--- title: Palo Alto Networks Cortex XSOAR Reviews meta\_title: 'Palo Alto Networks Cortex XSOAR Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 28 reviews by the users' company size, role or industry to find out how Palo Alto Networks Cortex XSOAR works for a business like yours. aggregate\_rating: rating\_value: 4.6 review\_count: 28 scale: '5' date\_modified: '2026-08-09' parent\_category: name: System Security url: https://www.g2.com/categories/system-security --- # Palo Alto Networks Cortex XSOAR Reviews & Product Details Palo Alto Networks' Cortex XSOAR is a comprehensive Security Orchestration, Automation, and Response (SOAR) platform designed to streamline and enhance security operations. By integrating automation, case management, real-time collaboration, and threat intelligence management, Cortex XSOAR empowers security teams to respond to incidents more efficiently and effectively. Key Features and Functionality: - Process Standardization and Automation: Cortex XSOAR offers over 270 out-of-the-box playbooks, enabling the automation of numerous security use cases. These playbooks orchestrate response actions across more than 350 third-party products, facilitating seamless integration and operational consistency. - Security-Focused Case Management: The platform unifies alerts, incidents, and indicators from various sources into a single case management framework. This consolidation accelerates incident response by providing a comprehensive view of security events. - Real-Time Collaboration: Cortex XSOAR includes a Virtual War Room equipped with built-in ChatOps and a command-line interface. This feature allows security teams to collaborate in real time, execute commands across the entire product stack, and manage incidents more effectively. - Threat Intelligence Management: The platform aggregates disparate threat intelligence sources, customizes and scores feeds, and matches indicators against the organization's specific environment. This capability enables security teams to take informed actions swiftly. Primary Value and Problem Solving: Cortex XSOAR addresses the challenges faced by security teams, such as the overwhelming volume of alerts and the need for rapid incident response. By automating repetitive tasks and standardizing processes, the platform reduces the time spent on incidents by up to 90%, allowing analysts to focus on critical threats. The integration of threat intelligence management with SOAR capabilities ensures that organizations can operationalize threat feeds effectively, enhancing their overall security posture. Additionally, the platform's extensive integration ecosystem, with over 360 third-party integrations, enables organizations to orchestrate complex workflows across their existing security infrastructure without extensive custom development. * * * Seller [Palo Alto Networks](https://www.g2.com/sellers/palo-alto-networks) Discussions [Palo Alto Networks Cortex XSOAR Community](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/discuss) Solution Type Best-of-Breed Show More ## Value at a Glance Averages based on real user reviews. ### Time to Implement 2 months ### Return on Investment 13 months [ View More Pricing Information ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/pricing) ## Top-Rated Alternatives [ ![Microsoft Sentinel](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Microsoft Sentinel") Microsoft Sentinel 4.4/5(297) ](https://www.g2.com/products/microsoft-sentinel/reviews) [ ![Tines](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Tines") Tines 4.7/5(406) ](https://www.g2.com/products/tines/reviews) [ ![Splunk SOAR (Security Orchestration, Automation and Response)](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Splunk SOAR (Security Orchestration, Automation and Response)") Splunk SOAR (Security Orchestration, Automation and Response) 4.4/5(41) ](https://www.g2.com/products/splunk-soar-security-orchestration-automation-and-response/reviews) [ View All Alternatives ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/competitors/alternatives) ## User Insights Average based on 28 real user reviews. Implementation Time 2 months Perceived Cost $$$$$ [Log in to unlock pricing and user insights](/login) ## Palo Alto Networks Cortex XSOAR Integrations (1) What do users say about integrations? Integration information sourced from real user reviews. [ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft Sentinel ](https://www.g2.com/products/microsoft-sentinel/reviews) Show More PK Parveen k. Principal Consultant Enterprise (\> 1000 emp.) 8/25/2022 "Palo Alto Network" 4.5/5 What do you like best about Palo Alto Networks Cortex XSOAR? User interface and faster incident response Review collected by and hosted on G2.com. What do you dislike about Palo Alto Networks Cortex XSOAR? Report dashboard are not much user-friendly Review collected by and hosted on G2.com. What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you? Reduce manual activity to avoid human which also help Reduce secrutity incident. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Dinesh K.