

Find out in this report how the two Identity Threat Detection and Response (ITDR) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
Premium support provides direct access, while distributor support quality can vary.
The support for them was better than maybe Trellix, for example.
It is ineffective in terms of responding to basic queries and addressing future requirements.
The SOC team is responsible for fully managing Cortex XSIAM.
Without proper integration, scaling up with more servers is meaningless.
Cortex XSIAM is highly scalable.
The product was easy to install and set up and worked right.
With continuous integration that the colleagues probably are doing, it is becoming better and better.
It works really nice and performs really efficiently after configuration.
Obtaining validation for integrations from Palo Alto takes around eight months, which is quite long.
Cortex XSIAM needs improvements in terms of data onboarding, parsers, and third-party integration supports.
This basically offers flexibility to implement Cortex XSIAM in more standardized places where you maybe have a certification.
The licensing cost of Cortex XSIAM is more or less the same as Splunk, making it quite expensive compared to other tools.
The first impression is that XSIAM would be more expensive than others we tried.
The product is very expensive.
The advanced visualization capabilities of the product are important for understanding security trends in an organization.
To have Cortex XSIAM available is to basically have integration of all log sources, all alerting, and so on and so forth from firewalls and different tools, to get everything in one place, and afterwards to be able to build on the information that is coming.
Cortex XSIAM allows us to onboard almost every device, whether they are on-prem or on SaaS.
| Product | Mindshare (%) |
|---|---|
| Cortex XSIAM | 4.3% |
| Axiad Conductor | 2.2% |
| Other | 93.5% |
| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 2 |
| Large Enterprise | 5 |
Axiad Conductor offers intuitive management for authentication processes, streamlining tasks like YubiKeys and smart card issuance, catering to organizational needs with a user-centric approach.
Axiad Conductor facilitates credential lifecycle management and multi-factor authentication by simplifying the deployment and management of authentication devices. "One Click Issuance" ensures easy user enrollment in a cloud environment, reducing administrative burdens. While interface enhancements and authenticators' nickname features could improve usability, its approach to managing cryptographic credentials and handling smart cards and YubiKeys stands noteworthy. Although Apple's macOS changes present challenges, Canadian hosting preferences are recognized.
What are Axiad Conductor's main features?In industries where multi-factor authentication is critical, Axiad Conductor is widely implemented for internal and contractor workforce authentication, managing PKI on smart cards, and YubiKeys for VPN and local access. The ability to manage smart cards and machine certificates aids in maintaining regulatory compliance, while the transition to cloud-based certificate management streamlines operations and supports seamless integration.
Cortex XSIAM acts as a critical element for SOC foundations, integrating SIEM and EDR capabilities, valued for threat detection and seamless security orchestration with Palo Alto Networks products.
Organizations find Cortex XSIAM beneficial for SOC foundations due to its capability to integrate SIEM and EDR tools, facilitating data collection, detection, and response. It connects with third-party data sources while reducing management effort and offering cost-effective alternatives to competitors like CrowdStrike and Trend Micro. Featuring automation and integration with Palo Alto Networks products, Cortex XSIAM enhances threat detection. Unified architecture allows a comprehensive view of attacks, further supported by machine learning and integration with existing vendor solutions, ensuring that users gain insights without significant manual log analysis.
What are Cortex XSIAM's key features?
What benefits are evident in Cortex XSIAM reviews?
Industries implement Cortex XSIAM mainly in technology-driven sectors where centralized endpoint protection and automation of forensic investigation are paramount. By integrating several third-party systems for incident response, companies in competitive markets leverage its attributes for heightened operational security efficiency. However, users note areas for improvement, such as Attack Surface Management and integration enhancements, to better suit tech-heavy industries needing extensive connectivity with cybersecurity solutions.
We monitor all Identity Threat Detection and Response (ITDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.