Cortex Cloud by Palo Alto Networks vs SUSE NeuVector comparison

Palo Alto Networks and SUSE are both solutions in the Cloud Workload Protection Platforms (CWPP) category. Palo Alto Networks is ranked #1 with an average rating of 8.5, while SUSE is ranked #18 with an average rating of 8.0. Palo Alto Networks holds a 14.8% mindshare in CWPP, compared to SUSE’s 1.4% mindshare. Additionally, 98% of Palo Alto Networks users are willing to recommend the solution, compared to 87% of SUSE users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Feb 19, 2025

Prisma Cloud by Palo Alto Networks and SUSE NeuVector compete in cloud security. Based on feature breadth and integration, Prisma Cloud appears to have an upper hand in diverse and hybrid cloud environments, while SUSE NeuVector excels in container and runtime security.

Features: Prisma Cloud provides dynamic workload identity creation, application dependency mapping, and strong cryptographic identity with AWS integration. SUSE NeuVector offers real-time security, extensive vulnerability scanning for containers, and robust network security but lacks virtual machine support.

Room for Improvement: Prisma Cloud users highlight documentation gaps and expensive licensing, with feature integration issues post-acquisitions. NeuVector requires enhanced image scanning and integration capabilities, as well as broader VM support.

Ease of Deployment and Customer Service: Prisma Cloud supports public, private, and hybrid clouds, noted for comprehensive support but with variable response times. SUSE NeuVector is commended for simplicity in deployment and strong support, specifically in public and on-premises settings.

Pricing and ROI: Prisma Cloud is regarded as premium-priced due to its extensive features and supportive services, offering time and efficiency benefits in return. Conversely, NeuVector, an open-source solution, presents a cost-effective option with potential ROI through quick deployment and ease of use for cost-sensitive operations.

To learn more, read our detailed Cortex Cloud by Palo Alto Networks vs. SUSE NeuVector Report (Updated: January 2025).

Buyer's Guide

Cortex Cloud by Palo Alto Networks vs. SUSE NeuVector

January 2025

Download the complete report

Helped 838,713 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Clo...

Mindshare comparison

As of February 2025, in the Cloud Workload Protection Platforms (CWPP) category, the mindshare of SentinelOne Singularity Cloud Security is 2.2%, up from 0.8% compared to the previous year. The mindshare of Cortex Cloud by Palo Alto Networks is 14.8%, down from 17.0% compared to the previous year. The mindshare of SUSE NeuVector is 1.4%, down from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud Workload Protection Platforms (CWPP)

Featured Reviews

Andrew W

VP - Information Technology at a financial services firm with 201-500 employees

Tells us about vulnerabilities as well as their impact and helps to focus on real issues

Looking at all the different pieces, it has got everything we need. Some of the pieces we do not even use. For example, we do not have Kubernetes Security. We are not running any K8 clusters, so it is good for us. Overall, we find the solution to be fantastic. There can be additional education components. This may not be truly fair to them because of what the product is going for, but it would be great to see additional education for compliance. It is not a criticism of the tool per se, but anything to help non-development resources understand some of the complexities of the cloud is always appreciated. Any additional educational resources are always helpful for security teams, especially those without a development background.

Read full review

Mohammad Qaw

Senior Security Consultant at helpag

It gives you one console to see all of your assets, review their configurations, and build your processes

Most customers use Prisma Cloud for visibility and compliance. Prisma has so many features, but many organizations do not use them. They primarily use the visibility part to connect all their cloud accounts and hosts for visibility to see if they are missing any security controls or if they have any misconfigurations. You can connect it to cloud environments such as Azure, AWS, Oracle Cloud, Alibaba, etc., or to an on-prem data center. Prisma Cloud gives you so many options to automate processes related to your daily operations. When it comes to cybersecurity, you can automate things with their existing APIs. They also have out-of-the-box integrations with many solutions. I have not seen any limitations. Everything is customizable. You can do whatever you want, defining the reporting and custom use cases. They recently updated the UI, so it's much better than before.

Read full review

Danie Joubert

Managing Director at ProQuanta

Good value for money; great for policy management

Our model of deployment for this solution is on-premises. For people looking into this solution and trying to use it for the first time, I'd say make your life easier by using the SUSE product as well on top of your community scale stack. That makes your integration points a lot easier and smoother. I would also say during your initial setup, make sure that your clusters are already in terms of the capabilities with the version required. I would rate this solution an eight, on a scale from one to 10, with one being the worst and 10 being the best. The reason for this rating is that what they offer is solid, but they could expand their service and add more features just to make more things integrated into an enterprise itself.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"All the features we use are equal and get the job done."

