Try our new research platform with insights from 80,000+ expert users

Apiiro vs Xygeni comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex Cloud by Palo Alto N...
Sponsored
Ranking in Software Supply Chain Security
14th
Ranking in Application Security Posture Management (ASPM)
9th
Average Rating
8.6
Reviews Sentiment
5.4
Number of Reviews
5
Ranking in other categories
Vulnerability Management (38th), Cloud Workload Protection Platforms (CWPP) (17th), Cloud Security Posture Management (CSPM) (23rd), Cloud-Native Application Protection Platforms (CNAPP) (16th), Data Security Posture Management (DSPM) (14th), Cloud Infrastructure Entitlement Management (CIEM) (7th), Cloud Detection and Response (CDR) (9th)
Apiiro
Ranking in Software Supply Chain Security
7th
Ranking in Application Security Posture Management (ASPM)
6th
Average Rating
8.0
Reviews Sentiment
6.4
Number of Reviews
3
Ranking in other categories
Static Application Security Testing (SAST) (24th), Software Composition Analysis (SCA) (14th), API Security (15th), Risk-Based Vulnerability Management (17th)
Xygeni
Ranking in Software Supply Chain Security
13th
Ranking in Application Security Posture Management (ASPM)
11th
Average Rating
9.0
Reviews Sentiment
6.6
Number of Reviews
3
Ranking in other categories
Application Security Tools (22nd), Software Composition Analysis (SCA) (13th)
 

Featured Reviews

Nuno-Santos - PeerSpot reviewer
Cybersecurity Analyst at a tech services company with 11-50 employees
Has improved real-time threat detection and unified cloud protection through AI and automation
Cortex Cloud by Palo Alto Networks is creating some confusion in terms of names because this is recent. They changed the names of the products and are now clarifying their offer. The family of the products is not easy to follow because it's very recent. Regarding the generative AI security tool, I know for sure it's Agentic. Based on my experience with Palo Alto, I can suggest what Cortex Cloud by Palo Alto Networks could make better or what additional functions could be added. This is the best tool in the market. It's not the time to tell what they could do better because it's a recent tool. The market is now adopting it. Our experience doesn't show that they need to do more.
Kunal M - PeerSpot reviewer
Capability Center Leader, ETRM Platforms at Shell
Comprehensive risk analysis helps identify key performance trends but report access needs improvement
My first feedback for Apiiro is that it is very slow, extremely slow. The moment I select from the entire list of repositories in my vertical, which is almost more than 400 repositories, it takes a lot of time for me to load the report. Sometimes it fails. I do not have Role-Based Access Control (RBAC). It's only given to the application security team, and Apiiro as a vendor does not have the rollback access control enabled for the clients, so that would have given me access to the reports tab, which would have made my life easier. Currently, I have to go to the risks tab to pull out all this information. I started exploring dashboards with Copilot. I need to reach out to the Apiiro teams to see if I can get an access token so that I can pull out a Power BI dashboard. I think Apiiro definitely has its own capabilities, but if there are access tokens that teams can use to build a custom dashboard, that would be great. This might already exist, but that is something which will ease the vulnerability management day-to-day activities.
AI
Business development manager at RSsecurity
Unified monitoring has reduced alert noise and provides accurate, proactive application security
Xygeni was highly effective for us, but there are areas where improvements could be made. More customization options for dashboards and reports would help teams tailor the platform to their specific metrics and workflows. I also occasionally encounter DevOps tools that are not yet supported natively. Expanded coverage for niche or emerging tools would make onboarding even smoother. These points, however, are minor compared to the overall value the platform delivers, especially given the strength of its AI-driven detection, remediation, and supply chain protection capabilities. It would also be an improvement for licensing with regard to on-premise variants. Perhaps we could have an on-premise option for standard subscription.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I have absolutely seen improvements in our incident close rates, with mean time to detect and respond reduced significantly, sometimes by at least forty to fifty percent."
"Cortex Cloud by Palo Alto Networks has impacted our organization positively by keeping our machines secure and our team using the dashboard to find issues quickly."
"I have seen several benefits from using Cortex Cloud by Palo Alto Networks: It was easy to use and easy to migrate from the IBM platform."
"The AI and automation features in detecting and responding to high-risk threats are impressive; it's one of the best tools regarding AI technology and unifies security in one platform in real-time, improving vulnerability analysis, incident response, and compliance reporting."
"Overall, Cortex Cloud by Palo Alto Networks is a technically strong product, and I rate it ten out of ten."
"The workflow automation is likely the best aspect of the solution."
"Apiiro's secrets detection feature has saved us several times, which we appreciate greatly."
"The positive impact I have seen from working with Apiiro for my company includes the metrics that we get from Apiiro, which have been extremely helpful."
"Xygeni provides a comprehensive and developer-friendly approach to securing the entire software supply chain."
"The visibility of our open-source supply chain dependencies and real-time detection of vulnerabilities have been invaluable."
"Since using Xygeni, the time to review vulnerabilities has decreased."
 

