Cortex XDR tiers
 Cortex XDR Prevent |  Cortex XDR Pro |
|---|---|
Data sourcesGet extended visibility | Data sourcesGet extended visibility |
Endpoint protectionStop malware, exploits and fileless attacks  | Endpoint protectionStop malware, exploits and fileless attacks |
Device controlPrevent data loss and USB-based malware infections | Device controlPrevent data loss and USB-based malware infections |
Disk encryptionManage BitLocker or FileVault from the Cortex XDR console | Disk encryptionManage BitLocker or FileVault from the Cortex XDR console |
Host firewallReduce the attack surface on Windows and macOS endpoints | Host firewallReduce the attack surface on Windows and macOS endpoints |
Managed Threat HuntingUncover the most complex threats across endpoint and network with Unit 42 experts  | Managed Threat HuntingUncover the most complex threats across endpoint and network with
Unit 42 experts |
Host InsightsMonitor host inventory, find vulnerabilities and sweep across endpoints to eradicate threats | Host InsightsMonitor host inventory, find vulnerabilities and sweep across
endpoints to eradicate threats |
Behavioral analyticsDetect emerging attacks with patented analytics and machine learning | Behavioral analyticsDetect emerging attacks with patented analytics and machine learning |
Rule-based detectionFind threats with out-of-the-box and custom rules | Rule-based detectionFind threats with out-of-the-box and custom rules |
Incident managementReduce alert fatigue 98% by intelligently grouping
alerts | Incident managementReduce alert fatigue 98% by intelligently grouping
alerts |
Integrated responseContain threats with multiple, flexible response
options | Integrated responseContain threats with multiple, flexible response
options |
Threat intelligence feedEnrich investigations with rich context from tens of thousands of
customers | Threat intelligence feedEnrich investigations with rich context from tens of thousands of
customers |
Alert retention30 days | Alert retention30 days |
XDR data retention | XDR data retentionEndpoint and network, 30 days |
Extended data retentionOptional | Extended data retentionOptional |