Cortex XDR by Palo Alto Networks Reviews

Name: Cortex XDR by Palo Alto Networks
Brand: Palo Alto Networks
Rating: 4.2 (91 reviews)

Vendor: Palo Alto Networks

4.2 out of 5

91 reviews
95% willing to recommend

1,079 followers

Post review

What is Cortex XDR by Palo Alto Networks?

Cortex XDR by Palo Alto Networks delivers comprehensive endpoint security, integrating well with other systems to offer robust threat detection and real-time protection through AI-driven analytics.

Get the Cortex XDR by Palo Alto Networks Buyer's Guide and find out what your peers are saying about Cortex XDR by Palo Alto Networks, CrowdStrike Falcon, Microsoft Defender for Endpoint and more!

Cortex XDR by Palo Alto Networks is the #2 ranked solution in top Ransomware Protection solutions, #4 ranked solution in endpoint security software, #4 ranked solution in top AI-Powered Cybersecurity Platforms solutions, and #7 ranked solution in XDR Security products. PeerSpot users give Cortex XDR by Palo Alto Networks an average rating of 8.4 out of 10. Cortex XDR by Palo Alto Networks is most commonly compared to CrowdStrike Falcon: Cortex XDR by Palo Alto Networks vs CrowdStrike Falcon. Cortex XDR by Palo Alto Networks is popular among the large enterprise segment, accounting for 56% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 15% of all views.

Buyer's Guide

Cortex XDR by Palo Alto Networks

January 2025

Get the report

Helped 831,997 peers since 2012

Featured reviews

Mohammad Qaw

Senior Security Consultant at helpag

The solution should force customers to integrate with network traffic to see the full benefits of XDR. If you are not integrating it or feeding in your network traffic, then you are just buying a normal antivirus which doesn't make any sense. You are paying double the price to use the antivirus feature or to say you have XDR, but in reality you are not using it. The solution should include an on-premises option because some customers want only on-premises. It would be hard, but good to do if possible. Open XDR would be beneficial in the future. Right now, the solution is Closed XDR so cannot communicate with the few new vendors in the Open XDR market.

Read full review

EhabAli

Sr. Cybersecurity Solutions Architect at BMB

Some of my customers have McAfee, Symantec, or Kaspersky. Palo Alto can integrate with other vendors, so it's not locked to one single vendor. Other vendors like Trend Micro, Bitdefender, CrowdStrike, etc. have limitations on log collection from other places. On Palo Alto's datasheet, it tells you that it can talk to Check Point, Fortinet, etc. It's pretty awesome. I believe this is a huge advantage that allows us to implement Cortex anywhere.

Read full review

Rehaman Syed

Technical Specialist at HCL Technologies

Improvements are required in Cortex XDR agent whenever they are releasing the latest version. Whenever the tool releases a new version when deploying the product across the organization, I feel like there are some disturbances in the CPU usage after upgrading the tool to the latest version. Whenever Palo Alto releases the latest version and when you are deploying the package into the server, we see some disturbances in the CPU usage, like the RAM utilization is more. Generally, the CPU utilization is higher. Disabling one by one component from the profile manager, we are unable to find the exact cause of the issue. When we go to Palo Alto, even after sharing the logs and mentioning the issue, the solution team comes back and gives us some more versions of the tool. If Cortex XDR Agent 8.4.0 is having issues, then the tool's team offers us Cortex XDR Agent 8.4.1. Some updates can update the tool to the latest version.

Read full review

Cortex XDR by Palo Alto Networks mindshare

Product category:

As of January 2025, the mindshare of Cortex XDR by Palo Alto Networks in the Endpoint Protection Platform (EPP) category stands at 4.2%, down from 5.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP)

PeerAnalyst reports

Type	Title	Date
Category	Endpoint Protection Platform (EPP)	Jan 30, 2025	Download
Product	Reviews, tips, and advice from real users	Jan 30, 2025	Download
Comparison	Cortex XDR by Palo Alto Networks vs Microsoft Defender for Endpoint	Jan 30, 2025	Download
Comparison	Cortex XDR by Palo Alto Networks vs SentinelOne Singularity Complete	Jan 30, 2025	Download
Comparison	Cortex XDR by Palo Alto Networks vs CrowdStrike Falcon	Jan 30, 2025	Download

Title	Rating	Mindshare	Recommending
CrowdStrike Falcon	4.3	11.1%	96%	123 interviews Add to research
Microsoft Defender for Endpoint	4.0	11.3%	94%	190 interviews Add to research

Valuable Features

Cortex XDR by Palo Alto Networks offers advanced threat detection with machine-learning capabilities, behavior-based analytics, and real-time scanning. It integrates seamlessly with firewalls for endpoint protection and offers features like USB control, threat hunting, policy management, and centralized incident management. Its low resource consumption, cloud-based capabilities, and intuitive dashboards appeal to users. Protection remains reliable even outside the network, ensuring comprehensive security with minimal maintenance.

"Cortex XDR is stable, offering high quality and reliable performance."
"Cortex XDR features advanced threat detection capabilities."
"It is an easy-to-use tool."

Room for Improvement

Cortex XDR by Palo Alto Networks faces issues with limited cross-platform functionality, high memory consumption, and false positives. There are concerns about the complexity of deployment and licensing, insufficient reporting, and lack of integration with certain third-party solutions. Customers suggest enhancing the user interface, customizing dashboards, and improving endpoint management features. Additionally, the slow response to updates and the need for better support from sales teams are highlighted as areas for improvement.

"Cortex XDR could improve its sales support team, including better commission structures and referral programs."
"Cortex XDR could improve its sales support team, including better commission structures and referral programs."
"I would like to see improvement in the tool's user interface, particularly in the area of managing alerts and providing more reporting capabilities."

