Palo Alto Networks Cortex XSOAR Reviews & Product Details

Palo Alto Networks' Cortex XSOAR is a comprehensive Security Orchestration, Automation, and Response (SOAR) platform designed to streamline and enhance security operations. By integrating automation, case management, real-time collaboration, and threat intelligence management, Cortex XSOAR empowers security teams to respond to incidents more efficiently and effectively. Key Features and Functionality: - Process Standardization and Automation: Cortex XSOAR offers over 270 out-of-the-box playbooks, enabling the automation of numerous security use cases. These playbooks orchestrate response actions across more than 350 third-party products, facilitating seamless integration and operational consistency. - Security-Focused Case Management: The platform unifies alerts, incidents, and indicators from various sources into a single case management framework. This consolidation accelerates incident response by providing a comprehensive view of security events. - Real-Time Collaboration: Cortex XSOAR includes a Virtual War Room equipped with built-in ChatOps and a command-line interface. This feature allows security teams to collaborate in real time, execute commands across the entire product stack, and manage incidents more effectively. - Threat Intelligence Management: The platform aggregates disparate threat intelligence sources, customizes and scores feeds, and matches indicators against the organization's specific environment. This capability enables security teams to take informed actions swiftly. Primary Value and Problem Solving: Cortex XSOAR addresses the challenges faced by security teams, such as the overwhelming volume of alerts and the need for rapid incident response. By automating repetitive tasks and standardizing processes, the platform reduces the time spent on incidents by up to 90%, allowing analysts to focus on critical threats. The integration of threat intelligence management with SOAR capabilities ensures that organizations can operationalize threat feeds effectively, enhancing their overall security posture. Additionally, the platform's extensive integration ecosystem, with over 360 third-party integrations, enables organizations to orchestrate complex workflows across their existing security infrastructure without extensive custom development.

Seller

Palo Alto Networks

Discussions

Palo Alto Networks Cortex XSOAR Community

Solution Type

Best-of-Breed

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

Return on Investment

13 months

View More Pricing Information

Top-Rated Alternatives

Google Security Operations

4.4/5(168)

View All Alternatives

User Insights

Average based on 28 real user reviews.

Implementation Time

2 months

Perceived Cost

$$$$$

Palo Alto Networks Cortex XSOAR Integrations

(1)

Integration information sourced from real user reviews.

Parveen k.

Principal Consultant

Enterprise (> 1000 emp.)

8/25/2022

"Palo Alto Network"

4.5/5

What do you like best about Palo Alto Networks Cortex XSOAR?

User interface and faster incident response Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Networks Cortex XSOAR?

Report dashboard are not much user-friendly Review collected by and hosted on G2.com.

Dinesh K.

Subject Matter Expert

Mid-Market (51-1000 emp.)

8/21/2022

"Easy to use, user friendly interface, go for it"

4.5/5

What do you like best about Palo Alto Networks Cortex XSOAR?

Optimized framework result in automation Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Networks Cortex XSOAR?

No polarity to create specific apps within layouts Review collected by and hosted on G2.com.

Verified User in Computer & Network Security

Enterprise (> 1000 emp.)

7/13/2022

"Most Flexible SOAR Tool in the market"

5/5

What do you like best about Palo Alto Networks Cortex XSOAR?

Abundant features, availability of integration options Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Networks Cortex XSOAR?

Difficult to understand the product for beginners Review collected by and hosted on G2.com.

Verified User in Health, Wellness and Fitness

Mid-Market (51-1000 emp.)

7/13/2022

"Ensures the cyberattacks"

4.5/5

What do you like best about Palo Alto Networks Cortex XSOAR?

Provides Network security endpoint protection Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Networks Cortex XSOAR?

Provides the best practices for the security Review collected by and hosted on G2.com.

Oussama S.

Cyber Security Architect

Enterprise (> 1000 emp.)

4/10/2022

"complete orchestration tool"

3.5/5

What do you like best about Palo Alto Networks Cortex XSOAR?

I like playbook concept with automatization and orchestration features. Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Networks Cortex XSOAR?

there is not enough script command documentation and examples Review collected by and hosted on G2.com.

Verified User in Insurance

Small-Business (50 or fewer emp.)

9/27/2021

"Easy to use"

4.5/5

What do you like best about Palo Alto Networks Cortex XSOAR?

The automation part and the playbook creation part are awesome. The way it is responding to the customers and incidents is also very good. Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Networks Cortex XSOAR?

For building automation, there is not a lot of good documentation. The documentation is there, but it is not very good from my perspective. There should be an improvement in this area. I don't see issues with anything else. In terms of new features, I have heard that other products have EBA functionality. It would be good if this functionality could be added. Review collected by and hosted on G2.com.

Recommendations to others considering Palo Alto Networks Cortex XSOAR:

I would love to see more flexibility on what we can display and design on the dashboards. Review collected by and hosted on G2.com.

What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you?

In the SOC environment, I guess it will carry out around 50% of the work. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services

Enterprise (> 1000 emp.)

12/10/2018

"Great Identification Tool"

4.5/5

What do you like best about Palo Alto Networks Cortex XSOAR?

Palo Alto Networks AutoFocus is incredibly well suited for empowering companies and customers to identify and prevent targeted attacks on a network. I really like the Dashboard, which provides advanced statistical breakdowns on pretty much every facet of the network, including DNS, downloads, requests, applications, and even maps. Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Networks Cortex XSOAR?

It is hard to dislike this software because it provides for pretty much every use-case I have. The user interface could be a little bit better in terms of UX, but it is a beautiful dashboard. The tool really allows you to see things at a surface level and then dig deeper as necessary. Review collected by and hosted on G2.com.

Recommendations to others considering Palo Alto Networks Cortex XSOAR:

This is an incredibly complete solution by a company that provides for the likes of Microsoft. You can trust this solution and its quality to deliver, even at companies with 10,000+ employees. Review collected by and hosted on G2.com.

What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you?

Prevention of Malware/targeted attacks on a network. Threat/Risk removal from our business and our business intelligence. Review collected by and hosted on G2.com.

Verified User in Education Management

Mid-Market (51-1000 emp.)

12/10/2018

"Very good networking solution"

4/5

What do you like best about Palo Alto Networks Cortex XSOAR?

Their VPN solution is amazing, easy to use and stable. Besides that there are other products, but I haven't used them all Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Networks Cortex XSOAR?

Although it's a security feature, but I do not like the 2FA Review collected by and hosted on G2.com.