G2

yasen p.

Consultant

Small-Business (50 or fewer emp.)

9/6/2026

"AI-Driven Incident Grouping and Automation"

4.5/5

What do you like best about Palo Alto Cortex XSIAM?

The best part about XSIAM is how it takes a million noisy alerts and uses AI to group them into just a handful of actual incidents, so your security team isn't losing their minds to alert fatigue. On top of that, it has automation baked right into its DNA, meaning it can investigate and fix simple threats on its own before a human even needs to step in. Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Cortex XSIAM?

The biggest point for me has to be XSIAM's price tag and steep learning curve, since setting it up properly and getting your team trained takes a serious chunk of time and cash. It also really wants you locked into the Palo Alto ecosystem, so if you're using a bunch of third-party security tools, integrating them can feel way more clunky than advertised. Review collected by and hosted on G2.com.

What problems is Palo Alto Cortex XSIAM solving and how is that benefiting you?

First, it uses AI to cut a massive list of daily alerts down to a manageable handful, which saves your security analysts from boredom and constant alert fatigue. Second, it brings all your disjointed security tools into a single dashboard, so you don’t have to pay for a dozen separate programs or waste hours bouncing between windows just to piece together what happened. Finally, and this is what I like most, it puts basic threat cleanup on autopilot, dealing with suspicious activity right away so attacks get stopped in seconds instead of sitting in a queue waiting on a human response. Review collected by and hosted on G2.com.