Carbon Black CB Response vs Palo Alto Networks Cortex XSOAR comparison

You must select at least 2 products to compare!
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Carbon Black CB Response and Palo Alto Networks Cortex XSOAR based on real PeerSpot user reviews.

Find out what your peers are saying about VMware, ServiceNow, Trellix and others in Security Incident Response.
To learn more, read our detailed Security Incident Response Report (Updated: November 2022).
655,711 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
"Setting up and managing the setup for this solution is okay. It is stable, scalable, and it runs just fine. No issues with technical support.""Probably the most valuable feature of CB Response is its ability to isolate a host and take it off the network, so it's not spreading anything. We have two security operations centers around the globe. When an SOC analyst sees something on an endpoint, they can use Carbon Black Response to isolate that host from the customer's environment and prevent any kind of lateral spread."

More Carbon Black CB Response Pros →

"It was useful as a ticketing tool.""The most valuable features of Palo Alto Networks Cortex XSOAR are its overall track record and features that fit our use case.""The most valuable features of Palo Alto Networks Cortex XSOAR are the remote controller from the workstation that can execute commands and isolate the systems outside of the network. Only the system with an internet connection can execute the task because the main console is in the cloud.""Its agility and scalability are valuable.""Cortex XSOAR's most valuable features are the playbooks, custom integration, the machine-learning model, and the layout, classifier, and mapper.""It has an extensive list of integrations that are available out of the box which makes it easy to start.""The most valuable features are the orchestration because of the way in which it coordinates the loss from all the devices and it provides us with a high-level overview of the critical log information.""They have a portal where you can find any kind of integration that you need."

More Palo Alto Networks Cortex XSOAR Pros →

"Training and education for both partner and customer, including product marketing need to be improved.""There have been some performance issues when deploying on Windows Server, but I believe Carbon Black is working on that."

More Carbon Black CB Response Cons →

"I would love to see more flexibility on what we can display and design on the dashboards.""The user interface could be a bit better.""The integration could be better. Cortex, for example, does not work with iPhone.""When Palo Alto bought the solution, the pricing increased by 1.5 times. There's been a 50% increase, which is a lot.""The formats are not compatible, are readily not available, and are not readable.""The solution is very expensive.""In terms of improvement, it needs to be more modular. It's not. When you're working in layouts and you create specific apps within layouts, there's no portability right now in order to reuse that code across multiple layouts. I can't take a tab and say I want to use this tab on these other layouts. I have to physically go in there and recreate it from scratch, which is maddening.""Corex XSOAR could be improved by reducing the time it takes to process large amounts of data and increasing the number of integrations."

More Palo Alto Networks Cortex XSOAR Cons →

Pricing and Cost Advice
  • "Pricing for this solution could be made lower."
  • More Carbon Black CB Response Pricing and Cost Advice →

  • "There is a yearly license required for this solution and it is expensive."
  • "It is approx $10,000 or $20,000 per year for two user licenses."
  • "When I first looked at Demisto, it had a price tag of $250,000 but when we finally purchased it, it was $345,000."
  • "The price of Palo Alto Networks Cortex XSOAR is expensive."
  • "The price of Palo Alto Networks Cortex XSOAR could be reduced. We are always looking for a discount. There is an annual license needed to use this solution."
  • "Cortex XSOAR's price could be lower."
  • "The price of Palo Alto Networks Cortex XSOAR is comparable to other solutions in the market."
  • "The solution is based on an annual licensing model that is expensive."
  • More Palo Alto Networks Cortex XSOAR Pricing and Cost Advice →

    Use our free recommendation engine to learn which Security Incident Response solutions are best for your needs.
    655,711 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR) security solution. The CB Predictive Security Cloud platform combines multiple… more »
    Top Answer:Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoint Standard (CB Defense), and the other is the Carbon Black Endpoint Detection and… more »
    Top Answer:Paul, While I've not used Carbon I have used Cylance and Optics for years before moving away from them in favor of a more robust and easy to manage solution. Cylance, IF properly configured can stop… more »
    Top Answer:I think Swimlane is a better cost. It's small and doesn't focus on only integrating with it's own products like other XSoar competitors. 
    Top Answer:Many different playbooks are available and can be customized.
    Top Answer:The solution is based on an annual licensing model that is expensive.
    Average Words per Review
    Average Words per Review
    Also Known As
    Demisto Enterprise, Cortex XSOAR, Demisto
    Learn More

    CB Response is an industry-leading incident response and threat hunting solution designed
    for security operations center (SOC) teams. CB Response continuously records and stores
    unfiltered endpoint data, so that security professionals can hunt threats in real time and
    visualize the complete attack kill chain. It leverages the CB Predictive Security Cloud’s
    aggregated threat intelligence, which is applied to the endpoint activity system of record for
    evidence and detection of these identified threats and patterns of behavior.

    Palo Alto Networks delivers a complete solution that helps Tier-1 through Tier-3 analysts and SOC managers to optimize the entire incident life cycle while auto documenting and journaling all the evidence. More than 100+ integrations enable security orchestration workflows for incident management and other critical security operation tasks.

