--- title: Palo Alto Cortex XSIAM Reviews meta_title: 'Palo Alto Cortex XSIAM Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 95 reviews by the users' company size, role or industry to find out how Palo Alto Cortex XSIAM works for a business like yours. aggregate_rating: rating_value: 4.5 review_count: 95 scale: '5' date_modified: '2026-08-10' parent_category: name: System Security url: https://www.g2.com/categories/system-security --- # Palo Alto Cortex XSIAM Reviews **Vendor:** Palo Alto Networks **Category:** [Security Information and Event Management (SIEM) Software](https://www.g2.com/categories/security-information-and-event-management-siem) **Average Rating:** 4.5/5.0 **Total Reviews:** 95 ## About Palo Alto Cortex XSIAM Product Description: Palo Alto Networks' Cortex XSIAM is an AI-driven security operations platform designed to transform traditional Security Operations Centers by integrating and automating key functions such as data centralization, threat detection, and incident response. By leveraging machine learning and automation, it enables organizations to detect and respond to threats more efficiently, reducing manual workloads and improving overall security posture. Key Features and Functionality: - Data Centralization: Aggregates data from various sources into a unified platform, providing comprehensive visibility across the enterprise. - AI-Powered Threat Detection: Utilizes machine learning algorithms to identify anomalies and potential threats in real-time. - Automated Incident Response: Streamlines response processes through automation, enabling rapid mitigation of security incidents. - Integrated SOC Capabilities: Combines functions such as Extended Detection and Response , Security Orchestration, Automation, and Response , Attack Surface Management , and Security Information and Event Management into a cohesive platform, eliminating the need for multiple disparate tools. - Scalability: Designed to handle large volumes of data and adapt to the evolving needs of modern enterprises. Primary Value and Problem Solved: Cortex XSIAM addresses the challenges of disjointed data, weak threat defense, and heavy reliance on manual work in traditional SOCs. By centralizing data and automating security operations, it simplifies processes, enhances threat detection accuracy, and accelerates incident response times. This transformation enables organizations to proactively outpace threats, reduce operational costs, and achieve a more robust security posture. ## Palo Alto Cortex XSIAM Pros & Cons **What users like:** - Users highlight **best-in-class log management** and effective alerting features, enhancing the overall usability and integration. (13 reviews) - Users appreciate the **user-friendly dashboards** of Palo Alto Cortex XSIAM, highlighting ease of understanding alerts and metrics. (11 reviews) - Users value the **real-time monitoring** capabilities of Palo Alto Cortex XSIAM, enhancing threat detection and response efficiency. (11 reviews) - Users appreciate the **user-friendly interface** of Palo Alto Cortex XSIAM, making monitoring and deployment seamless and efficient. (11 reviews) - Users appreciate the **good dashboard customization** in Palo Alto Cortex XSIAM, citing ease of use and integration. (9 reviews) - Incident Management (9 reviews) - Protection (8 reviews) - Configuration Ease (7 reviews) - Incident Response (7 reviews) - Innovation (7 reviews) **What users dislike:** - Users find the solution **resource intensive** , increasing costs and complicating implementation due to high hardware requirements. (9 reviews) - Users find the **complex implementation** of Palo Alto Cortex XSIAM time-consuming and resource-intensive, requiring significant technical expertise. (8 reviews) - Users find the **cost** of Palo Alto Cortex XSIAM to be higher than competitors, impacting affordability for smaller companies. (7 reviews) - Users report **dashboard issues** that hinder monitoring and create a messy interface, impacting usability and visibility. (7 reviews) - Users struggle with the **difficult setup** of Palo Alto Cortex XSIAM, finding it complex and time-consuming for implementation. (7 reviews) - Not User-Friendly (7 reviews) - Poor Interface Design (7 reviews) - Poor Reporting (7 reviews) - Time-Consuming (7 reviews) - Training Required (7 reviews) ## Palo Alto Cortex XSIAM Reviews ### 1. Admin **Rating:** 4.0/5.0 stars **Reviewed by:** Avi L. | Security Administrator, Mid-Market (51-1000 emp.) **Reviewed Date:** April 10, 2022 **What do you like best about Palo Alto Cortex XSIAM?** Integration to a lot of applications. Can be connected directly to the FW, Very easy the search for any logs, easy filters **What do you dislike about Palo Alto Cortex XSIAM?** The search is a little bit slow, but it can be upgraded to big data, and it can help. A bit accepted in the creation of "playbooks" **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** One central place in which we consolidate all the logos of information security systems and also systems that are related to the user's activity, and the creation of rules over all the logs ### 2. SOC Review **Rating:** 4.0/5.0 stars **Reviewed by:** Pankaj R. | Senior Security Analyst, Enterprise (> 1000 emp.) **Reviewed Date:** July 01, 2022 **What do you like best about Palo Alto Cortex XSIAM?** LOG Correlation is up to the mark as use case. **What do you dislike about Palo Alto Cortex XSIAM?** Integration of devices and logs mechanism is difficult. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Yes ### 3. Best in class **Rating:** 5.0/5.0 stars **Reviewed by:** Manish K. | Technical Lead, Enterprise (> 1000 emp.) **Reviewed Date:** July 01, 2022 **What do you like best about Palo Alto Cortex XSIAM?** Ease of use, Clean USER INTERFACE, Fast export, many reporting criteria. **What do you dislike about Palo Alto Cortex XSIAM?** Some queries takes time to pull the intended result / report. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Day to day incident reporting and investigative huge logs made life easy with QRADAR. ### 4. Best XDR in the market!! **Rating:** 5.0/5.0 stars **Reviewed by:** Emmanuel D. | IT Security Solution Support , Mid-Market (51-1000 emp.) **Reviewed Date:** May 28, 2022 **What do you like best about Palo Alto Cortex XSIAM?** IBM Security QRadar has always been helpful to us in terms of monitoring any suspicious or malicious activity within our clients premise. **What do you dislike about Palo Alto Cortex XSIAM?** So far i don't have anything to dislike about the product. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** It helps our SOC to monitor a huge number of events and lets them correlate it for better reporting ### 5. IBM security QRadar one of best enterprise wide solution for SIEM **Rating:** 3.0/5.0 stars **Reviewed by:** Verified User in Accounting | Small-Business (50 or fewer emp.) **Reviewed Date:** August 08, 2022 **What do you like best about Palo Alto Cortex XSIAM?