Try our new research platform with insights from 80,000+ expert users

Palo Alto Networks Cortex XSOAR vs Trellix Helix comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.4
Palo Alto Networks Cortex XSOAR enhances ROI through automation, integration, and efficient mature SOC processes, reducing investigation time.
Sentiment score
6.2
Trellix Helix enhanced security, reduced costs, increased efficiency, minimized manual work, decreased downtime, and offered deeper security insights.
 

Customer Service

Sentiment score
6.4
Palo Alto Networks Cortex XSOAR support is knowledgeable but varies in response times and service quality, needing possible improvements.
Sentiment score
6.8
Trellix Helix support is praised for responsiveness and expertise, despite slight response time decreases due to company changes.
We experienced some challenges due to the ongoing transformation and fusion of McAfee and FireEye, but we are committed to improving response times.
 

Scalability Issues

Sentiment score
7.4
Palo Alto Networks Cortex XSOAR is scalable, integrating well with APIs, though large deployments may face challenges and latency issues.
Sentiment score
7.8
Trellix Helix excels in scalability and performance but high costs limit its full deployment for some organizations.
We support the largest companies in the world and can cater to large environments.
 

Stability Issues

Sentiment score
7.7
Palo Alto Networks Cortex XSOAR is stable and reliable, though minor bugs occur during updates and with oversized storage environments.
Sentiment score
8.4
Trellix Helix is rated highly for stability, with minor issues mostly attributed to support rather than inherent instability.
The availability is high, which is critical for our customers who rely on a single panel of glass to operate.
 

Room For Improvement

Cortex XSOAR requires easier setup, better IoT support, improved UI, more connectors, flexible pricing, and enhanced documentation.
Trellix Helix needs improvement in its interface, integrations, pricing, and service speed for better user satisfaction.
The deployment requires integration and the development of integration modules.
We have just released the solutions to the market recently, making it a revolution in the cybersecurity sector.
 

Setup Cost

Cortex XSOAR is seen as expensive yet valuable for security, with variable pricing and discounts post-Palo Alto acquisition.
Trellix Helix is competitively priced, ideal for enterprise, with annual discounts but costly professional services and third-party log fees.
It is not the cheapest, but also not the most expensive solution.
 

Valuable Features

Cortex XSOAR offers user-friendly automation, integration, and playbook creation with efficient remediation, security features, and AI-enhanced threat intelligence.
Trellix Helix integrates seamlessly, offering automation, AI capabilities, and over 400 connectors for efficient threat investigation and prevention.
Execution of automatic tasks for collecting, enriching, and correlating security events from hundreds of different technologies.
Trellix Helix, as an AI XDR platform, helps our organization by offering an extensive number of connectors for integration, enabling us to consolidate all information in a single dashboard.
 

Categories and Ranking

Palo Alto Networks Cortex X...
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
46
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (2nd), SOC as a Service (2nd)
Trellix Helix
Average Rating
8.8
Reviews Sentiment
6.9
Number of Reviews
11
Ranking in other categories
Security Information and Event Management (SIEM) (31st), Security Incident Response (7th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Palo Alto Networks Cortex XSOAR is designed for Security Orchestration Automation and Response (SOAR) and holds a mindshare of 11.1%, down 13.0% compared to last year.
Trellix Helix, on the other hand, focuses on Security Information and Event Management (SIEM), holds 0.5% mindshare, down 0.7% since last year.
Security Orchestration Automation and Response (SOAR)
Security Information and Event Management (SIEM)
 

Featured Reviews

NikhilSharma2 - PeerSpot reviewer
Ability to multiple playbooks to fetch data from multiple firewalls and utomated several tasks, including vulnerability scans and SOCL (Security Orchestration, Automation
Recently, they started implementing microservices in XSOAR, which has improved quality and addressed previous issues. However, they should focus more on licensing costs. The user licensing fees are quite high. For example, I received a quote for XSOAR, and it was $12,000 per user per year. If you have a SOC team of 30 members/analysts, you're looking at a substantial expense. They should consider reducing these costs since this high pricing seems to be more about profit. So, there is room for improvement in the pricing. Moreover, the reporting and dashboard features are decent but could be improved. The user interface (UI) is quite heavy and takes time to load, which is a major drawback.
BiswabhanuPanda - PeerSpot reviewer
You can use it for everything, incident response, automated responses, alerts, visibility
I would give the product an overall rating of eight out of 10. We have 10 people currently using this software. Six are on the list, plus two managers and two IR experts. It's not possible for just one person to maintain the solution, and it's not really allowed. It has to be a team effort, with two or three people. It's not about users. Helix works differently, collecting logs from 6,000 different sources integrated with the solution. The licensing is not based on users; it's based on APIs. It's more of a SIEM SGL type of platform. It collects logs from around 6,000. But have around 10 people maintaining that.
report
Use our free recommendation engine to learn which Security Orchestration Automation and Response (SOAR) solutions are best for your needs.
842,651 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
12%
Manufacturing Company
9%
Government
9%
Comms Service Provider
16%
Computer Software Company
15%
Manufacturing Company
13%
Financial Services Firm
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your experience regarding pricing and costs for Palo Alto Networks Cortex XSOAR?
Even though customers often comment on the price, the potential savings come from managing a large number of security events with a limited number of analysts. This leads to economic advantages des...
What needs improvement with Palo Alto Networks Cortex XSOAR?
The complexity of Cortex XSOAR has a trade-off with its versatility. The product can be tailored for each deployment to respond to specific customer needs, and this complexity may be seen as a down...
What do you like most about FireEye Helix?
Trellix Helix helps prevent email attacks, like phishing and email spoofing attacks.
What is your experience regarding pricing and costs for FireEye Helix?
The price of Trellix Helix is competitive in the market. It is not the cheapest but also not the most expensive. As for additional costs beyond standard licensing fees, there are none.
What needs improvement with FireEye Helix?
I have just released this solution to the market, and my customers' response has been great. While Trellix Wise is seen as a top vendor with its AI implementation for accelerating incident investig...
 

Also Known As

Demisto Enterprise, Cortex XSOAR, Demisto
FireEye Helix, FireEye Threat Analytics
 

Overview

 

Sample Customers

Cellcom Israel, Blue Cross and Blue Shield of Kansas City, esri, Cylance, Flatiron Health, Veeva, ADT Cybersecurity
Police Bank, Verisk Analytics, Teck Resources
Find out what your peers are saying about Microsoft, Palo Alto Networks, Splunk and others in Security Orchestration Automation and Response (SOAR). Updated: March 2025.
842,651 professionals have used our research since 2012.