Palo Alto Networks Cortex XSOAR Reviews & Product Details

Palo Alto Networks' Cortex XSOAR is a comprehensive Security Orchestration, Automation, and Response (SOAR) platform designed to streamline and enhance security operations. By integrating automation, case management, real-time collaboration, and threat intelligence management, Cortex XSOAR empowers security teams to respond to incidents more efficiently and effectively. Key Features and Functionality: - Process Standardization and Automation: Cortex XSOAR offers over 270 out-of-the-box playbooks, enabling the automation of numerous security use cases. These playbooks orchestrate response actions across more than 350 third-party products, facilitating seamless integration and operational consistency. - Security-Focused Case Management: The platform unifies alerts, incidents, and indicators from various sources into a single case management framework. This consolidation accelerates incident response by providing a comprehensive view of security events. - Real-Time Collaboration: Cortex XSOAR includes a Virtual War Room equipped with built-in ChatOps and a command-line interface. This feature allows security teams to collaborate in real time, execute commands across the entire product stack, and manage incidents more effectively. - Threat Intelligence Management: The platform aggregates disparate threat intelligence sources, customizes and scores feeds, and matches indicators against the organization's specific environment. This capability enables security teams to take informed actions swiftly. Primary Value and Problem Solving: Cortex XSOAR addresses the challenges faced by security teams, such as the overwhelming volume of alerts and the need for rapid incident response. By automating repetitive tasks and standardizing processes, the platform reduces the time spent on incidents by up to 90%, allowing analysts to focus on critical threats. The integration of threat intelligence management with SOAR capabilities ensures that organizations can operationalize threat feeds effectively, enhancing their overall security posture. Additionally, the platform's extensive integration ecosystem, with over 360 third-party integrations, enables organizations to orchestrate complex workflows across their existing security infrastructure without extensive custom development.

Seller

Palo Alto Networks

Discussions

Palo Alto Networks Cortex XSOAR Community

Solution Type

Best-of-Breed

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

Return on Investment

13 months

View More Pricing Information

Top-Rated Alternatives

Google Security Operations

4.4/5(168)

View All Alternatives

User Insights

Average based on 28 real user reviews.

Implementation Time

2 months

Perceived Cost

$$$$$

Palo Alto Networks Cortex XSOAR Integrations

(1)

Integration information sourced from real user reviews.

Shagun J.

Senior Security Engineer

Enterprise (> 1000 emp.)

12/21/2022

"XSOAR - Nice Detection, Response and Automation"

4.5/5

What do you like best about Palo Alto Networks Cortex XSOAR?

- Capability to integrate with other applications.

- Capability to perform automation and build playbooks.

- Ability to handle tickets and incidents.

- Can work as a centralized SIEM tool manager. Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Networks Cortex XSOAR?

- Frequent demisto engine disconnections.

- Tool becomes unresponsive when there is a high load of inputs. Review collected by and hosted on G2.com.

Azar N.

Information Security Engineer

Mid-Market (51-1000 emp.)

2/9/2023

"Best security solution for incident responders and SecOps"

5/5

What do you like best about Palo Alto Networks Cortex XSOAR?

You can integrate and orchestrate all of your security solutions in one platform and manage all of your cases, incidents. Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Networks Cortex XSOAR?

Cortex XSOAR can be more user-friendly in dashboards and configurations. Review collected by and hosted on G2.com.

Verified User in Logistics and Supply Chain

Enterprise (> 1000 emp.)

6/21/2022

"XSOAR is the Ultimate Leader"

5/5

What do you like best about Palo Alto Networks Cortex XSOAR?

The Out of the Box content like Integrations for many security stacks or from multiple vendors will definitely reduce the custom efforts and its an easy adoption to the Analyst due to its User-friendly UI, Designing the playbooks is very easy and reduces the manual work by Automation, XSOAR will reduce the air gap on Security investigation and save SLA's for any type of alerts Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Networks Cortex XSOAR?

The licensing part of the xsoar is a little costly matter and the response/delivery for any type of Future Requests for common and high-demand automation is a little slower(which needs to be improved)

There are no Best practice documents on System Optimization or Playbook optimization etc.

No proper troubleshooting docs for the System notifications which triggered on the system Diagnostics page Review collected by and hosted on G2.com.

Recommendations to others considering Palo Alto Networks Cortex XSOAR:

Its a great product and can do wonders in terms of Automating Security Tasks.. Review collected by and hosted on G2.com.