** Time to valuon on-primises qradar achived full operational status less then three month and it collect more logs , maintain controls and and qradar on cloud. **What do you dislike about Palo Alto Cortex XSIAM?** Product is very slow .data proccing is very slow **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Security innovation event managment system is excellent ### 6. Experience many SIEM Tool but QRadar is quit simple and easy to use understand the. GUI. **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.) **Reviewed Date:** May 14, 2022 **What do you like best about Palo Alto Cortex XSIAM?** It's Convenient and ease of use and anybody easily use this tool within couple of days **What do you dislike about Palo Alto Cortex XSIAM?** Nothing such till now as per my use .Good to use . **Recommendations to others considering Palo Alto Cortex XSIAM:** Yes Please if your Organization requires the best SIEM tool to Integrate your Application server &other devices and monitor and gets the most true Positive alert and protect your org . QRadar is the best one. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** IOC ALERT ,day to day Malicious at attack to over org system servers and endpoints. ### 7. IBM QRqdar review **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** June 26, 2022 **What do you like best about Palo Alto Cortex XSIAM?** Best to stop the threats incoming or outgoing **What do you dislike about Palo Alto Cortex XSIAM?** Need to look up on the zero day vulnerability **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** The /var/log partition continues to operate when disk usage reaches 100%. However, log data might not be written to the disk, which might affect IBM QRadar startup processes and components. ### 8. Intelligent security analytics for actionable insight into the most critical threats. **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** July 17, 2022 **What do you like best about Palo Alto Cortex XSIAM?** Provides a most comprehensive view of IT infrastructure with Security Intelligence and a holistic approach to detect and respond to sophisticated threats. **What do you dislike about Palo Alto Cortex XSIAM?** Nothing was encountered that gave a bad experience. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Enables to unfold the unknown threats. ### 9. Excellent XDR **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Management Consulting | Mid-Market (51-1000 emp.) **Reviewed Date:** June 24, 2022 **What do you like best about Palo Alto Cortex XSIAM?** Most of the tools needed are in one platform. Which simplify the operations overall **What do you dislike about Palo Alto Cortex XSIAM?** Our personnel must be familiar with networking to operate it **Recommendations to others considering Palo Alto Cortex XSIAM:** Should consider an on-premise architecture **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** They provide alerts to threats which helpful in our security posture ### 10. IBM Qradar best for threat hunting **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Security and Investigations | Small-Business (50 or fewer emp.) **Reviewed Date:** June 04, 2022 **What do you like best about Palo Alto Cortex XSIAM?** Qradar is pack of security tools , provide strong security to its vendor and stakeholders **What do you dislike about Palo Alto Cortex XSIAM?** Cost + package + harder to implement in terms of inhouse team **Recommendations to others considering Palo Alto Cortex XSIAM:** For threat hunting + threat intelligence i prefer qradar **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Threat hunting + threat intelligence + VAPt ### 11. It's an advanced siem tool for security operations **Rating:** 4.5/5.0 stars **Reviewed by:** Munigala R. | Cyber Security Specialist, Mid-Market (51-1000 emp.) **Reviewed Date:** June 03, 2021 **What do you like best about Palo Alto Cortex XSIAM?** More automated in creating rules reduces manual effort in it. **What do you dislike about Palo Alto Cortex XSIAM?** Maintenance errors which interrupt operations. **Recommendations to others considering Palo Alto Cortex XSIAM:** Good platform as siem compared to splunk and arcsight with respect to performance **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Monitoring the log sources of the customer unit and analysing the traffic.Faster in response with respect to analysis. ### 12. IBM QRadar **Rating:** 3.5/5.0 stars **Reviewed by:** Arun K. | Cyber Security Manager, Enterprise (> 1000 emp.) **Reviewed Date:** March 21, 2022 **What do you like best about Palo Alto Cortex XSIAM?** Look and feel, user friendly interface, easy to build queries and report **What do you dislike about Palo Alto Cortex XSIAM?** Limited functionalities while creating correlation rules, minimum support to export outside content **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Helping customers to monitor, optimize and coreelate their traffic ### 13. Highly recommended **Rating:** 5.0/5.0 stars **Reviewed by:** Aniket K. | Cyber Security Consultant, Enterprise (> 1000 emp.) **Reviewed Date:** March 14, 2022 **What do you like best about Palo Alto Cortex XSIAM?** Threat hunting and analysing of threats and many more features **What do you dislike about Palo Alto Cortex XSIAM?** I do not dislike anything. It is perfect **Recommendations to others considering Palo Alto Cortex XSIAM:** Highly recommended **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Threat Hunting and threat analysis. Cloud security monitoring ### 14. True SIEM Solution in the market **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Small-Business (50 or fewer emp.) **Reviewed Date:** March 15, 2022 **What do you like best about Palo Alto Cortex XSIAM?** Log correlation and use case creation are one of the best SIEM Tool in the industry. **What do you dislike about Palo Alto Cortex XSIAM?** Supporting person is very difficult to get in IBM **Recommendations to others considering Palo Alto Cortex XSIAM:** If the team has a malware analyst and SOC Analyst, we can create a SOC operation **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Log correlation and system events are stored in SIEM, upon creation of usecase, we can able to manage the offensive on Threat hunting. ### 15. IBM Security QRadar Review **Rating:** 5.0/5.0 stars **Reviewed by:** Mohammad K. | Team Leader, Small-Business (50 or fewer emp.) **Reviewed Date:** March 15, 2022 **What do you like best about Palo Alto Cortex XSIAM?** Threat detection and response built to adapt **What do you dislike about Palo Alto Cortex XSIAM?** Integration Process was a little bit complicated **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Threat detection and response built to adapt ### 16. IBM Security QRadar is a decent solution for your security needs **Rating:** 4.5/5.0 stars **Reviewed by:** Bhavsheel K. | Research Specialist, Small-Business (50 or fewer emp.) **Reviewed Date:** June 08, 2021 **What do you like best about Palo Alto Cortex XSIAM?