--- title: Palo Alto Networks Cortex XSOAR Reviews meta\_title: 'Palo Alto Networks Cortex XSOAR Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 28 reviews by the users' company size, role or industry to find out how Palo Alto Networks Cortex XSOAR works for a business like yours. aggregate\_rating: rating\_value: 4.6 review\_count: 28 scale: '5' date\_modified: '2026-08-09' parent\_category: name: System Security url: https://www.g2.com/categories/system-security --- # Palo Alto Networks Cortex XSOAR Reviews & Product Details Palo Alto Networks' Cortex XSOAR is a comprehensive Security Orchestration, Automation, and Response (SOAR) platform designed to streamline and enhance security operations. By integrating automation, case management, real-time collaboration, and threat intelligence management, Cortex XSOAR empowers security teams to respond to incidents more efficiently and effectively. Key Features and Functionality: - Process Standardization and Automation: Cortex XSOAR offers over 270 out-of-the-box playbooks, enabling the automation of numerous security use cases. These playbooks orchestrate response actions across more than 350 third-party products, facilitating seamless integration and operational consistency. - Security-Focused Case Management: The platform unifies alerts, incidents, and indicators from various sources into a single case management framework. This consolidation accelerates incident response by providing a comprehensive view of security events. - Real-Time Collaboration: Cortex XSOAR includes a Virtual War Room equipped with built-in ChatOps and a command-line interface. This feature allows security teams to collaborate in real time, execute commands across the entire product stack, and manage incidents more effectively. - Threat Intelligence Management: The platform aggregates disparate threat intelligence sources, customizes and scores feeds, and matches indicators against the organization's specific environment. This capability enables security teams to take informed actions swiftly. Primary Value and Problem Solving: Cortex XSOAR addresses the challenges faced by security teams, such as the overwhelming volume of alerts and the need for rapid incident response. By automating repetitive tasks and standardizing processes, the platform reduces the time spent on incidents by up to 90%, allowing analysts to focus on critical threats. The integration of threat intelligence management with SOAR capabilities ensures that organizations can operationalize threat feeds effectively, enhancing their overall security posture. Additionally, the platform's extensive integration ecosystem, with over 360 third-party integrations, enables organizations to orchestrate complex workflows across their existing security infrastructure without extensive custom development. * * * Seller [Palo Alto Networks](https://www.g2.com/sellers/palo-alto-networks) Discussions [Palo Alto Networks Cortex XSOAR Community](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/discuss) Solution Type Best-of-Breed Show More ## Value at a Glance Averages based on real user reviews. ### Time to Implement 2 months ### Return on Investment 13 months [ View More Pricing Information ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/pricing) ## Top-Rated Alternatives [ ![Microsoft Sentinel](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Microsoft Sentinel") Microsoft Sentinel 4.4/5(298) ](https://www.g2.com/products/microsoft-sentinel/reviews) [ ![Tines](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Tines") Tines 4.7/5(406) ](https://www.g2.com/products/tines/reviews) [ ![Splunk SOAR (Security Orchestration, Automation and Response)](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Splunk SOAR (Security Orchestration, Automation and Response)") Splunk SOAR (Security Orchestration, Automation and Response) 4.4/5(41) ](https://www.g2.com/products/splunk-soar-security-orchestration-automation-and-response/reviews) [ View All Alternatives ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/competitors/alternatives) ## User Insights Average based on 28 real user reviews. Implementation Time 2 months Perceived Cost $$$$$ [Log in to unlock pricing and user insights](/login) ## Palo Alto Networks Cortex XSOAR Integrations (1) What do users say about integrations? Integration information sourced from real user reviews. [ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft Sentinel ](https://www.g2.com/products/microsoft-sentinel/reviews) Show More ![Shagun J.