• HOME
  • CATEGORIES

    • CATEGORIES

    • Browse All Categories
  • FOR VENDORS

    • FOR VENDORS

    • Log In to Vendor Portal
    • Get Started
  • REVIEWS

    • REVIEWS

    • Write a Review
    • Product Reviews
    • Vendor Directory
    • Product Comparisons
  • GARTNER PEER COMMUNITY™
  • GARTNER.COM
  • Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQPrivacyTerms of Service
    ©2026 Gartner, Inc. and/or its affiliates.
    All rights reserved.
  • Categories

    • Loading categories...

      Browse All Categories

      Loading markets...

  • For Vendors

    • Log In to Vendor Portal 

    • Get Started 

  • Write a Review

Join / Sign In
All Categories
/
Extended Detection and Response

Extended Detection and Response (XDR) Reviews and Ratings

What is Extended Detection and Response?

Extended detection and response (XDR) delivers security incident detection and automated response capabilities for security infrastructure. XDR integrates threat intelligence and telemetry data from multiple sources with security analytics to provide contextualization and correlation of security alerts. XDR must include native sensors, and can be delivered on-premises or as a SaaS offering. Typically, it is deployed by organizations with smaller security teams.

Learn More About This Category
How Categories and Markets Are Defined
Highest Rated By Your Peers
For Willingness to Recommend
Logo of Cisco XDR
Cisco XDR
Logo of Cortex XDR
Cortex XDR
Logo of CrowdStrike Falcon
CrowdStrike Falcon
For 50M-1B USD Companies
Logo of Sophos Endpoint
Sophos Endpoint
Logo of Cisco XDR
Cisco XDR
Logo of SentinelOne Singularity Endpoint
SentinelOne Singularity Endpoint
For Asia/Pacific
Logo of Sophos Endpoint
Sophos Endpoint
Logo of SentinelOne Singularity Endpoint
SentinelOne Singularity Endpoint
Logo of Trend Vision One - Endpoint Security
Trend Vision One - Endpoint Security
Integration & Deployment
Logo of Sophos Endpoint
Sophos Endpoint
Logo of Trellix XDR Platform
Trellix XDR Platform
Logo of Cisco XDR
Cisco XDR

Product Listings

Filter by

Products 1 - 20 of 35
Sort by
Logo of Sophos Endpoint

Sophos Endpoint

By Sophos

4.8
(354 Ratings)
customers choice 2025

Sophos Endpoint is a software designed to protect computers and mobile devices from malware, exploits, ransomware, and other cyber threats. The software integrates antivirus, web filtering, and application control to secure endpoints against unauthorized access and harmful content. It features centralized management for policy enforcement and monitoring, enabling organizations to maintain compliance and reduce the risk of security breaches. The software employs behavioral analytics to identify and block suspicious activity, assists with threat detection and response, and provides reporting capabilities for security oversight. It helps organizations address challenges related to data protection, system integrity, and operational continuity by delivering security measures that adapt to evolving threats.

Show More Details
Logo of SentinelOne Singularity Endpoint

SentinelOne Singularity Endpoint

By SentinelOne

4.6
(228 Ratings)
customers choice 2025

SentinelOne Singularity Endpoint is a software designed to protect endpoints by autonomously detecting, preventing, and responding to threats across devices within an organization. The software leverages machine learning and behavioral AI to identify and mitigate a wide range of cyber threats, including malware, ransomware, and fileless attacks. It provides continuous monitoring and automated remediation capabilities to help reduce manual intervention and response time during security incidents. SentinelOne Singularity Endpoint integrates with existing IT security and management workflows, offering visibility into endpoint activities and assisting organizations in maintaining compliance by ensuring devices meet security standards. The software is engineered to address business challenges related to endpoint protection, threat management, and operational efficiency in cybersecurity environments.

Show More Details
Logo of CrowdStrike Falcon

CrowdStrike Falcon

By CrowdStrike

4.7
(137 Ratings)

The CrowdStrike Falcon platform features a single lightweight agent that delivers cutting-edge, AI-powered real-time protection and visibility. Designed to defend endpoints and workloads both on and off the network, it stops threats before they become breaches. Backed by adversary-driven threat intelligence and AI, the Falcon platform processes trillions of global events weekly in real time, fueling an advanced security data platform accessible through a unified command console.

