* [Blog](https://www.paloaltonetworks.com.au/blog)
* [Palo Alto Networks](https://www.paloaltonetworks.com.au/blog/corporate/)
* [Announcement](https://www.paloaltonetworks.com.au/blog/category/announcement/)
* Cortex XDR Named a Strate...

# Cortex XDR Named a Strategic Leader in AV-Comparatives EPR Evaluation

[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2F2020%2F12%2Fcortex-av-comparatives-epr-evaluation%2F)  
[](https://twitter.com/share?text=Cortex+XDR+Named+a+Strategic+Leader+in+AV-Comparatives+EPR+Evaluation&url=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2F2020%2F12%2Fcortex-av-comparatives-epr-evaluation%2F)  
[](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2F2020%2F12%2Fcortex-av-comparatives-epr-evaluation%2F&title=Cortex+XDR+Named+a+Strategic+Leader+in+AV-Comparatives+EPR+Evaluation&summary=&source=)  
[](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www.paloaltonetworks.com.au/blog/2020/12/cortex-av-comparatives-epr-evaluation/&ts=markdown)  
\[\](mailto:?subject=Cortex XDR Named a Strategic Leader in AV-Comparatives EPR Evaluation)  
Link copied  
By [Peter Havens](https://www.paloaltonetworks.com/blog/author/peter-havens/?ts=markdown "Posts by Peter Havens")  
Dec 18, 2020  
4 minutes  
[Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown)  
[Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown)  
[AV-Comparatives](https://www.paloaltonetworks.com/blog/tag/av-comparatives/?ts=markdown)  
[Cortex XDR](https://www.paloaltonetworks.com/blog/tag/cortex-xdr/?ts=markdown)  
[third-party testing](https://www.paloaltonetworks.com/blog/tag/third-party-testing/?ts=markdown)

![AV-Comparatives Certified EPR 2020 Strategic Leader](https://www.paloaltonetworks.com/blog/wp-content/uploads/2020/12/image3.png)We are thrilled to have AV-Comparatives, a globally recognized independent testing organization, name [Palo Alto Networks Cortex XDR a "Strategic Leader" in its latest Endpoint Prevention and Response (EPR)](https://start.paloaltonetworks.com/cortex-epr-av-comparatives-report.html) evaluation. Cortex XDR achieved a combined prevention and response capabilities score of 99%, a mark no other vendor surpassed in the evaluation. In addition to phenomenal security effectiveness results, Cortex XDR had one of the lowest Total Cost of Ownership (TCO) scores, despite uniquely providing an Extended Detection and Response (XDR) solution that goes [beyond traditional EDR](https://www.paloaltonetworks.com/blog/2020/10/secops-beyond-traditional-edr/) to provide complete threat detection and response across endpoint, network, cloud and identity data sources.

## EPR CyberRisk Quadrant

![This shows performance and total cost of ownership. The larger the dot, the higher the cost. Cortex XDR achieved a combined prevention and response capabilities score of 99% in the AV-Comparatives EPR evaluation, while maintaining a low TCO.](https://www.paloaltonetworks.com/blog/wp-content/uploads/2020/12/word-image-10.png)
Figure 1. Dot size reflects the product cost. The larger the dot, the higher the cost. ![This table compares products according to 5-year product cost (per agent), active response, passive response, combined prevention/response capabilities, and 5-year TCO (per agent). Cortex XDR maintained high active and passive response scores with a low TCO.](https://www.paloaltonetworks.com/blog/wp-content/uploads/2020/12/word-image-11.png)
Figure 2. Cortex XDR, 99% Active Response \& 100% Passive Response with a very low TCO.

The Endpoint Prevention and Response evaluation is a brand new security test introduced by AV-Comparatives this year. While most endpoint security tests focus on either prevention or detection, the new EPR test offers a uniquely holistic evaluation accounting for a solution's prevention, detection and response capabilities to ensure security teams have a complete toolset to deal with even the most sophisticated attacks.

## Cortex XDR EPR EPR Highlights

**![The image shows: Palo Alto Networks prevents most attacks and offers effective passive.](https://www.paloaltonetworks.com/blog/wp-content/uploads/2020/12/word-image-12.png)**

All attacks in the evaluation were composed of three separate phases: Phase 1 -- Endpoint Compromise and Foothold; Phase 2 -- Internal Propagation; and Phase 3 -- Asset Breach. At each stage, the test determined whether the solution detected the attack and what action was taken. When a solution took automated action to block the threat, it was awarded an "active response" score. If the product provided a detection alert that an analyst could use to stop the attack, it received a "passive response" score. Palo Alto Networks Cortex XDR was awarded an "Active Response" score on 48 of the 49 attacks and a "Passive Response" in the initial phase for the one remaining attack. Overall, as pointed out by AV-Comparatives, Cortex XDR "did exceptionally well at handling threats ... in particular before the threat progresses inside the user environment."

When dealing with sophisticated adversaries and targeted attacks, the speed with which a security solution can prevent and/or detect and respond to an attack is critical. Any malicious activity that is not blocked outright must be detected and alerted quickly to allow the security operations staff to respond and shut down the activity before the attack can progress. As seen in the tables below, all of the preventions and detections provided by Cortex XDR occurred without any observed delay, ensuring that there was no opportunity to progress the attacks in the user environment.

