Try our new research platform with insights from 80,000+ expert users

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Palo Alto Networks Cortex XSOAR offers strong automation capabilities, making it effective in automating responses and collecting information for security events.
The platform provides extensive integration options, enabling seamless coordination with various tools and systems.
Many users value its powerful orchestration features, as they facilitate effective incident management and security task automation.
The scalability and agility of Palo Alto Networks Cortex XSOAR are emphasized by users, making it suitable for organizations of varied sizes.
Cortex XSOAR is noted for its reliability and stability, ensuring effective performance in security operations.

CONS

Implementing Palo Alto Networks Cortex XSOAR requires significant involvement from the vendor, which could be simplified for partners.
Documentation for building automation exists but needs significant improvement.
Since Palo Alto's acquisition, pricing for Cortex XSOAR has increased significantly, making it expensive.
There is a need for an on-premise option to provide different deployment choices for customers.
Palo Alto Networks Cortex XSOAR struggles with scalability and requires better integration options.
 

Palo Alto Networks Cortex XSOAR Pros review quotes

reviewer1714731 - PeerSpot reviewer
Nov 11, 2021
Palo Alto has gotten the investigators more presence to actually go in the report because being that the platform will email the investigator that it's been assigned to, now the investigators will jump in there and start going through the review process a lot quicker.
NikhilSharma2 - PeerSpot reviewer
Aug 23, 2024
The orchestration in XSOAR is significantly easier compared to other SOAR tools I've used.
Donald Keeber - PeerSpot reviewer
Feb 1, 2024
I chose Cortex XSOAR because the client also has Palo Alto firewalls. I can incorporate the data from the Palo Alto firewalls into Cortex and send it into the same data lake to manipulate that data. It lets me manage and monitor the data in one place.
Learn what your peers think about Palo Alto Networks Cortex XSOAR. Get advice and tips from experienced pros sharing their opinions. Updated: December 2024.
824,168 professionals have used our research since 2012.
Chetankumar Savalagimath - PeerSpot reviewer
Oct 19, 2023
For organizations that are stable with their security operations, like those with around 50 members in their security team running full-phased operations 24/7, Cortex is necessary.
reviewer1469436 - PeerSpot reviewer
Sep 8, 2021
It has an extensive list of integrations that are available out of the box which makes it easy to start.
Chetankumar Savalagimath - PeerSpot reviewer
May 15, 2021
The automation is excellent.
DL
Jul 21, 2022
They have a portal where you can find any kind of integration that you need.
Mostafa-Ahmed - PeerSpot reviewer
Oct 1, 2023
What I like most about Palo Alto Networks Cortex XSOAR is how user-friendly it is for development. It is much simpler to work with compared to similar tools I've used.
Jasmin Surani - PeerSpot reviewer
Jan 3, 2024
The most valuable feature is its capability to automate responses and collect information for any security event before you even delve into the details. It's a vast product with an active roadmap, so I'm satisfied with it for now. It's very efficient at data collection and correlation.
Sara Qafa - PeerSpot reviewer
Apr 11, 2024
The product can automate security tasks.
 

Palo Alto Networks Cortex XSOAR Cons review quotes

reviewer1714731 - PeerSpot reviewer
Nov 11, 2021
In terms of improvement, it needs to be more modular. It's not. When you're working in layouts and you create specific apps within layouts, there's no portability right now in order to reuse that code across multiple layouts. I can't take a tab and say I want to use this tab on these other layouts. I have to physically go in there and recreate it from scratch, which is maddening.
NikhilSharma2 - PeerSpot reviewer
Aug 23, 2024
The user interface (UI) is quite heavy and takes time to load, which is a major drawback.
Donald Keeber - PeerSpot reviewer
Feb 1, 2024
I would like to see Cortex become less dependent on Active Directory and group policies to manage the deployment. Maybe I need to update my understanding of how to deploy it, but that's the way I know how to use it.
Learn what your peers think about Palo Alto Networks Cortex XSOAR. Get advice and tips from experienced pros sharing their opinions. Updated: December 2024.
824,168 professionals have used our research since 2012.
Chetankumar Savalagimath - PeerSpot reviewer
Oct 19, 2023
Previously, when Demisto was, there was a community edition; we could use it, reinstall it, and customize it. Since Palo Alto took over, it has become more financially oriented. It's business, but they could offer a pro model and a lighter model for different needs.
reviewer1469436 - PeerSpot reviewer
Sep 8, 2021
I would love to see more flexibility on what we can display and design on the dashboards.
Chetankumar Savalagimath - PeerSpot reviewer
May 15, 2021
When Palo Alto bought the solution, the pricing increased by 1.5 times. There's been a 50% increase, which is a lot.
DL
Jul 21, 2022
It's only one cloud right now. It might be helpful for some companies to have an on-premies option.
Mostafa-Ahmed - PeerSpot reviewer
Oct 1, 2023
It doesn't offer automatic internet reports out of the box.
Jasmin Surani - PeerSpot reviewer
Jan 3, 2024
There is room for improvement in support. The response time could be faster.
Sara Qafa - PeerSpot reviewer
Apr 11, 2024
The solution is complicated to learn.