Guide · from Palo Alto Networks
The Complete Guide to the Latest MITRE ATT&CK Evaluations
How the top endpoint security vendors performed.

- Format
- Guide
- Published by
- Palo Alto Networks
- Category
- Cybersecurity
- Added
- 5 Aug 2025
About this guide
How the top endpoint security vendors performed.
How the top endpoint security vendors performed. Round 6 of MITRE’s Enterprise ATT&CK® Evaluations introduced crucial new metrics for endpoint security solutions, including false positives and expanded coverage across Windows®, Linux and macOS platforms. The evals focused on two sophisticated adversaries: ransomware as a service and North Korean state-sponsored campaigns.
This essential guide breaks down the test methodology, highlighting changes this year and shows how endpoint security vendors performed. You'll discover how Cortex XDR® achieved historic, industry-leading results and what they mean for you when choosing your next endpoint security provider.
Key highlights covered in this guide:
- What the MITRE ATT&CK Evaluations are and how they simulate real-world cyberattacks.
- Complete analysis of vendor performance across ransomware and the Democratic People’s Republic of Korea (DPRK) attack scenarios on Windows, Linux and macOS.
- Cortex XDR's real-world results compared to other leading solutions.
Download the guide to get strategic insights for strengthening your organization's endpoint security posture.
Listen or skim
Summaries are generated from this page’s text. Read the full piece for the detail.
More from Palo Alto Networks
All 11 →
The Forrester Total Economic Impact™ of Cortex XSIAM
257% 3-year ROI and <6-month payback for SOC transformation.

Protect data in the browser instantly.
How do you secure work performed in the browser? You should be asking this. After all, over 85% of the employee workday is spent there1 — accessing business-critical applications and data. It's also a primary target for

Start Your SOC Transformation with XDR
Start Your SOC Transformation with XDRIs your security team drowning in disconnected alerts while threats move at machine speed? Traditional endpoint security tools can't keep pace with today's attacks that traverse
Elsewhere in Cybersecurity
See the category →
The Business Value of Check Point Hybrid Mesh Network Security Solutions
This document describes organizations that have deployed or expanded Check Point Hybrid Mesh Network Security (Check Point) solutions to protect hybrid, distributed IT environments. In doing so, they have improved

Ultimate Guide to Crowdsourced Security
As cybersecurity becomes a more central part of an organization’s operational strategy, organizations are beginning to face a host of challenges amidst the modern security landscape. To help with these challenges, they

Zero Trust: Charting a path to stronger security
Healthcare IT leaders face a critical contradiction: They are expected to enable seamless access to patient data and systems for a mobile workforce, while also protecting that information from an evolving threat