Try our new research platform with insights from 80,000+ expert users

Coralogix vs Cortex XSIAM comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Coralogix
Ranking in Security Information and Event Management (SIEM)
22nd
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
13
Ranking in other categories
Application Performance Monitoring (APM) and Observability (21st), Log Management (21st), API Management (15th), Streaming Analytics (15th), Anomaly Detection Tools (1st), AI Observability (18th)
Cortex XSIAM
Ranking in Security Information and Event Management (SIEM)
14th
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
15
Ranking in other categories
Identity Threat Detection and Response (ITDR) (7th), AI-Powered Cybersecurity Platforms (8th)
 

Mindshare comparison

As of January 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Coralogix is 0.7%, up from 0.3% compared to the previous year. The mindshare of Cortex XSIAM is 2.4%, up from 2.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Cortex XSIAM2.4%
Coralogix0.7%
Other96.9%
Security Information and Event Management (SIEM)
 

Featured Reviews

Naveenkumar Lakshman - PeerSpot reviewer
Presales Engineer at Crayon AS
Centralized monitoring has improved real-time issue tracking and reduced root cause analysis time
One of the best features that Coralogix offers is that it is integration friendly. I can seamlessly work with different cloud providers including AWS, Azure, and GCP. I can monitor Kubernetes or Docker platforms as well, and I can integrate with the DevOps chain including Jenkins and all infrastructure code, Terraform, or Ansible. Coralogix has positively impacted my organization by providing a centralized console to monitor the dashboard, giving me rich flexibility to see different sorts of data that is spread across the logs, metrics, or traces, which are the typical pillars of the observability tool. I have the interface where I can use the drag-and-drop feature, and I can create different types of charts. Mainly, I have the line charts and time series ones that I generally use in many use cases, gauges, tables, pie charts, or markdown widgets. These are the ones generically available, and I can switch between the visualization types. I am getting the underlying query in that and can import and export dashboards built upon the JSON format. I can have my own APIs integrated with my dashboards as well, such as with Terraform, which is useful for scaling across my environments. Regarding root cause analysis, mainly what I can do is correlate across all of the layers because the main logs that I work on are storage-related, including CIFS, NFS, SAN traffic, and the metrics including storage, throughput, or VM resource usage. Being able to view logs, metrics, or traces available, I get all of these in one place, and I can do root cause analysis much quicker.
reviewer2666148 - PeerSpot reviewer
Associate Director at a financial services firm with 5,001-10,000 employees
Integration challenges highlight the need for manual workflows
The standard integrations are very limited, and the integrations available are not listed in the marketplace. Obtaining validation for integrations from Palo Alto takes around eight months, which is quite long. The solution would benefit from having more standard playbooks and templates available, as in other partners. Currently, everything must be created from scratch. In terms of incident response automation, it is quite poor due to the lack of integration with all security tools, making manual intervention necessary.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The best feature of this solution allows us to correlate logs, metrics and traces."
"Coralogix scales well, and I will rate it nine out of ten."
"The solution is easy to use and to start with."
"The initial setup is straightforward."
"A non-tech person can easily get used to it."
"Numerous data monitoring tools are available, but Coralogix somehow fine-tunes our policies and effectively supports our teams."
"The log monitoring is good, and the dashboards that we create are beneficial."
"For now, we have not experienced any stability issues."
"The automation capabilities significantly improve response times by allowing us to respond to incidents from a single dashboard rather than navigating multiple dashboards."
"The most valuable feature is the integration capability."
"The flexibility for creating manual workflows stands out."
"Since implementing Cortex XSIAM, incident response times have been significantly reduced by approximately twenty percent."
"The advanced visualization capabilities of the product are important for understanding security trends in an organization."
"It does a better job of identifying anomalies that are more likely to be incidents of compromise without as many false positives or false negatives."
"The flexibility for creating manual workflows stands out."
"One of the valued aspects of the product is its use of artificial intelligence to detect security vulnerabilities."
 

Cons

"In terms of documentation, I think there can be more user-friendly documentation that stresses more on day-to-day issues."
"Coralogix should have some AI capabilities to auto-detect anomalies and provide suggestions."
"Coralogix's dashboard and search capabilities do not help me in any particular way."
"The user interface is not intuitive, especially when first onboarding, and improvements could be made here."
"The features we were missing in the past were related to the way we see our metrics and aggregate our data."
"The customizable dashboards haven't really helped with my company's efficiency at all, and I think there's room for improvement."
"Maybe they could make it more user-friendly."
"Coralogix should have some AI capabilities to auto-detect anomalies and provide suggestions. The increasing volume of data and the resulting bandwidth charges are concerns."
"I am not sure if any improvements are needed right now."
"The standard integrations are very limited, and the integrations available are not listed in the marketplace."
"The solution’s pricing and technical support could be improved."
"The first impression is that XSIAM would be more expensive than others we tried."
"The platform isn't very developer-friendly and it should provide more flexibility and ease."
"Cortex could improve the detection and online resolution of security vulnerabilities."
"Cortex XSIAM needs improvements in terms of data onboarding, parsers, and third-party integration supports."
"It could provide more integration with a large variety of products."
 

Pricing and Cost Advice

"The cost of the solution is per volume of data ingested."
"Currently, we are at a very minimal cost, which is around $400 per month since we have reduced our usage. Initially, we were at $900 per month."
"We are paying roughly $5,000 a month."
"The platform has a reasonable cost. I rate the pricing a three out of ten."
"The solution comes at a significant cost."
"Since Palo Alto is trying to get as many new customers as possible, they're offering very competitive pricing."
"In terms of pricing, we found Cortex XSIAM to offer a very reasonable and competitive rate."
"The solution is expensive compared to its competitors."
"The product cost could be considered value for money compared to other solutions in the market, though it is quite high."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
881,114 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Computer Software Company
10%
Manufacturing Company
8%
Comms Service Provider
6%
Computer Software Company
11%
Financial Services Firm
10%
Manufacturing Company
10%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise2
Large Enterprise5
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise2
Large Enterprise4
 

Questions from the Community

What do you like most about Coralogix?
Numerous data monitoring tools are available, but Coralogix somehow fine-tunes our policies and effectively supports our teams.
What is your experience regarding pricing and costs for Coralogix?
To monitor and manage costs associated with Coralogix, I analyze my trend, looking at how the data is being ingested. Generally, it is charged based on what we store, and therefore there are certai...
What needs improvement with Coralogix?
I think Coralogix can be improved with flexible dashboards. Creating specific views, such as saving a dev environment as a separate view rather than adding filters every time, would be great.
What is your experience regarding pricing and costs for Cortex XSIAM?
I did not participate in pricing discussions for Cortex XSIAM solutions, so I cannot provide a review regarding prices for this solution.
What needs improvement with Cortex XSIAM?
Cortex XSIAM is on the expensive side and requires substantial improvement in pricing. There are other features that could be improved, including integration with vendors such as CyberArk. I would ...
What is your primary use case for Cortex XSIAM?
With Cortex XSIAM, we installed an agent on Active Directory on-premise. We connected our Firewalls to the Data Lake and the Active Directory, and protected the Firewalls with another authenticatio...
 

Overview

 

Sample Customers

Payoneer, AGS, Monday.com, Capgemini
Information Not Available
Find out what your peers are saying about Coralogix vs. Cortex XSIAM and other solutions. Updated: December 2025.
881,114 professionals have used our research since 2012.