[ Palo Al... Reviews ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/reviews) [ Palo Al... Reviews ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/reviews) # Palo Alto Networks Cortex XSOAR Features ##### ## Orchestration (9) Asset Management Lets users group and organize their endpoints to gather threat intelligence on specific technologies. Security Workflow Automation Reduces the need for IT and security professionals to iterate repetitive tasks associated with gathering threat information. Deployment The process in which users integrate their existing security systems and endpoints to the threat intelligence platform. Sandboxing A feature that allows security testing and information gathering to occur in a secure, resource independent environment. Remediation Management Identify and orchestrate execution of actions needed to restore systems to optimal conditions Security Orchestration Integrates additional security tools to automate security and incident response processes. Data Collection Collects information from multiple sources to cross reference and build contextual to correlate intelligence. Threat Intelligence Stores information related to common threats and how to resolve them once incidents occur. Data Visualization Offer pre-built and custom reporting and dashboards for quick insights into system states. Show More ##### ## Information (5) Proactive Alerts Prior to security incidents, the product will alert users when a new, relevant vulnerability or threat is discovered. Malware Detection Provides multiple techniques and information sources to alert users of malware occurrences. Intelligence Reports The ability for users to produce reports outlining detailed and personalized threat information Threat Intelligence Information to prevent, understand and identify cyber threats Real-time Alerts Receive notification of issues as soon as they occur Show More ##### ## Personalization (6) Endpoint Intelligence Analysis for users to examine threat intelligence data specific to their endpoint devices. Security Validation The product has a recurring examination process to update your intelligence reports as new threats emerge. Dynamic/Code Analysis The ability to examine your application, website, or database's code to uncover zero-day vulnerabilities. Event Analysis Investigate security threats and validate malicious activity Web-Application Security Identify and respond to security threats to web applications Application Security Identify and respond to security threats to developed applications Show More ##### ## Automation (4) Workflow Mapping Visually displays connected applications and integrated data. Allows customization and management of workflow structures. Workflow Automation Streamline the flow of work processes by establishing triggers and alerts that notify and route information to the appropriate people when their action is required within the compensation process. Automated Remediation Reduces time spent remedying issues manually. Resolves common network security incidents quickly. Log Monitoring Constantly monitors logs to detect anomalies in real time. Show More ##### ## Response (3) Alerting Clearly notifies users with relevant information and anomalies in a timely manner. Performance Baselin Sets a standard performance baseline by which to compare log activity. High Availability/Disaster Recovery Allows platform to scale to size of desired environment and configured with high availability and disaster recovery capabilities. Show More ##### ## Generative AI (5) AI Text Summarization Condenses long documents or text into a brief summary. Generate Attack Scenarios Use AI to propose possible threat actor tactics, techniques, and procedures against specific environments or assets. Generate Threat Detection Rules Use AI to automatically create detection rules based on observed patterns. Generate Threat Summaries Use AI to produce concise summaries of complex threat reports or alerts. Generative AI Use AI to generate content in the form of text, images, videos, etc. Show More ##### ## Agentic AI - Threat Intelligence (4) Autonomous Task Execution Capability to perform complex tasks without constant human input Multi-step Planning Ability to break down and plan multi-step processes Proactive Assistance Anticipates needs and offers suggestions without prompting Decision Making Makes informed choices based on available data and objectives Show More ##### ## Additional Functionality (36) Real-Time Reporting Active reporting of data and metrics Real-Time Analytics Analyze and gain insights into data in real-time Network Monitoring Tracks and makes accessible data on the health of servers and other network components. API Application programming interface that allows for integration with other systems/databases Reporting/Analytics View and track pertinent metrics to find patterns and gain insights from data Alerts/Notifications Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges Behavior Analytics Track and analyze user behavior within a system or network AI Copilot A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users Activity Dashboard Dashboard to view the status of ongoing processes, identify current incidents and track past activities Profiling Scanning of users & devices to ensure there are no potential threats Cloud Backup Process of backing up of files and applications to cloud-based remote servers for protection of data Data Visualization Graphical representation of data Activity Monitoring Track and report on everything that happens within the system or network Network Scanning Scanning networks to identify