** IBM Security QRadar is among the leading solutions to automate your security practice and detect vulnerabilities for your digital assets. It's among the top platforms for Security Information and Event Management (SIEM). It helps me eliminate and reduce manual workload for my team by detecting threats and prioritizing them for further investigation. **What do you dislike about Palo Alto Cortex XSIAM?** IBM Security QRadar needs a better user experience for the team and additional resources for training team members will be great. **Recommendations to others considering Palo Alto Cortex XSIAM:** Need for functionalities and ability to use or see reports regarding security threats from smartphones. Also, the solution provides a lot of false positives that lead to overwork for my team. Integration with Wattson AI helps reduce and score threats based on IBM Security QRadar existing algorithms. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** With IBM Security QRadar, my team has been able to detect threats, view insider threats, meet local and national regulatory compliance, and automate workflows. Further, I'm able to see which threats have been addressed and what else needs to be done. The cloud security capability helps my team to address issues related to our cloud platforms and applications. ### 17. IBM QRadar Enterprise v7.4.1 **Rating:** 5.0/5.0 stars **Reviewed by:** Tapan J. | Information Security Analyst, Enterprise (> 1000 emp.) **Reviewed Date:** September 13, 2019 **What do you like best about Palo Alto Cortex XSIAM?** Integration with quite a lot of other tools, software, and portals. Integration with Xforce Threat Intelligence as well we can integrate plugins from App Exchange platform too. **What do you dislike about Palo Alto Cortex XSIAM?** Nothing up till now. QRadar has nothing to dislike as compared to other SIEMS. But consumes a lot of memory, which in a way is quite beneficial for very good hardware that requires to protect critical infrastructure. But more memory usage turns out to be laggy a few times. **Recommendations to others considering Palo Alto Cortex XSIAM:** IBM SIEM QRadar is definitely a good ROI on any organization's Security Posture but at the same time it is quite expensive as well as any Administrator needs to have a good level of understanding as well as experience regarding EPS and Logs integration in QRadar. IBM also provides Threat Intelligence via its XForce Threat Intelligence platform which can be subscribed to by purchasing its Premium and is Worth Resourceful even-though it is Expensive with only a limited number of Queries in a month. The App Exchange provides Addons/Integrations for almost every popular Security Tool across the globe across every Security Infra and Network Infra domain such as EDR-XDR, IDS-IPS, Firewall, Cloud Security and Governance, Threat Intelligence, and likewise. Every Analyst, Admin, Engineer working on QRadar is inherently Technically Competent but sometimes lack the proficiency of visualizing the Logs and other elements inside the Logs, and has to submit one's record of work done within a specific time-frame to the Management; where QRadar is a perfect choice of SIEM solution which leverages the Analysts' Technical Proficiency and transforming that into Statistical Charts-Graphs which helps the Management understand better regarding the ROI on the solution. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Helps me detect Threats and Intrusions in my network as well as Visualize the Technical expectations of the Management in a Statistical approach. QRadar is simply superb.! ### 18. Easy to operate, less complex, good for log analysis and integration. **Rating:** 4.5/5.0 stars **Reviewed by:** Tejas S. | Cyber Security Analyst, Small-Business (50 or fewer emp.) **Reviewed Date:** July 22, 2020 **What do you like best about Palo Alto Cortex XSIAM?** The first noticeable thing is the GUI of the tool easy to operate. Dashboard configuration is good, where it easy to monitor traffic in the single frame in the visual format. Can add multiple different parameters for log searching. ability to integrate with other solutions. Good Technical Support and Documentation. You can add multiple log sources easily. A large number of users in the market so easy to find a solution to the query. Can Integrate with different security devices for logs monitoring. User Analytics Behaviour feature is available. Useful in monitoring email trace logs after trace log source integration. Able to monitor large size organization due to the log source integration. Rule creation is easy to do and Building Block feature is good. **What do you dislike about Palo Alto Cortex XSIAM?** A mobile app can be useful. Can add sound or POP UP Notifications for the offense.Use too many resources. Default QRadar rules generate more False Positive offenses, can work on it. **Recommendations to others considering Palo Alto Cortex XSIAM:** A good tool for all level of users starting from freshers to SME. Can use multiple features available in QRadar to secure your organization. Easy to operate and integrate. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** The primary job is to identify the security risks of the organization. QRadar is useful while threat hunting, log analysis, and reporting. Scheduled Daily, weekly and monthly reports which are useful while identifying anomaly. Integration with HIDS logs helped in monitoring host-level logs and security. Monitoring email trace logs of the user which helps to identify phishing campaign against the organization. ### 19. Unwieldly and Mostly Effective SIEM **Rating:** 3.0/5.0 stars **Reviewed by:** Kevin H. | CISO, Enterprise (> 1000 emp.) **Reviewed Date:** September 02, 2020 **What do you like best about Palo Alto Cortex XSIAM?** The ability to quickly pull up, manipulate, drill down, and examine log data, even if it is months old. Additionally, being able to look at both the normalized log data as well as the raw log output allows me to confirm exactly what the system is doing and brings a level of comfort to the entire process. It was an invaluable tool in quickly showing other IT administrators exactly where problems existed or where there were potential connectivity issues. **What do you dislike about Palo Alto Cortex XSIAM?** There is a LOT of tuning that you need to perform in order for the product to be proactive. There are numerous system rules, groups, and building blocks that will require not only tuning, but great documentation on YOUR part so that you and your team can properly understand the components of your systems that are being watched, analyzed, and alerted on. **Recommendations to others considering Palo Alto Cortex XSIAM:** Make sure that you really understand your infrastructure and are willing to deploy significant staffing resources at this product. For an organization with over 2000 employees and 45,000 endpoints, we had to dedicated pretty much a single person full-time in order to fully realize the usefulness of this product. