Cortex Cloud by Palo Alto Networks vs Sysdig Monitor comparison

Cortex Cloud by Palo Alto Networks vs. Sysdig Monitor

Download the complete report

Helped 838,713 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Clo...

Mindshare comparison

As of February 2025, in the Cloud-Native Application Protection Platforms (CNAPP) category, the mindshare of SentinelOne Singularity Cloud Security is 2.8%, up from 1.2% compared to the previous year. The mindshare of Cortex Cloud by Palo Alto Networks is 18.6%, down from 21.3% compared to the previous year. The mindshare of Sysdig Monitor is 0.5%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud-Native Application Protection Platforms (CNAPP)

Featured Reviews

Andrew W

VP - Information Technology at a financial services firm with 201-500 employees

Tells us about vulnerabilities as well as their impact and helps to focus on real issues

Looking at all the different pieces, it has got everything we need. Some of the pieces we do not even use. For example, we do not have Kubernetes Security. We are not running any K8 clusters, so it is good for us. Overall, we find the solution to be fantastic. There can be additional education components. This may not be truly fair to them because of what the product is going for, but it would be great to see additional education for compliance. It is not a criticism of the tool per se, but anything to help non-development resources understand some of the complexities of the cloud is always appreciated. Any additional educational resources are always helpful for security teams, especially those without a development background.

Read full review

Mohammad Qaw

Senior Security Consultant at helpag

It gives you one console to see all of your assets, review their configurations, and build your processes

Most customers use Prisma Cloud for visibility and compliance. Prisma has so many features, but many organizations do not use them. They primarily use the visibility part to connect all their cloud accounts and hosts for visibility to see if they are missing any security controls or if they have any misconfigurations. You can connect it to cloud environments such as Azure, AWS, Oracle Cloud, Alibaba, etc., or to an on-prem data center. Prisma Cloud gives you so many options to automate processes related to your daily operations. When it comes to cybersecurity, you can automate things with their existing APIs. They also have out-of-the-box integrations with many solutions. I have not seen any limitations. Everything is customizable. You can do whatever you want, defining the reporting and custom use cases. They recently updated the UI, so it's much better than before.

Read full review

Md. Olid Hasan Bhuiyan

Site Reliability Engineer at ReliSource

Provides a good view of the sequence and offers in-depth visibility into my infrastructure

I needed to identify the sequence and frequency of system calls for a specific system. Sysdig provided this information readily. However, analyzing frequency proved more challenging. As far as I know, Sysdig Monitor lacks functionality to directly obtain system call frequency for certain files. Therefore, I had to capture a screenshot of the relevant data from Sysdig Monitor and then manually extract the text. A built-in Sysdig feature to retrieve system call frequency for specific website actions would greatly enhance its usefulness. I had difficulty installing Sysdig Monitor on Windows.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"PingSafe has a dashboard that can detect the criticality of a particular problem, whether it falls under critical, medium, or low vulnerability."

"Singularity Cloud Workload Security provides us with better security detection and more visibility. It is another resource that we can use to detect vulnerabilities in our company's systems. For example, it can help us detect new file processes that we are not familiar with, which could be used by attackers to exploit our systems. Singularity Cloud Workload Security can also help us diagnose and analyze data to determine whether it is malicious or not. Singularity Cloud Workload Security is like another pair of eyes that can help us protect our systems from cyberattacks."

"We really appreciate the Slack integration. When we have an incident, we get an instant notification. We also use Joe Sandbox, which Singularity can integrate with, so we can verify if a threat is legitimate."

"SentinelOne Singularity Cloud Security is excellent, and I highly recommend it."

"Cloud Native Security's most valuable features include cloud misconfiguration detection and remediation, compliance monitoring, a robust authentication security engine, and cloud threat detection and response capabilities."

"As a frequently audited company, we value PingSafe's compliance monitoring features. They give us a report with a compliance score for how well we meet certain regulatory standards, like HIPAA. We can show our compliance as a percentage. It's also a way to show that we are serious about security."

"The ease of use of the platform is very nice."

"Singularity Cloud Security's most valuable features are its ease of scalability and comprehensive security measures."

More SentinelOne Singularity Cloud Security pros

"The two most valuable features are container security and the capability to discover workloads."