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shagun J.") SJ Shagun J. Senior Security Engineer Enterprise (\> 1000 emp.) 12/21/2022 "XSOAR - Nice Detection, Response and Automation" 4.5/5 What do you like best about Palo Alto Networks Cortex XSOAR? - Capability to integrate with other applications. - Capability to perform automation and build playbooks. - Ability to handle tickets and incidents. - Can work as a centralized SIEM tool manager. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Networks Cortex XSOAR? - Frequent demisto engine disconnections. - Tool becomes unresponsive when there is a high load of inputs. Review collected by and hosted on G2.com. What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you? - Palo Alto Networks Cortex XSOAR is contributing as a centralized solution for all kinds of alerts in your organization with automation and a great response solution with integration with other tools and applications. Review collected by and hosted on G2.com. Show More 6/26/2023 Validated ReviewerIncentivizedSource: G2 invite ![Azar N.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Azar N.") AN Azar N. Information Security Engineer Mid-Market (51-1000 emp.) 2/9/2023 "Best security solution for incident responders and SecOps" 5/5 What do you like best about Palo Alto Networks Cortex XSOAR? You can integrate and orchestrate all of your security solutions in one platform and manage all of your cases, incidents. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Networks Cortex XSOAR? Cortex XSOAR can be more user-friendly in dashboards and configurations. Review collected by and hosted on G2.com. What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you? I get visibility in security solutions in one platform and respond incidents. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Logistics and Supply Chain](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Logistics and Supply Chain") AL Verified User in Logistics and Supply Chain Enterprise (\> 1000 emp.) 6/21/2022 ""XSOAR is the Ultimate Leader"" 5/5 What do you like best about Palo Alto Networks Cortex XSOAR? The Out of the Box content like Integrations for many security stacks or from multiple vendors will definitely reduce the custom efforts and its an easy adoption to the Analyst due to its User-friendly UI, Designing the playbooks is very easy and reduces the manual work by Automation, XSOAR will reduce the air gap on Security investigation and save SLA's for any type of alerts Review collected by and hosted on G2.com. What do you dislike about Palo Alto Networks Cortex XSOAR? The licensing part of the xsoar is a little costly matter and the response/delivery for any type of Future Requests for common and high-demand automation is a little slower(which needs to be improved) There are no Best practice documents on System Optimization or Playbook optimization etc. No proper troubleshooting docs for the System notifications which triggered on the system Diagnostics page Review collected by and hosted on G2.com. Recommendations to others considering Palo Alto Networks Cortex XSOAR: Its a great product and can do wonders in terms of Automating Security Tasks.. Review collected by and hosted on G2.com. What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you? We are using the XSOAR tool for multiple things 1. As a SOC Automation Tool 2. As a Reporting tool 3. As a ThreatHunting tool Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite ![Charu C.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Charu C.") CC Charu C. Sr. Infrastructure Engineer Enterprise (\> 1000 emp.) 3/11/2022 "Palo Alto Cortex XSOAR" 4.5/5 What do you like best about Palo Alto Networks Cortex XSOAR? We needed a single platform for our security operations to do end to end lifecycle management. We decide to choose Palo Alto's Cortex XSOAR and are very pleased with the results. I highly recommend it. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Networks Cortex XSOAR? Great product, a bit expensive. There is nothing to dislike about this product, it is well-designed, intuitive. Review collected by and hosted on G2.com. Recommendations to others considering Palo Alto Networks Cortex XSOAR: Currently, the Palo Alto Cortex XSOAR is the best product available on the market and it provides complete cybersecurity protection. We were a Cisco shop but switched over to Palo Alto last year. Very pleased with the results. Review collected by and hosted on G2.com. What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you? The Cortex XSOAR gives us a single platform for our security operations, a one-stop shop for orchestrating security, intel threats, managing incidents, investigations. Review collected by and hosted on G2.com. Show More 9/11/2023 Current UserValidated ReviewerIncentivizedSource: G2 invite RR Rustam R. Systems Engineer Small-Business (50 or fewer emp.) 12/17/2022 "I tested it and Palo Alto Networks Cortex XSOAR is good product" 4.5/5 What do you like best about Palo Alto Networks Cortex XSOAR? Mostly I like that it is natively integrated with other vendor's products Review collected by and hosted on G2.com. What do you dislike about Palo Alto Networks Cortex XSOAR? Mostly I dislike in the Palo Alto Networks products is the high cost Review collected by and hosted on G2.com. What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you? It solves problems with the automating Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Kavyansh P.