Try our new research platform with insights from 80,000+ expert users

Palo Alto Networks Cortex XSOAR vs Trellix Helix comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Palo Alto Networks Cortex X...
Average Rating
8.4
Number of Reviews
44
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (2nd), SOC as a Service (2nd)
Trellix Helix
Average Rating
8.8
Number of Reviews
10
Ranking in other categories
Security Information and Event Management (SIEM) (32nd), Security Incident Response (7th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Palo Alto Networks Cortex XSOAR is designed for Security Orchestration Automation and Response (SOAR) and holds a mindshare of 13.1%, down 15.0% compared to last year.
Trellix Helix, on the other hand, focuses on Security Information and Event Management (SIEM), holds 0.5% mindshare, down 0.8% since last year.
Security Orchestration Automation and Response (SOAR)
Security Information and Event Management (SIEM)
 

Featured Reviews

NikhilSharma2 - PeerSpot reviewer
Aug 23, 2024
Ability to multiple playbooks to fetch data from multiple firewalls and utomated several tasks, including vulnerability scans and SOCL (Security Orchestration, Automation
Recently, they started implementing microservices in XSOAR, which has improved quality and addressed previous issues. However, they should focus more on licensing costs. The user licensing fees are quite high. For example, I received a quote for XSOAR, and it was $12,000 per user per year. If you have a SOC team of 30 members/analysts, you're looking at a substantial expense. They should consider reducing these costs since this high pricing seems to be more about profit. So, there is room for improvement in the pricing. Moreover, the reporting and dashboard features are decent but could be improved. The user interface (UI) is quite heavy and takes time to load, which is a major drawback.
Abanoub Alfy - PeerSpot reviewer
May 15, 2023
Helps prevent email attacks, like phishing and email spoofing attacks
We use Trellix Helix for protection against network attacks, TLS, and SSL attacks. We also use the solution for user behaviour accesses Trellix Helix helps prevent email attacks, like phishing and email spoofing attacks. Trellix Helix's configuration and learning could be improved to identify…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I have no complaints about Cortex's stability."
"What I like most about Palo Alto Networks Cortex XSOAR is how user-friendly it is for development. It is much simpler to work with compared to similar tools I've used."
"The product is quite easy to use."
"We use the solution to automate our SIEM tools and incidents."
"It is a scalable solution."
"It is a scalable solution."
"It is quite scalable. I would rate it a ten out of ten."
"It was useful as a ticketing tool."
"The most valuable features include predefined use cases and threatening states."
"We have started working with various customers, one of whom is particularly concerned about adjacency. We have identified several use cases where automation is possible."
"Trellix Helix helps prevent email attacks, like phishing and email spoofing attacks."
"It is kind of simple and very easily deployable. You can start working with it very fast."
"I like that it's easy. It's got the protection set up, and we can see whatever is required. We write our own rules and the rules that we can input. I think it is good."
"We are able to block some advanced malware and other things."
"The product offers very strong automation. Our cyber security analysts don't have to correlate the information to detect problems. They only need to analyze problems that have been identified by the platform."
"FireEye Helix's best features are its speed and use of an easy-to-understand language to send queries to the raw logs."
 

Cons

"I would love to see more flexibility on what we can display and design on the dashboards."
"The platform’s setup procedures could be streamlined compared to one of its competitors."
"The solution's correlation rules and playbooks should be improved."
"It is not a very scalable solution."
"The user interface (UI) is quite heavy and takes time to load, which is a major drawback."
"The solution requires DV but does not support open-source DV elastic searches."
"I would like to see Cortex become less dependent on Active Directory and group policies to manage the deployment. Maybe I need to update my understanding of how to deploy it, but that's the way I know how to use it."
"There should be an on-premise version available for customers to have different choices."
"FireEye Helix would be improved with the option of an on-prem version, which they don't currently offer."
"The graphical user interface could be improved. It's not easy to handle and it's not easy for a customer or end-user to learn how to manage the solution."
"It should have more cloud connectors. It could also be cheaper."
"Trellix needs to address the price for the product to be more appealing to customers."
"Integrations could be improved, and the dashboard could be a little better."
"Trellix Helix's configuration and learning could be improved to identify normal traffic from abnormal and to identify trusted domains."
"We often rely on Martins to create logs and provide professional threat services rather than basic support."
"There is room for improvement in the integration capabilities of third-party tools."
 

Pricing and Cost Advice

"The price of Palo Alto Networks Cortex XSOAR is comparable to other solutions in the market."
"The solution is expensive."
"The solution is a bit on the expensive side."
"The price of Palo Alto Networks Cortex XSOAR could be reduced. We are always looking for a discount. There is an annual license needed to use this solution."
"There is a perception that it is priced very high compared to other solutions."
"It is expensive."
"From the cost perspective, I have heard that its price is a bit high as compared to other similar products."
"The solution is based on an annual licensing model that is expensive."
"It could be cheaper, but that applies to every product."
"The price could be better. But I think it's rightly placed when we buy everything in one shot, and we get some discount for that. That's how we basically plan our deployment, and it's holistic. We pay for the license yearly."
"I rate Trellix Helix a five out of ten for pricing."
"FireEye Helix is a little expensive."
report
Use our free recommendation engine to learn which Security Orchestration Automation and Response (SOAR) solutions are best for your needs.
814,649 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
13%
Government
10%
Manufacturing Company
9%
Computer Software Company
16%
Comms Service Provider
13%
Manufacturing Company
11%
Financial Services Firm
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your experience regarding pricing and costs for Palo Alto Networks Cortex XSOAR?
I do not know about the pricing as it was handled by the salespeople.
What needs improvement with Palo Alto Networks Cortex XSOAR?
Creating complex playbooks using coding languages, such as Python, could be easier. Sometimes the process becomes tedious and requires manual tasks.
What do you like most about FireEye Helix?
Trellix Helix helps prevent email attacks, like phishing and email spoofing attacks.
What needs improvement with FireEye Helix?
There is room for improvement in the integration capabilities of third-party tools. It has no problem connecting all solutions to Helix. Right now, we only connect one of Trellix's appliances to th...
 

Also Known As

Demisto Enterprise, Cortex XSOAR, Demisto
FireEye Helix, FireEye Threat Analytics
 

Learn More

Video not available
 

Overview

 

Sample Customers

Cellcom Israel, Blue Cross and Blue Shield of Kansas City, esri, Cylance, Flatiron Health, Veeva, ADT Cybersecurity
Police Bank, Verisk Analytics, Teck Resources
Find out what your peers are saying about Microsoft, Palo Alto Networks, Splunk and others in Security Orchestration Automation and Response (SOAR). Updated: November 2024.
814,649 professionals have used our research since 2012.