--- title: Cortex XDR Reviews meta\_title: 'Cortex XDR Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 85 reviews by the users' company size, role or industry to find out how Cortex XDR works for a business like yours. aggregate\_rating: rating\_value: 4.5 review\_count: 85 scale: '5' date\_modified: '2026-08-11' parent\_category: name: Cloud Security url: https://www.g2.com/categories/cloud-security --- # Cortex XDR Reviews & Product Details Visit Website Cortex XDR is the industry’s first extended detection and response platform that stops modern attacks by integrating data from any source. With Cortex XDR, you can harness the power of AI, analytics and rich data to detect stealthy threats. Your SOC team can cut through the noise and focus on what matters most with intelligent alert grouping and incident scoring. Cross-data insights accelerate investigations, so you can streamline incident response and recovery. Cortex XDR delivers peace of mind with best-in-class endpoint protection that achieved the highest combined protection and detection scores in the MITRE ATT&CK® round 3 evaluation. The Cortex XDR platform collects and analyzes all data, so you can gain complete visibility and holistic protection to secure what’s next. * * * Product Website Cortex XDR Seller [Palo Alto Networks](https://www.g2.com/sellers/palo-alto-networks) Discussions [Cortex XDR Community](https://www.g2.com/products/palo-alto-networks-cortex-xdr/discuss) Solution Type All-in-One Overview by Kasey Cross Show More ## Value at a Glance Averages based on real user reviews. ### Time to Implement 2 months [ View More Pricing Information ](https://www.g2.com/products/palo-alto-networks-cortex-xdr/pricing) ## Cortex XDR Integrations (11) What do users say about integrations? Verified by Cortex XDR [ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Amazon Simple Storage Service (S3) ](https://www.g2.com/products/amazon-simple-storage-service-s3/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Google Cloud Storage ](https://www.g2.com/products/google-cloud-storage/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Google Security Operations ](https://www.g2.com/products/google-security-operations/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Google Workspace ](https://www.g2.com/products/google-workspace/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Graylog ](https://www.g2.com/products/graylog/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") IBM QRadar SIEM ](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft Sentinel ](https://www.g2.com/products/microsoft-sentinel/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Palo Alto Networks Cortex XSOAR ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Palo Alto Networks Next-Generation Firewalls ](https://www.g2.com/products/palo-alto-networks-next-generation-firewalls/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") RadarQ ](https://www.g2.com/products/radarq/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Splunk Enterprise ](https://www.g2.com/products/splunk-enterprise/reviews) Show More AM Ashley M. System Administrator Enterprise (\> 1000 emp.) 1/13/2022 "Cortext XDR - Good AV" 4.5/5 What do you like best about Cortex XDR? Centralised management interface and stability of client Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? Agent was unstable once or twice on inital update Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? Early protection from virus threats Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic TI Tony I. Snr Security analyst Enterprise (\> 1000 emp.) 5/6/2021 "Cortex XDR best in Endpoint Protection and also provides Wealth of information from Endpoint" 5/5 What do you like best about Cortex XDR? Ease of use and details information provided from Endpoints. Cortex XDR also detects threats with behavioral analytics more accurately and allows you to contain and isolate endpoints quickly before any damage is done. Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? Cortex XDR does not currently allow us to download Policies, thereby making it difficult to audit applied policies Easily. Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? Problem: Ensuring Endpoints are protected using both signature and behavioral pattern benefit: Tight integration with enforcement points accelerates containment, enabling you to stop attacks before the damage is done. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software") UC Verified User in Computer Software Mid-Market (51-1000 emp.) 12/18/2021 "Best tool to avoid security attacks like DDOS" 4.5/5 What do you like best about Cortex XDR? speed up the RCA investivation of unwanted security attacks with analytics Easy to use Nominal charges Offers endpoint management Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? Nothing to be disliked about this product Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? Investigating and eliminating security attacks Endpoint management Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Billy S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Billy S.") BS Billy S. IT Specialist Information Technology and Services Mid-Market (51-1000 emp.) 10/10/2019 "Execute network-wide information security" 4.5/5 What do you like best about Cortex XDR? It is very helpful to handle the various operational requirements of firewalls with Palo Alto. It allows you to build shared laws which can be enforced in many proxy servers. It also utilizes software actions to spot hostility and prevent our system. As each category of firewalls has different uses, Palo Alto helps to detect if there are unidentified devices that generate unwanted traffic and what sort of traffic it is. Also, filters introduced between organizational sessions in several areas are able to remain permanent. Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? It is very helpful to handle the various operational requirements of firewalls with Palo Alto. It allows you to build shared laws which can be enforced in many proxy servers. It also utilizes software actions to spot hostility and prevent our system. As each category of firewalls has different uses, Palo Alto helps to detect if there are unidentified devices that generate unwanted traffic and what sort of traffic it is. Also, filters introduced between organizational sessions in several areas are able to remain permanent. Review collected by and hosted on G2.com. Recommendations to others considering Cortex XDR: Palo Alto Panorama is a great option if in your workplace there are specific conditions for various firewall classes. It allows you to track aspects such as scheduling and tools that are accessible. However, the effective tracking system has its flaws, that's why I don't consider it as an all-in solution. Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? We use Palo Alto for unified firewall monitoring and regulation of the execution of network-wide information security. We attempted other AV services, but at some stage they all crashed and Palo Alto Panorama have rarely disappointed us. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Pedro C.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Pedro C.") PC Pedro C. IT Specialist Information Technology and Services Mid-Market (51-1000 emp.) 10/8/2019 "Handle all of our settings at all of our distinct locations" 4.5/5 What do you like best about Cortex XDR? Palo Alto Traps is very helpful for updating the majority of the software by a single tap. The Control Panel and the ACC provide helpful data to display all firewalls or to be able to select which one we want to work with. Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? We switch from local to the cloud variant of Traps, as in the cloud version's there were almost no training alternatives, which have changed over time. Also, sometimes the PANOS extension to the firewalls merely stops working with no particular reason. In general, I think the system does not have a big customer environment. Also, it appears to be too severe (so much that’s unnecessary) when any small threat is detected. Review collected by and hosted on G2.com. Recommendations to others considering Cortex XDR: If a customer wishes to readily handle the configurations, or want to handle firewall backups without running between so many cabinets, Palo Alto Traps is vital and straightforward. However, you must consider that this tool is not meant to be used as a tool for monitoring your system. Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? Palo Alto Traps is used by our network safety group to handle all of our settings at all of our distinct locations. Only IT staff are responsible for device management of these tools. It is also used to implement central console patches and press strategies. I think of Palo Alto Traps as a useful method to retain data and to maintain the division of duties separate, as we can offer participants from other groups a little space to display the settings without providing them with immediate entry to the firewalls. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Fund-Raising](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Fund-Raising") AF Verified User in Fund-Raising Mid-Market (51-1000 emp.) 10/16/2019 "One of the better endpoint security products" 4.5/5 What do you like best about Cortex XDR? Traps has prevented anomalous behavior in our environment a couple of times. This has saved us a lot of trouble. The management interface is intuitive and easy to comprehend. Agent impact on performance in negligible. Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? At the moment the rollout on MacOS Cataline gave us a little headache, but as of today Traps supports Cataline. Just make sure you update Traps first to the newest version. Otherwise you have to uninstall Traps and reinstall the new version. I don't like to way to create Agent Installations. For every new version you create a new installation "package". You should never delete it as long as machines make use of that installation.Just hide them. But it feels this could be done easier. Review collected by and hosted on G2.com. Recommendations to others considering Cortex XDR: Definitely try Palo Alto Traps as one of your choices if you are looking for a new product. Especially if you have more Palo Alto products. Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? A legacy signature based antivirus doesn't work nowadays. You need behavior based detection. Traps has this and is a full replacement for a signature based antivirus. As admins we feel a lot more at ease. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite JW Joe W. Mid-Market (51-1000 emp.) 4/28/2018 "Great Next Gen Antivirus" 5/5 What do you like best about Cortex XDR? The ability to configure it and know that it will auto update without needing regular input. Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? If a piece of software gets updated that you have whitelisted by hash control, it can re trigger after each update. This only happens with smaller oneoff software the system hasnt seen before, Review collected by and hosted on G2.com. Recommendations to others considering Cortex XDR: This is a great product and we couldn't be happier with it. If you need something that wont require having someone look at every issue in it and fix issues daily, this is a great fit. Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? Palo Alto is our primary antivirus and ransomware protection. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite ![Verified User in Computer & Network Security](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer & Network Security") AC Verified User in Computer & Network Security Mid-Market (51-1000 emp.) 1/24/2018 "Excellent threat hunting capabilities " 5/5 What do you like best about Cortex XDR? that with secdo our security team is really able to be proactive and not just handle alerts in a reactive way. Because we handle alerts faster, we have time to threat hunt – based on leads, IOCs or even behavioral IOCs we created in secdo. And because they record all endpoint activity and store it for months – we can really hunt. We can find advanced, fileless, and in-memory attacks, and go deep into suspicious activity to identify anomalies that could lead to silent threats. Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? I am waiting for them to add some features we asked for, but other than that - none. Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? the biggest problem we had is the lack of time and tools to effectively hunt for threats that our detection/protection systems didn’t catch. So with Secdo our tier1 analysts handle most alert WORK, and the Tier 2/3 can actually have time to hunt. and the hunting is really granular and depth – because they store endpoint activity and let you search everything. We actually found hidden threats in our network already a week after we start using Secdo. It’s a really useful tool for sec teams Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Verified User in Consumer Goods](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Consumer Goods") AC Verified User in Consumer Goods Mid-Market (51-1000 emp.) 12/28/2017 "EDR with focus on SOC problems, very good " 5/5 What do you like best about Cortex XDR? Most EDR vendors focus on the detection and prevention part. But our security team focuses on the part of collecting endpoint information, investigating alerts, responding to threats and hunt for new ones. Secdo is one of the only vendors who focuses on solving the real problems that SOC teams are facing. We have enough alerts coming in from all of our detection and prevention systems – the problem we have is dealing with them - and SECDO is very good at that. I really recommend Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? It’s not that I dislike, but Secdo is meant to be used by matured SOC teams. If you are a “one man show” doing security operations – Secdo is probably not for you. Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? Reducing risk. We don’t miss any alerts so we don’t miss threats, and this reduces the chances of having a breach (which we all know we can’t 100% avoid) become a data breach. That’s the key benefit for us, so even if an attack has succeeded, we will catch it and respond to it fast enough to make sure it doesn’t have time to actually do any harm in our network. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Verified User in Consumer Goods](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Consumer Goods") UC Verified User in Consumer Goods Small-Business (50 or fewer emp.) 1/2/2018 "Great combination of EDR with security automation" 4.5/5 What do you like best about Cortex XDR? We're aware of some of the top EDRs - None of them gives an automation layer that would allow insight to investigate incidents and alerts automatically. That’s a game changer for us – instead of drilling into each alert and trying to match it with the relevant endpoint data – Secdo does that automatically for us (they call the algorithm that does that ‘causality analysis engine’). Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? Orchestration would be a great add on for such a product Review collected by and hosted on G2.com. Recommendations to others considering Cortex XDR: Definitely get involved with this product - it's ease of use, ability to drill down and coverage at volume would make your life easier ! Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? we don't have the capacity to investigates all of our daily alerts. Secdo allows us to get better coverage, about 30 times the coverage which is unbelievable ! Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ## Questions about Cortex XDR? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about Cortex XDR ](https://www.g2.com/products/palo-alto-networks-cortex-xdr/discussions/new) ![Dr. Jagannath S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Dr. Jagannath S.") DS Dr. Jagannath Sahoo • Last activity 19 days ago How are you handling Cortex XDR deployment complexity and ongoing tuning? 1 Upvote 0 [ Join the conversation ](https://www.g2.com/discussions/how-are-you-handling-cortex-xdr-deployment-complexity-and-ongoing-tuning) GU Guest User • Last activity about 4 years ago What is Cortex XDR? 0 Upvotes 1 [ Join the conversation ](https://www.g2.com/discussions/what-is-cortex-xdr) [ View all Discussions ](https://www.g2.com/products/palo-alto-networks-cortex-xdr/discuss) ## Pricing Insights Averages based on real user reviews. ### Time to Implement 2 months ### Return on Investment 11 months ### Average Discount 17% [ View More Pricing Information ](https://www.g2.com/products/palo-alto-networks-cortex-xdr/pricing) Cortex XDR Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_56db399f44b6fabb7c667f09bc770579/crowdstrike-falcon-endpoint-protection-platform.png "Product Avatar Image") CrowdStrike Falcon Endpoint... 4.6/5(441) [ Compare Now ](https://www.g2.com/compare/palo-alto-networks-cortex-xdr-vs-crowdstrike-falcon-endpoint-protection-platform) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_5292562d6a2cb01ab3d34a4e57a3225a/sentinelone-singularity-endpoint.png "Product Avatar Image") SentinelOne Singularity... 4.7/5(212) [ Compare Now ](https://www.g2.com/compare/palo-alto-networks-cortex-xdr-vs-sentinelone-singularity-endpoint) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_4e2b08dd17397bdc99a5658447cbc589/microsoft-defender-for-endpoint.jpg "Product Avatar Image") Microsoft Defender for... 4.4/5(312) [ Compare Now ](https://www.g2.com/compare/palo-alto-networks-cortex-xdr-vs-microsoft-defender-for-endpoint) ##### ##### Cortex XDR Features Detection & Response Response Automation Threat Hunting Rule-Based Detection Management Workflow Automation Unified Visibility Analytics Threat Intelligence Artificial Intelligence & Machine Learning Data Collection [ View More Features ](https://www.g2.com/products/palo-alto-networks-cortex-xdr/features) ## Top-Rated Alternatives [ ![Sophos Endpoint](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Sophos Endpoint") Sophos Endpoint 4.7/5(837) ](https://www.g2.com/products/sophos-endpoint/reviews) [ ![CrowdStrike Falcon Endpoint Protection Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "CrowdStrike Falcon Endpoint Protection Platform") CrowdStrike Falcon Endpoint Protection Platform 4.6/5(441) ](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) [ ![ESET PROTECT](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "ESET PROTECT") ESET PROTECT 4.6/5(1,003) ](https://www.g2.com/products/eset-protect/reviews) [ View All Alternatives ](https://www.g2.com/products/palo-alto-networks-cortex-xdr/competitors/alternatives) ##### Categories on G2 [Endpoint Protection Platforms](https://www.g2.com/categories/endpoint-protection-platforms)[Endpoint Detection & Response (EDR)](https://www.g2.com/categories/endpoint-detection-response-edr)[Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms) [Endpoint Protection Platforms](https://www.g2.com/categories/endpoint-protection-platforms)[Endpoint Detection & Response (EDR)](https://www.g2.com/categories/endpoint-detection-response-edr)[Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms)[Cloud Detection and Response (CDR)](https://www.g2.com/categories/cloud-detection-and-response-cdr)[Network Detection and Response (NDR)](https://www.g2.com/categories/network-detection-and-response-ndr) [Show MoreShow Less](javascript:void(0);) ##### Explore More [Top-rated event planning platforms for multi-day events](https://www.g2.com/discussions/event-planning-top-rated-event-planning-platforms-for-multi-day-events)[Top-rated email template builders for agencies](https://www.g2.com/discussions/what-are-the-top-rated-email-template-builders-for-agencies)[Best-rated onboarding software for sales teams](https://www.g2.com/discussions/best-rated-onboarding-software-for-sales-teams) [User-friendly payroll software for companies in multiple countries](https://www.g2.com/discussions/what-is-the-most-user-friendly-payroll-software-for-companies-in-multiple-countries)[Highest rated project management tool for mobile use](https://www.g2.com/discussions/highest-rated-project-management-tool-for-mobile-use)[Pros and Cons Details](https://www.g2.com/products/palo-alto-networks-cortex-xdr/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)