

Palo Alto Networks WildFire and Anomali operate in the cybersecurity sector, focusing on threat detection and prevention. Anomali's mature threat intelligence platform provides a stronger capability in aggregating and operationalizing threat intelligence from multiple sources.
Features: Palo Alto Networks WildFire provides advanced threat prevention with automatic email analysis, robust malware detection, and seamless integration within the Palo Alto ecosystem. It offers sophisticated machine learning capabilities and extensive file type support. Anomali excels with its mature threat intelligence platform, strong feed aggregation, and automation features, aiding in intelligence gathering and threat operationalization.
Room for Improvement: Palo Alto Networks WildFire could enhance deployment through installation wizards and improve technical support and UI refinement for better customer engagement. Anomali could advance its AI-driven processes, improve integration capabilities, and enhance its reporting and threat detection range, including dark web sources.
Ease of Deployment and Customer Service: Palo Alto Networks WildFire, available in various deployment models, can be complex for less experienced users, with technical support varying by service tier. Anomali offers flexible cloud and on-premises deployments with responsive customer service, effectively handling complex issues.
Pricing and ROI: Palo Alto Networks WildFire is viewed as expensive, providing strong security value for sectors prioritizing security. Anomali's pricing is medium to high, with flexible licensing according to deployment needs. Both solutions reduce manual security work and enhance threat management, delivering cost savings with varying ROI feedback based on organizational requirements and deployment scale.
Analyst productivity has improved significantly, with hours saved because of automation and AI-driven work that Anomali performs.
Anomali provides us with a very cost-effective value compared to the market, and I would rate it ten out of ten for return on investment metrics.
There is a return on investment concerning time and effort saved by 40% after implementing Anomali.
The service generates a low rate of false positives, reducing the overhead of managing false positive events.
They have strong onboarding and deployment assistance, provide a dedicated technical account manager for large customers, and engage in regular product updates and customer interaction.
The technical support at Anomali is excellent.
It doesn't seem very professional how they're handling support anymore.
There is a lack of SLA adherence, and third-party partners do not provide prompt responses.
We have had some open tickets for months, maybe half a year, and there is no real answer.
The service response times are aligned with standards, responding within a few hours based on the problem's criticality.
The scalability is massive, allowing us to store millions of indicators.
I believe Anomali's scalability is good; whether it is an organization for ten people or one hundred thousand people, the job a threat intel platform has to do will be the same.
Anomali's scalability is impressive as a mature platform capable of processing large amounts of threat intelligence and indicators of compromise data.
Wildfire is highly scalable.
Palo Alto Networks WildFire is scalable, and I give it a nine for scalability.
The on-premises version is expensive to scale as it might need an additional device to be installed in the setup.
From a reliability perspective, Anomali consistently injects threat feeds, works on automation, performs reliable API integrations, and supports enterprise scale globally.
For example, while Microsoft allows ample time for users to adapt to deprecated features, Anomali only gave us three weeks before switching, so they need to be more cognizant of customer use cases from their engineering side.
The good thing is that they have a health check page, and if any issues arise, they notify us.
It performs filtering, malware blocking, and scanning.
The solution is scalable and stable.
Combining all aliases into a coherent solution would be beneficial, as we had to review each individual source ourselves.
Anomali should increase their capability to fetch details from various dark web solutions where threat actors post compromised credentials.
Anomali's ability to correlate and integrate different Threat Intel platforms, such as Mandiant and PolySwarm, is another valuable feature, removing duplicacy and enabling the application of specific IOCs across various security controls.
It should be easier to establish the Palo Alto Networks WildFire cluster between the devices.
The dashboard should provide better visibility, especially in showing how many files are sent to Wildfire and their findings.
It is a very good product.
Pricing and licensing are good, but the costs for purchasing threat feeds are somewhat complicated and a bit on the higher side.
My experience with Anomali's pricing is that it is higher compared to other open-source alternatives.
My experience with pricing, setup cost, and licensing is that there are not many follow-ups, but once we interacted with the product team or the leadership of Anomali, they managed a lot with us, and it all paid off to reach a conclusion that we would continue with this product.
I would rate it an eight out of ten in terms of affordability.
Regarding integration, Anomali has capabilities to integrate with different downstream applications such as Palo Alto, allowing us to create playbooks to block domains, URLs, or IPs directly within the firewall.
Correlating IOCs with the telemetry data we are ingesting from our data sources allows us to pull monthly reports identifying how many assets and users interacted with malicious content, giving insight into whether communications failed or users accessed restricted content, providing complete visibility of the IOCs traveling throughout our environment.
It aggregates intelligence from hundreds of sources, automatically de-duplicates, applies risk scoring, applies context, and reduces much manual effort.
Integrating Palo Alto Networks WildFire with various security protocols similar to a firewall has significantly improved the overall threat detection capabilities in our organization.
The most valuable feature of Wildfire is its sandboxing capability for examining suspicious files or locations.
The integration and working with third-party solutions was very seamless and smooth.
| Product | Mindshare (%) |
|---|---|
| Palo Alto Networks WildFire | 6.6% |
| Anomali | 3.7% |
| Other | 89.7% |

| Company Size | Count |
|---|---|
| Small Business | 4 |
| Midsize Enterprise | 1 |
| Large Enterprise | 14 |
| Company Size | Count |
|---|---|
| Small Business | 38 |
| Midsize Enterprise | 15 |
| Large Enterprise | 30 |
Anomali delivers user-friendly cyber threat intelligence, offering concise insights with robust capabilities for evolving scenarios.
Anomali offers a powerful platform for cyber threat intelligence, allowing organizations to efficiently stream and analyze threat feeds. It excels in threat modeling, prioritizing intelligence, and supporting large-scale automation through its API, fostering a proactive security approach.
What are Anomali's Key Features?Anomali serves as a crucial tool for threat intelligence in industries ranging from finance to healthcare. Organizations stream threat feeds into Anomali to correlate and aggregate data, enhancing security measures and facilitating thorough threat investigations. Its adaptability makes it suitable across different sectors.
Palo Alto Networks WildFire provides robust threat prevention with emphasis on automated malware detection and real-time security updates. Seamless integration and intuitive deployment enhance its ability to protect environments effectively, addressing advanced threat scenarios.
Palo Alto Networks WildFire is recognized for its threat detection capabilities, offering automated analysis of emails and effective malware response. The integration with Palo Alto's ecosystem ensures users benefit from seamless operations while safeguarding on-premise and cloud infrastructures. It supports VPN, URL filtering, and user identification with a focus on reducing manual intervention. Users note its complexity and high pricing but appreciate the efficient deployment once configured. Integration with third-party systems requires attention, but it remains vital for those requiring advanced network security measures.
What are the key features of Palo Alto Networks WildFire?Industries like banking leverage Palo Alto Networks WildFire for securing infrastructure against zero-day threats and cyber-attacks. It is widely used for scanning files and emails, ensuring malicious activity is prevented. Integrated with firewalls, WildFire strengthens cybersecurity frameworks, protecting organizations from evolving security challenges.
We monitor all Advanced Threat Protection (ATP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.