List of Threat hunting Software | Last updated: September 11, 2026
| # | Software / Tool | Best For | TechZella Score | User Rating | Pricing |
|---|---|---|---|---|---|
| 1 | Microsoft Defender | Microsoft Defender is a security product family covering endpoint, identity, email, cloud… | 8.5/10 | — | $3.00 / $12.00 |
| 2 | CrowdStrike Falcon | CrowdStrike Falcon is a cloud-based cybersecurity platform for endpoint, identity, cloud, data… | 8.4/10 | — | $7.99 / $59.99 |
| 3 | SentinelOne Singularity | Unified AI-driven security platform covering endpoint, cloud, identity, AI, security operations and… | 8.4/10 | — | $179.99 / $229.99 |
| 4 | Palo Alto Networks Cortex XDR | AI-assisted XDR platform that correlates endpoint, network, cloud, identity, and email data… | 8.3/10 | — | Contact sales |
| 5 | Sophos Intercept X | Endpoint security software that combines AI malware prevention, exploit mitigation, ransomware rollback… | 8.2/10 | — | Custom quote / $0 |
| 6 | Cisco Secure Endpoint | Cisco Secure Endpoint provides cloud-managed endpoint protection, detection, threat hunting, and response… | 8.1/10 | — | Contact Cisco |
| 7 | Carbon Black | Carbon Black is Broadcom’s endpoint security portfolio for threat prevention, behavioral detection,… | 7.9/10 | — | Contact sales |
Carbon Black is Broadcom’s endpoint security portfolio for threat prevention, behavioral detection, incident response, application control and workload protection.
Contact sales / Custom contract
Cisco Secure Endpoint provides cloud-managed endpoint protection, detection, threat hunting, and response for Windows, macOS, Linux, Android, and iOS devices.
Contact Cisco / SubscriptionAI-assisted XDR platform that correlates endpoint, network, cloud, identity, and email data for threat prevention, detection, investigation, and response.
Contact salesEndpoint security software that combines AI malware prevention, exploit mitigation, ransomware rollback and centralized management through Sophos Central.
Custom quote / Quote-based subscriptionUnified AI-driven security platform covering endpoint, cloud, identity, AI, security operations and third-party telemetry.
$179.99 / year per endpointCrowdStrike Falcon is a cloud-based cybersecurity platform for endpoint, identity, cloud, data and security operations protection.
$7.99 / per device/monthMicrosoft Defender is a security product family covering endpoint, identity, email, cloud applications, and XDR workloads.
$3.00 / user/month, paid yearly