Cortex XSIAM vs ServiceNow Security Operations comparison

The compared Palo Alto Networks and ServiceNow solutions aren't in the same category. Palo Alto Networks is ranked #31 in SIEM , with an average rating of 9.0, and holds a 1.5% mindshare in the category. ServiceNow is ranked #2 in IRP , with an average rating of 7.4, and holds a 19.9% mindshare. Additionally, 100% of Palo Alto Networks users are willing to recommend the solution, compared to 94% of ServiceNow users who would recommend it.

Cortex XSIAM

Read 7 Cortex XSIAM reviews

1,216 Views
853 Comparison Views

100% willing to recommend

ServiceNow Security Operations

Read 19 ServiceNow Security Operations reviews

541 Views
295 Comparison Views

94% willing to recommend

Cortex XSIAM

ServiceNow Security Operations

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Cortex XSIAM and ServiceNow Security Operations based on real PeerSpot user reviews.

Find out what your peers are saying about Splunk, Microsoft, Wazuh and others in Security Information and Event Management (SIEM).

To learn more, read our detailed Security Information and Event Management (SIEM) Report (Updated: October 2024).

Buyer's Guide

Security Information and Event Management (SIEM)

October 2024

Download the complete report

Helped 813,418 peers since 2012

Categories and Ranking

Cortex XSIAM

Average Rating

9.2

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Security Information and Event Management (SIEM) (31st), Identity Threat Detection and Response (ITDR) (10th)

ServiceNow Security Operations

Average Rating

8.0

Number of Reviews

Ranking in other categories

Security Incident Response (2nd), Security Orchestration Automation and Response (SOAR) (9th), Risk-Based Vulnerability Management (9th)

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Cortex XSIAM is designed for Security Information and Event Management (SIEM) and holds a mindshare of 1.5%, up 0.1% compared to last year.
ServiceNow Security Operations, on the other hand, focuses on Security Incident Response, holds 19.9% mindshare, up 9.1% since last year.

Security Information and Event Management (SIEM)

Security Incident Response

Featured Reviews

Forrest Stevens

Senior Manager - Security Operations at First Advantage Corporation

Sep 28, 2023

A robust security operation that ensures achieving automation, stability, and scalability

There is room for improvement in some areas, and I would highlight three key aspects. Firstly, the Attack Surface Management (ASM) module could benefit from more contextual depth. Currently, it tends to provide a broad overview without enriched context, and there's room for enhancement in this regard. Secondly, further integration capabilities with various other software products that can seamlessly tie into Cortex XSIAM would be advantageous. This would enhance its versatility and interoperability within a broader ecosystem. Regarding performance, there's potential for optimization. When multiple tabs are open in Cortex XSIAM, it can experience slowdowns, leading to longer load times for web pages. It's worth noting that this isn't a severe issue, and it doesn't entail waiting for extended periods, but there is room for improvement in terms of performance optimization.

Read full review

KishoreKumar4

Senior QE Lead at Cognizant

Jul 22, 2024

A low-cost and open-source tool for incident and change management

If we encounter challenges while deploying, we raise incidents. These incidents are categorized by priority: high, medium, and low. We assign an incident number and notify the relevant teams to address the issue. For instance, if we experience a problem with Cloud services or any other issue, we…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Its ability to deliver a substantial amount of security intelligence greatly enhances and optimizes our security operations program."

"It is an effective solution in terms of performance and functionalities."

"The most valuable features of Cortex XSIAM are the machine learning used to identify threats, the complexity of the environment of products, and efficiency."

"It does a better job of identifying anomalies that are more likely to be incidents of compromise without as many false positives or false negatives."

"The most valuable feature is the integration capability."

"The automation capabilities significantly improve response times by allowing us to respond to incidents from a single dashboard rather than navigating multiple dashboards."

"It operates on a single, extensive database which enables it to excel in detecting threats and anomalies across the network and endpoints, delivering a highly effective and comprehensive security solution."

"Integration to other security tools allows for a consolidated view of all vulnerabilities, incidents, etc. for all sorts of leverage in a single platform to assess governance risk and compliance as well as an enhanced, enriched intelligence."

"What I found most valuable in ServiceNow Security Operations is that it's very useful for any incoming vulnerability. For example, if my team finds any vulnerability on servers such as the CA and CMDB integrated with ServiceNow Security Operations, my team can make some changes. My team can map the vulnerabilities found on the CA server, make the changes required, and resolve the vulnerabilities before the system is attacked. You can avoid vulnerability attacks through ServiceNow Security Operations, so this is the best feature of the solution. ServiceNow Security Operations is beneficial mainly for vulnerability response and engagement purposes."

"It gives you the ability to bring data into the system. The workflows are out of the box, and it gives you the ability to auto-assign the incidents based on criteria and vulnerabilities."

"The most valuable aspect of working with ServiceNow is its meaningful and feature-rich product."

"Reduces time to closure and closure metrics for vulnerabilities."

"The product has a very simple UI."

"The solution is available over the cloud and is easy to manage."

"It has helped optimize security costs by consolidating multiple tools into one platform."

More ServiceNow Security Operations pros

Cons

"It could provide more integration with a large variety of products."

"There is room for improvement in expanding integrations to include more cybersecurity solutions."

"I am not sure if any improvements are needed right now."

"The platform isn't very developer-friendly and it should provide more flexibility and ease."

"The support could be a bit faster."

"Further integration capabilities with various other software products that can seamlessly tie into Cortex XSIAM would be advantageous."

"The solution’s pricing and technical support could be improved."

"We'd like customization to be easier in terms of the UI and using the dashboards."