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Centralized logging management is solved very nicely, with the system able to ingest data from most of our products. For those that QRadar was not able to support, writing a parser manually was relatively painless and allowed us to integrate our homegrown applications very nicely with all the other normalized log sources. ### 20. QRadar is still a Leader in SIEM Technology **Rating:** 5.0/5.0 stars **Reviewed by:** Mohd D. | Engineer - GSOC, Enterprise (> 1000 emp.) **Reviewed Date:** August 08, 2020 **What do you like best about Palo Alto Cortex XSIAM?** It's scalability and advanced correlation capabilities to detect cyber threats. User Interface is prety easy to use for user level analysts and for SIEM Administrators as well. I worked as an Analyst and you can easily drill down on an alert and investigate thoroughly with available logs and search for more related logs and create your investigation with searching related artifacts and create watchlists , alerts. Easily integrate with most of industry standard tools, which is the most important to get full fledged benefits of compete security posture. Integrated QRadar with our automation tool and it worked very well with automation of incident response and Threat intelligence feeds. **What do you dislike about Palo Alto Cortex XSIAM?** A bit lack of automation capabilities for quick Incident Response **Recommendations to others considering Palo Alto Cortex XSIAM:** Go for it , it;s the market leader in SIEM technology improving day by day with latest features to comply with sophisticated methods of detecting cyber attacks. I would highly recommend QRadar for a Big size Organization, it can handle thousands of devices to be integrated with it and there is no challenges in scalability. Overall good product to invest and get your organization secure with market's best on the top technology. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Incident Response, Threat Hunting, Cyber security incident monitoring , Audit compliance ### 21. It is really beneficial for real time visibility to detect threat detection **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Banking | Small-Business (50 or fewer emp.) **Reviewed Date:** June 03, 2021 **What do you like best about Palo Alto Cortex XSIAM?** Priority of Alerts good for large network and find for particular subnet range **What do you dislike about Palo Alto Cortex XSIAM?** in offence tab should have right click filter for offence description **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** AqL advance search queries are easy to understand. Graphical representation is pretty nice ### 22. Qradar Security information and event management - SIEM **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Import and Export | Mid-Market (51-1000 emp.) **Reviewed Date:** September 03, 2020 **What do you like best about Palo Alto Cortex XSIAM?** The flexibility and ease of deployment Ability to quickly detect and prioritize potential threats. Mainly the ability to address internal dangers. Whether originating from a malicious or careless employee. This allows us to fix / Plug the hole / problem **What do you dislike about Palo Alto Cortex XSIAM?** Licence renewal Grace period. You do not get a view only access once license has expired. **Recommendations to others considering Palo Alto Cortex XSIAM:** It is very helpful, When you can spend time to customise your reports and your dashboard. System Monitoring, Compliance Overview, Application overview, Network overview, Risk monitoring, System monitoring and Threat and security Monitoring as applicable. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** information and event management from multiple sources - Unix Servers, Routers and firewalls ### 23. Qradar Review **Rating:** 5.0/5.0 stars **Reviewed by:** Furqan L. | Information Security Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** September 29, 2020 **What do you like best about Palo Alto Cortex XSIAM?** Logs collection and rules correlation done in the most efficient way. **What do you dislike about Palo Alto Cortex XSIAM?** Automated action features are missing. AI must involve in qradar deeply. **Recommendations to others considering Palo Alto Cortex XSIAM:** Qradar is easy to use and efficiently detect cyber attacks and vulnerabilities. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Problem of mitigation with cyber attacks ### 24. It really helped me in many critical situations and i beleive it will continue **Rating:** 5.0/5.0 stars **Reviewed by:** Mohamed F. | Application Security Consultant, Small-Business (50 or fewer emp.) **Reviewed Date:** April 05, 2020 **What do you like best about Palo Alto Cortex XSIAM?** Log Data collection and analyzing is the best part i love in QRadar, it ease of use and customisation for security operations team makes good .These are $M cost projects and will have ROI only it have effectiveness from security operations team.In the actual panorama, an IT staff would face a very hard task without using that tool, not to mention the costs. An organization deploying tools from different vendors to guarantee the digital security is wasting resources and efforts: different results, rules and reports. That´ s why I consider that QRADAR are a great alternative to build and maintain the SOC. We should take into account also that they have greatly evolved.The QRadar market really is evolving from the basic log aggregation, storage and compliance reporting to being the core security intelligence engine of the enterprise's IT infrastructure. What you're looking for today is an SIEM tool that can do real time analysis of large amounts of such event data, correlate them across layers, devices, endpoints, etc. and most importantly across the other security systems in the enterprise, whether they're Identity & Access Management systems, network IPS, database security tools and such. A good SIEM tool today has the ability to put in place an appropriate response to combat both insider and external threats, and maintaining the right consistent identity and session contexts across the layers, devices, endpoints with anomaly detection becomes all the more important. **What do you dislike about Palo Alto Cortex XSIAM?** threat hunting comes in premium nothing else,i checked with all other alternatives but QRadar stands on the top **Recommendations to others considering Palo Alto Cortex XSIAM:** There are a number of SIEMs on the market today but not all are created equal, QRadar stands the top for ease of use **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Log Monitorings ,Threat Hunting ### 25. Wonderful SIEM Solution To work With **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Enterprise (> 1000 emp.) **Reviewed Date:** July 20, 2020 **What do you like best about Palo Alto Cortex XSIAM?