Show More Details
Logo of Microsoft Defender XDR

Microsoft Defender XDR

By Microsoft

4.5
(124 Ratings)

Microsoft Defender XDR is a security software designed to provide extended detection and response capabilities across endpoints, email, applications, and cloud environments. The software aggregates and analyzes threat data from various sources to identify and mitigate potential risks and security incidents. It integrates automated investigation and remediation features, helping organizations detect and respond to attacks in real time. Microsoft Defender XDR aims to improve security visibility, coordinate threat response, and streamline incident management by correlating alerts and enabling unified workflows for security teams. It addresses challenges in managing complex threat landscapes by consolidating threat intelligence and response actions within a centralized platform.

Show More Details
Logo of Trend Vision One - Endpoint Security

Trend Vision One - Endpoint Security

By Trend Micro

4.6
(107 Ratings)

Trend Vision One - Endpoint Security is a software designed to provide comprehensive threat protection for endpoints within an organization. The software offers features such as malware detection, vulnerability protection, application control, and behavioral analysis. It helps organizations identify, analyze, and respond to emerging security threats across endpoints, including laptops, desktops, and servers. The software integrates with security operations to deliver incident response capabilities and automated remediation, enabling organizations to address risks and reduce attack surfaces. By streamlining management and providing visibility into endpoint activity, the software assists businesses in maintaining security compliance and protecting critical assets from cyber threats.

Show More Details
Logo of Cynet

Cynet

By Cynet

4.7
(77 Ratings)

Cynet Extended Detection and Response (XDR) delivers complete visibility and faster threat detection by unifying data from across your environment into a single platform. Unlike siloed tools, Cynet integrates endpoint, identity, network, and cloud telemetry, then applies advanced correlation to uncover even the most complex attacks in real time.

For MSPs, this means fewer tools to manage, faster incident detection, and stronger protection for every customer environment that's delivered through a single, multi-tenant platform backed by Cynet’s CyAI and 24x7 MDR CyOps team.

Show More Details
Logo of Cortex XDR

Cortex XDR

By Palo Alto Networks

4.5
(71 Ratings)

Cortex XDR is a software developed by Palo Alto Networks that integrates data from network, endpoint, and cloud sources to detect, investigate, and respond to cyber threats. The software enables security teams to identify suspicious behavior, conduct root cause analysis, and respond to incidents through automated response capabilities. It provides analytics-driven threat prevention and leverages behavioral analytics to correlate alerts across different environments, helping organizations reduce risks from advanced attacks. Cortex XDR addresses challenges of fragmented security data and manual threat investigations by consolidating security operations into a single platform, allowing for more efficient detection and response workflows.

Show More Details
Logo of Cisco XDR

Cisco XDR

By Cisco Systems

4.7
(47 Ratings)

Cisco XDR is a cybersecurity software designed to detect, analyze, and respond to threats across diverse environments, including networks, endpoints, cloud, and applications. The software aggregates and correlates threat data from multiple security controls to provide comprehensive visibility into potential risks. It enables automation of incident investigation and response workflows, supporting faster identification and mitigation of security incidents. Cisco XDR assists organizations by integrating with existing security infrastructure, enriching data context, and streamlining management of threats. The software aims to address the challenges of fragmented threat detection by offering unified security operations and facilitating improved security posture through advanced analytics and centralized controls.

Show More Details
Logo of Trellix XDR Platform

Trellix XDR Platform

By Trellix

4.6
(19 Ratings)

Trellix XDR Platform is a cybersecurity software designed to integrate and correlate security data across endpoints, cloud environments, networks, and third-party sources. The software leverages threat intelligence, automated detection, and response mechanisms to help organizations identify and respond to complex security threats. Its features include comprehensive visibility, threat analytics, centralized management, and adaptive orchestration of investigation and remediation tasks. Trellix XDR Platform aims to enhance operational efficiency by unifying disparate security tools, reducing alert fatigue, and providing actionable insights for threat containment and incident resolution. The software addresses business challenges related to detecting advanced threats, managing security operations, and improving response times to potential breaches within enterprise environments.

Show More Details
Logo of FortiEDR

FortiEDR

By Fortinet

4.7
(13 Ratings)

FortiEDR is an endpoint detection and response software developed to provide real-time protection, detection, and automated response to endpoint threats. The software offers capabilities such as behavioral analysis, automated threat mitigation, and forensic investigation, aiming to prevent data breaches and ransomware attacks. FortiEDR operates by continuously monitoring endpoint activity, identifying suspicious behavior, and applying policy-based actions to neutralize threats before they materialize. It also supports incident investigation and post-breach analysis through comprehensive logging and reporting features. The software addresses business challenges related to endpoint security by reducing the risk of advanced threats and minimizing the impact of security incidents on organizations.