"The product is called SecOps, but it is not security operations in terms of SIEM solutions."

"An area for improvement I observed in ServiceNow Security Operations is the need to maintain correct CMDB data because if you're unable to do this, you can't perfectly maintain the vulnerability data. CMDB data in ServiceNow Security Operations needs to be accurate. As I've been working on ServiceNow Security Operations for only seven months, I still need more time to try all its modules before I can give recommendations regarding additional features I'd like to see in the solution."

"There is room for improvement in terms of developer support and documentation."

"One area for improvement for the product is the need to tailor and alter some codes for customization, which can cause issues during upgrades. It does not support customized operations."

"It doesn't interact with things very well."

"It is challenging for the customers to understand the processes for SecOps. It needs to be simplified."

"They should stick to the roadmap and continue to build plugins and integrations with other third parties, enhance the UI, and enhance the reporting. It's all good. They should just continue enhancing the releases."

More ServiceNow Security Operations cons

Pricing and Cost Advice

"The product cost could be considered value for money compared to other solutions in the market, though it is quite high."

"The solution is expensive compared to its competitors."

"Since Palo Alto is trying to get as many new customers as possible, they're offering very competitive pricing."

"The solution comes at a significant cost."

"In terms of pricing, we found Cortex XSIAM to offer a very reasonable and competitive rate."

"The solution is more expensive than BMC Remedy, the other ITSM tool available in the market."

"Compared to competitor tools, ServiceNow Security Operations is more affordable"

"If you're going to implement it on your own, there would be internal costs. If you're going to implement it through a contractor or consultant, you have to pay for that."

"This product is a good value for the money."

"The product is more expensive than other solutions."

"It is an expensive product."

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

813,418 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

14%

Manufacturing Company

11%

Financial Services Firm

Government

Financial Services Firm

20%

Computer Software Company

10%

Government

10%

Manufacturing Company

10%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Cortex XSIAM?

It is an effective solution in terms of performance and functionalities.

See all answers

What is your experience regarding pricing and costs for Cortex XSIAM?

The product cost could be considered value for money compared to other solutions in the market, though it is quite high. I rate the pricing a nine.

See all answers

What needs improvement with Cortex XSIAM?

There is room for improvement in expanding integrations to include more cybersecurity solutions.

See all answers

What do you like most about ServiceNow Security Operations?

The most valuable aspect of working with ServiceNow is its meaningful and feature-rich product.

See all answers

What is your experience regarding pricing and costs for ServiceNow Security Operations?

The product is more expensive than other solutions like Archer but offers more features, making the pricing justifiable.

See all answers

What needs improvement with ServiceNow Security Operations?

I cannot comment on areas for improvement because it is not within my core expertise. Also, the developers may have more insight into this aspect.

See all answers

Comparisons

Palo Alto Networks Cortex XSOAR vs Cortex XSIAM

Compared 44% of the time

Microsoft Sentinel vs Cortex XSIAM

Compared 18% of the time

Splunk SOAR vs Cortex XSIAM

Compared 14% of the time

IBM Security QRadar vs Cortex XSIAM

Compared 12% of the time

CrowdStrike Falcon vs Cortex XSIAM

Compared 5% of the time

More Cortex XSIAM Competitors

Palo Alto Networks Cortex XSOAR vs ServiceNow Security Operations

Compared 27% of the time

Splunk SOAR vs ServiceNow Security Operations

Compared 19% of the time

Microsoft Sentinel vs ServiceNow Security Operations

Compared 18% of the time

IBM Resilient vs ServiceNow Security Operations

Compared 8% of the time

Swimlane vs ServiceNow Security Operations

Compared 5% of the time

More ServiceNow Security Operations Competitors

Product Reports

Buyer's Guide

Security Information and Event Management (SIEM)

October 2024

Download Cortex XSIAM product report

Buyer's Guide

ServiceNow Security Operations

September 2024

Download ServiceNow Security Operations product report

Learn More

Palo Alto Networks

Video not available

ServiceNow

Overview

By design, XSIAM operates across both cloud and enterprise security operations, providing true end-to-end-management of threats, wherever they originate. While companies born in the cloud benefit from the scale and automation of XSIAM and the ease of integration with public cloud and SaaS telemetry, organizations with legacy SIEM deployments can seamlessly transition to XSIAM as the next-generation autonomous SOC platform.

ServiceNow Security Operations is a cutting-edge security solution designed to elevate organizations' security incident response (SIR) processes through automation and orchestration. Going beyond traditional SOAR, this comprehensive Security Operations Suite integrates seamlessly with other ServiceNow products and offers a wide array of features. Its components include Security Incident Response (SIR), which automates incident workflows and offers pre-built playbooks; Security Configuration Compliance (SCC), continuously scanning and automating compliance tasks; Vulnerability Response (VR), prioritizing and remediating vulnerabilities; Threat Intelligence (TI), aggregating threat data for proactive threat hunting; and additional features like IT Service Management integration, Machine Learning and AI, reporting, and a mobile app. The benefits span improved incident response speed, reduced mean time to resolution, increased security posture, enhanced compliance, collaborative synergy between security and IT teams, and operational cost reductions.

Sample Customers

Information Not Available

DXC Technology, Freedom Security Alliance, Prime Therapeutics, Seton Hall University, York Risk Services

Buyer's Guide

Security Information and Event Management (SIEM)

October 2024

Download Free Report

Find out what your peers are saying about Splunk, Microsoft, Wazuh and others in Security Information and Event Management (SIEM). Updated: October 2024.

DOWNLOAD NOW

813,418 professionals have used our research since 2012.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.