"The cloud misconfiguration is the most valuable feature."

"The user interface is well-designed and easy to navigate."

"The offensive security feature is valuable because it publicly detects the offensive and vulnerable things present in our domain or applications. It checks any applications with public access. Some of the applications give public access to certain files or are present over a particular domain. It detects and lets us know with evidence. That is quite good. It is protecting our infrastructure quite well."

"It integrates very well. We sell different products from different vendors. We know that the SentinelOne Singularity platform can be integrated with several different solutions from different vendors."

"We're monitoring several cloud accounts with Singularity. It is convenient to identify issues or security failures in any account. It's nice to have all the details we need to solve these issues."

"SentinelOne's behaviour analytics are valuable because they detect anomalies and malicious behaviour that signature-based solutions might miss."

"I would rate SentinelOne Singularity Cloud Security a ten out of ten."

More SentinelOne Singularity Cloud Security pros

"It also provides us with a single tool to manage our entire cloud architecture. In fact, we are using a multi-account strategy with our AWS organization. We use Prisma as a single source of truth to identify high- or medium-severity threats inside our organization."

"It provides insights into potential vulnerabilities in our code, helping us identify and rectify issues before they can be exploited."

"The policies that come prepackaged in the tool have been very valuable to us. They're accurate and they provide good guidance as to why the policy was created, as well as how to remediate anything that violates the policy."

"The dynamic workload identity creation, attestation, and assignment is the best feature. In addition, the application dependency map across heterogeneous environments for compliance is a striking feature."

"It is user-friendly. It has a good look and feel and reporting structure. It provides a single pane of glass. These are the things that I like."

"I would rate Prisma Cloud a ten out of ten."

"Prisma Cloud's inventory reporting is pretty good."

"The UI is very good. We get all the things within a single UI."

More Cortex Cloud by Palo Alto Networks pros

"The features of image scanning and anti-malware are really valuable."

"The most valuable feature of SUSE NeuVector is its run-time security."

"The tool's deployment is simple. Also, I am impressed with its risk capabilities."

"The solution includes many features, not only for container and client security but also for scanning nodes, networks, and vulnerabilities."

"When it comes to the price, we got a really good deal from the vendor instantly."

"The UI has a lot of features."

"The initial setup is quite good, it's straightforward."

"The solution includes many features, not only for container and client security but also for scanning nodes, networks, and vulnerabilities."

More SUSE NeuVector pros

Cons

"I would like PingSafe's detections to be openly available online instead of only accessible through their portal. Other tools have detections that are openly available without going through the tool."

"There is room for improvement in the current active licensing model for PingSafe."

"One potential drawback is the cost of SentinelOne Singularity Cloud Security, which may be prohibitive for smaller businesses or startups, particularly those in regions with lower average incomes, such as India."

"While SentinelOne offers robust security features, its higher cost may present a challenge for budget-conscious organizations."

"Maybe container runtime security could be improved."

"To enhance the notification system's efficiency, resolved issues should be promptly removed from the portal."

"The Infrastructure as Code service available in PingSafe and the services available in AWS cloud security can be merged so that we can get the security data directly from AWS cloud in PingSafe. This way, all the data related to security will be in one single place. Currently, we have to check a couple of things on PingSafe, and we have to validate that same data on the AWS Cloud to be sure. If they can collaborate like that, it will be great."

"PingSafe is an excellent CSPM tool, but the CWPP features need to improve, and there is a scope for more application security posture management features. There aren't many ASPM solutions on the market, and existing ones are costly. I would like to see PingSafe develop into a single pane of glass for ASPM, CSPM, and CWPP. Another feature I'd like to see is runtime protection."

More SentinelOne Singularity Cloud Security cons

"Currently, custom reports are available, but I feel that those reports are targeting just the L1 or L2 engineers because they are very verbose. So, for every alert, there is a proper description, but as a security posture management portal, Prisma Cloud should give me a dashboard that I can present to my stakeholders, such as CSO, CRO, or CTO. It should be at a little bit higher level. They should definitely put effort into reporting because the reporting does not reflect the requirements of a dashboard for your stakeholders. There are a couple of things that are present on the portal, but we don't have the option to customize dashboards or widgets. There are a limited set of widgets, and those widgets don't add value from the perspective of a security team or any professional who is above L1 or L2 level. Because of this, the reach of Prisma Cloud in an organization or the access to Prisma Cloud will be limited only to L1 and L2 engineers. This is something that their development team should look into."

"Runecast gave us more visibility into VMware's private cloud. We have more environments there, but Prisma's lack of visibility into the private cloud was a downside—there weren't many."