Show More Details
Logo of Sangfor Athena XDR

Sangfor Athena XDR

By Sangfor Technologies

5
(12 Ratings)

Sangfor Athena XDR is a software platform designed for extended detection and response in cybersecurity operations. The software integrates threat intelligence, security analytics, and automated incident response to enable organizations to detect, investigate, and remediate threats across endpoints, networks, and cloud environments. It consolidates multiple security functions, aiming to address challenges such as fragmented visibility, slow response times, and manual processes in threat management. Its features include real-time monitoring, alert correlation, centralized security management, and advanced analytics intended to streamline threat detection and improve operational efficiency in incident handling.

Show More Details
Logo of METRAS

METRAS

By SITE

5
(11 Ratings)

METRAS is a native Extended Detection and Response (XDR) platform, providing threat detection across the digital ecosystem through a single lightweight agent. METRAS empowers security teams with real-time insight into malicious activity from suspicious endpoints to compromised network devices, all within single intuitive dashboard designed to ease investigation and ensure rapid response.

The METRAS Platform is reinforced by locally based Managed Detection and Response (MDR) experts within the Kingdom of Saudi Arabia, providing 24/7 advanced threat protection—allowing organizations to scale their security posture without the resource drain of a dedicated Security Operations Center (SOC).

Show More Details
Logo of Sekoia Defend

Sekoia Defend

By SEKOIA.IO

4.7
(9 Ratings)

Sekoia Defend is a cybersecurity software designed to detect, investigate, and respond to threats across digital environments. The software utilizes threat intelligence and automated analysis to monitor network activity and identify suspicious behaviors. It integrates with security operations to provide real-time alerts and supports incident response workflows, helping organizations to manage and mitigate risks. Sekoia Defend aims to streamline vulnerability detection, facilitate forensic investigations, and ensure compliance with security policies. By providing tools for threat hunting and contextual analysis, the software addresses challenges related to securing enterprise networks and reducing exposure to cyberattacks.

Show More Details
Logo of Barracuda Managed XDR

Barracuda Managed XDR

By Barracuda

4.6
(7 Ratings)

Barracuda Managed XDR is the comprehensive next-generation cybersecurity solution that protects organizations of all sizes against today’s ever-evolving threat landscape. It is a fully managed service instantly augmenting an organization’s IT staff, identifying signals amidst noise, and reducing TTR from days to seconds. The solution features advanced AI-driven threat protection, SIEM, SOAR, and enterprise-grade threat intelligence from 11+ billion IOCs and hundreds of ML-enriched detection rules aligned to the MITRE ATT&CK framework. Ingesting trillions of events across endpoints, servers, identity, cloud, email, and firewalls, the cloud-native solution detects, responds to, and eliminates cyberthreats in real time across the attack lifecycle. An ‘open’ XDR solution, that integrates with an organization’s existing technology, ensuring a smooth deployment while enhancing security resilience and operational efficiency. Barracuda Managed XDR is powered by Barracuda’s 24/7/365 global SOC.

Show More Details
Logo of ESET PROTECT Platform

ESET PROTECT Platform

By ESET

4.4
(6 Ratings)

ESET PROTECT is a unified cybersecurity platform that delivers modern Endpoint Protection Platform (EPP) and Extended Detection and Response (XDR) capabilities in a single, integrated solution. It protects Windows, macOS, Linux, Android, and iOS devices, including Mobile Device Management functionality.

The platform offers multi-tenant management with real-time visibility across multiple perimeters, providing comprehensive reporting and security operations from a single pane of glass. It can be securely deployed either in the cloud or on-premises, giving organizations the flexibility to choose the model that best fits their needs and constraints.

It combines strong prevention, advanced detection, and automated response with additional capabilities such as vulnerability and patch management, cloud-based sandboxing, and full disk encryption, helping organizations strengthen prevention, detection, and response across their entire environment.

Show More Details
Logo of Secureworks Taegis

Secureworks Taegis

By Sophos

4.6
(6 Ratings)
customers choice 2025
Show More Details
Logo of Open XDR Platform

Open XDR Platform

By Stellar Cyber

4.3
(5 Ratings)

Open XDR Platform is a software developed by Stellar Cyber designed to unify security operations by integrating various security tools and sources into a single interface. The software facilitates threat detection, investigation, and response by correlating data from endpoints, networks, cloud environments, and other security data streams. It automates workflows and consolidates alerts to reduce information silos and enhance analysis efficiency. The software aims to address challenges in managing multiple cybersecurity solutions and enables security teams to gain centralized visibility, streamline case management, and accelerate incident response within complex IT infrastructures.

