Alert Logic MDR vs Palo Alto Networks Cortex XSOAR comparison

LevelBlue and Palo Alto Networks are both solutions in the SOC as a Service category. LevelBlue is ranked #3 with an average rating of 10.0, while Palo Alto Networks is ranked #2 with an average rating of 8.4. LevelBlue holds a 5.7% mindshare in SaaS, compared to Palo Alto Networks’s 5.6% mindshare. Additionally, 92% of LevelBlue users are willing to recommend the solution, compared to 90% of Palo Alto Networks users who would recommend it.

Alert Logic MDR

Read 11 Alert Logic MDR reviews

2,038 Views
224 Comparison Views

92% willing to recommend

Palo Alto Networks Cortex X...

Read 51 Palo Alto Networks Cortex XSOAR reviews

8,187 Views
409 Comparison Views

90% willing to recommend

Alert Logic MDR

Palo Alto Networks Cortex X...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Mar 11, 2026

Palo Alto Networks Cortex XSOAR and Alert Logic MDR offer distinctive security solutions. Cortex XSOAR is noted for its advanced automation, placing it at an advantage in sophisticated environments despite its high cost. Alert Logic MDR, however, is priced competitively, appealing to a broad range of organizations.

Features: Cortex XSOAR provides extensive automation, robust playbook creation, and integration capabilities crucial for large-scale security operations. Users benefit from its scalability and seamless incident response. Alert Logic MDR is known for its effective incident response and comprehensive dashboard features, though it lacks the customizable automation present in XSOAR.

Room for Improvement: Cortex XSOAR users suggest enhancements in documentation, broader integration support, and better pricing models. Alert Logic MDR could improve with native EDR capabilities and enhanced AI features to keep up with industry trends.

Ease of Deployment and Customer Service: Cortex XSOAR allows deployment across public, private, and on-premises environments, though integration may be complex. Its technical support varies in effectiveness. Alert Logic MDR is less flexible in deployment but offers excellent customer support that generally exceeds expectations.

Pricing and ROI: Cortex XSOAR's substantial cost can translate into high ROI in advanced security setups due to its automation. In contrast, Alert Logic MDR provides a more budget-friendly option that aligns well with performance expectations, offering significant value without extra costs.

To learn more, read our detailed Alert Logic MDR vs. Palo Alto Networks Cortex XSOAR Report (Updated: March 2026).

Buyer's Guide

Alert Logic MDR vs. Palo Alto Networks Cortex XSOAR

March 2026

Download the complete report

Helped 885,311 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Alert Logic MDR

Ranking in SOC as a Service

3rd

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Vulnerability Management (32nd), Managed Detection and Response (MDR) (17th)

Palo Alto Networks Cortex X...

Ranking in SOC as a Service

2nd

Average Rating

8.4

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Security Orchestration Automation and Response (SOAR) (3rd)

Mindshare comparison

As of March 2026, in the SOC as a Service category, the mindshare of Alert Logic MDR is 5.7%, down from 5.9% compared to the previous year. The mindshare of Palo Alto Networks Cortex XSOAR is 5.6%, down from 22.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

SOC as a Service Mindshare Distribution
Product	Mindshare (%)
Palo Alto Networks Cortex XSOAR	5.6%
Fortra's Alert Logic MDR	5.7%
Other	88.7%

SOC as a Service

Featured Reviews

reviewer2191746

President at a tech services company with 11-50 employees

It's a highly mature, competitively priced solution that provides total visibility into your ecosystem. FORTRA's Alert Logic has the only Cybersecurity Platform that integrates XDR+WAF+VM+DLP in one.

Alert Logic offers total visibility into the client's IT ecosystem. The solution's intrusion detection system inspects 100 percent of the network packets and installs universal agents on all physical and virtual servers for log collection. Alert Logic also aggregates logs of the client's various 3rd Party security tools into a single pane of glass. All of the analytics from those data feeds got to a 24/7 SOC with sophisticated resources. Alert Logic has massive threat intelligence resources to provide additional context to the incident response declarations. They do all the heavy lifting for clients who lack the technology and resources to operate their own SOC. The client is solely responsible for the incident response component. The macro analytics resides on Alert Logic's cloud. You have the ECM response and business application team on the client side. Everything works in tandem, which is the only way you can deal with the advanced threats we face today, especially the ransomware families. If you don't respond in minutes, you're in trouble.