"While the documentation continually improves, it still has limitations compared to the extensive resources available for older products like hardware firewalls, which have been around for approximately 20 years."

"It would be ideal if they could somehow reduce the deployment time."

"Getting new guys trained on using the solution requires some thought. If someone is already trained on Palo Alto then he's able to adapt quickly. But, if someone is coming from another platform such as Fortinet, or maybe he's from the system side, that is where we need some help. We need to find out if there is an online track or training that they can go to."

"When it comes to compliance, the issue is that when we are exporting the reports, there is only a single compliance option. If I need to report on multiple compliance requirements, that feature isn't available. For example, I made a single report for ISO 27000 but I can't correlate it with GDPR."

"Prisma Cloud supports generating CSV files, but I would also like it to generate PDF files for reporting."

"We'd like to have more native integration with clouds and additional security checks in the future."

More Cortex Cloud by Palo Alto Networks cons

"Using a node port instead of a cluster IP is less ideal when implementing federation features between two clusters and could be improved."

"The tool should offer seamless integration of other security tools while in a hybrid environment."

"However, I found that the support in Egypt was not very qualified, and there was a need to upgrade to a higher support layer to solve my issues."

"We are also working with IaaS VMS, but NeuVector doesn't support virtual machines."

"SUSE NeuVector could improve by increasing its visibility into other elements of the DevSecOps pipeline. Additionally, scanning around infrastructure would be helpful."

"I would say that this solution should improve monitoring and reporting. I would also like to see more integrations so that we could essentially make it a part of a developing pipeline."

"The image-scanning features need improvement."

"SUSE NeuVector should provide more security protection rules and better container image scanning."

More SUSE NeuVector cons

Pricing and Cost Advice

"I wasn't sure what to expect from the pricing, but I was pleasantly surprised to find that it was a little less than I thought."

"The features included in PingSafe justify its price point."

"PingSafe falls somewhere in the middle price range, neither particularly cheap nor expensive."

"It is a little expensive. I would rate it a four out of ten for pricing."

"The pricing is somewhat high compared to other market tools."

"SentinelOne Singularity Cloud Security is costly."

"While I'm slightly out of touch with pricing, I know SentinelOne is much cheaper than other products."

"PingSafe falls within the typical price range for cloud security platforms."

More SentinelOne Singularity Cloud Security pricing and cost advice

"The pricing is good. They gave us some good discounts right at the end of the year based on the value that it brings, visibility, and the ability to build in cloud, compliance, and security within one dashboard."

"It is an expensive tool. It is not cheap technology. It is a serious investment for any customer. Customers typically buy it together with services. In my experience, customers buying Prisma Cloud are prepared to pay for the implementation and the tool itself."

"The price is high. In the future, when there are more competitors at the same level with different clouds, maybe the position will be different."

"The pricing is reasonable."

"The pricing is competitive. From what I have seen in the past, it is on par with the others."

"Its licensing cost depends on the type of license such as the business license or the enterprise license. The enterprise license is costlier than the business license, but we get more visibility and more modules. If you have a multi-cloud environment and subscribe to each cloud's native CSPM tool, it is costly. If you are using a single tool like Prisma Cloud, with a single license, you can monitor all environments, such as Google Cloud, Azure, AWS, and Oracle Cloud. The cost of Prisma Cloud is less than the cost of subscribing to the CSPM tool of each cloud provider. This is where Prisma Cloud can save costs."

"Prisma Cloud is remarkably expensive."

"Prisma Cloud is more expensive than some other solutions, but when we consider all of its use cases, the cost averages out."

More Cortex Cloud by Palo Alto Networks pricing and cost advice

"The price of SUSE NeuVector is low. There is an additional cost for support."

"Licensing fees are paid yearly."

"SUSE NeuVector is an open-source solution."

"The solution's pricing could be better. The cost of a subscription is calculated on the basis of work."

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Workload Protection Platforms (CWPP) solutions are best for your needs.

See recommendations

838,713 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

18%

Financial Services Firm

15%

Manufacturing Company

Government

Educational Organization

18%

Financial Services Firm

13%

Computer Software Company

13%

Manufacturing Company

Computer Software Company

18%

Financial Services Firm

15%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about PingSafe?

The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...

See all answers

What is your experience regarding pricing and costs for PingSafe?

SentinelOne is relatively cheap. If ten is the most expensive, I would rate it a seven.

See all answers

What needs improvement with PingSafe?

From my personal experience, the alerting system needs to be faster. If something happens in our infrastructure, the ...

See all answers

What is your primary use case for Prisma Cloud by Palo Alto Networks ?

Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.

See all answers

What Cloud-Native Application Protection Platform do you recommend?

We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We...

See all answers

What do you think of Aqua Security vs Prisma Cloud?

Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...

See all answers

What do you like most about NeuVector?

The most valuable feature of SUSE NeuVector is its run-time security.

See all answers

What is your experience regarding pricing and costs for NeuVector?

SUSE NeuVector is an open-source solution. You have to pay for the support.

See all answers

What needs improvement with NeuVector?

One area for improvement is NeuVector's ability to import CVEs from different sources. Additionally, using a node por...

See all answers

Comparisons

Wiz vs SentinelOne Singularity Cloud Security

Compared 25% of the time

AWS GuardDuty vs SentinelOne Singularity Cloud Security

Compared 8% of the time

Microsoft Defender for Cloud vs SentinelOne Singularity Cloud Security

Compared 7% of the time

Orca Security vs SentinelOne Singularity Cloud Security

Compared 6% of the time

More SentinelOne Singularity Cloud Security Competitors

Wiz vs Cortex Cloud by Palo Alto Networks

Compared 22% of the time

Microsoft Defender for Cloud vs Cortex Cloud by Palo Alto Networks

Compared 12% of the time

CrowdStrike Falcon Cloud Security vs Cortex Cloud by Palo Alto Networks

Compared 5% of the time

Aqua Cloud Security Platform vs Cortex Cloud by Palo Alto Networks

Compared 5% of the time

Qualys VMDR vs Cortex Cloud by Palo Alto Networks

Compared 3% of the time

More Cortex Cloud by Palo Alto Networks Competitors

Sysdig Falco vs SUSE NeuVector

Compared 13% of the time

Trivy vs SUSE NeuVector

Compared 13% of the time

Red Hat Advanced Cluster Security for Kubernetes vs SUSE NeuVector

Compared 12% of the time

Aqua Cloud Security Platform vs SUSE NeuVector

Compared 11% of the time

Sysdig Secure vs SUSE NeuVector

Compared 7% of the time

More SUSE NeuVector Competitors

Product Reports

Buyer's Guide

SentinelOne Singularity Cloud Security

January 2025

SentinelOne Singularity Cloud Security report

Download SentinelOne Singularity Cloud Security product report

Buyer's Guide

Cortex Cloud by Palo Alto Networks

February 2025

Cortex Cloud by Palo Alto Networks report

Download Cortex Cloud by Palo Alto Networks product report

Buyer's Guide

Container Security

February 2025

Download SUSE NeuVector product report

Also Known As

PingSafe

Prisma Cloud, Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto

NeuVector

Overview

SentinelOne Singularity Cloud Security protects cloud workloads, offering advanced threat detection and automated response. It integrates seamlessly with cloud environments and secures containerized applications and virtual machines against vulnerabilities.

SentinelOne Singularity Cloud Security is renowned for its efficiency in mitigating threats in real-time. The platform integrates effortlessly with existing cloud environments, ensuring robust cloud security management with minimal manual intervention. Securing containerized applications and virtual machines, it excels in threat intelligence and endpoint protection. However, improvements are needed in performance during high workload periods, and more integrations with third-party tools and better documentation would be beneficial. Users often find the installation process complex, support response times slow, and the dashboard's navigation unintuitive.

What are the key features of SentinelOne Singularity Cloud Security?

Real-time Threat Detection: Identifies and mitigates threats as they occur.
Automated Response: Automatically responds to threats to minimize impact.
Ease of Deployment: Simple setup process with scalable options.
Machine Learning Insights: AI-driven insights enhance threat prevention.
Seamless Integration: Integrates with cloud environments for unified security management.

What are the primary benefits or ROI to expect from SentinelOne Singularity Cloud Security?

Enhanced Threat Mitigation: Improved security against real-time threats.
Reduced Manual Intervention: Automated processes save time and resources.
Scalability: Easily adapts to growing security requirements.
Centralized Management: Manage security across platforms from a single console.
Advanced Threat Intelligence: Provides in-depth analysis and protection.

In specific industries, SentinelOne Singularity Cloud Security is implemented to safeguard critical data and infrastructure. Organizations in finance, healthcare, and technology depend on its real-time threat detection and automated response to protect sensitive information. Its ability to secure containerized applications and virtual machines is particularly valuable in dynamic environments where rapid scaling is necessary.

SentinelOne

Cortex Cloud by Palo Alto Networks offers dynamic workload identity creation, application dependency mapping, and automated forensics. Its capabilities in multi-cloud environments, tight AWS integration, and compliance features enhance threat visibility and control.