** It's searching speed with the gui interface with ease the work of the employees for getting data much faster. Also this enables easy plug in to add with this tool. **What do you dislike about Palo Alto Cortex XSIAM?** Nothing found as of now in the current usage. **Recommendations to others considering Palo Alto Cortex XSIAM:** Which is one of the best industry standard tool for SIEM And which is so helpful for analysis of events from various log sources. The correlation also happens very fast. We can easily monitor the network traffic on this tool and in live. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Considerably there is no problem found on this Q radar SIEM Tool. And this tool gives out lot kore benefits when compared. It's a very fast searching experience with ease gui interface. Also the integration of components were also easily understandable. ### 26. Smart Product **Rating:** 3.5/5.0 stars **Reviewed by:** Mansour A. | Cyber Security Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** July 23, 2020 **What do you like best about Palo Alto Cortex XSIAM?** It has a great assistant tools, modern interface and data visualization, and easy access to the tasks. Also tracking the uSer behaviour allows easier way to manage incident response, I could say it works such as a robot which investigate the malicious behaviour of usets. **What do you dislike about Palo Alto Cortex XSIAM?** Lack of elements if visualizing data, if they do, they will enrich the correlation process. **Recommendations to others considering Palo Alto Cortex XSIAM:** Using it with supported software **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Central monitoring control. Continuous monitoring of events over 3 months. ### 27. QRadar SIEM Review and Comparision **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Banking | Enterprise (> 1000 emp.) **Reviewed Date:** September 28, 2019 **What do you like best about Palo Alto Cortex XSIAM?** QRadar App Exchange Log Source Integration and Custom Content Extraction from raw event QRadar Network Insight ADE - Anomaly Detection Engine **What do you dislike about Palo Alto Cortex XSIAM?** No correlation Rule can be written if log sources integrated with different event processors Support (Specially Indian support) is not much technical and not able to resolve issues on timely manner **Recommendations to others considering Palo Alto Cortex XSIAM:** I have worked on multiple SIEM Tools and found QRadar SIEM is stable, flexible and have more features compared to other SIEM Tools I worked including RSA SA, Symantec SSIM, ArcSight, McAfee Nitro. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Traffic profiling and triggering alerts for abnormalities ### 28. QRadar is a Wonderful SIEM tool-- Easy to understand and work **Rating:** 4.5/5.0 stars **Reviewed by:** Saiteja T. | Information Technology Security Analyst, Enterprise (> 1000 emp.) **Reviewed Date:** August 13, 2020 **What do you like best about Palo Alto Cortex XSIAM?** Adding or removing devices to QRadar and applying filters is easy. Creating new rules, reports is very simple. Network flow feature is amazing. **What do you dislike about Palo Alto Cortex XSIAM?** Cannot find anything at this point but will definitely edit this review if i find any. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Detecting malicious traffic in the network, unusual behavior of systems, new variants of malware by adding hash values. ### 29. Leading platform for identifying the events. **Rating:** 5.0/5.0 stars **Reviewed by:** Zishan Ali D. | Security Professional, Small-Business (50 or fewer emp.) **Reviewed Date:** July 08, 2020 **What do you like best about Palo Alto Cortex XSIAM?** I like this product because of the performance and the inbuilt features which is used to monitor the threats and report them correctly and accurately. The results may not come false positive The main feature of this tool has eliminate Tasks and real time threat detection. **What do you dislike about Palo Alto Cortex XSIAM?** Since from one years I did not found any dislike regarding this product. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Easy detects,easily manage the compliance and main is eliminate the manual tasks. ### 30. The Best SIEM tool in Market **Rating:** 5.0/5.0 stars **Reviewed by:** Rayudu B. | Information Security Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** July 14, 2020 **What do you like best about Palo Alto Cortex XSIAM?** User friendly and greater visibility,availability of security information in single platform. **What do you dislike about Palo Alto Cortex XSIAM?** There is no automatic later moment detection and price is higher. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Threat hunting becomes very easy using query and time lines. used to alert the incident very easily. ### 31. Qradar review **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Arts and Crafts | Small-Business (50 or fewer emp.) **Reviewed Date:** October 06, 2020 **What do you like best about Palo Alto Cortex XSIAM?** It can detect illegal connections and malicious softwares. Besides, the trainings are free. **What do you dislike about Palo Alto Cortex XSIAM?** One of the problems is troubkeshooting is hard and licensing is very expensive **Recommendations to others considering Palo Alto Cortex XSIAM:** Great in a word **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** None ### 32. User-friendly SIEM solution, but not mature enough **Rating:** 4.0/5.0 stars **Reviewed by:** Karmveer S. | Senior Security Analyst, Enterprise (> 1000 emp.) **Reviewed Date:** June 20, 2020 **What do you like best about Palo Alto Cortex XSIAM?** Offense rule creation, really easy and self explanatory **What do you dislike about Palo Alto Cortex XSIAM?** No option of Cros-Correlation which can help in advance use cases **Recommendations to others considering Palo Alto Cortex XSIAM:** Go for it, IBM is doing good and giving new functionality and working towards maturity **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** We was using it as centralised log management system and security monitor platform ### 33. One Solution to monitor your environment (IBM Qradar) **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** May 14, 2020 **What do you like best about Palo Alto Cortex XSIAM?** QRadar has a greater ability to integrate with many other solutions with more than 200 apps developed, and this helps to harmonize customer fabric security. **What do you dislike about Palo Alto Cortex XSIAM?