Cons

"Some aspects of the GUI can be confusing and make it difficult for me to find certain options or navigate where needed."
"The pricing is high, making ROI challenging to justify, especially during transitions between solutions."
"Cortex Cloud by Palo Alto Networks is creating some confusion in terms of names because this is recent."
"Overall, I rate Cortex Cloud by Palo Alto Networks as an eight out of ten. I think that it could improve on price, as I know that the Google solution has the best price, and this is one of the conditions."
"I would like support for our self-hosted Git server, other than GitHub, just regular Git."
"User management is a little bit clunky."
"There should be more configuration options that make it easier to target the issues that are more important in your organization's context."
"Xygeni was highly effective for us, but there are areas where improvements could be made."
"Xygeni could be improved if on-premise options were available starting from the starter packages, not only the enterprise models."
report
Use our free recommendation engine to learn which Software Composition Analysis (SCA) solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Performing Arts
10%
Financial Services Firm
10%
Manufacturing Company
9%
Computer Software Company
8%
Computer Software Company
19%
Financial Services Firm
13%
Outsourcing Company
9%
University
8%
Comms Service Provider
32%
Security Firm
17%
Retailer
15%
Outsourcing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Cortex Cloud by Palo Alto Networks?
The solution is costly, with high-end capabilities suitable for enterprises. It is less affordable for startups or sm...
What needs improvement with Cortex Cloud by Palo Alto Networks?
Regarding areas for improvement, the tool performs its functions well, but frequent name changes across Palo Alto Net...
What is your primary use case for Cortex Cloud by Palo Alto Networks?
Cortex Cloud by Palo Alto Networks serves as our primary tool for understanding our assets and performing API integra...
What needs improvement with Apiiro?
My first feedback for Apiiro is that it is very slow, extremely slow. The moment I select from the entire list of rep...
What is your primary use case for Apiiro?
My only use case is the reporting, which is correct. My role is limited because this is an additional role that I do ...
What advice do you have for others considering Apiiro?
I haven't explored Apiiro's advanced risk analysis features. I have not used the compliance monitoring feature of Api...
What is your experience regarding pricing and costs for Xygeni?
The setup is very easy. I highly recommend Xygeni to any organization looking to bolster its SDLC security.
What needs improvement with Xygeni?
There should be more configuration options that make it easier to target the issues that are more important in your o...
What is your primary use case for Xygeni?
We use Xygeni to harden our CI/CD pipelines in Azure DevOps. Our software is mainly in Python, but we also use Javasc...
 

Also Known As

No data available
Apiiro Control Plane (ASOC), Apiiro API Security (SAST), Apiiro Open Source (SCA)
No data available
 

Interactive Demo

Demo not available
Demo not available
 

Overview

 

Sample Customers

Information Not Available
Morgan Stanley, Rakuten, Jack Henry, SoFi, Colgate, Navan
BKool, Onum, Napptive, Fintonic, Adaion, Metricool, Arexdata, ...
Find out what your peers are saying about Apiiro vs. Xygeni and other solutions. Updated: January 2026.
881,082 professionals have used our research since 2012.