State of Play: EDR and XDR

An annual review of the EDR and XDR market, with answers from the vendors in it.

October 29, 2026

State of Play 2026: EDR and XDR

What has changed in endpoint detection and response since the July 2024 CrowdStrike outage, what the published tiers include and cost, and what a switch requires.

For your consideration

CIOnomics

The technology economy, in figures

Weekly stories built from government data: tech jobs, software prices, AI adoption and more.

Open it

More State of Play

The Throughline

One decision facing technology leaders, monthly. No sponsorships. Unsubscribe anytime.

Buyer Guide

Endpoint Detection & Response (EDR/XDR)

Compare CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne Singularity, Palo Alto Cortex XDR, TrendAI Vision One, Sophos Intercept X, Trellix, and Bitdefender GravityZone on the trade-off EDR/XDR actually lives by — catching the attacker without drowning the SOC in false positives or dragging every laptop, not the red-team slide.

Read the guide

Keep reading

Buyer Guide

Endpoint Detection & Response (EDR/XDR)

Toolkits

Frameworks and templates

Capability models, architecture templates and IT strategy tools to download.

Executive Forum

Publish under your own byline

Senior technology leaders write for CIOPages in the Executive Forum.

State of Play 2026: Zero Trust Network Access