Try our new research platform with insights from 80,000+ expert users

Cortex XSIAM vs Fortinet FortiSIEM comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XSIAM
Ranking in Security Information and Event Management (SIEM)
18th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
11
Ranking in other categories
Identity Threat Detection and Response (ITDR) (7th), AI-Powered Cybersecurity Platforms (8th)
Fortinet FortiSIEM
Ranking in Security Information and Event Management (SIEM)
8th
Average Rating
7.6
Reviews Sentiment
6.7
Number of Reviews
73
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of March 2025, in the Security Information and Event Management (SIEM) category, the mindshare of Cortex XSIAM is 2.6%, up from 0.5% compared to the previous year. The mindshare of Fortinet FortiSIEM is 3.1%, up from 3.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM)
 

Featured Reviews

Forrest Stevens - PeerSpot reviewer
A robust security operation that ensures achieving automation, stability, and scalability
There is room for improvement in some areas, and I would highlight three key aspects. Firstly, the Attack Surface Management (ASM) module could benefit from more contextual depth. Currently, it tends to provide a broad overview without enriched context, and there's room for enhancement in this regard. Secondly, further integration capabilities with various other software products that can seamlessly tie into Cortex XSIAM would be advantageous. This would enhance its versatility and interoperability within a broader ecosystem. Regarding performance, there's potential for optimization. When multiple tabs are open in Cortex XSIAM, it can experience slowdowns, leading to longer load times for web pages. It's worth noting that this isn't a severe issue, and it doesn't entail waiting for extended periods, but there is room for improvement in terms of performance optimization.
Oliver Jackson - PeerSpot reviewer
Systems monitoring enhanced by firewall and intrusion detection features
My primary use case for Fortinet FortiSIEM is systems monitoring and alerting. I use it for standard functions like log monitoring, incident detection, and notification.  My customers are mostly medium-sized enterprises ranging from engineering companies, mining companies, independent schools, and…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It operates on a single, extensive database which enables it to excel in detecting threats and anomalies across the network and endpoints, delivering a highly effective and comprehensive security solution."
"It does a better job of identifying anomalies that are more likely to be incidents of compromise without as many false positives or false negatives."
"The most valuable feature is the integration capability."
"I would give Cortex XSIAM a rating of ten out of ten."
"The flexibility for creating manual workflows stands out."
"The flexibility for creating manual workflows stands out."
"One of the valued aspects of the product is its use of artificial intelligence to detect security vulnerabilities."
"It is an effective solution in terms of performance and functionalities."
"The primary valuable feature is that it has replaced a whole lot of other products with one platform."
"The most valuable features of Fortinet FortiSIEM are the SD-WAN, Global LAN, and application controls."
"The most valuable feature is the ability to view all the network events on a single pane and find the point of contact or point of the incident."
"Analytics. It can provide log information from the device. With log information, I can see if there is a threat"
"I like FortiSIEM because it integrates natively with our other Fortinet solutions and the Fortinet Fabric, but it also integrates with Cisco, Palo Alto and other security fabrics."
"We like the integration of all of these Fortinet platforms together. Everything is integrated well, and we are able to sell that as a service to our customers."
"The most fascinating aspect of FortiSIEM is its integration with the MITRE ATT&CK framework."
"The most valuable features of the solution is its integration with other technologies, especially its ability to collect logs from Cisco and Aruba devices along with Fortinet products."
 

Cons

"The standard integrations are very limited, and the integrations available are not listed in the marketplace. Obtaining validation for integrations from Palo Alto takes around eight months, which is quite long."
"Further integration capabilities with various other software products that can seamlessly tie into Cortex XSIAM would be advantageous."
"There is room for improvement in expanding integrations to include more cybersecurity solutions."
"The first impression is that XSIAM would be more expensive than others we tried."
"The platform isn't very developer-friendly and it should provide more flexibility and ease."
"I would rate the overall stability a six or seven, as we have only used it for a few months and need a year of experience to provide a full assessment."
"I am not sure if any improvements are needed right now."
"Cortex could improve the detection and online resolution of security vulnerabilities."
"Customer support service could be better."
"They should enhance the solution's AI capabilities, including XDR and EDR."
"They could work on their documentation. If there's anything about the solution that needs improvement, it's that. For example, documentation already is on a very high level but specifically on the CLI there are tons of features which can be fine-tuned and thousands of commands are very difficult to document. If they could make this easier, it would improve the overall solution."
"It's difficult to integrate unsupported devices with FortiSIEM compared to QRadar. It's easier to integrate and develop processes in QRadar. It's harder to develop a custom process in FortiSIEM."
"The policy editing should be easier. Right now, it's too hard."
"It lacks a "wizard" that shows a particular user's activity or particular circumstance. I think the interface is intimidating because there's so much information there."
"Not very good on non-API features, lacks that functionality."
"We need to see incident reports about the event log, without events from the administrator or through human interaction."
 

Pricing and Cost Advice

"Since Palo Alto is trying to get as many new customers as possible, they're offering very competitive pricing."
"The product cost could be considered value for money compared to other solutions in the market, though it is quite high."
"In terms of pricing, we found Cortex XSIAM to offer a very reasonable and competitive rate."
"The solution comes at a significant cost."
"The solution is expensive compared to its competitors."
"Manageable, however would be better as pay as you go versus CapEX."
"The tool is really expensive. For what the tool does for our team, the price is fair."
"We pay for a license for FortiSIEM. We pay for the license and renewal."
"Fortinet's products are not expensive, it is less than the competition."
"There are additional features that cost more than the standard licensing fees."
"Fortinet FortiSIEM is very cost-efficient compared to other SIEM solutions."
"There is a need to make yearly payments towards the licensing charges attached to the product. The free version license of the product is available for two months."
"Fortinet FortiSIEM is cheaper compared to other products."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
842,651 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Financial Services Firm
10%
Manufacturing Company
10%
Government
7%
Computer Software Company
16%
Financial Services Firm
9%
Government
7%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Cortex XSIAM?
It is an effective solution in terms of performance and functionalities.
What is your experience regarding pricing and costs for Cortex XSIAM?
The product is very expensive. Additional integration and support are not provided by Cortex and must be purchased from partners. This adds to the cost and delays projects due to resource dependency.
What needs improvement with Cortex XSIAM?
The standard integrations are very limited, and the integrations available are not listed in the marketplace. Obtaining validation for integrations from Palo Alto takes around eight months, which i...
What do you like most about Fortinet FortiSIEM?
Fortinet FortiSIEM needs to provide better API integrations to users.
What is your experience regarding pricing and costs for Fortinet FortiSIEM?
As a service, the cost is reasonable and affordable with scalable pricing based on the number of monitored devices. However, setting it up for oneself as an enterprise-licensed product can be quite...
What needs improvement with Fortinet FortiSIEM?
The built-in APIs in Fortinet FortiSIEM are somewhat lacking and could be improved for better integration with external ITSM products. Improving software stability and reducing bugs will make it a ...
 

Also Known As

No data available
FortiSIEM, AccelOps
 

Overview

 

Sample Customers

Information Not Available
FortiSIEM has hundreds of customers worldwide in markets including managed services, technology, financial services, healthcare, and government. Customers include Aruba Networks, Compushare, Port of San Diego, Cleveland Indians, Infoblox, Healthways, and Referentia.
Find out what your peers are saying about Cortex XSIAM vs. Fortinet FortiSIEM and other solutions. Updated: March 2025.
842,651 professionals have used our research since 2012.