ROI

Customers experience significant ROI with Cortex XDR by Palo Alto Networks through malware prevention and reduced breach incidents. It boosts compliance, minimizes operational expenses by decreasing false positives, and lowers administrative effort by replacing multiple tools. User performance and satisfaction increase, while customer data remains secure. Cortex XDR effectively blocks ransomware, leading to confidence in security measures. Rich telemetry data aids in threat identification, providing added value to users.

Pricing

Cortex XDR by Palo Alto Networks is perceived as expensive by many users, but it is also considered reasonable and cost-effective by others for its features and flexibility. The licensing is seen as straightforward and dynamic, adaptable to the number of endpoints. Some users report additional costs for secure access and policy applications. Pricing can range from $20 to $90 per endpoint annually. Setup costs may also be higher than some competitor solutions.

"The tool's price is moderate."
"Compared to CrowdStrike, Cortex XDR is an expensive solution."
"The cost depends on your chosen license type, like Pro or other licenses."

Popular Use Cases

Cortex XDR by Palo Alto Networks is primarily used for endpoint protection, endpoint security, and threat detection. Organizations deploy it to secure against malware, exploits, and to integrate with existing firewall systems. It employs artificial intelligence for behavior analysis and has capabilities for threat hunting, incident response, and advanced threat analytics. Users utilize it for endpoint detection and response, protecting workstations, servers, and remote users, ensuring comprehensive visibility and security across their enterprise environments.

Service and Support

Customers find the customer service and support of Cortex XDR by Palo Alto Networks vary significantly. Some praise the team's expertise, quick response, and helpfulness, while others encounter challenges such as slow support, lack of knowledge, or language barriers. Improvements have been noted over time, but inconsistencies remain. Support effectiveness appears to differ based on region and escalation methods. Some find the support satisfactory and responsive, while others experience delays and communication issues.

Deployment

Cortex XDR by Palo Alto Networks is mostly described as straightforward to set up, with some noting the ease of cloud deployment. Some users completed deployment within hours, while others took weeks or months, depending on infrastructure complexity. Many emphasize the intuitive process and minimal maintenance required, though a few mention needing experience or encountering challenges with certain features. Updating is often automatic, simplifying management post-deployment.

Scalability

Cortex XDR by Palo Alto Networks demonstrates robust scalability. Organizations of varying sizes, ranging from medium to large enterprises, can efficiently manage thousands of endpoints and users across diverse operating systems. The cloud-based architecture supports seamless scaling, requiring only license updates for expansion. Reviewers consistently highlight its capability for extensive deployments without additional infrastructure challenges, rating its scalability highly. This adaptability makes it an enterprise-grade choice for those needing to manage large-scale IT environments.

Stability

Cortex XDR by Palo Alto Networks is highly stable, with improved reliability over the years. Early versions had minor bugs, but later updates showed significant stability enhancements. Users report no crashes or glitches, noting it handles features effectively. While some faced database issues and release challenges, most find Cortex XDR more stable than competitors. Frequent updates require administrative oversight, but the system's operation remains consistent and dependable, earning high stability ratings.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Cortex XDR by Palo Alto Networks Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

Government

Manufacturing Company

University

Comms Service Provider

Educational Organization

Retailer

Healthcare Company

Energy/Utilities Company

Construction Company

Insurance Company

Media Company

Real Estate/Law Firm

Non Profit

Logistics Company

Wholesaler/Distributor

Legal Firm

Hospitality Company

Outsourcing Company

Transportation Company

Recreational Facilities/Services Company

Pharma/Biotech Company

Performing Arts

Recruiting/Hr Firm

Consumer Goods Company

Compare Cortex XDR by Palo Alto Networks with alternative products

Learn more about Cortex XDR by Palo Alto Networks

Cortex XDR by Palo Alto Networks offers advanced endpoint protection and threat detection through AI and behavior-based analytics. Its user-friendly design simplifies integration with firewalls, delivering multi-layered protection with low resource consumption. Valued for policy management, USB control, and incident correlation, Cortex XDR enhances threat management and real-time threat hunting capabilities. However, users note challenges with third-party integration, reporting, and dashboard automation. Agent performance across operating systems and memory consumption are areas for improvement, alongside reducing false positives and simplifying endpoint management and setup.

What features does Cortex XDR offer?

Behavior-Based Detection: Analyzes user behavior to identify suspicious activities.
AI Analytics: Utilizes AI for accurate threat detection and response.
Real-Time Protection: Provides immediate defense against threats.
Policy Management: Allows customization of security policies across endpoints.
USB Control: Regulates USB device access for added security.
Incident Correlation: Connects and analyzes various security events for better response.
Firewall Integration: Seamlessly works with firewalls for enhanced security.
Machine Learning Capabilities: Continuously improves threat detection precision.

What benefits should be considered in reviews?

Low Resource Consumption: Efficient security functions without taxing system resources.
Multi-Layered Protection: Comprehensive security across multiple attack vectors.
User-Friendly Interface: Intuitive design for easier management.
Enhanced Threat Management: Identifies and mitigates threats effectively.
Real-Time Threat Hunting: Proactively searches for and mitigates potential threats.

Cortex XDR is crucial in industries requiring robust endpoint protection, such as finance, healthcare, and technology. It supports malware detection, behavioral analysis, and ransomware mitigation across endpoints, including remote work environments, providing comprehensive threat visibility and security policy management. The solution's integration with firewalls and specialized industry requirements enhances security posture in diverse operational settings.

Cortex XDR by Palo Alto Networks was previously known as Cyvera, Cortex XDR, Palo Alto Networks Traps.