Malwarebytes vs. Palo Alto Networks Cortex XDR

Now, I gave it that rating because it's a handy tool for diagnosing issues. Quarantining them, and most of the time, it does fix the problem. Though with rootkits, it's been hit or miss, and sometimes perfectly valid software gets flagged erroneously. However, once you've run it, it tends to run continuously, consuming far too many resources and being a real pain to uninstall, sometimes even causing issues.

Incentivized

In a scenario where EDR is a requirement or necessity XDR performs well with or without a SIEM. There are millions of events and logs to parse through and XDR is capable of handling the large load. On top of the large data that is being parsed, features such as Live Terminal, File Retrieval, OS support, and general Metrics, the tool has room to grow and provide a lot for a Security team or organization. Incident Response is a great example of how XDR can shine

Incentivized

• The software is very good at working in the background without interfering with the end user in any way, there has never been a complaint of slowness on the machines or any excessive scan times because the users are unaware of it.
• Malwarebytes management console is a very nice interface that tracks all of the machines on the network and shows which one is online, offline, up to date, out of date etc. I can also push installation packages to new machines without end user interaction.
• Malwarebytes does extremely well what it is made to do, and that is to stop malware. Never once has any infection made it past malwarebytes to harm an end user machine.
• Malwarebytes is always up to date, definitions are downloaded on a daily basis, you can trust that your software is current and you are being protected from the latest threats out there.

Incentivized

• Great tool to help analyze and identify unknown malicious software on workstations, servers, and mobile devices.
• Integration with Panorama help to quickly and efficiently identify potential malicious files.
• Integration with Wildfire helps to quickly deploy signatures not only to endpoints but to firewalls as well.

Incentivized

• As of 2021 Q1, I have had issues with upgrading Malwarebytes installs on endpoints from the admin console. On about 30%-50% of the endpoints, I have to manually uninstall them, reboot, and reinstall Malwarebytes. This is a relatively new feature over the last year that Malwarebytes has done that let's you control updating the endpoint agent.

Incentivized

• We encountered some glitch in a certain version of the agent. When we deployed newer version, the policy set on the previous version was white-listed/overwritten.
• Moving to encrypted based connection (communication between agent to server) is troublesome, coz we need to uninstall the agent first.
• Need to have a more flexible reports/dashboard where we can customize it
• We feed Traps log to our SIEM, however the information sent to the SIEM was not complete, but we need to investigate more probably some faults are on us

Incentivized

The last time we renewed Malwarebytes, we renewed for a 3 year renewal. That should describe the confidence we have in the product. Plus the cost savings impact year after year.

Incentivized

Usability-wise, it's pretty good, and it gets the job done. But once that's finished, the nags, the pop-ups, and the fact that it slows older systems down recklessly really cost it rating points. It becomes a clutter, and one of the first things we check when we receive reports that a PC is slow is whether it's running malware. Once we uninstall it, the PC is usually easily 40-50% faster. That's too much in the way of resources for something that wants to always run in the background.

Incentivized

Cortex XDR does a very good job of blocking suspicious and threatening items. However, as with all software of this nature, it will sometimes block known-good items. The difficulty is in manually whitelisting these known-good items. The interface to whitelist is confusing even for a seasoned IT professional and has been the single most frustrating experience of using Cortex XDR

Incentivized

I honestly haven't needed support for Malwarebytes because I haven't had any problems with it, whatsoever. I am giving it a 9 rating because I haven't actually had an encounter or experience with customer service or support, so it's hard to rate the actual support team since I've never had the privilege of coming into contact with them.

Incentivized

The support we receive from Palo Alto is one of the best aspects of Traps. It is very easy to recommend their support. It seems much easier to connect directly with someone with a deep understanding of the product rather than other companies where you basically have to make an airtight case that it is some kind of non-standard issue that can't be solved with existing documentation. Palo Alto digs deep and helps with advanced troubleshooting to get things working.

Incentivized

Malwarebytes seems to lead the industry in customer focus. Their support team is superior. The breadth of services they offer is a major factor along with their roadmap for the future. I believe the update process is one of the easiest I've experienced with major software platforms. You may be able to receive a discount if you purchase through a reseller / IT vendor.

Incentivized

Traps provided us with a cloud-based platform that made our lives a lot simpler. Nothing like Traps exists in the market and I've never used anything like it. Others, on the other hand, were a lot slower to respond. Malwarebytes and other enterprise-level malware software are also available, but they do not fall under the same heading.

Incentivized

• Less cleanup and work for IT, as users/PC don't get infected as often
• Less user interaction when premium is installed, it will run scans and block sites for you
• Less downtime as PCs stay up and running, users can stay productive

Incentivized

• Traps has paid for itself in time saved re-imaging PCs to clean them
• Traps gives us a lot of good insight on what's being run on our endpoints
• Traps is a great extra layer of security for our end users and minimizes malware outbreaks, which in turn minimizes downtime

Incentivized