Cortex Cloud integrates RedLock and Prisma Cloud to deliver inventory management, vulnerability scanning, and cloud configuration monitoring. These features enable strong security posture management while optimizing alert response times and operational costs. Users leverage it for container security and multi-cloud compliance, maximizing insights into security configurations and threat detection across AWS, Azure, and GCP.

What are the key features of Cortex Cloud?

Dynamic Workload Identity: Enhances security through automated identity creation.
Application Dependency Mapping: Offers clarity on application interdependencies.
Automated Forensics: Speeds up investigation processes.
Managed Rule Sets: Ensures updated security practices.
Runtime Mechanism: Protects applications during execution.
Network Mapping: Strengthens overall network security.

What benefits should users consider in reviews?

Enhanced Visibility: Provides comprehensive control across cloud environments.
Cost Efficiency: Reduces operational costs and alert investigation time.
Compliance Support: Assists in meeting industry benchmarks and regulations.
Cloud Integration: Seamlessly works with AWS, Azure, and GCP.

Cortex Cloud is widely used in industries prioritizing container security and compliance across multi-cloud frameworks. Companies implement it for real-time management, vulnerability detection, and threat remediation. The focus is on aligning security posture with industry benchmarks and achieving automated compliance, facilitating robust protection across platforms like AWS, Azure, and Google Cloud.

Palo Alto Networks

SUSE NeuVector is a full lifecycle container security solution that helps your organization secure its container infrastructures, manage Kubernetes security risks, and block threats. The NeuVector continuous container security and compliance platform simplifies data protection from pipeline to production, enforces compliance, and provides complete visibility and automated controls for protection against known and unknown threats. In addition, NeuVector is the only Kubernetes-native container security solution that offers a comprehensive risk profile of known vulnerabilities and also delivers immediate protection from all vulnerabilities.

SUSE NeuVector Features

SUSE NueVector has many valuable key features. Some of the most useful ones include:

Container incident detection and prevention
Network security
Runtime security
Supply chain security
Container firewall
Host and platform security
Cloud-native automation and integration
Resource monitoring
Visualization and reporting
High availability
Security
Vulnerability management
Compliance and auditing
Alerting
Logging and Response

SUSE NeuVector Benefits

There are many benefits to implementing NeuVector. Some of the biggest advantages the solution offers include:

Deep packet inspection (DPI): NeuVector applies DPI to identify attacks, detect sensitive data, or verify application access to further reduce the attack surface. Only network layer analysis enables security to detect and verify the allowed protocols, helping security teams enforce business policy.

Real-time protection: NeuVector provides inspection, segmentation, and protection of all traffic into and out of a container. This includes container to container traffic, and ingress from external sources to containers, as well as egress from containers to external applications and the internet. The solution aims to protect your applications from internal application level attacks such as DDoS and DNS.

Capture packets for debugging and threat investigation: WIth NeuVector, you can view summary connection data and drill down into actual packet details for each container, as they scale up and down. When a threat is detected, NeuVector is able to automatically capture and display the packet info, making it easy for you to investigate.

Automated security policies: The NeuVector solution allows you to automate the creation of security policies to protect application workloads in production. The solution also enables you to automate and maintain run-time security policies using Kubernetes custom resource definitions (CRDs), and gives you the option to declare an application security policy at any stage in the pipeline.

Compliance: NeuVector offers detection capabilities and security policy enforcement that prevent PHI and PII exposure, exceed requirements, and simplify reporting for PCI-DSS, GDPR, HIPAA, and more. The solution helps you track critical vulnerabilities and compliance violations so you can quickly identify any that require immediate patching or followup alerts. It also makes it possible for you to manage vulnerability and compliance scan results, with no required integration to external workflow tools.

Reviews from Real Users

A Platform Solution Architect at a tech services company says, “The solution is feature-rich, easy to set up, and has good support.”

SUSE

Sample Customers

Information Not Available

Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America

Figo, Clear Review, Arvato Bertelsmann, Experian, Chime

Buyer's Guide

Cortex Cloud by Palo Alto Networks vs. SUSE NeuVector

January 2025

Free Report: Cortex Cloud by Palo Alto Networks vs. SUSE NeuVector

Find out what your peers are saying about Cortex Cloud by Palo Alto Networks vs. SUSE NeuVector and other solutions. Updated: January 2025.

DOWNLOAD NOW

838,713 professionals have used our research since 2012.

See our Cortex Cloud by Palo Alto Networks vs. SUSE NeuVector report.

See our list of best Cloud Workload Protection Platforms (CWPP) vendors.

We monitor all Cloud Workload Protection Platforms (CWPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.