getapp-logo

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

Software categoriesBlog & researchAbout us

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links. 

Top Rated XDR (Extended Detection & Response) Software with Threat response - Page 2

Last updated: October 2026

1 filter applied

Features

Integrated with

No filters available

Pricing model

Devices supported

Organization types

User rating

41 software options

LogRhythm SIEM logo

Self-hosted security information and event management

learn more
LogRhythm SIEM is a self-hosted security information and event management solution featuring Machine Data Intelligence Fabric that contextualizes data at ingestion. The platform includes over one thousand out-of-the-box correlation rules mapped to the MITRE ATT&CK framework, embedded SOAR capabilities, and twenty-eight compliance modules for standards like ISO 27001 and GDPR. The system offers a unified interface for streamlined threat detection, investigation, and response workflows.

Read more about LogRhythm SIEM

Users also considered
Microsoft Defender XDR logo

Cross-domain threat protection with built-in AI

learn more
Microsoft 365 Defender is an automated, cross-domain security solution that leverages the power of the Microsoft 365 security portfolio to automatically analyze threat data across domains, building a complete picture of each attack in a single dashboard. Microsoft 365 Defender is part of Microsoft’s XDR (extend, defend, recover) strategy and aims to provide global visibility into the data generated by existing security solutions.

Read more about Microsoft Defender XDR

Users also considered
Jamf Protect logo

Endpoint protection software for MacOS users

learn more

Jamf Protect is an endpoint protection software designed to help businesses monitor events across Mac devices and detect, prevent and resolve threats. The platform notifies administrators about malicious activities across scripts, applications, and users and automatically quarantines files for further analysis.

Features of Jamf Protect include log forwarding, CIS benchmarks, on-device activity analysis, threat intelligence, behavioral analytics, and more.

Read more about Jamf Protect

Users also considered
Bitdefender GravityZone logo

Security & risk analytics platform with threat intelligence

learn more
Bitdefender GravityZone is a cloud-based security and risk analytics platform designed to help businesses of all sizes detect, respond to, and prevent cybersecurity threats. It offers over 30 security modules, which let users streamline endpoint detection and response and risk analytics.

Read more about Bitdefender GravityZone

Users also considered
Hakware logo

Cloud-based solution for scanning system vulnerabilities.

learn more
Hakware is an AI-powered Security Management Solution, vulnerability scanner and pen testing tool. It aids organizations in safeguarding networks, systems, and applications by continuously identifying security risks through advanced AI analysis, facilitating a more secure operational environment.

Read more about Hakware

Users also considered
Sophos Endpoint logo

Endpoint protection software for security analysts

learn more
Intercept X Endpoint is an endpoint protection tool that helps IT administrators utilize detect and block malware attacks across networks. The software allows managers to identify and stop malicious encryption operations to protect the system against master boot record (MBR) ransomware.

Read more about Sophos Endpoint

Users also considered
The Anomali Platform logo
(0)

Cloud-based & on-premise XDR tool for administrators.

learn more
The Anomali Platform is a cloud-based and on-premise vulnerability management solution, which helps businesses in finance, aviation, banking, and other sectors handle cybersecurity via machine learning (ML). The platform offers various features including exposure management, threat intelligence, extended detection and response, risk protection, natural language processing (NLP), data transformation, attack surface management, and more.

Read more about The Anomali Platform

Users also considered
TotalHeal ThreatFusion logo
(0)

Threat intelligence platform for businesses

learn more
TotalHeal ThreatFusion is a threat intelligence platform designed to help businesses detect, analyze, and respond to security threats.

Read more about TotalHeal ThreatFusion

Users also considered
ThreatDefence XDR Platform logo
(0)

On-premise & cloud-based XDR tool for developers.

learn more
ThreatDefence XDR Platform is a cloud-based and on-premise cybersecurity solution, which helps businesses in legal services, education, finance, and other sectors manage threat detection and response across servers, cloud environments, endpoints, and more. The platform provides various features such as vulnerability management, dark web monitoring, activity tracking, risk protection, root cause analysis, cloud asset management, and reporting.

Read more about ThreatDefence XDR Platform

Users also considered
Todyl Security Platform logo
(0)

Cloud-based cybersecurity platform

learn more
Todyl is an all-in-one cloud-based cybersecurity platform that lets users identify threats, protect data, simplify architectures, and more.

Read more about Todyl Security Platform

Users also considered
Hexnode XDR logo
(0)

Unified endpoint security with automated response

learn more
Hexnode XDR is a unified endpoint security solution offering protection for Windows and macOS from a single console. It provides real-time threat detection with contextual alerts, one-click remediation to isolate devices or quarantine files, and advanced threat hunting via an intuitive query engine. Seamlessly integrating with Unified Endpoint Management, Hexnode XDR enables automated security responses and complete audit trails, ensuring enhanced organizational security.

Read more about Hexnode XDR

Users also considered
ShadowPlex logo
(0)

Cloud-based network protection and cybersecurity solution

learn more
ShadowPlex is a cloud-based cybersecurity software that helps businesses manage defenses and thwart cyber threats and analyze network endpoints.

Read more about ShadowPlex

Users also considered
Gradient Cyber logo
(0)

Cybersecurity platform for small and midsize businesses

learn more
Gradient Cyber offers extended detection and response (XDR), managed risk, and threat assessment using the SecOps Delivery Platform. It helps businesses gain insights into cybersecurity maturity and improvement.

Read more about Gradient Cyber

Users also considered
UnderDefense MAXI logo
(0)

Cloud/on-prem MDR & AI SOC for enterprises

learn more
UnderDefense MAXI is a security-as-a-service platform for 24/7 automated monitoring across cloud and on-premise. Achieve 10x faster response times with a 2-minute alert-to-triage. Get real-time threat intelligence, automated context enrichment, and expert incident response across all attack vectors.

Read more about UnderDefense MAXI

Users also considered
AirCISO logo
(0)

Extended detection and response (XDR) software

learn more
AirCISO is an XDR software that connects in to your devices and provides actionable insights and intelligence.

Read more about AirCISO

Users also considered
Field Effect logo
(0)

Cyber security solution for MSPs

learn more
Field Effect is a cyber security solution that offers advanced threat detection and response, as well as cyber training for businesses. Field Effect’s technology combines artificial intelligence (AI) with industry best practices to offer a comprehensive defence against cyber attacks.

Read more about Field Effect

Users also considered