Vendor pricing
EDR vendor pricing: the entry EDR tier for every major platform.
The vendors hide their numbers; this is the one place that lists the entry EDR-tier price for each major platform side by side. Listed prices are stated as fact with a source; prices the vendor refuses to publish are clearly labelled aggregated buyer data. Click through for the full tier breakdown, worked cost scenarios, and negotiation levers per vendor.
Pricing verified June 2026
| Vendor | Entry EDR tier | Price | Data quality |
|---|---|---|---|
| CrowdStrike Falcon | Falcon Pro | $99.99 / device / yr$8.33/mo | Listed by vendor |
| SentinelOne Singularity | Singularity Complete | ~$179.99 / endpoint / yr~$8-15/mo | Aggregated estimate |
| Microsoft Defender for Endpoint | Plan 2 | $62.40 / user / yr$5.20/mo | Listed by vendor |
| Sophos Intercept X | Intercept X + XDR | ~$48 / user / yr~$4.00/mo | Aggregated estimate |
| Palo Alto Cortex XDR | Cortex XDR Pro | from ~$81 / endpoint / yr~$6.75/mo+ | Aggregated estimate |
| Bitdefender GravityZone | Business Security Premium | ~$95.89 / device / yr~$8.00/mo | Aggregated estimate |
Entry EDR tier means the cheapest tier that delivers genuine EDR (telemetry, hunting, response), not the cheapest NGAV tier. Prices are licence-only; see the five TCO categories for deployment, tuning, and operating cost on top. Full sourcing on the sources page.
Per-vendor breakdowns
CrowdStrike Falcon
$99.99 / device / yr
Falcon Pro
SentinelOne Singularity
~$179.99 / endpoint / yr
Singularity Complete
Microsoft Defender for Endpoint
$62.40 / user / yr
Plan 2
Sophos Intercept X
~$48 / user / yr
Intercept X + XDR
Palo Alto Cortex XDR
from ~$81 / endpoint / yr
Cortex XDR Pro
Bitdefender GravityZone
~$95.89 / device / yr
Business Security Premium
EDR vendor pricing questions
Which EDR vendor is cheapest?›
On entry-EDR-tier list price, Microsoft Defender for Endpoint Plan 2 is the cheapest of the major vendors at $5.20 per user per month ($62.40 per user per year), and it is free for Microsoft 365 E5 customers. Sophos Intercept X with XDR (~$48 per user per year) and CrowdStrike Falcon Pro ($99.99 per device per year) follow. SentinelOne Complete (~$179.99 per endpoint per year) and Palo Alto Cortex XDR (from ~$81 per endpoint per year, plus data-ingestion charges) sit at the premium end. All list prices move 20 to 50 percent on negotiation.
Why do some EDR vendors not publish prices?›
CrowdStrike and Microsoft publish per-tier prices; SentinelOne, Sophos, Palo Alto, and Bitdefender's enterprise tiers do not, routing buyers through 'contact sales.' Vendors hide pricing to preserve discount flexibility and to make apples-to-apples comparison harder. For those vendors, the figures on this site are aggregated from reseller catalogues, marketplace listings, and buyer-reported quotes, clearly labelled as estimates rather than vendor list prices.
How much can I negotiate off EDR list price?›
Public buyer reports put typical movement at 20 to 50 percent off list, driven by volume thresholds (commonly 500, 1,000, and 5,000 seats), multi-year commitment (a further 10 to 20 percent), and competitive quotes. A genuine competing quote in writing is the single strongest lever; CrowdStrike and SentinelOne in particular discount hard against each other.