"You can also integrate with Amazon Managed Services. You can also get a snapshot in time, whether that's over a 24-hour period, seven days, or a month, to determine what the estate might look like at a certain point in time and generate reports from that for vulnerability management forums."

"CSPM is the most valuable feature for any organization that runs its workloads in the cloud."

"Technical support is quite helpful."

"It has improved the overall collaboration between SecOps and DevOps. Now, instead of asking people to do something, it is a default offering in the CI/CD. There is less manual intervention and more seamless integration. It is why we don't have many dependencies across many teams, which is definitely a better state."

"I find the CSPM area to be a more valuable and flexible feature."

"Visibility and control are the most utilized features. A dashboard is available to us where we can view different categories. We can see any IAM-related risks, any discovered vulnerabilities, any incidents, or any network-level issues."

"The product provides very good network security."

More Cortex Cloud by Palo Alto Networks pros

"Sysdig Monitor impressed me with its in-depth visibility into my infrastructure."

"The ability to stop/pause and capture logs when something happens is the most valuable feature."

"Docker containers are completely supported, kind of like "first class citizens"."

Cons

"A few YouTube videos could be helpful. There isn't a lot of information out there to look at."

"I'd like to see better onboarding documentation."

"There is no break-glass account feature. They should implement this as soon as possible because we can't implement SSO without a break-glass feature."

"The categorization of the results from the vulnerability assessment could be improved."

"They can work on policies based on different compliance standards."

"A two-month grace period for extended searches would be a valuable improvement."

"It took us a while to configure the software to work well in this type of environment, as the support documents were not always clear."

"We recently adopted a new ticket management solution, so we've asked them to include a connector to integrate that tool with Cloud Native Security directly. We'd also like to see Cloud Native Security add a scan for personally identifying information. We're looking at other tools for this capability, but having that functionality built into Cloud Native Security would be nice. Monitoring PII data is critical to us as an organization."

More SentinelOne Singularity Cloud Security cons

"Prisma could improve the data quality. One challenge is that when an application is deployed on multiple virtual machines, we get an alert for each machine, but the biggest challenge is container flapping. When containers go up and down, we get 100 alerts on one day, but it reports 20 the next day. The numbers keep changing, and the app owners tell us, "You reported a hundred vulnerabilities from my app, and today, you report 20. I haven't made any changes in production, so is your data correct or not?""

"While the code security feature has undergone recent enhancements, there is room for improvement in terms of its cost module."

"We'd like to have more native integration with clouds and additional security checks in the future."

"We had some teething issues with Prisma Cloud by Palo Alto Networks, but overall, it did what we expected."

"One major observation is that it is not possible to implement Prisma Cloud on-premises. This is the limitation. Prisma Cloud itself is on a cloud. It is sitting on AWS and Google Cloud. It is a SaaS solution, but some of my clients have a local regulatory requirement, and they want to install it locally on their premises. That capability is not there, but government entities and ministries want to have Prisma Cloud installed locally."

"Prisma Cloud lags behind in terms of security automation capabilities."

"When it comes to protecting the full cloud-native stack, it has the right breadth. They're covering all the topics I would care about, like container, cloud configuration, and serverless. There's one gap. There could be a better set of features around identity management—native AWS—IAM roles, and service account management. The depth in each of those areas varies a little bit. While they may have the breadth, I think there's still work to do in flushing out each of those feature sets."

"They could improve more features for the enterprise version of the solution."

More Cortex Cloud by Palo Alto Networks cons

""Events" reporting (errors, crashes, etc.) is not clear at all in a Mesos environment (i.e., it's not clear what specific container is the one that went down). In a Docker Compose environment, it may be way better."

"I had difficulty installing Sysdig Monitor on Windows."

"It is needs to automate the actions to take when an alert is triggered."

Pricing and Cost Advice

"We have an enterprise license. It is affordable. I'm not sure, but I think we pay 150,000 rupees per month."

"The features included in PingSafe justify its price point."

"It's not expensive. The product is in its initial growth stages and appears more competitive compared to others. It comes in different variants, and I believe the enterprise version costs around $55 per user per year. I would rate it a five, somewhere fairly moderate."

"PingSafe is priced reasonably for our workload."