Read full review

ChrisCollins

Enterprise Security Architect V at FirstEnergy

Customization supports seamless workflow while data influx challenges response time

What I appreciate most about Palo Alto Networks Cortex XSOAR is that it is very open, even more so than Anomali. I can create various custom automations and custom fields. There is significant customization ability in this platform. If I already have an established process, I do not have to change my process to fit into the tool. I can modify the tool to fit into my process, which makes things considerably easier. All of our alerts from different tools come into this central place as we have multiple SIEMs. We have items coming from Anomali and other platforms that are not SIEM tools. This serves as our central location where our SOC analysts can work and determine if incident response is needed. The platform provides data enrichment capabilities, offering information upfront so analysts do not have to search for it. They can access details such as username, phone number, email address, and workplace information. For malware files, they can retrieve details from VirusTotal, including file names and environment presence. We have built substantial automation around these features, which also helps us track case metrics, investigation time, and threat mitigation duration.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It has the ability to install agents, it is pretty straightforward, and you can automate the process pretty easily."

"It has the ability to install agents. It is pretty straightforward. You can automate the process pretty easily."

"Technical support is pretty decent with Alert Logic."

"It's been a positive experience for us overall."

"My advice would be to go ahead with the product because it really is a very good tool that adds a lot of value."

"The solution was consistently available, and I cannot recall any instances where it was down."

"It is a very stable product."

"It improves our security; before, we didn't have anything scanning our containers, but with Alert Logic we can now scan them for vulnerabilities."

More Alert Logic MDR pros

"The solution has very good integration capabilities; it's really the best at integration, with commands inside every integration that make it very useful as a product, and the automation is excellent."

"I have found the solution very useful, it integrates well with other platforms."

"It was useful as a ticketing tool."

"The installation is very easy to set up; it’s not overly complex or difficult, and the deployment took less than a week as we had it up and running within a couple of days."

"The solution is easy to deploy."

"The solution is very reliable."

"Palo Alto is easy to use."

"It is quite scalable. I would rate it a ten out of ten."

More Palo Alto Networks Cortex XSOAR pros

Cons

"The documentation, especially with the initial setup, needs improvement."

"The setup process was complex."

"This product needs to mature more. While it is a good product, there are some areas where it needs work."

"One pain point we have, for example, is if the search keyword is related inside an XML, we will get an XML; if it is a normal log, however, you will get a null pointer exception or something, and we don't get the complete trace."

"I would like more data on the alert payload. It would be good to have the ability to customize the alert payload to add whatever data that we want on there."

"The documentation, especially with the initial setup, needs improvement."

"This product needs to mature more. While it is a good product, there are some areas where it needs work."

"As a user involved with the user interface, I believe there is a need to continue improving it based on feedback from our customers."

More Alert Logic MDR cons

"It doesn't offer automatic internet reports out of the box."

"There should be an on-premise version available for customers to have different choices."

"It's only one cloud right now. It might be helpful for some companies to have an on-premies option."

"The dashboard could be better."

"It's quite lagging and not very fast."

"The price of the solution could be improved."

"The user interface could be a bit better."

"The integration could be better. Cortex, for example, does not work with iPhone."

More Palo Alto Networks Cortex XSOAR cons

Pricing and Cost Advice

"Alert Logic has better competitive pricing than some of its competitors."

"Almost any product that is on the AWS Marketplace is super easy to subscribe to."

"Price of the solution was very reasonable considering the size of our organization at the time, and so it worked out perfectly."

"Our ROI would probably be zero. We don't even use it. It sits in there. We get emails and just delete them. Around the world, we don't even use it."

"Its pricing is very reasonable considering what you get for what you pay. There is quite a good value there. Its licensing is also very logical. They've got the licensing price points at a reasonable level. It is on a monthly license but a yearly contract. There are no additional costs to the standard licensing fees."

"The solution's pricing needs improvement."

"The price of Palo Alto Networks Cortex XSOAR is expensive."

"From the cost perspective, I have heard that its price is a bit high as compared to other similar products."