    Palo Alto Networks Cortex XSOAR is a piece of Security Orchestration, Automation, and Response software that redefines what it means for a program to orchestrate security in an automated manner. It is a next-generation solution that offers all of the features of dozens of siloed security operations center tools in one place. Cortex XSOAR combines case management, automation, real-time collaboration, and threat intelligence management to create a platform that can handle all aspects of system security. Teams that make use of Cortex XSOAR can expect to cut the number of issues that they will have to deal with by 75%. At the same time, the speed at which they resolve those issues that slip through will rise by 90%.

    Cortex XSOAR ensures that all of the IT and security tools that you employ function as a unified system. It does this by employing hundreds of integrations that allow you to run a wide variety of programs at once without ever worrying about them interfering with each other. These integrations are limited only by your imagination. They can be used immediately as they are, if that is what you need. However, they can also be customized according to the requirements of your system. This approach provides you with the maximum levels of both flexibility and utility.

    The model that this platform uses is based on a machine learning algorithm. The level of automation allows you to provide more than an unchanging and inflexible blanket of coverage. Cortex XSOAR takes all of the data that it gathers and uses it to expand its protective capabilities. This creates recommendations that you can use to create a threat playbook that can be deployed uniformly throughout your organization.

    Benefits of Palo Alto Networks Cortex XSOAR

    Some of Palo Alto Networks Cortex XSOAR’s benefits include:

    • The ability to have all of your data collected in a single location. Valuable time can be saved now that everything that security analysts need to know in order to diagnose and react to threats has been centralized.
    • Security operations center tasks can be automated. This allows you to assign management and analyst staff to the most essential tasks. The effectiveness of your organization will be increased, which will result in a rise in your company’s overall security and productivity.
    • Many kinds of data can be stitched together by this platform. Network, endpoint, cloud, and identity data can be combined to offer a more complete picture of the threats that are discovered.
    • Integrated threat intelligence management can notify you about threats in real time. Now you can diagnose and address issues as they arise. You can also assign values to the threats so that your resources are being used in the most effective manner possible.

    Reviews from Real Users

    Palo Alto Networks Cortex XSOAR’s centralized monitoring interface and automation are two features that help it stand out. This might help explain why one quarter of the Fortune 500 companies choose Palo Alto Networks Cortex XSOAR over the competition.

    Peerspot users note the effectiveness of these features. One user wrote, “We were looking for a single pane of glass type of solution that would allow us to physically be in one appliance - be able to work in concert with other servers that we have within our environment. We wanted orchestration and automation. The single pane of glass was the most important part.” Another noted, "The automation part and the playbook creation part are awesome. The way it is responding to the customers and incidents is also very good. In the SOC environment, I guess it will carry out around 50% of the work."

    Learn more about Carbon Black CB Response
    Learn more about Palo Alto Networks Cortex XSOAR
    Sample Customers
    Cellcom Israel, Blue Cross and Blue Shield of Kansas City, esri, Cylance, Flatiron Health, Veeva, ADT Cybersecurity
    Top Industries
    Financial Services Firm43%
    Insurance Company14%
    Security Firm14%
    Construction Company14%
    Computer Software Company22%
    Financial Services Firm12%
    Comms Service Provider10%
    Financial Services Firm27%
    Healthcare Company9%
    Comms Service Provider9%
    Computer Software Company19%
    Financial Services Firm10%
    Comms Service Provider10%
    Company Size
    Small Business11%
    Midsize Enterprise33%
    Large Enterprise56%
    Small Business19%
    Midsize Enterprise18%
    Large Enterprise63%
    Small Business27%
    Midsize Enterprise27%
    Large Enterprise45%
    Small Business18%
    Midsize Enterprise15%
    Large Enterprise67%
    Buyer's Guide
    Security Incident Response
    November 2022
    Find out what your peers are saying about VMware, ServiceNow, Trellix and others in Security Incident Response. Updated: November 2022.
    655,711 professionals have used our research since 2012.

    Carbon Black CB Response is ranked 4th in Security Incident Response with 2 reviews while Palo Alto Networks Cortex XSOAR is ranked 2nd in Security Orchestration Automation and Response (SOAR) with 18 reviews. Carbon Black CB Response is rated 8.6, while Palo Alto Networks Cortex XSOAR is rated 8.0. The top reviewer of Carbon Black CB Response writes "Scalable and stable with good technical support". On the other hand, the top reviewer of Palo Alto Networks Cortex XSOAR writes "Enables the investigators to go through the review process a lot quicker". Carbon Black CB Response is most compared with Carbon Black CB Defense, Secureworks Red Cloak Threat Detection and Response, Splunk Phantom, Fidelis Elevate and Rapid7 InsightConnect, whereas Palo Alto Networks Cortex XSOAR is most compared with Splunk Phantom, Fortinet FortiSOAR, Siemplify, IBM Resilient and ServiceNow Security Operations.

    We monitor all Security Incident Response reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.