--- title: Palo Alto Cortex XSIAM Reviews meta\_title: 'Palo Alto Cortex XSIAM Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 95 reviews by the users' company size, role or industry to find out how Palo Alto Cortex XSIAM works for a business like yours. aggregate\_rating: rating\_value: 4.5 review\_count: 95 scale: '5' date\_modified: '2026-08-10' parent\_category: name: System Security url: https://www.g2.com/categories/system-security --- # Palo Alto Cortex XSIAM Reviews & Product Details Visit Website Product Description: Palo Alto Networks' Cortex XSIAM is an AI-driven security operations platform designed to transform traditional Security Operations Centers by integrating and automating key functions such as data centralization, threat detection, and incident response. By leveraging machine learning and automation, it enables organizations to detect and respond to threats more efficiently, reducing manual workloads and improving overall security posture. Key Features and Functionality: - Data Centralization: Aggregates data from various sources into a unified platform, providing comprehensive visibility across the enterprise. - AI-Powered Threat Detection: Utilizes machine learning algorithms to identify anomalies and potential threats in real-time. - Automated Incident Response: Streamlines response processes through automation, enabling rapid mitigation of security incidents. - Integrated SOC Capabilities: Combines functions such as Extended Detection and Response , Security Orchestration, Automation, and Response , Attack Surface Management , and Security Information and Event Management into a cohesive platform, eliminating the need for multiple disparate tools. - Scalability: Designed to handle large volumes of data and adapt to the evolving needs of modern enterprises. Primary Value and Problem Solved: Cortex XSIAM addresses the challenges of disjointed data, weak threat defense, and heavy reliance on manual work in traditional SOCs. By centralizing data and automating security operations, it simplifies processes, enhances threat detection accuracy, and accelerates incident response times. This transformation enables organizations to proactively outpace threats, reduce operational costs, and achieve a more robust security posture. * * * Product Website Palo Alto Cortex XSIAM Seller [Palo Alto Networks](https://www.g2.com/sellers/palo-alto-networks) Discussions [Palo Alto Cortex XSIAM Community](https://www.g2.com/products/palo-alto-cortex-xsiam/discuss) Solution Type All-in-One Overview by Ravi Kumar Show More ## Value at a Glance Averages based on real user reviews. ### Time to Implement 3 months [ View More Pricing Information ](https://www.g2.com/products/palo-alto-cortex-xsiam/pricing) ## Palo Alto Cortex XSIAM Integrations (18) What do users say about integrations? Verified by Palo Alto Cortex XSIAM [ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Azure Pipelines ](https://www.g2.com/products/azure-pipelines/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Bitsight ](https://www.g2.com/products/bitsight/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") CheckPoint ](https://www.g2.com/products/checkpoint/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") FortiClient ](https://www.g2.com/products/forticlient/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") IBM Security QRadar NDR ](https://www.g2.com/products/ibm-security-qradar-ndr/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Jira ](https://www.g2.com/products/jira/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft 365 ](https://www.g2.com/products/microsoft365/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft Entra ID ](https://www.g2.com/products/microsoft-entra-id/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft Teams ](https://www.g2.com/products/microsoft-teams/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Okta ](https://www.g2.com/products/okta/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") PagerDuty ](https://www.g2.com/products/pagerduty/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Palo Alto Networks Cloud NGFW ](https://www.g2.com/products/palo-alto-networks-cloud-ngfw/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Palo Alto Networks Panorama ](https://www.g2.com/products/palo-alto-networks-panorama/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Proofpoint Adaptive Email Security ](https://www.g2.com/products/proofpoint-adaptive-email-security/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") SentinelOne Singularity XDR ](https://www.g2.com/products/sentinelone-singularity-xdr/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") ServiceNow IT Service Management ](https://www.g2.com/products/servicenow-it-service-management/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Slack ](https://www.g2.com/products/slack/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Wiz ](https://www.g2.com/products/wiz-wiz/reviews) Show More ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") G Verified User Mid-Market (51-1000 emp.) 7/16/2026 "Centralize Security Management but with High Costs" 3.5/5 What do you like best about Palo Alto Cortex XSIAM? I like how Palo Alto Cortex XSIAM eliminates duplicates, which avoids having to do the work twice. I value the behavioral analysis, as it allows predicting potential attacks before a human detects them. Additionally, I appreciate that in the SOC where I work, we use Palo Alto Cortex XSIAM to manage all the tools in one place, which allows us to have all the logs from the EDR, XDR, SOAR, and SIEM in a single point without the need for multiple screens or duplicate logs. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Cortex XSIAM? Perhaps due to the high cost or the great dependence on Palo Alto ecosystems and the low compatibility with other ecosystems. Perhaps for the cost, a pricing based not so much on data volume but on usage or processing. Review collected by and hosted on G2.com. What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you? I use Palo Alto Cortex XSIAM to manage all the tools in one place, unifying logs and eliminating duplicates. It allows us to predict attacks before a human detects them. We switched from Splunk to Palo Alto Cortex XSIAM for better data ingestion. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 inviteAI Translated TP Tim P. Information Security Analyst Mid-Market (51-1000 emp.) 7/27/2026 "Powerful Log Consolidation with Great Threat Detection Accuracy and Precise Alerts" 5/5 What do you like best about Palo Alto Cortex XSIAM? It effectively consolidates log data from multiple sources in one place and offers a highly customizable dashboard that provides real-time visibility into our environment with the ability to send alerts on specific behaviors so we can respond swiftly to emerging threats. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Cortex XSIAM? The documentation of the tool can be more detailed but other than that it is powerful for analysis of incidents and I would recommend to others to use it. Review collected by and hosted on G2.com. What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you? Very useful in analyzing logs and creating alarms for suspicious activities and the built-in threat intelligence feeds provide great visibility across our infrastructure which makes threat remediation easy and highly effective. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Rohan K.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Rohan K.") RK Rohan K. Senior Azure devops engineer Enterprise (\> 1000 emp.) 4/14/2026 "Palo Alto Cortex XSIAM Streamlines SOC Work with Smart Noise Reduction and Automation" 5/5 What do you like best about Palo Alto Cortex XSIAM? I’ve been using Palo Alto Cortex XSIAM for a while now, and honestly it has made a big difference in how we handle security operations. The platform brings everything into one place, so I don’t have to jump between multiple tools anymore. What I like the most is how well it reduces alert noise and highlights only the important threats, which saves a lot of time. The automation is very helpful too—it speeds up investigation and response without much manual effort. Overall, it feels reliable, efficient, and makes daily SOC work much smoother. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Cortex XSIAM? While I’ve had a positive experience overall with Palo Alto Cortex XSIAM, there are a few areas that could be improved. The platform can feel a bit complex at first, especially during the initial setup and onboarding phase, which may require time and proper training to fully understand all its capabilities. Additionally, customization and fine-tuning certain workflows can sometimes be less intuitive than expected. In some cases, the resource usage and cost considerations can also be a concern for smaller teams. That said, once you get past the learning curve, it becomes much more manageable and effective in daily operations. Review collected by and hosted on G2.com. What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you? Using Palo Alto Cortex XSIAM has really helped solve the challenge of handling too many alerts and disconnected security tools in our environment. Earlier, it was difficult to correlate data and prioritize real threats, which slowed down our response time. With XSIAM, everything is centralized and powered by AI, so it automatically filters noise and highlights the most critical issues. This has significantly improved our efficiency, reduced manual effort, and allowed us to respond to incidents much faster. Overall, it has made our security operations more streamlined, proactive, and much easier to manage. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite CG Christopher G. SOC Analyst Mid-Market (51-1000 emp.) 7/27/2026 "Delivers Quick Visibility into Anomalies and Easy to Tune Alerts with Impressive Granularity" 5/5 What do you like best about Palo Alto Cortex XSIAM? The strong capabilities in log correlation and threat detection provides deep visibility into network activity and security events and it sends real time alerts in form of alarms enabling us to respond to security issues right away. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Cortex XSIAM? There are no major challenges experienced since the initial setup and they have a very reliable support so the platform is great for collecting, analyzing and reporting log information. Review collected by and hosted on G2.com. What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you? The platform allows us to pull in data from a wide range of sources for comprehensive security analysis which makes investigation faster, threat detections more accurate and overall situational awareness significantly stronger. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") G Verified User Enterprise (\> 1000 emp.) 7/22/2026 "Powerful Integration, High Learning Curve" 5/5 What do you like best about Palo Alto Cortex XSIAM? I really like Palo Alto Cortex XSIAM's simplicity and its very humanistic approach to solving problems, even ones that seem complex at first. Its features work together seamlessly as an integrated security operating platform, which eliminates the need to switch between separate tools like endpoint detection, log analysis, threat intelligence, instant investigation, and response. This integration brings the data and workflows into a single environment, making it easier to connect related activities. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Cortex XSIAM? If I had to point out something, I'd say there's quite a large learning curve. Because it combines SIEM and SOAR and point security automation and threat intelligence into a single platform, it can be quite a daunting task to learn. Review collected by and hosted on G2.com. What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you? I find Palo Alto Cortex XSIAM solves my daily transaction issues, integrating multiple tools into a single environment, which simplifies complex tasks for me. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite TM Thomas M. Senior System Engineer Mid-Market (51-1000 emp.) 7/24/2026 "Centralized Event Correlation That Strengthens Threat Monitoring and Anomalies Detection" 5/5 What do you like best about Palo Alto Cortex XSIAM? It provides strong threat detection and better visibility across security events with automated incident investigation making it a reliable solution for security monitoring that helps prevent anomalous behavior in our systems. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Cortex XSIAM? Nothing much to dislike so far as it has been a very reliable SIEM solution although personally I would improve the graphical interface it is good but in my opinion improvable. Review collected by and hosted on G2.com. What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you? It offers good visibility across many log sources, including endpoints, network devices, firewalls and servers which helps with better investigation of events which has led to effective threat prioritization for faster incident response. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite AG Aaron G. Cyber Security Engineer Mid-Market (51-1000 emp.) 7/26/2026 "Automatically Connects All Log Events for Clearer Incident Visibility and Threat Handling" 5/5 What do you like best about Palo Alto Cortex XSIAM? It automatically stitches together disparate log events into a coherent incident view providing deeper visibility into anomalous user behavior and helps identify complex attack patterns. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Cortex XSIAM? The system supports a wide array of log sources so it requires intensive resources to maintain and tuning the rules to reduce false positives requires significant expertise. Review collected by and hosted on G2.com. What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you? The tool keeps us updated and alerted of the security events and logs generated by the routers, firewalls and servers within our infrastructure enabling us to detect any kind of suspicious activity and take actions to quarantine and block anomalies. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite LR Lauren R. System Administrator Mid-Market (51-1000 emp.) 7/22/2026 "Expansive Threat Visibility and Smart Log Correlation That Streamlines Incident Investigation" 5/5 What do you like best about Palo Alto Cortex XSIAM? The platform provides an expansive view of the network, endpoint and application layers automatically grouping related security events and the correlation engine helps catch suspicious activity from different log sources in one place which helps streamline the investigation process. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Cortex XSIAM? I find the platform very powerful without any major issues and from an analysis perspective it is very reliable for analysis across our event log collation. Review collected by and hosted on G2.com. What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you? The platform facilitates access to the information needed during an incident investigation and offers good visibility into the environment’s activity which helps improve detection and response processes. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite AF Antonio F. System Engineer Mid-Market (51-1000 emp.) 7/27/2026 "Efficient in High Volume Log Monitoring for Quick Investigation of Security Events" 5/5 What do you like best about Palo Alto Cortex XSIAM? It has proven to be a highly effective tool for deep forensic investigation of vulnerabilities with precision and it performs well handling high log event volumes efficiently which helps in monitoring end users activity very closely. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Cortex XSIAM? We have used the tool for more than 2 years now and we are absolutely satisfied with it and it offers greater value than its competitors on the market. Review collected by and hosted on G2.com. What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you? Very reliable monitoring tool that is helping correlate logs from any source to identify security threats and simplifies the process of preventing malicious activity. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite RO Ricardo O. SOC Analyst Mid-Market (51-1000 emp.) 7/24/2026 "Robust Correlation Capability of Multiple Log Sources to Effectively Improve Threat Visibility" 5/5 What do you like best about Palo Alto Cortex XSIAM? It offers robust real-time dashboards with forensic monitoring of cyber related threats, incidents and log analysis which has greatly improved our ability to detect and respond to threats. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Cortex XSIAM? I have been using this platform for more than 2 years and found it to be more user friendly than any other SIEM in the present market and I have not faced any issues whatsoever. Review collected by and hosted on G2.com. What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you? The comprehensive visibility into logs, incidents and events offers robust insights across our environment which enables us to effectively reduce false positives and prevent potential security incidents. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ## Questions about Palo Alto Cortex XSIAM? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about Palo Alto Cortex XSIAM ](https://www.g2.com/products/palo-alto-cortex-xsiam/discussions/new) GU Guest User • Last activity almost 2 years ago What does QRadar stand for? 1 Upvote 1 [ Join the conversation ](https://www.g2.com/discussions/what-does-qradar-stand-for) ![Daniel P.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Daniel P.") DP Daniel Parra • Last activity over 5 years ago Do you think there could be a security software similar to IBM QRadar? 1 Upvote 0 [ Join the conversation ](https://www.g2.com/discussions/12589-a-creen-que-pueda-haber-un-software-de-seguridad-que-se-asemeje-a-ibm-qradar) [ View all Discussions ](https://www.g2.com/products/palo-alto-cortex-xsiam/discuss) ## Pricing Insights Averages based on real user reviews. ### Time to Implement 3 months ### Return on Investment 14 months ### Average Discount 20% [ View More Pricing Information ](https://www.g2.com/products/palo-alto-cortex-xsiam/pricing) Palo Alto Cortex XSIAM Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_4e2b08dd17397bdc99a5658447cbc589/microsoft-sentinel.jpg "Product Avatar Image") Microsoft Sentinel 4.4/5(298) [ Compare Now ](https://www.g2.com/compare/microsoft-sentinel-vs-palo-alto-cortex-xsiam) ##### ##### Palo Alto Cortex XSIAM Features Response Resolution Automation Threat Intelligence Records Incident Logs Management Incident Alerts Incident Case Management Network Management Activity Monitoring Asset Management Log Management [ View More Features ](https://www.g2.com/products/palo-alto-cortex-xsiam/features) ## Top-Rated Alternatives [ ![CrowdStrike Falcon Endpoint Protection Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "CrowdStrike Falcon Endpoint Protection Platform") CrowdStrike Falcon Endpoint Protection Platform 4.6/5(441) ](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) [ ![Wiz](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Wiz") Wiz 4.7/5(842) ](https://www.g2.com/products/wiz-wiz/reviews) [ ![Splunk Enterprise](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Splunk Enterprise") Splunk Enterprise 4.3/5(434) ](https://www.g2.com/products/splunk-enterprise/reviews) [ View All Alternatives ](https://www.g2.com/products/palo-alto-cortex-xsiam/competitors/alternatives) ##### Categories on G2 [Endpoint Detection & Response (EDR)](https://www.g2.com/categories/endpoint-detection-response-edr)[Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms)[Security Information and Event Management (SIEM)](https://www.g2.com/categories/security-information-and-event-management-siem) [Endpoint Detection & Response (EDR)](https://www.g2.com/categories/endpoint-detection-response-edr)[Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms)[Security Information and Event Management (SIEM)](https://www.g2.com/categories/security-information-and-event-management-siem)[Incident Response](https://www.g2.com/categories/incident-response)[Risk-Based Vulnerability Management](https://www.g2.com/categories/risk-based-vulnerability-management)[Cloud Security Monitoring and Analytics](https://www.g2.com/categories/cloud-security-monitoring-and-analytics)[Network Traffic Analysis (NTA)](https://www.g2.com/categories/network-traffic-analysis-nta)[Security Orchestration, Automation, and Response (SOAR)](https://www.g2.com/categories/security-orchestration-automation-and-response-soar)[User and Entity Behavior Analytics (UEBA)](https://www.g2.com/categories/user-and-entity-behavior-analytics-ueba)[Digital Forensics](https://www.g2.com/categories/digital-forensics)[Data Breach Notification](https://www.g2.com/categories/data-breach-notification) [Show MoreShow Less](javascript:void(0);) ##### Explore More [User-friendly digital signage software solutions](https://www.g2.com/discussions/what-are-the-most-user-friendly-digital-signage-software-solutions)[Which MEP platforms are highest rated for architectural professionals coordinating complex building systems across disciplines?](https://www.g2.com/discussions/mep-which-mep-platforms-are-highest-rated-for-architectural-professionals-coordinating-complex-building-s)[Top tools for ensuring cloud compliance with GDPR and HIPAA](https://www.g2.com/discussions/what-are-the-top-tools-for-ensuring-cloud-compliance-with-gdpr-and-hipaa) [Most reliable cloud monitoring tools for my app](https://www.g2.com/discussions/most-reliable-cloud-monitoring-tools-for-my-app)[best e-signature software](https://www.g2.com/discussions/best-e-signature-solution-help)[Pros and Cons Details](https://www.g2.com/products/palo-alto-cortex-xsiam/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)