"It is approx $10,000 or $20,000 per year for two user licenses."

"The pricing is fair. The pricing reflects the value and feature set it offers."

"It is expensive."

"The solution's cost is reasonable."

"There is a yearly license required for this solution and it is expensive."

More Palo Alto Networks Cortex XSOAR pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which SOC as a Service solutions are best for your needs.

See recommendations

885,311 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Manufacturing Company

10%

Outsourcing Company

Comms Service Provider

Financial Services Firm

12%

Computer Software Company

10%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	2
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	20
Midsize Enterprise	9
Large Enterprise	26

Questions from the Community

Ask a question

Earn 20 points

What do you like most about Palo Alto Networks Cortex XSOAR?

The product can automate security tasks.

See all answers

What is your experience regarding pricing and costs for Palo Alto Networks Cortex XSOAR?

Comparing pricing to Micro Focus, they were offering bundles, making it free with their SIEM. For customers, it is zero versus $20 million, which is why they have to make a decision.

See all answers

What needs improvement with Palo Alto Networks Cortex XSOAR?

Regarding areas for improvement in Palo Alto Networks Cortex XSOAR, I want to highlight one concern about playbook creation. While I personally appreciate this approach, I have observed that junior...

See all answers

Comparisons

Microsoft Defender for Cloud vs Alert Logic MDR

Compared 7% of the time

CrowdStrike Falcon Complete MDR vs Alert Logic MDR

Compared 6% of the time

Qualys VMDR vs Alert Logic MDR

Compared 6% of the time

Arctic Wolf Managed Detection and Response vs Alert Logic MDR

Compared 5% of the time

BMC Helix Automation Console vs Alert Logic MDR

Compared 5% of the time

More Alert Logic MDR Competitors

Cortex XSIAM vs Palo Alto Networks Cortex XSOAR

Compared 22% of the time

Splunk SOAR vs Palo Alto Networks Cortex XSOAR

Compared 9% of the time

Fortinet FortiSOAR vs Palo Alto Networks Cortex XSOAR

Compared 7% of the time

ServiceNow Security Operations vs Palo Alto Networks Cortex XSOAR

Compared 4% of the time

Tines vs Palo Alto Networks Cortex XSOAR

Compared 4% of the time

More Palo Alto Networks Cortex XSOAR Competitors

Product Reports

Buyer's Guide

Alert Logic MDR

March 2026

Download Alert Logic MDR product report

Buyer's Guide

Palo Alto Networks Cortex XSOAR

March 2026

Download Palo Alto Networks Cortex XSOAR product report

Also Known As

Alert Logic Managed Detection and Response, Alert Logic Threat Manager, Alert Logic Cloud Defender, Critical Watch FusionVM

Demisto Enterprise, Cortex XSOAR, Demisto

Overview

Alert Logic MDR offers fast and accurate scanning, automated installations, and security alerts. Its advanced intrusion detection and centralized management enhance threat visibility and response, providing an effective security management strategy for diverse sectors.

Alert Logic MDR provides comprehensive security management with advanced threat detection and human expertise. It includes valuable features such as infrastructure security alerts, heuristic threat detection, and a centralized dashboard. Users can swiftly detect and respond to security threats through extensive global SOCs, detailed notifications, and immediate log access. However, it can improve in alert payload customization, analytics capabilities, initial setup documentation, error tracing transparency, and command processes for better usability. Companies benefit from its applications in container security on Kubernetes, production tracking, log management, and network intrusion detection, making it suitable for large-scale applications across utilities, finance, and government sectors.

What are the key features of Alert Logic MDR?

Fast and Accurate Scanning: Quickly identifies security risks with precision.
Automated Agent Installation: Simplifies deployment and updates.
Infrastructure Security Alerts: Provides real-time threat notifications.
Heuristic Threat Detection: Analyzes behaviors to detect potential threats.
Advanced Intrusion Detection: Enhances security with proactive monitoring.

What benefits or ROI should users consider?

Enhanced Threat Response: Leverages human expertise for rapid responses.
Comprehensive Threat Visibility: Increases security insight with global SOCs.
Improved Network Security: Provides robust protection for IT infrastructures.
Efficient Log Management: Facilitates immediate access and issue identification.

