R
Cloud SIEM
Rapid7 InsightIDR
Rapid7 InsightIDR is a cloud SIEM for threat detection, investigation, log analysis, endpoint visibility, and automated incident response.
Contact sales / Annual or custom termTechZella Directory
Software for Threat hunting in 2026
List of Threat hunting Software | Last updated: September 11, 2026
Quick comparison
Threat hunting Software
| # | Software / Tool | Best For | TechZella Score | User Rating | Pricing |
|---|---|---|---|---|---|
| 1 | Microsoft Defender | Microsoft Defender is a security product family covering endpoint, identity, email, cloud… | 8.5/10 | — | $3.00 / $12.00 |
| 2 | CrowdStrike Falcon | CrowdStrike Falcon is a cloud-based cybersecurity platform for endpoint, identity, cloud, data… | 8.4/10 | — | $7.99 / $59.99 |
| 3 | SentinelOne Singularity | Unified AI-driven security platform covering endpoint, cloud, identity, AI, security operations and… | 8.4/10 | — | $179.99 / $229.99 |
| 4 | Palo Alto Networks Cortex XDR | AI-assisted XDR platform that correlates endpoint, network, cloud, identity, and email data… | 8.3/10 | — | Contact sales |
| 5 | Rapid7 InsightIDR | Rapid7 InsightIDR is a cloud SIEM for threat detection, investigation, log analysis,… | 8.3/10 | — | Contact sales / $0 |
| 6 | Sophos Intercept X | Endpoint security software that combines AI malware prevention, exploit mitigation, ransomware rollback… | 8.2/10 | — | Custom quote / $0 |
| 7 | Cisco Secure Endpoint | Cisco Secure Endpoint provides cloud-managed endpoint protection, detection, threat hunting, and response… | 8.1/10 | — | Contact Cisco |
| 8 | Carbon Black | Carbon Black is Broadcom’s endpoint security portfolio for threat prevention, behavioral detection,… | 7.9/10 | — | Contact sales |
Filters
Editorial selection
Software for Threat hunting in 2026
C
Application Control
Carbon Black
Carbon Black is Broadcom’s endpoint security portfolio for threat prevention, behavioral detection, incident response, application control and workload protection.
Contact sales / Custom contract
Antivirus
Cisco Secure Endpoint
Cisco Secure Endpoint provides cloud-managed endpoint protection, detection, threat hunting, and response for Windows, macOS, Linux, Android, and iOS devices.
Contact Cisco / Subscription
P
Cloud Security
Palo Alto Networks Cortex XDR
AI-assisted XDR platform that correlates endpoint, network, cloud, identity, and email data for threat prevention, detection, investigation, and response.
Contact sales
S
Antivirus Software
Sophos Intercept X
Endpoint security software that combines AI malware prevention, exploit mitigation, ransomware rollback and centralized management through Sophos Central.
Custom quote / Quote-based subscription
S
Cloud Security
SentinelOne Singularity
Unified AI-driven security platform covering endpoint, cloud, identity, AI, security operations and third-party telemetry.
$179.99 / year per endpoint
C
Cloud Security
CrowdStrike Falcon
CrowdStrike Falcon is a cloud-based cybersecurity platform for endpoint, identity, cloud, data and security operations protection.
$7.99 / per device/month
M
Antivirus
Microsoft Defender
Microsoft Defender is a security product family covering endpoint, identity, email, cloud applications, and XDR workloads.
$3.00 / user/month, paid yearly