"I am personally not taking care of the pricing part, but when we moved from CrowdStrike to PingSafe, there were some savings. The price of CrowdStrike was quite high. Compared to that, the price of PingSafe was low. PingSafe is charging based on the subscription model. If I want to add an AWS subscription, I need to pay more. It should not be based on subscription. It should be based on the number of servers that I am scanning."

"SentinelOne Singularity Cloud Security is costly."

"Their pricing appears to be based simply on the number of accounts we have, which is common for cloud-based products."

"SentinelOne offers excellent pricing and licensing options."

More SentinelOne Singularity Cloud Security pricing and cost advice

"It is fairly priced. However, its price can be better so that small banks or small organizations can afford it and adopt it to secure their environment and data."

"The pricing is reasonable."

"Prisma Cloud Enterprise is a costly solution. You need a license for all the components. At the same time, you have everything under one roof, so I think it's still justified."

"Almost all the CSPM tools are pretty expensive."

"The purchasing process was easy and quick. It is a very economical solution."

"Prisma Cloud is quite scalable. In our current licensing model, we're able to heavily extend our cloud workload and onboard a lot of customers. It really helps, and it is on par with other solutions."

"Prisma Cloud licensing works on credits."

"Prisma Cloud's licensing system functions as expected with a solid licensing infrastructure."

More Cortex Cloud by Palo Alto Networks pricing and cost advice

"Sysdig Monitor is not expensive."

See which vendors are best for you

Use our free recommendation engine to learn which Cloud-Native Application Protection Platforms (CNAPP) solutions are best for your needs.

See recommendations

838,713 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

18%

Financial Services Firm

15%

Manufacturing Company

Government

Educational Organization

18%

Financial Services Firm

13%

Computer Software Company

13%

Manufacturing Company

Financial Services Firm

22%

Computer Software Company

17%

University

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about PingSafe?

The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...

What is your experience regarding pricing and costs for PingSafe?

SentinelOne is relatively cheap. If ten is the most expensive, I would rate it a seven.

What needs improvement with PingSafe?

From my personal experience, the alerting system needs to be faster. If something happens in our infrastructure, the ...

What is your primary use case for Prisma Cloud by Palo Alto Networks ?

Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.

What Cloud-Native Application Protection Platform do you recommend?

We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We...

What do you think of Aqua Security vs Prisma Cloud?

Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...

What is your experience regarding pricing and costs for Sysdig Monitor?

Sysdig Monitor is not expensive.

What needs improvement with Sysdig Monitor?

I needed to identify the sequence and frequency of system calls for a specific system. Sysdig provided this informati...

What is your primary use case for Sysdig Monitor?

During my undergraduate studies, I investigated how the frequency or order of actions within a specific system trigge...

Wiz vs SentinelOne Singularity Cloud Security

Comparisons

Compared 25% of the time

AWS GuardDuty vs SentinelOne Singularity Cloud Security

Compared 8% of the time

Microsoft Defender for Cloud vs SentinelOne Singularity Cloud Security

Compared 7% of the time

Orca Security vs SentinelOne Singularity Cloud Security

Compared 6% of the time

Check Point CloudGuard CNAPP vs SentinelOne Singularity Cloud Security

Compared 5% of the time

More SentinelOne Singularity Cloud Security Competitors

Wiz vs Cortex Cloud by Palo Alto Networks

Compared 22% of the time

Microsoft Defender for Cloud vs Cortex Cloud by Palo Alto Networks

Compared 12% of the time

CrowdStrike Falcon Cloud Security vs Cortex Cloud by Palo Alto Networks

Compared 5% of the time

Aqua Cloud Security Platform vs Cortex Cloud by Palo Alto Networks

Compared 5% of the time

Qualys VMDR vs Cortex Cloud by Palo Alto Networks

Compared 3% of the time

More Cortex Cloud by Palo Alto Networks Competitors

CrowdStrike Falcon Cloud Security vs Sysdig Monitor

Compared 32% of the time

Microsoft Defender for Cloud vs Sysdig Monitor

Compared 28% of the time

Sysdig Secure vs Sysdig Monitor

Compared 21% of the time

More Sysdig Monitor Competitors

Product Reports

SentinelOne Singularity Cloud Security

Download SentinelOne Singularity Cloud Security product report

SentinelOne Singularity Cloud Security report

Cortex Cloud by Palo Alto Networks

February 2025

Cortex Cloud by Palo Alto Networks report

Download Cortex Cloud by Palo Alto Networks product report

Container Monitoring

Download Sysdig Monitor product report

Also Known As

PingSafe

Prisma Cloud, Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto

No data available

Overview

SentinelOne Singularity Cloud Security protects cloud workloads, offering advanced threat detection and automated response. It integrates seamlessly with cloud environments and secures containerized applications and virtual machines against vulnerabilities.