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Dinesh K.") DK Dinesh K. Subject Matter Expert Mid-Market (51-1000 emp.) 8/21/2022 "Easy to use, user friendly interface, go for it" 4.5/5 What do you like best about Palo Alto Networks Cortex XSOAR? Optimized framework result in automation Review collected by and hosted on G2.com. What do you dislike about Palo Alto Networks Cortex XSOAR? No polarity to create specific apps within layouts Review collected by and hosted on G2.com. What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you? It lowering time spent on incident resolution Review collected by and hosted on G2.com. Show More 8/23/2022 Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Computer & Network Security](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer & Network Security") AC Verified User in Computer & Network Security Enterprise (\> 1000 emp.) 7/13/2022 "Most Flexible SOAR Tool in the market" 5/5 What do you like best about Palo Alto Networks Cortex XSOAR? Abundant features, availability of integration options Review collected by and hosted on G2.com. What do you dislike about Palo Alto Networks Cortex XSOAR? Difficult to understand the product for beginners Review collected by and hosted on G2.com. Recommendations to others considering Palo Alto Networks Cortex XSOAR: Definitely recommend the product. Review collected by and hosted on G2.com. What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you? We are using XSOAR to automate security operations processes. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Health, Wellness and Fitness](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Health, Wellness and Fitness") UH Verified User in Health, Wellness and Fitness Mid-Market (51-1000 emp.) 7/13/2022 "Ensures the cyberattacks" 4.5/5 What do you like best about Palo Alto Networks Cortex XSOAR? Provides Network security endpoint protection Review collected by and hosted on G2.com. What do you dislike about Palo Alto Networks Cortex XSOAR? Provides the best practices for the security Review collected by and hosted on G2.com. What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you? Cloud security and cloud delivered security services Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Oussama S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Oussama S.") OS Oussama S. Cyber Security Architect Enterprise (\> 1000 emp.) 4/10/2022 "complète orchestration tool" 3.5/5 What do you like best about Palo Alto Networks Cortex XSOAR? I like playbook concept with automatization and orchestration features. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Networks Cortex XSOAR? there is not enouph script command documentation and examples Review collected by and hosted on G2.com. What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you? orchestration, automatisation and data enrichment Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Insurance](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Insurance") AI Verified User in Insurance Small-Business (50 or fewer emp.) 9/27/2021 "Easy to use" 4.5/5 What do you like best about Palo Alto Networks Cortex XSOAR? The automation part and the playbook creation part are awesome. The way it is responding to the customers and incidents is also very good. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Networks Cortex XSOAR? For building automation, there is not a lot of good documentation. The documentation is there, but it is not very good from my perspective. There should be an improvement in this area. I don't see issues with anything else. In terms of new features, I have heard that other products have EBA functionality. It would be good if this functionality could be added. Review collected by and hosted on G2.com. Recommendations to others considering Palo Alto Networks Cortex XSOAR: I would love to see more flexibility on what we can display and design on the dashboards. Review collected by and hosted on G2.com. What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you? In the SOC environment, I guess it will carry out around 50% of the work. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") UI Verified User in Information Technology and Services Enterprise (\> 1000 emp.) 12/10/2018 "Great Identification Tool" 4.5/5 What do you like best about Palo Alto Networks Cortex XSOAR? Palo Alto Networks AutoFocus is incredibly while suited for empowering companies and customers to identify and prevent targeted attacks on a a network. I really like the Dashboard, which provides advanced statistical breakdowns on pretty much every facet of the network, including DNS, downloads, requests, applications, and even maps. Review collected by and hosted on G2.com. What do you dislike about Palo Alto Networks Cortex XSOAR? It is hard to dislike this software because it provides for pretty much every use-case I have. The user interface could be a little bit better in terms of UX, but it is a beautiful dashboard. The tool really allows you to see things at a surface level and then dig deeper as necessary. Review collected by and hosted on G2.com. Recommendations to others considering Palo Alto Networks Cortex XSOAR: This is an incredibly complete solution by a company that provides for the likes of Microsoft. You can trust this solution and its quality to deliver, even at companies with 10,000+ employees. Review collected by and hosted on G2.com. What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you? Prevention of Malware/targeted attacks on a network. Threat/Risk removal from our business and our business intelligence. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Education Management](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Education Management") AE Verified User in Education Management Mid-Market (51-1000 emp.) 12/10/2018 "Very good networking solution" 4/5 What do you like best about Palo Alto Networks Cortex XSOAR? Their VPN solution is amazing, easy to use and stable. Besides that there are other products, but I haven't used them all Review collected by and hosted on G2.com. What do you dislike about Palo Alto Networks Cortex XSOAR? Although it's a security feature, but I do not like the 2FA Review collected by and hosted on G2.com. What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you? It allows us to detect threat from various sources Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ## Questions about Palo Alto Networks Cortex XSOAR? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about Palo Alto Networks Cortex XSOAR ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/discussions/new) GU Guest User What is Palo Alto Networks Cortex XSOAR used for? 0 Upvotes 0 [ Join the conversation ](https://www.g2.com/discussions/what-is-palo-alto-networks-cortex-xsoar-used-for) [ View all Discussions ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/discuss) ## Pricing Insights Averages based on real user reviews. ### Time to Implement 2 months ### Return on Investment 13 months ### Average Discount 11% [ View More Pricing Information ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/pricing) Palo Alto Networks Cortex XSOAR Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_91bcb2c063fcfb0a82dfedcf1a6463d1/splunk-soar-security-orchestration-automation-and-response.jpg "Product Avatar Image") Splunk SOAR (Security... 4.4/5(41) [ Compare Now ](https://www.g2.com/compare/palo-alto-networks-cortex-xsoar-vs-splunk-soar-security-orchestration-automation-and-response) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_4e2b08dd17397bdc99a5658447cbc589/microsoft-sentinel.jpg "Product Avatar Image") Microsoft Sentinel 4.4/5(297) [ Compare Now ](https://www.g2.com/compare/microsoft-sentinel-vs-palo-alto-networks-cortex-xsoar) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_aeae116c52945fdecd7ed16d621cb315/google-security-operations.png "Product Avatar Image") Google Security Operations 4.4/5(89) [ Compare Now ](https://www.g2.com/compare/google-security-operations-vs-palo-alto-networks-cortex-xsoar) ##### ##### Palo Alto Networks Cortex XSOAR Features Orchestration Security Orchestration Data Collection Threat Intelligence Automation Workflow Mapping Workflow Automation Automated Remediation Response Alerting Performance Baselin High Availability/Disaster Recovery [ View More Features ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/features) ## Work at Palo Alto Networks? Claim this profile to respond to reviews, update product info, and reach in-market buyers. [ Claim this profile ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/claim_requests/new?utm_medium=profile-footer-claim-cta&utm_source=g2) ##### Categories on G2 [Threat Intelligence](https://www.g2.com/categories/threat-intelligence)[Security Orchestration, Automation, and Response (SOAR)](https://www.g2.com/categories/security-orchestration-automation-and-response-soar) ##### Explore More [What are the top tools for automating brand asset approvals?](https://www.g2.com/discussions/what-are-the-top-tools-for-automating-brand-asset-approvals)[Please list out key security & access control features from Datasite. I am evaluating their solution.](https://www.g2.com/discussions/please-list-out-key-security-access-control-features-from-datasite-i-m-evaluating-their-solution)[Is there a free trial of Alteryx One to test its core capabilities before committing?](https://www.g2.com/discussions/is-there-a-free-trial-of-alteryx-one-to-test-its-core-capabilities-before-committing) [Which file converter platforms work well for a mid-market organization that needs to replace a legacy tool without disrupting existing document workflows during the transition?](https://www.g2.com/discussions/which-file-converter-platforms-work-well-for-a-mid-market-organization-that-needs-to-replace-a-legacy-tool-without-disrupting-existing-document-workflows-during-the-transition)[Which Google Workspace utilities have the strongest bulk operation features for onboarding and offboarding workflows?](https://www.g2.com/discussions/which-google-workspace-utilities-have-the-strongest-bulk-operation-features-for-onboarding-and-offboarding-workflows)[Pros and Cons Details](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)