security threats Event Logs A chronological record of actions or occurrences within a network, software, or process Monitoring Observe and track the demand, usage, progress or quality of a system, product, or user Server Monitoring Continuously scan servers on a designated network to monitor health and search for any irregularities or failures Vulnerability Scanning Discover patch statuses and vulnerabilities Incident Reporting Report and update incidents related to health or workplace injuries that occur on a job or en route to a job site Activity Tracking Track and document all activities across devices, networks, and other systems Reporting & Statistics Collection, analysis, and representation of numerical data and generation of reports to understand various patterns Network Provisioning Set up and configure network resources to make them accessible for authorized users, devices and servers Prioritization Arrange tasks based on the level of priority or urgency Threat Response Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm Real-Time Data Receive data and information in real time IT Reporting Tracking KPIs over a certain period to assess helpdesk issues, ticket status & resolution, costs and revenue stats, assets usage & more Generative AI Use AI to generate content in the form of text, images, videos, etc. Collaboration Tools Provides a channel for team members to share media files, communicate, and work together Incident Management Manage and track all disruptions and incidents AI Copilot A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users Reporting/Analytics View and track pertinent metrics to find patterns and gain insights from data Threat Response Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm Key Performance Indicators Quantifiable metrics to track objectives, gauge milestones, and evaluate the success of a particular activity Risk Alerts Notifying as a warning or reminder of a potential or imminent hazard Performance Metrics A set of indicators that tracks the performance of networks, applications, systems, teams, etc. Third-Party Integrations Set up connections to third-party platforms to improve business processes Show More ## Top-Rated Alternatives [ ![Microsoft Sentinel](https://images.g2crowd.com/uploads/product/hd_favicon/a8a99a96fda235658139f710592f8a53/microsoft-sentinel.svg "Microsoft Sentinel") Microsoft Sentinel 4.4/5(298) ](https://www.g2.com/products/microsoft-sentinel/reviews) [ ![Tines](https://images.g2crowd.com/uploads/product/hd_favicon/b06976e0682a1b57bcbcb2d2bb139018/tines.svg "Tines") Tines 4.7/5(408) ](https://www.g2.com/products/tines/reviews) [ ![Splunk SOAR (Security Orchestration, Automation and Response)](https://images.g2crowd.com/uploads/product/hd_favicon/b92838221b8df42dd6b5bb09c9f8ff55/splunk-soar-security-orchestration-automation-and-response.svg "Splunk SOAR (Security Orchestration, Automation and Response)") Splunk SOAR (Security Orchestration, Automation and Response) 4.4/5(41) ](https://www.g2.com/products/splunk-soar-security-orchestration-automation-and-response/reviews) [ View All Alternatives ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/competitors/alternatives) Palo Alto Networks Cortex XSOAR Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_91bcb2c063fcfb0a82dfedcf1a6463d1/splunk-soar-security-orchestration-automation-and-response.jpg "Product Avatar Image") Splunk SOAR (Security... 4.4/5(41) [ Compare Now ](https://www.g2.com/compare/palo-alto-networks-cortex-xsoar-vs-splunk-soar-security-orchestration-automation-and-response) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_4e2b08dd17397bdc99a5658447cbc589/microsoft-sentinel.jpg "Product Avatar Image") Microsoft Sentinel 4.4/5(298) [ Compare Now ](https://www.g2.com/compare/microsoft-sentinel-vs-palo-alto-networks-cortex-xsoar) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_aeae116c52945fdecd7ed16d621cb315/google-security-operations.png "Product Avatar Image") Google Security Operations 4.4/5(100) [ Compare Now ](https://www.g2.com/compare/google-security-operations-vs-palo-alto-networks-cortex-xsoar) ##### Categories on G2 [Threat Intelligence](https://www.g2.com/categories/threat-intelligence)[Security Orchestration, Automation, and Response (SOAR)](https://www.g2.com/categories/security-orchestration-automation-and-response-soar) ##### Explore More [What capital project management software are real estate developers using to compare options and manage the full lifecycle from land acquisition through construction completion?](https://www.g2.com/discussions/what-capital-project-management-software-are-real-estate-developers-using-to-compare-options-and-manage-the-full-lifecycle-from-land-acquisition-through-construction-completion%20)[Best-reviewed employee communication software](https://www.g2.com/discussions/best-reviewed-employee-communication-software)[Which PR CRM platforms integrate with Gmail and Outlook so PR teams can track pitch activity directly inside the email tool they already use every day?](https://www.g2.com/discussions/which-pr-crm-platforms-integrate-with-gmail-and-outlook-so-pr-teams-can-track-pitch-activity-directly-inside-the-email-tool-they-already-use-every-day) [Which CLM platforms do operations manager teams trust most, based on real user reviews?](https://www.g2.com/discussions/which-clm-platforms-do-operations-manager-teams-trust-most-based-on-real-user-reviews)[Leading digital experience platforms for enterprise use](https://www.g2.com/discussions/leading-digital-experience-platforms-for-enterprise-use)[Pros and Cons Details](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)