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Kavyansh P.") KP Kavyansh P. Software Engineer - II Small-Business (50 or fewer emp.) 7/20/2022 "PAN Cortex XSOAR" 4/5 What do you like best about Palo Alto Networks Cortex XSOAR? Cortex XSOAR is easy to use. We can use it in the security domain. We can easily fetch incidents and take appropriate actions on them. It has its graphical dashboard, using that we can see insights on different - different parameters like period. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Networks Cortex XSOAR? Installation is quite difficult on local machines. it has strict platform dependency. But have options to use Cortex XSOAR on GCP. Review collected by and hosted on G2.com. What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you? I used this tool in a security-related project where we are dealing with some real-time threats, and by creating a playbook, and automated trigger. That's how we can achieve the full strength of XSOAR. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Manzar A.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Manzar A.") MA Manzar A. Software Engineer Enterprise (\> 1000 emp.) 3/29/2022 "Palo Alto XSOAR Review" 5/5 What do you like best about Palo Alto Networks Cortex XSOAR? Palo Alto XSOAR is the most complete SOAR tools I have seen so far. It has all the features required to be a complete SOAR Solution. I have made this tool as the baseline while doing POC with other SOAR tools. It is easiest tool to work and manage and create automation scripts and playbooks It provide features like: Warroom Automation Jobs Palybook Playground Support for python as well as bash and Java. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Networks Cortex XSOAR? Although it is most capable SOAR tool out there but it has few cons. 1. No clarity on infratrasture sizing for MSSP. 2. Price is little expensive. 3. HA and DR capabilities needs improvement. 4. Architecture becomes complex with high number of tenants in an MSSP enviroent. Review collected by and hosted on G2.com. What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you? It's a SOAR tools which is designed to solve the problem faced by SOC teams. It solve the issue of alert fatigue by doing automated response on the incidents triggered. It reduces the effort put by SOC team and also reduce the number of member required in SOC team and also improves the SLA KPI. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Vinod S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Vinod S.") VS Vinod S. Storage Backup Administrator Small-Business (50 or fewer emp.) 8/24/2022 "Palo alto network cortex XSOAR review" 5/5 What do you like best about Palo Alto Networks Cortex XSOAR? It has unique features, easy to use, users friendly. Customer support is good. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Networks Cortex XSOAR? Reporting for all module not good. Need to improve. Review collected by and hosted on G2.com. What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you? User friendly dashboard which is easy to us helps to operate. It helps to find single incident from multiple machine by its co relation feature. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Hoa D.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Hoa D.") HD Hoa D. Technical Sales - IBM Security Mid-Market (51-1000 emp.) 7/13/2022 "Good SOAR solution" 4/5 What do you like best about Palo Alto Networks Cortex XSOAR? Supported a lot of 3rd parties applications through API integration, easy to implementation and integration Review collected by and hosted on G2.com. What do you dislike about Palo Alto Networks Cortex XSOAR? not support data breach guidelines for countries and industries. Need a simulation or testing playbooks before applying to production environments. Review collected by and hosted on G2.com. What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you? Incident response and security playbooks, helps improve security automation and MTTR (mean time to respond), reduce time and resources for SOC team, avoid misconfigurations and wrong clicks during investigation Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Pardeep K.