Battlecards
Platform intelligence
Vendor-by-vendor breakdowns of the SIEM and XDR markets. Every platform scored on the same eight dimensions, with a dedicated page for each head-to-head pairing.
nPro publishes this comparison and is one of the platforms listed. Scores for nPro are our own assessment. Third-party review scores are sourced from public vendor profiles. Structural facts — deployment model, licensing basis, residency — are verifiable against each vendor's documentation.
SIEM Platform Battlecard
15 vendorsA SIEM's pricing model shapes your security posture more than its feature list does. Under per-gigabyte licensing every additional log source carries a running cost, so teams quietly stop collecting the verbose sources that make lateral movement visible. This comparison leads with deployment model and licensing basis for that reason.
Open battlecard →
XDR Platform Battlecard
15 vendorsExtended detection and response platforms correlate endpoint, network, identity and cloud telemetry into unified detections. Most are SaaS-first by architecture, which places your endpoint telemetry in the vendor's infrastructure. For organisations under data residency obligations that is the first question, not the last.
Open battlecard →
How the scoring works
| Data residency control | Derived from deployment model. Self-hosted with air-gap support scores highest. |
| Pricing value | Derived from licensing basis. Flat and free models score above volume-based. |
| The remaining six | Editorial assessment: ease of setup, management UX, detection accuracy, response speed, integration depth, security coverage. |
Third-party review scores are sourced from public vendor profiles. Where no profile exists the field shows an em dash rather than an estimate.