Implementation across industries shows Alert Logic MDR's adaptability in securing containers on Kubernetes, managing production logs, and serving as a primary SIEM tool. Companies implement it to safeguard large-scale e-commerce platforms and extensive IT infrastructures. Users from utilities to financial and government sectors find it provides a comprehensive and effective security management approach, enhanced by artificial intelligence and machine learning capabilities.

LevelBlue

Palo Alto Networks delivers a complete solution that helps Tier-1 through Tier-3 analysts and SOC managers to optimize the entire incident life cycle while auto documenting and journaling all the evidence. More than 100+ integrations enable security orchestration workflows for incident management and other critical security operation tasks.

Palo Alto Networks Cortex XSOAR is a piece of Security Orchestration, Automation, and Response software that redefines what it means for a program to orchestrate security in an automated manner. It is a next-generation solution that offers all of the features of dozens of siloed security operations center tools in one place. Cortex XSOAR combines case management, automation, real-time collaboration, and threat intelligence management to create a platform that can handle all aspects of system security. Teams that make use of Cortex XSOAR can expect to cut the number of issues that they will have to deal with by 75%. At the same time, the speed at which they resolve those issues that slip through will rise by 90%.

Cortex XSOAR ensures that all of the IT and security tools that you employ function as a unified system. It does this by employing hundreds of integrations that allow you to run a wide variety of programs at once without ever worrying about them interfering with each other. These integrations are limited only by your imagination. They can be used immediately as they are, if that is what you need. However, they can also be customized according to the requirements of your system. This approach provides you with the maximum levels of both flexibility and utility.

The model that this platform uses is based on a machine learning algorithm. The level of automation allows you to provide more than an unchanging and inflexible blanket of coverage. Cortex XSOAR takes all of the data that it gathers and uses it to expand its protective capabilities. This creates recommendations that you can use to create a threat playbook that can be deployed uniformly throughout your organization.

Benefits of Palo Alto Networks Cortex XSOAR

Some of Palo Alto Networks Cortex XSOAR’s benefits include:

The ability to have all of your data collected in a single location. Valuable time can be saved now that everything that security analysts need to know in order to diagnose and react to threats has been centralized.
Security operations center tasks can be automated. This allows you to assign management and analyst staff to the most essential tasks. The effectiveness of your organization will be increased, which will result in a rise in your company’s overall security and productivity.
Many kinds of data can be stitched together by this platform. Network, endpoint, cloud, and identity data can be combined to offer a more complete picture of the threats that are discovered.
Integrated threat intelligence management can notify you about threats in real time. Now you can diagnose and address issues as they arise. You can also assign values to the threats so that your resources are being used in the most effective manner possible.

Reviews from Real Users

Palo Alto Networks Cortex XSOAR’s centralized monitoring interface and automation are two features that help it stand out. This might help explain why one quarter of the Fortune 500 companies choose Palo Alto Networks Cortex XSOAR over the competition.

Peerspot users note the effectiveness of these features. One user wrote, “We were looking for a single pane of glass type of solution that would allow us to physically be in one appliance - be able to work in concert with other servers that we have within our environment. We wanted orchestration and automation. The single pane of glass was the most important part.” Another noted, "The automation part and the playbook creation part are awesome. The way it is responding to the customers and incidents is also very good. In the SOC environment, I guess it will carry out around 50% of the work."

Palo Alto Networks

Sample Customers

Information Not Available

Cellcom Israel, Blue Cross and Blue Shield of Kansas City, esri, Cylance, Flatiron Health, Veeva, ADT Cybersecurity

Buyer's Guide

Alert Logic MDR vs. Palo Alto Networks Cortex XSOAR

March 2026

Free Report: Alert Logic MDR vs. Palo Alto Networks Cortex XSOAR

Find out what your peers are saying about Alert Logic MDR vs. Palo Alto Networks Cortex XSOAR and other solutions. Updated: March 2026.

DOWNLOAD NOW

885,311 professionals have used our research since 2012.

See our Alert Logic MDR vs. Palo Alto Networks Cortex XSOAR report.

See our list of best SOC as a Service vendors.

We monitor all SOC as a Service reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.