## Reduction in Time to Respond (TTR)

![The image shows how Cortex XDR performed in terms of Time to Respond in the AV-Comparatives EPR evaluation. The table breaks out phases one, two and three of the evaluation.](https://www.paloaltonetworks.com/blog/wp-content/uploads/2020/12/word-image-13.png)

## Reduction in Time to Prevent (TTP)

![The image shows how Cortex XDR performed in terms of Time to Prevent in the AV-Comparatives EPR evaluation. The table breaks out phases one, two and three of the evaluation.](https://www.paloaltonetworks.com/blog/wp-content/uploads/2020/12/word-image-14.png)

In addition to achieving fantastic scores for prevention, detection and response, Cortex XDR achieved a very low TCO in the evaluation. TCO was calculated as a combination of the cost to purchase the product, the estimated breach cost (based on speed of prevention/detection) and the operational accuracy cost -- a measure of false positives (of which we had none).

![The image shows how total cost of ownership is calculated. It includes consideration of product cost over five years, breach cost and operational accuracy cost (false positives).](https://www.paloaltonetworks.com/blog/wp-content/uploads/2020/12/word-image-15.png)

We are proud of the results of this new evaluation, which showcase the powerful endpoint protection, detection and response capabilities that Cortex XDR delivers in a single agent. The capabilities of Cortex XDR extend beyond even the robust testing methodology of this evaluation, delivering superior visibility and analytics by combining Extended Detection and Response (EDR) features with User Behavior Analytics and Network Traffic Analysis based on telemetry ingestion from endpoint, network, cloud and identity data sources.

![The elements that comprise Cortex XDR include endpoint protection, endpoint detection and response, user behavior analysis and network traffic analysis.](https://www.paloaltonetworks.com/blog/wp-content/uploads/2020/12/word-image-16.png)

We were extremely pleased with the new test methodology introduced by AV-Comparatives and appreciate the thorough nature of the evaluation going beyond prevention to include detection and response. We are proud to share these results with you to demonstrate our commitment to providing comprehensive and effective endpoint security.

Download the [AV-Comparatives EPR Comparative test results](https://start.paloaltonetworks.com/cortex-epr-av-comparatives-report.html) to see how we stack up against the competition, and the detailed report on [Palo Alto Networks Cortex XDR results](https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/reports/EPR_PaloAlto_2020.pdf) for the evaluation.

*** ** * ** ***

## Related Blogs

### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown)

[#### Cortex XDR Scores 100% Overall Active Prevention in AV-Comparative EPR](https://www.paloaltonetworks.com.au/blog/2022/01/active-prevention-in-av-comparative-epr/)

### [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown)

[#### Cortex XDR is the Only Endpoint Security Market Leader to Achieve 99% in Both Threat Prevention and Response in AVC EPR](https://www.paloaltonetworks.com.au/blog/security-operations/cortex-xdr-is-the-only-endpoint-security-market-leader-to-achieve-99-in-both-threat-prevention-and-response-in-avc-epr/)

### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Reports](https://www.paloaltonetworks.com/blog/category/reports/?ts=markdown)

[#### A Leader in the 2025 Gartner Magic Quadrant for EPP --- 3 Years Running](https://www.paloaltonetworks.com.au/blog/2025/07/named-a-leader-gartner-magic-quadrant/)

### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown)

[#### Cortex XDR Named 2025 Gartner Customers' Choice for Endpoint Security](https://www.paloaltonetworks.com.au/blog/2025/05/cortex-xdr-named-gartner-customers-choice-endpoint-security/)

### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Event](https://www.paloaltonetworks.com/blog/category/event/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown)

[#### Palo Alto Networks Helps Secure Black Hat Asia 2025](https://www.paloaltonetworks.com.au/blog/2025/03/secure-black-hat-asia-2025/)

### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Reports](https://www.paloaltonetworks.com/blog/category/reports/?ts=markdown)

[#### MITRE ATT\&CK Evaluations --- Cortex XDR Among Elite in Endpoint Security](https://www.paloaltonetworks.com.au/blog/2025/02/mitre-attck-evaluations-cortex-xdr-among-elite-endpoint-security/)

### Subscribe to the Blog!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
![spinner](https://www.paloaltonetworks.com.au/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up  
Please enter a valid email.  
By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.  
This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply.  
{#footer} {#footer}

## Products and Services

* [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown)

* [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown)

* [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown)

* [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown)

* [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown)

* [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown)

* [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown)

* [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown)

* [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown)

* [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown)

* [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown)

* [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown)

* [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown)

* [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown)

* [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown)

* [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown)

* [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown)

* [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown)

* [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown)

* [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown)

* [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown)

* [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown)

* [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)

* [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)

* [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)

* [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown)

* [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)

* [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)

* [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)

* [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)

* [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)

* [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown)

* [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown)

* [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown)

* [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown)

* [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown)

* [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown)

## Company

* [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown)
* [Careers](https://jobs.paloaltonetworks.com/en/)
* [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown)
* [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown)
* [Customers](https://www.paloaltonetworks.com/customers?ts=markdown)
* [Investor Relations](https://investors.paloaltonetworks.com/)
* [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown)
* [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown)

## Popular Links

* [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown)
* [Communities](https://www.paloaltonetworks.com/communities?ts=markdown)
* [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown)
* [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
* [Event Center](https://events.paloaltonetworks.com/)
* [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center)
* [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown)
* [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown)
* [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown)
* [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown)
* [Tech Docs](https://docs.paloaltonetworks.com/)
* [Unit 42](https://unit42.paloaltonetworks.com/)
* [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd)
  ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)
* [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown)
* [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown)
* [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown)
* [Documents](https://www.paloaltonetworks.com/legal?ts=markdown)

Copyright © 2026 Palo Alto Networks. All Rights Reserved

* [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks)
* [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown)
* [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/)
* [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks)
* [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks)
* EN  
  Select your language