot reviewer
Project engineer at IT Solution india private limited
Endpoint protection has strengthened malware defense and simplifies web and peripheral control
I would give Sophos Endpoint a rating of nine out of ten because it is working very well. I have cut one point because it has no solution for on-premises. Additionally, it has no solution for any Linux-based system endpoints. I have to install the server protection on Linux machines, which is why I am cutting one point for Sophos Endpoint. Sophos Endpoint should include the Linux endpoint agent and should provide a solution for Linux endpoints as well, because the server license is costly and nobody wants to use the server license on an endpoint machine. Sophos Endpoint should have a Linux endpoint independent agent as well.
it_user745593 - PeerSpot reviewer
Senior Project Manager, PMP at a transportation company with 10,001+ employees
Protects the global station and has good stability
The feature I find most valuable is that it protects the global station The solution's integration with the Windows environment could be better. The solution needs better integration with products, if it did, it would have the assumption of better security. I've been using the solution since…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"One of the things that I enjoy the most is using policy extensions. It's like having host firewalls to control USB connections. I think it's a wonderful tool to restrict use when connecting to our computers. Another important tool is Home Insights. That is an add-on to the Cortex solution. I like that because we can see all the vulnerabilities in the environment and control what assets are connected to our network."
"Previously, we had to install endpoint protection per machine and then scan and update, but Cortex XDR basically does that centrally and predictably, so we have more time to do day-to-day work rather than spend time chasing those endpoints."
"We think that this product will help us grow, as it meets our needs currently and we can grow with it over time."
"I generally believe that Cortex XDR by Palo Alto Networks is probably the best in the market right now."
"After deploying Traps, we saw the performance of the network improve by 65 to 70 percent."
"It can automatically correlate events and logs, which is very helpful for an IT administrator. It can correlate different kinds of malware activities over a network, agent, or host system. You do not need to do it manually. It is a good feature. It is also a user-friendly solution. We have deployed it on the cloud because our space does not provide any flexibility for on-premises deployment, but Palo Alto has added some flexibility to install it on-premises. It must be like the same Cortex XDR agent for all the VPN services, web filtering services, and everything else."
"The solution's most valuable feature is its ability to rapidly detect certain hardware files."
"Traps pays for itself within the first 16 months of a three-year subscription."
"Intercept X is the most valuable feature in the solution. It's more or less pretty standard. The endpoint feature allows you to basically see what is happening, and stop a wide range of threats. It's been the most unique identifier for Sophos."
"The solution's setup is straightforward and doesn't take much time to complete."
"The most valuable feature of Sophos EPP Suite is that it works on very low configuration, which is actually the best feature because if we go for SecureRight, it requires a heavy configuration to work."
"Fast response time and protection are great; these are the main advantages."
"The solution is useful for security purposes."
"Sophos EPP Suite stands out with its user-friendly dashboard and strong web filtering features for enhanced online security."
"Sophos EPP Suite's most valuable feature is ease of use."
"The central management console is valuable, as it consolidates everything into one place, allowing users to access logs and events without visiting multiple websites or consoles."
"The feature I find most valuable is that it protects the global station."
"It is very good for preventing cryptolocker attacks."
"If you need a Windows based multi-functional end-point security solution then this product is for you."
 

Cons

"Product might have some bugs."
"Limited remote connection."
"The solution should force customers to integrate with network traffic to see the full benefits of XDR."
"It should support more mobile operating systems. That is one of the cons of their infrastructure right now."
"Palo Alto Networks Cortex XDR does not detect malicious activity like in other anti-virus solutions like Trend Micro and Windows with Cisco."
"The dashboard is the area that needs to improve so that we can have the ability to drill down without having to go elsewhere to verify results."
"It's more focused on network communication. If a customer wants to increase the level of protection and start working with documents, it's impossible to integrate these features into the system. It's more of a communication-oriented system than a content security-oriented system."
"I would like to see them include NDR (Network Detection Response). Then it would work well with SIEM Response."
"Sophos EPP Suite could improve the way it can be installed. They used to have one installer and now they have two, one for the server and one for the client. I don't know the difference, it brings confusion."
"The resource usage of the agent should be less intensive on the CPU and RAM."
"The encryption features are not as good as McAfee's."
"Sophos Endpoint can improve their agent utilization because after we install Sophos Endpoint agents, the endpoints utilize their CPU and RAM, so if they improve this utilization, it can be better."
"Technical support needs to be improved."
"The solution could improve on the resource management, it is a bit heavy on the resources."
"The update part is a bit tricky in the solution...The support is not that good."
"The Sophos EPP Suite should work on key areas, especially in data management, specifically the data retention part. The data lake storage has certain limits."
"The solution's integration with the Windows environment could be better."
"Release speed for newer versions. When a new OS is released, you've got to wait half year to get the new version that covers the new Windows OS."
"Only Windows based. Dependence on MS updates and service start-up priority."
 

Pricing and Cost Advice

"Its pricing is kind of in line with its competitors and everybody else out there."
"It is "expensive" and flexible."
"The tool's price is moderate."
"Traps pays for itself within the first 16 months of a three-year subscription. This is attributed to OPEX savings, as security teams spent less time trying to identify and isolate malware for analysis as a result of a reduction in malware incidents, false positives, and breach avoidance."
"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."
"The price was fine."
"The cost depends on your chosen license type, like Pro or other licenses."
"Our customers have expressed that the price is high."
"My company has a yearly license agreement with Sophos EPP Suite."
"The pricing for this solution is ok."
"The solution's cost is reasonable."
"Sophos EPP Suite is cost-effective. We bought it because it costs less than other solutions we like—for example, Trend Micro and Panda Antivirus."
"When compared to Fortinet, the renewal and subscription is quite expensive."
"Pricing could always be lower. It costs around $120 per seat per year."
"The tool’s price is the same as its competitors."
"Price-wise, it is cheap. We need to pay 1,500 to 2,000 INR per user...On a scale of one to ten, where one is very cheap, and ten is very expensive, I rate the pricing a three out of ten."
Information not available
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
917,433 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
13%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Outsourcing Company
13%
Financial Services Firm
10%
Manufacturing Company
9%
Comms Service Provider
9%
Comms Service Provider
18%
Outsourcing Company
8%
Construction Company
8%
Financial Services Firm
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business48
Midsize Enterprise21
Large Enterprise56
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise10
Large Enterprise14
No data available
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Sophos EPP Suite?
The setup cost is good and licensing is good. The pricing is slightly increased, but it is good because Sophos Endpoi...
What needs improvement with Sophos EPP Suite?
For endpoint protection, I do not see many weaknesses. The weakest point from Sophos is that in many cases, it is not...
What is your primary use case for Sophos EPP Suite?
I am conducting an information search to understand what other firewall solutions are doing rather than looking for a...
Ask a question
Earn 20 points
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
EPP Suite
SkyRecon Systems StormShield Security Suite
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
EK Services
Arkoon, Netasq
Find out what your peers are saying about Sophos Endpoint vs. Stormshield Endpoint Security and other solutions. Updated: September 2026.
917,433 professionals have used our research since 2012.