** There is nothing to dislike, if it were to dislike I would have never recommended it :P **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Detect advanced attacks with upgraded functionality systems when activating systems and auditing advanced logs on owers server to detect hidden infections. Detecting and monitoring the behavior of Active directory users to know the possibility of malicious infection. Analysing third-party applications, and writing parsers quickly. Investigate threats and write new rules for detecting new and correlated unknown attacks. ### 34. IBM Qradar review **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Mid-Market (51-1000 emp.) **Reviewed Date:** April 06, 2020 **What do you like best about Palo Alto Cortex XSIAM?** Applications which give us the more visibility to analyse an incident. **What do you dislike about Palo Alto Cortex XSIAM?** Qradar does not allow us the third part integration. **Recommendations to others considering Palo Alto Cortex XSIAM:** Nice tools for incident response. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** We can analyse an offense deeply. ### 35. IBM QRadar SIEM **Rating:** 4.0/5.0 stars **Reviewed by:** Vivek S. | Sr. Consultant (Cyber-Security), Enterprise (> 1000 emp.) **Reviewed Date:** April 05, 2020 **What do you like best about Palo Alto Cortex XSIAM?** IBM QRadar has full range of security intelligence capabilities and possibility of automation to detect sources of security log data and new network flow traffic. Providing real time bird eye view on your critical devices. **What do you dislike about Palo Alto Cortex XSIAM?** QRadar filter should analyse all type of data source specially PIM **Recommendations to others considering Palo Alto Cortex XSIAM:** Yes, We recommend industrial leading SIEM tools to our clients **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** QRadar was not able to capture IBM zOS (Vision Plus) logs ### 36. Excellent solution **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Retail | Enterprise (> 1000 emp.) **Reviewed Date:** July 22, 2020 **What do you like best about Palo Alto Cortex XSIAM?** Integration with other apps and custom applications **What do you dislike about Palo Alto Cortex XSIAM?** User interface could have some improvements for enhancing user experience **Recommendations to others considering Palo Alto Cortex XSIAM:** I definitely recommend IBM QRadar for a SIEM solution and incident response plan **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Monitoring infrastructure, accounts and apps in real time, helps a lot in incident response and log analysis ### 37. Simply the best! **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in E-Learning | Small-Business (50 or fewer emp.) **Reviewed Date:** September 20, 2019 **What do you like best about Palo Alto Cortex XSIAM?** Powerful tool that can monitor almost anything. Happy that they offer free training on it as well. It works well with the entire Security immune suite from IBM. It's rated number one in gartner's magic quadrant for SIEM's. Brilliant product. **What do you dislike about Palo Alto Cortex XSIAM?** It can get complicated and difficult to understand at time. licencing is very expensive and can limit what you want to use Qradar for. It's difficult to get practical experience due to the lack of test environments. There's not a big footprint in Africa. customers lack the skills and it can be difficult to get to the to offer support and training. **Recommendations to others considering Palo Alto Cortex XSIAM:** Power product, It's simply the best **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** single point to manage Security Event Information Management. Love how flexible the product is and how easy it is to integrate. Threat intelligence and full protection in terms of the kill chain analysis. Network traffic, events and offenses can be query from a single console. very nice indeed ### 38. i love qradar in SIEM **Rating:** 4.5/5.0 stars **Reviewed by:** Lovkesh B. | Senior Consultant, Enterprise (> 1000 emp.) **Reviewed Date:** June 19, 2020 **What do you like best about Palo Alto Cortex XSIAM?** ease to work and user friendly, Qroc is also good one. **What do you dislike about Palo Alto Cortex XSIAM?** facing issue while upgrading qradar setup on cloud **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Use a SIEM ### 39. More practical use and navigation **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.) **Reviewed Date:** July 07, 2020 **What do you like best about Palo Alto Cortex XSIAM?** Detection and response minus navigation. **What do you dislike about Palo Alto Cortex XSIAM?** More complex searches or dashboard to personalize **Recommendations to others considering Palo Alto Cortex XSIAM:** Test it for a while and check if it achieve all your needs **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Connections not allowed ### 40. A good threat intelligence monitor **Rating:** 5.0/5.0 stars **Reviewed by:** Ankit G. | Member, Enterprise (> 1000 emp.) **Reviewed Date:** March 31, 2020 **What do you like best about Palo Alto Cortex XSIAM?** The authorisation matrix capabilities to add users and manage an infrastructure **What do you dislike about Palo Alto Cortex XSIAM?** Nothing in particular. The ui can be enhanced better for user experience. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** We were able to implement siem solution for an entertainment organization. ### 41. SOC monitoring alerts and respond **Rating:** 5.0/5.0 stars **Reviewed by:** Jonathan M. | Information Security Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** March 17, 2020 **What do you like best about Palo Alto Cortex XSIAM?** api integrations, QROC and threat intelligence. **What do you dislike about Palo Alto Cortex XSIAM?** on premise sometimes depends on system performance. **Recommendations to others considering Palo Alto Cortex XSIAM:** go for cloud QROC **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** none. I haven't experienced a major issue, only on premises system performance. ### 42. Monitor logs in a radar range **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** May 17, 2019 **What do you like best about Palo Alto Cortex XSIAM?** Can monitor the logs, can check who all accessing servers from which location **What do you dislike about Palo Alto Cortex XSIAM?** Nothing much to say, as of now all are good **Recommendations to others considering Palo Alto Cortex XSIAM:** Monitor the requests, requestors **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Maintaining server logs ### 43. Flexible, fast, data-intensive, and evolving at a rapid pace **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** November 10, 2017 **What do you like best about Palo Alto Cortex XSIAM?** The fact that it natively deals with flows and log sources. The QRadar app exchange is just putting the platform on steroids and expanding its capabilities limitlessly. The correlation and offense engine is very powerful, as is the framework for integrating threat and intel feeds. Tight integration with QVM, Forensics. **What do you dislike about Palo Alto Cortex XSIAM?