SentinelOne Singularity Cloud Security is renowned for its efficiency in mitigating threats in real-time. The platform integrates effortlessly with existing cloud environments, ensuring robust cloud security management with minimal manual intervention. Securing containerized applications and virtual machines, it excels in threat intelligence and endpoint protection. However, improvements are needed in performance during high workload periods, and more integrations with third-party tools and better documentation would be beneficial. Users often find the installation process complex, support response times slow, and the dashboard's navigation unintuitive.

What are the key features of SentinelOne Singularity Cloud Security?

Real-time Threat Detection: Identifies and mitigates threats as they occur.
Automated Response: Automatically responds to threats to minimize impact.
Ease of Deployment: Simple setup process with scalable options.
Machine Learning Insights: AI-driven insights enhance threat prevention.
Seamless Integration: Integrates with cloud environments for unified security management.

What are the primary benefits or ROI to expect from SentinelOne Singularity Cloud Security?

Enhanced Threat Mitigation: Improved security against real-time threats.
Reduced Manual Intervention: Automated processes save time and resources.
Scalability: Easily adapts to growing security requirements.
Centralized Management: Manage security across platforms from a single console.
Advanced Threat Intelligence: Provides in-depth analysis and protection.

In specific industries, SentinelOne Singularity Cloud Security is implemented to safeguard critical data and infrastructure. Organizations in finance, healthcare, and technology depend on its real-time threat detection and automated response to protect sensitive information. Its ability to secure containerized applications and virtual machines is particularly valuable in dynamic environments where rapid scaling is necessary.

SentinelOne

Cortex Cloud by Palo Alto Networks offers dynamic workload identity creation, application dependency mapping, and automated forensics. Its capabilities in multi-cloud environments, tight AWS integration, and compliance features enhance threat visibility and control.

Cortex Cloud integrates RedLock and Prisma Cloud to deliver inventory management, vulnerability scanning, and cloud configuration monitoring. These features enable strong security posture management while optimizing alert response times and operational costs. Users leverage it for container security and multi-cloud compliance, maximizing insights into security configurations and threat detection across AWS, Azure, and GCP.

What are the key features of Cortex Cloud?

Dynamic Workload Identity: Enhances security through automated identity creation.
Application Dependency Mapping: Offers clarity on application interdependencies.
Automated Forensics: Speeds up investigation processes.
Managed Rule Sets: Ensures updated security practices.
Runtime Mechanism: Protects applications during execution.
Network Mapping: Strengthens overall network security.

What benefits should users consider in reviews?

Enhanced Visibility: Provides comprehensive control across cloud environments.
Cost Efficiency: Reduces operational costs and alert investigation time.
Compliance Support: Assists in meeting industry benchmarks and regulations.
Cloud Integration: Seamlessly works with AWS, Azure, and GCP.

Cortex Cloud is widely used in industries prioritizing container security and compliance across multi-cloud frameworks. Companies implement it for real-time management, vulnerability detection, and threat remediation. The focus is on aligning security posture with industry benchmarks and achieving automated compliance, facilitating robust protection across platforms like AWS, Azure, and Google Cloud.

Palo Alto Networks

Sysdig Monitor allows you to maximize the performance and availability of your cloud infrastructure, services, and applications. Built on open source, it provides immediate, deep visibility into rapidly changing container environments. You can resolve issues faster by using granular data derived from actual system calls enriched with cloud and Kubernetes context along with Prometheus metrics. Remove silos by unifying data across teams for hybrid and multi-cloud monitoring.

Sysdig

Sample Customers

Information Not Available

Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America

SAP Concur, Goldman Sachs, Worldpay by FIS, Cisco, Experian, Home Office, Societe Generale, Sunrun. More here: https://sysdig.com/customers/

Cortex Cloud by Palo Alto Networks vs. Sysdig Monitor