Show More Details
Logo of Percept XDR & NG SIEM

Percept XDR & NG SIEM

By Sequretek

4.4
(5 Ratings)

Percept XDR & NG SIEM is a software designed to enhance cybersecurity operations by integrating extended detection and response with next-generation security information and event management capabilities. The software enables organizations to monitor, detect, and respond to security threats across endpoints, networks, and cloud environments through real-time analytics, threat intelligence integration, and automated incident response workflows. Percept XDR & NG SIEM addresses the business challenge of managing complex and evolving cyber risks by providing unified visibility, streamlined event correlation, and centralized management for security events. Its features assist in reducing the time to detect and resolve threats, improving compliance readiness, and optimizing security resource utilization within enterprise environments.

Show More Details
Logo of Trend Vision One

Trend Vision One

By Trend Micro

5
(5 Ratings)

Trend Vision One is a cybersecurity software developed to provide extended detection and response capabilities across endpoints, servers, cloud environments, and email. The software integrates security data from multiple sources to enable threat detection, investigation, and response through a unified console. It offers automated threat analysis, security posture visibility, and incident remediation tools designed to improve organizational security operations and minimize the impact of cyber threats. The software is utilized by businesses to address challenges such as detecting advanced attacks, reducing investigation times, and maintaining compliance with security standards. Its feature set includes correlation of security events, comprehensive reporting, and integration with third-party security solutions.

Show More Details
Logo of Adlumin

Adlumin

By N-able

4.4
(4 Ratings)

Adlumin is a software that provides security and compliance management solutions for enterprises. This software offers features such as threat detection, log management, and automated response to security incidents. It enables organizations to monitor and analyze activity across IT environments, helping to identify vulnerabilities and suspicious behavior. The software addresses business challenges related to compliance with regulatory standards, data protection, and incident response by centralizing security operations and delivering real-time alerts and reports. Adlumin supports integration with various data sources and includes tools for auditing and reporting, designed to help organizations maintain a secure and compliant infrastructure.

Show More Details

Features of Extended Detection and Response

Updated November 2024

Mandatory Features:

  • Security analytics with machine learning (ML), correlation, enrichment and contextualization

  • A workspace that provides situational awareness of all integrated security technology outputs, and performs investigations and native automated responses

  • Minimum of two native security sensors with one being endpoint plus log ingestion

Peer Lessons Learned for Extended Detection and Response

Published June 2025

These lessons focuses on the responses to the questions: “If you could start over, what would your organization do differently?” and “What one piece of advice would you give other prospective customers?”

Peer Lessons Learned for Extended Detection and ResponseLessons learned by your peers shared on Gartner Peer Insights for Extended Detection and ResponsePeer Lessons Learned for Extended Detection and ResponseLesson 1LESSON1Scope Out Organizational XDR Requirements;Obtain Stakeholder Buy-InLesson 2LESSON2Run POCs on XDR Products; Evaluate Licensesand Check API Integration Before CommitmentLesson 3LESSON3Adopt Change Management; Conduct RobustXDR Training for the Users for Quick ProductAdoptionLesson 4LESSON4Design Governance Policies, StandardizeWorkflows and Allocate Resources Before theDeploymentLesson 5LESSON5Seek Internal and External Aid; Implement theXDR Product by Using a Cloud Strategyn = 267Source: Reviews (267) submitted to Gartner Peer InsightsID: 6598702Gartner ®
Read Full Insights

Gartner Research

Market Guide for Extended Detection and Response
Gartner Peer Insights 'Voice of the Customer': Extended Detection and Response

Top Trending Products

CrowdStrike FalconBarracuda Managed XDRMicrosoft Defender XDRCisco XDRTrend Vision One - Endpoint SecuritySentinelOne Singularity EndpointSophos EndpointFortiEDRTrellix XDR PlatformMETRAS

Popular Product Comparisons

Cortex XDR vs Microsoft Defender XDRCortex XDR vs Trellix XDR PlatformCisco XDR vs Microsoft Defender XDRMicrosoft Defender XDR vs Sophos Endpoint

Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.

This site is protected by hCaptcha and its Privacy Policy and Terms of Use apply.


Software reviews and ratings for EMMS, BI, CRM, MDM, analytics, security and other platforms - Peer Insights by Gartner
Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQsPrivacyTerms of Use

©2026 Gartner, Inc. and/or its affiliates.

All rights reserved.