** The dashboards need more visualization options and flexibility. **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Orchestrating security incident response around IBM QRadar, with increased identification rates, faster triage, greater visibility into incidents from network flows and other security context sources. ### 44. happy with ibm siem tool **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.) **Reviewed Date:** March 20, 2018 **What do you like best about Palo Alto Cortex XSIAM?** event querralation. easy to add end points. easy to save events **What do you dislike about Palo Alto Cortex XSIAM?** hard to navigate, too many buttons to click **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** anamoly detection ### 45. Threat analysis at its best **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Retail | Enterprise (> 1000 emp.) **Reviewed Date:** December 19, 2017 **What do you like best about Palo Alto Cortex XSIAM?** It is better than other SIEM out there in the market currently **What do you dislike about Palo Alto Cortex XSIAM?** A touch on the costlier side and need to have good back ground in SIEM to use this **Recommendations to others considering Palo Alto Cortex XSIAM:** The SIEM system in the market currently with lot more potential to grow in the right direction **What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?** Advanced and persistent threat detection ## Palo Alto Cortex XSIAM Discussions - [What does QRadar stand for?](https://www.g2.com/discussions/what-does-qradar-stand-for) - 1 comment, 1 upvote - [How can I study more on IBM Security QRadar?](https://www.g2.com/discussions/how-can-i-study-more-on-ibm-security-qradar) - 1 comment, 1 upvote - [How to build visualization with standard deviations?](https://www.g2.com/discussions/how-to-build-visualization-with-standard-deviations) - 1 comment, 1 upvote - [Can IBM Qradar be integrated with our own software? apart from software from major vendors](https://www.g2.com/discussions/32099-can-ibm-qradar-be-integrated-with-our-own-software-apart-from-software-from-major-vendors) - 1 comment, 1 upvote - [How do I monitor app resource usage on the app host](https://www.g2.com/discussions/16208-how-do-i-monitor-app-resource-usage-on-the-app-host) - 1 comment, 1 upvote - [View Palo Alto Cortex XSIAM pricing details and edition comparison](https://www.g2.com/products/palo-alto-cortex-xsiam/reviews?page=2§ion=pricing&secure%5Bexpires_at%5D=2026-08-12+11%3A18%3A48+-0500&secure%5Bsession_id%5D=7efcbea4-6c33-45f8-9b09-4f01084da0a5&secure%5Btoken%5D=80461957cc8f8e2402e0e200c61b7c7b251a1c85c58f9ac913633f463ca0fe8a&format=llm_user) ## Palo Alto Cortex XSIAM Integrations - [Azure Pipelines](https://www.g2.com/products/azure-pipelines/reviews) - [Bitsight](https://www.g2.com/products/bitsight/reviews) - [CheckPoint](https://www.g2.com/products/checkpoint/reviews) - [FortiClient](https://www.g2.com/products/forticlient/reviews) - [IBM Security QRadar NDR](https://www.g2.com/products/ibm-security-qradar-ndr/reviews) - [Jira](https://www.g2.com/products/jira/reviews) - [Microsoft 365](https://www.g2.com/products/microsoft365/reviews) - [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews) - [Microsoft Teams](https://www.g2.com/products/microsoft-teams/reviews) - [Okta](https://www.g2.com/products/okta/reviews) - [PagerDuty](https://www.g2.com/products/pagerduty/reviews) - [Palo Alto Networks Cloud NGFW](https://www.g2.com/products/palo-alto-networks-cloud-ngfw/reviews) - [Palo Alto Networks Panorama](https://www.g2.com/products/palo-alto-networks-panorama/reviews) - [Proofpoint Adaptive Email Security](https://www.g2.com/products/proofpoint-adaptive-email-security/reviews) - [SentinelOne Singularity XDR](https://www.g2.com/products/sentinelone-singularity-xdr/reviews) - [ServiceNow IT Service Management](https://www.g2.com/products/servicenow-it-service-management/reviews) - [Slack](https://www.g2.com/products/slack/reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) ## Palo Alto Cortex XSIAM Features **Additional Functionality** - Penetration Testing - Alerts/Notifications - Audit Trail - Anti Virus - Vulnerability Scanning - Remote Monitoring & Management - VPN - Behavior Analytics - Reporting/Analytics - Real-Time Notifications - Access Controls/Permissions - SSL Security - Patch Management - Event Logs - Anomaly/Malware Detection - DNS Leak Protection - Third-Party Integrations - Server Monitoring - Real-Time Monitoring - Compliance Management - Network Provisioning - API - Email Alerts - Security Auditing - Intrusion Detection System - Data Visualization - Two-Factor Authentication - Generative AI - Firewalls - AI Copilot - Anti Spam - Threat Response - Activity Monitoring - Risk Alerts - Data Loss Prevention - Single Sign On - Intrusion Prevention System - Secure Login - Policy Management - Activity Dashboard **Additional Functionality** - Search/Filter - Risk Management - Generative AI - Alerts/Notifications - Compliance Management - Third-Party Integrations - Certificate Assessment - API - Incident Management - Automated Containment - Real-Time Data - Vulnerability Scanning - Monitoring - Policy Management - Asset Discovery - Penetration Testing - Runtime Container Security - Activity Dashboard - Security Auditing - Issue Tracking - Threat Intelligence - Patch Management - Endpoint Management - Collaboration Tools - Vulnerability Management - Goal Setting/Tracking - Vulnerability Assessment - Asset Tagging - Assessment Management - Access Controls/Permissions - AI Copilot - Vulnerability/Threat Prioritization - Vulnerability Protection - Risk Assessment - Reporting/Analytics - SQL Injections **Automation** - Metadata Management - Artificial Intelligence & Machine Learning - Response Automation - Continuous Analysis **Analysis** - File Analysis - Memory Analysis - Registry Analysis - Email Analysis - Linux Analysis - Event Analysis - Network Analysis **Risk Analysis** - Risk Scoring - Reporting - Risk-Prioritization **Activity Monitoring** - Usage Monitoring - Database Monitoring - API Monitoring - Activity Monitoring **Detection & Response** - Response Automation - Threat Hunting - Rule-Based Detection - Real-Time Detection - Threat Response **Agentic AI - User and Entity Behavior Analytics (UEBA)** - Autonomous Task Execution - Multi-step Planning - Proactive Assistance - Decision Making **Services - Endpoint Detection & Response (EDR) ** - Managed Services **Additional Functionality** - Generative AI - Event Analysis - Prioritization - AI Copilot - Whitelisting/Blacklisting - Remediation Management - Alerts/Notifications - Behavioral Analytics - Continuous Monitoring - Root Cause Analysis - Endpoint Management - Anomaly/Malware Detection **Response** - Resolution Automation - Resolution Guidance - System Isolation - Threat Intelligence - Incident Investigation **Cloud Visibility** - Data Discovery - Cloud Registry - Cloud Gap Analytics **Network Management** - Activity