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Pardeep K.") PK Pardeep K. Project Trainer Enterprise (\> 1000 emp.) 8/24/2022 "Palo Alto network cortex xsoar" 5/5 What do you like best about Palo Alto Networks Cortex XSOAR? Decreases the threat identification time Review collected by and hosted on G2.com. What do you dislike about Palo Alto Networks Cortex XSOAR? The product is costly as compared to Compitators Review collected by and hosted on G2.com. What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you? Time involvment of L1 and L2 team Review collected by and hosted on G2.com. Show More 9/15/2022 Validated ReviewerIncentivizedSource: G2 invite ## Questions about Palo Alto Networks Cortex XSOAR? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about Palo Alto Networks Cortex XSOAR ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/discussions/new) GU Guest User What is Palo Alto Networks Cortex XSOAR used for? 0 Upvotes 0 [ Join the conversation ](https://www.g2.com/discussions/what-is-palo-alto-networks-cortex-xsoar-used-for) [ View all Discussions ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/discuss) ## Pricing Insights Averages based on real user reviews. ### Time to Implement 2 months ### Return on Investment 13 months ### Average Discount 11% [ View More Pricing Information ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/pricing) Palo Alto Networks Cortex XSOAR Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_91bcb2c063fcfb0a82dfedcf1a6463d1/splunk-soar-security-orchestration-automation-and-response.jpg "Product Avatar Image") Splunk SOAR (Security... 4.4/5(41) [ Compare Now ](https://www.g2.com/compare/palo-alto-networks-cortex-xsoar-vs-splunk-soar-security-orchestration-automation-and-response) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_4e2b08dd17397bdc99a5658447cbc589/microsoft-sentinel.jpg "Product Avatar Image") Microsoft Sentinel 4.4/5(298) [ Compare Now ](https://www.g2.com/compare/microsoft-sentinel-vs-palo-alto-networks-cortex-xsoar) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_aeae116c52945fdecd7ed16d621cb315/google-security-operations.png "Product Avatar Image") Google Security Operations 4.4/5(90) [ Compare Now ](https://www.g2.com/compare/google-security-operations-vs-palo-alto-networks-cortex-xsoar) ##### ##### Palo Alto Networks Cortex XSOAR Features Orchestration Security Orchestration Data Collection Threat Intelligence Automation Workflow Mapping Workflow Automation Automated Remediation Response Alerting Performance Baselin High Availability/Disaster Recovery [ View More Features ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/features) ## Work at Palo Alto Networks? Claim this profile to respond to reviews, update product info, and reach in-market buyers. [ Claim this profile ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/claim_requests/new?utm_medium=profile-footer-claim-cta&utm_source=g2) ##### Categories on G2 [Threat Intelligence](https://www.g2.com/categories/threat-intelligence)[Security Orchestration, Automation, and Response (SOAR)](https://www.g2.com/categories/security-orchestration-automation-and-response-soar) ##### Explore More [What are the top tools for automating brand asset approvals?](https://www.g2.com/discussions/what-are-the-top-tools-for-automating-brand-asset-approvals)[Please list out key security & access control features from Datasite. I am evaluating their solution.](https://www.g2.com/discussions/please-list-out-key-security-access-control-features-from-datasite-i-m-evaluating-their-solution)[Is there a free trial of Alteryx One to test its core capabilities before committing?](https://www.g2.com/discussions/is-there-a-free-trial-of-alteryx-one-to-test-its-core-capabilities-before-committing) [Which file converter platforms work well for a mid-market organization that needs to replace a legacy tool without disrupting existing document workflows during the transition?](https://www.g2.com/discussions/which-file-converter-platforms-work-well-for-a-mid-market-organization-that-needs-to-replace-a-legacy-tool-without-disrupting-existing-document-workflows-during-the-transition)[Which Google Workspace utilities have the strongest bulk operation features for onboarding and offboarding workflows?](https://www.g2.com/discussions/which-google-workspace-utilities-have-the-strongest-bulk-operation-features-for-onboarding-and-offboarding-workflows)[Pros and Cons Details](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)