What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you?

We are using the XSOAR tool for multiple things

1. As a SOC Automation Tool

2. As a Reporting tool

3. As a ThreatHunting tool Review collected by and hosted on G2.com.

Charu C.

Sr. Infrastructure Engineer

Enterprise (> 1000 emp.)

3/11/2022

"Palo Alto Cortex XSOAR"

4.5/5

What do you like best about Palo Alto Networks Cortex XSOAR?

We needed a single platform for our security operations to do end to end lifecycle management. We decide to choose Palo Alto's Cortex XSOAR and are very pleased with the results. I highly recommend it. Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Networks Cortex XSOAR?

Great product, a bit expensive. There is nothing to dislike about this product, it is well-designed, intuitive. Review collected by and hosted on G2.com.

Recommendations to others considering Palo Alto Networks Cortex XSOAR:

Currently, the Palo Alto Cortex XSOAR is the best product available on the market and it provides complete cybersecurity protection. We were a Cisco shop but switched over to Palo Alto last year. Very pleased with the results. Review collected by and hosted on G2.com.

What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you?

The Cortex XSOAR gives us a single platform for our security operations, a one-stop shop for orchestrating security, intel threats, managing incidents, investigations. Review collected by and hosted on G2.com.

Rustam R.

Systems Engineer

Small-Business (50 or fewer emp.)

12/17/2022

"I tested it and Palo Alto Networks Cortex XSOAR is good product"

4.5/5

What do you like best about Palo Alto Networks Cortex XSOAR?

Mostly I like that it is natively integrated with other vendor's products Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Networks Cortex XSOAR?

Mostly I dislike in the Palo Alto Networks products is the high cost Review collected by and hosted on G2.com.

Kavyansh P.

Software Engineer - II

Small-Business (50 or fewer emp.)

7/20/2022

"PAN Cortex XSOAR"

4/5

What do you like best about Palo Alto Networks Cortex XSOAR?

Cortex XSOAR is easy to use. We can use it in the security domain. We can easily fetch incidents and take appropriate actions on them. It has its graphical dashboard, using that we can see insights on different - different parameters like period. Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Networks Cortex XSOAR?

Installation is quite difficult on local machines. it has strict platform dependency. But have options to use Cortex XSOAR on GCP. Review collected by and hosted on G2.com.

Manzar A.

Software Engineer

Enterprise (> 1000 emp.)

3/29/2022

"Palo Alto XSOAR Review"

5/5

What do you like best about Palo Alto Networks Cortex XSOAR?

Palo Alto XSOAR is the most complete SOAR tools I have seen so far. It has all the features required to be a complete SOAR Solution. I have made this tool as the baseline while doing POC with other SOAR tools.

It is easiest tool to work and manage and create automation scripts and playbooks

It provide features like:

Warroom

Automation

Jobs

Palybook

Playground

Support for python as well as bash and Java. Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Networks Cortex XSOAR?

Although it is most capable SOAR tool out there but it has few cons.

1. No clarity on infrastructure sizing for MSSP.

2. Price is little expensive.

3. HA and DR capabilities needs improvement.

4. Architecture becomes complex with high number of tenants in an MSSP environment. Review collected by and hosted on G2.com.

What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you?

It's a SOAR tools which is designed to solve the problem faced by SOC teams.

It solve the issue of alert fatigue by doing automated response on the incidents triggered.

It reduces the effort put by SOC team and also reduce the number of member required in SOC team and also improves the SLA KPI. Review collected by and hosted on G2.com.

Vinod S.

Storage Backup Administrator

Small-Business (50 or fewer emp.)

8/24/2022

"Palo alto network cortex XSOAR review"

5/5

What do you like best about Palo Alto Networks Cortex XSOAR?

It has unique features, easy to use, users friendly. Customer support is good. Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Networks Cortex XSOAR?

Reporting for all module not good. Need to improve. Review collected by and hosted on G2.com.

Hoa D.

Technical Sales - IBM Security

Mid-Market (51-1000 emp.)

7/13/2022

"Good SOAR solution"

4/5

What do you like best about Palo Alto Networks Cortex XSOAR?

Supported a lot of 3rd parties applications through API integration, easy to implementation and integration Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Networks Cortex XSOAR?

Not support data breach guidelines for countries and industries. Need a simulation or testing playbooks before applying to production environments. Review collected by and hosted on G2.com.