Monitoring - Asset Management - Log Management - Network Monitoring - Server Monitoring - File Integrity Monitoring - Real-Time Monitoring - User Management - Endpoint Management - Compliance Management - Incident Management - Vulnerability Management - Policy Management - Event Logs **System Control** - Device Control - Web Control - Application Control - Asset Management - System Isolation **Functionality** - Multi-Network Capability - Anomaly Detection - Network Visibility - Scalability **Functionality** - Incident Alerts - Anomaly Detection - Continuous Analysis - Decryption **Analysis** - Continuous Analysis - Behavioral Analysis - Data Context - Activity Logging **Automation** - Workflow Mapping - Workflow Automation - Automated Remediation - Log Monitoring **Functionality** - Centralized platform - Automated response - Breach notification law compliance - Workflow - Reporting **Vulnerability Assesment** - Vulnerability Scanning - Vulnerability Intelligence - Contextual Data - Dashboards **Security** - Compliance Monitoring - Risk Analysis - Reporting **Management** - Extensibility - Workflow Automation - Unified Visibility - API **Records** - Incident Logs - Incident Reports **Security** - Data Security - Data loss Prevention - Security Auditing - Real-Time Data - Cloud Application Security - SSL Security **Incident Management** - Event Management - Automated Response - Incident Reporting - Real-Time Reporting **Vulnerability Prevention** - Endpoint Intelligence - Firewall - Malware Detection **Incident Management** - Incident Logs - Incident Alerts - Incident Reporting **Remediation** - Incident Reports - Remediation Suggestions - Response Automation - Threat Response - Customizable Reports **Detection** - Anomaly Detection - Incident Alerts - Activity Monitoring **Orchestration** - Security Orchestration - Data Collection - Threat Intelligence - Data Visualization **Automation** - Automated Remediation - Workflow Automation - Security Testing - Test Automation **Administration** - Security Automation - Security Integration - Multicloud Visibility **Analytics** - Threat Intelligence - Artificial Intelligence & Machine Learning - Data Collection **Management** - Incident Alerts - Incident Case Management - Workflow Management **Identity** - SSO - Governance - User Analytics - Real-Time Analytics - Visual Analytics - Reporting/Analytics **Security Intelligence** - Threat Intelligence - Vulnerability Assessment - Behavioral Analytics - Data Examination - Real-Time Data **Security Management** - Incident Reports - Security Validation - Compliance **Response** - Alerting - Performance Baselin - High Availability/Disaster Recovery **Generative AI** - AI Text Generation - AI Text Summarization - Generative AI **Agentic AI - Security Information and Event Management (SIEM)** - Autonomous Task Execution - Multi-step Planning - Proactive Assistance - Decision Making **Agentic AI - Cloud Security Monitoring and Analytics** - Autonomous Task Execution - Proactive Assistance - Decision Making **Agentic AI - Extended Detection and Response (XDR) Platforms** - Autonomous Task Execution - Proactive Assistance - Decision Making **Additional Functionality** - Alerts/Notifications - AI Copilot - Access Controls/Permissions - Endpoint Management - Intrusion Detection System - Compliance Management - HIPAA Compliant - Search/Filter - API - Two-Factor Authentication - Data Visualization - Risk Assessment - Real-Time Monitoring - Event Logs - Activity Dashboard - Audit Management - Cloud Security Policy Management - Vulnerability Protection - Anti Virus - Incident Management - Threat Intelligence - Real-Time Reporting - Reporting & Statistics - User Management - Encryption - Vulnerability Scanning - Generative AI - Status Tracking - Third-Party Integrations - Real-Time Notifications - Patch Management - Monitoring - Cloud Encryption **Additional Functionality** - Activity Dashboard - Reporting/Analytics - Threat Intelligence - AI Copilot - Secure Data Storage - Case Management - Text Extraction - Search/Filter - Multiple File Format Support - Prioritization - Web Data Extraction - Reporting & Statistics - Real-Time Chat - Optical Character Recognition - Third-Party Integrations - Access Management - Task Management - Data Extraction - Data Security - Data Import/Export - Incident Management - User Management - Web Threat Management - API - IT Incident Management - Data Visualization - Data Recovery - Vulnerability/Threat Prioritization - Real-Time Reporting - Investigation Management - Incident Reporting - Messaging - Endpoint Protection - Analytics - Dashboard - Threat Protection - Access Control - Network Monitoring - Behavioral Analytics - Customizable Dashboard - Access Controls/Permissions - Alerts/Notifications **Additional Functionality** - Real-Time Notifications - Audit Trail - Application Security - Risk Analysis - AI Copilot - Data Import/Export - Alerts/Notifications - Prioritization - Security Auditing - Search/Filter - Compliance Tracking - Generative AI - API - Third-Party Integrations - Activity Dashboard - Data Visualization **Additional Functionality** - Generative AI - Collaboration Tools - Incident Management - AI Copilot - Reporting/Analytics - Threat Response - Key Performance Indicators - Risk Alerts - Performance Metrics - Third-Party Integrations **Generative AI** - AI Text Generation - AI Text Summarization - Generative AI **Services - Extended Detection and Response (XDR)** - Managed Services **Additional Functionality** - SSL Security - HIPAA Compliant - API - Threat Response - Endpoint Protection - Maintenance Scheduling - Third-Party Integrations - Security Auditing - Application Security - Encryption - Network Security - Real-Time Reporting - AI Copilot - Reporting/Analytics - Authentication - Financial Data Protection - Anti Virus - Secure Data Storage - Virus Definition Update - Activity Dashboard - VPN - Audit Trail - Anti Spam - Access Controls/Permissions - Data Visualization - Alerts/Escalation - Data Security **Additional Functionality** - Mobile Access - IT Asset Management - Reporting/Analytics - Data Import/Export - Encryption - Remediation Management - Root Cause Analysis - Customization - Workflow Management - Incident Management - User Management - Behavioral Analytics - Ransomware Protection - Activity Dashboard - AI Copilot - Data Security - Authentication - Firewalls - Collaboration Tools - Endpoint Protection - Cloud Application Security - Third-Party Integrations - Access Controls/Permissions - Alerts/Notifications - Data Analysis Tools - Risk Management - Generative AI - Network Scanning - Vulnerability Management - Search/Filter ## Top Palo Alto Cortex XSIAM Alternatives - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - 4.6/5.0 (418 reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) - 4.7/5.0 (838 reviews) - [Splunk Enterprise](https://www.g2.com/products/splunk-enterprise/reviews) - 4.3/5.0 (415 reviews)