Sophos

Fortinet's NDR, offered as FortiNDR (on-premises, including air-gapped and OT sites) and FortiNDR Cloud (SaaS). Uses AI/ML and behavioral analysis across IT and 65+ OT protocols and integrates with the Fortinet Security Fabric for response.

AI-driven NDR that learns a behavioral profile of each organization's network, cloud, OT, endpoint, and identity activity to detect deviations. Responds natively or through firewalls, EDR, SOAR, and ITSM tools; Cyber AI Analyst automates investigations.

Palo Alto Networks Cortex XDR is an AI-driven endpoint security platform that unifies data from endpoints, networks, cloud, and identities to detect and stop advanced attacks in real time. It delivers prevention against zero-day exploits, fileless malware, and process hijacking, while automating investigations to reduce response time from days to minutes. The platform uses a single agent for both enterprise and cloud environments, integrates with SOAR, SIEM, and attack surface management, and provides managed detection, threat hunting, and incident response services. Independent tests, including MITRE ATT&CK and SE Labs, have validated its accuracy with 100% detection, zero false positives, and high prevention ratings, making it a recognized leader in endpoint and XDR evaluations.