No more typing reviews! Try our Samantha, our new voice AI agent.

Cortex Copilot vs Purple AI comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Torq
Sponsored
Ranking in AI-SOC
1st
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
12
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (4th), AI-Powered Security Automation (1st)
Cortex Copilot
Ranking in AI-SOC
28th
Average Rating
0.0
Number of Reviews
0
Ranking in other categories
No ranking in other categories
Purple AI
Ranking in AI-SOC
4th
Average Rating
8.4
Reviews Sentiment
5.9
Number of Reviews
6
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2026, in the AI-SOC category, the mindshare of Torq is 7.9%, up from 6.4% compared to the previous year. The mindshare of Cortex Copilot is 0.5%, down from 0.8% compared to the previous year. The mindshare of Purple AI is 2.4%, down from 9.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
AI-SOC Mindshare Distribution
ProductMindshare (%)
Torq7.9%
Purple AI2.4%
Cortex Copilot0.5%
Other89.2%
AI-SOC
 

Featured Reviews

AD
Solutions Architect at Swimlane
Automation has streamlined multi-tenant SOC workflows and improves alert handling efficiency
Although the reporting within Torq is not that great, we did ask for many features regarding reporting in Torq, but due to some platform constraints, they could not make the whole dataset available for us to be used in reporting. Except for that, we used some basic reporting. When I used Torq, it was indeed in the early stages of AI capabilities. Only a few customers were allowed to use it, and we were among them. It functioned well as long as we summarized the data properly. If you input garbage, you would get garbage out. Thus, we had to do significant fine-tuning regarding what data context we provided to the AI orchestrator to get meaningful results. In terms of Torq's unified platform approach to AI SOC automation and case management compared to managing multiple point solutions across my security stack, I find it case-centric. The unified view in case management is good since it provides clarity, although there are limitations regarding how many items in case management can be modified at once. Bulk operations are very limited, potentially due to their back-end database or data retrieval processes that can be improved. Regarding improvements for Torq, when we were onboarded, there were aspects we were uncertain about, such as the number of cases that could be generated, what data we could bring in, how many clients we could onboard, and similar concerns. Initially, we also lacked clarity about the number of playbooks or workflows we could build. Different triggers like system triggers, case-based triggers, and others can be employed without restrictions, but when it comes to on-demand and scheduled jobs, there is a limitation based on the subscription and pricing tier that notably caps the number of workflows we can create. No bulk editing across cases was one issue, along with limited filtering related to single grouping constraints. Additionally, the out-of-the-box case templates provided require substantial modifications before they become usable. There is also a feature in the cases for notes that cannot be searched. They are only visible through the UI, which is another area for improvement. The workflow and execution-based charges seem misleading as this was not discussed initially. I am not sure if new customers are made aware of this. It seems that workflows revolving around cases hinder functionality outside of case management, as we have many use cases needing on-demand triggers and schedules for functions like reporting or polling devices. Creating additional workflows to achieve basic functionalities raises costs significantly, which disadvantages customers. While they facilitate optimization and scaling, the support received tends to be very basic. Improvements can be made in that area as well.
Use Cortex Copilot?
Leave a review
GANESAN K - PeerSpot reviewer
Senior Technical Engineer at Safezone Secure Solutions Private Limited
Automated threat hunting has reduced investigation time and now improves incident visibility
We have not tested in that manner because when comparing with the competition product CrowdStrike, Purple AI and CrowdStrike are pretty good and more or less equal in the way of responding to a query. On the technical side, I can compare Purple AI with CrowdStrike's threat intelligence. CrowdStrike was initially a breach investigation company and was in the Indian market well before SentinelOne, acquiring more significant ground. We have used Charlotte AI, which is provided by CrowdStrike, the direct competitor of SentinelOne. These two have key differences. Charlotte AI focuses more on IOAs and IOCs, whereas Purple AI helps us query the logs and hunt threats. As an improvement, if SentinelOne could focus on IOA similar to what CrowdStrike is giving, that would be a good point. They could feed information on IOA, such as based on attackers, what different attack groups are performing the attacks, and provide those insights. Compared to its competition, for doing DFIR (Digital Forensics and Incident Response), not only IOCs are needed but also IOAs. Information about the indication of the attacker, who is attacking, and the attacker group history would be better if Purple AI could incorporate that. We can build some queries and automated responses for any suspicious or malicious conditions. It would be better if there were workflows in place for giving alerts. The way alerts are handled could be improved because when compared to other competing products, I am able to handle the technique of the threat and categorize it based on severity. If it has a major impact on the environment, I can contain the system. I have numerous options to create various kinds of alerts.
report
Use our free recommendation engine to learn which AI-SOC solutions are best for your needs.
900,051 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Manufacturing Company
10%
Construction Company
10%
Comms Service Provider
10%
No data available
Real Estate/Law Firm
10%
Manufacturing Company
9%
Healthcare Company
9%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise5
Large Enterprise5
No data available
By reviewers
Company SizeCount
Small Business5
Large Enterprise2
 

Questions from the Community

What needs improvement with Torq?
I do not dislike anything about Torq because it has satisfied all of our use cases and requirements. We contacted sup...
What is your primary use case for Torq?
Initially, we were using Slack for small automations, such as creating pipelines or shutting down servers. For exampl...
What advice do you have for others considering Torq?
I have been working for five years with experience in the IT field. Torq is very good. It manages everything. I would...
Ask a question
Earn 20 points
What needs improvement with Purple AI?
AI-assisted summary is good, but if we get it in the exact threat module where we investigate all the threats, it wou...
What is your primary use case for Purple AI?
The main use cases I use Purple AI for are building queries, alerts, and Star custom policies. Mostly I use Purple AI...
What advice do you have for others considering Purple AI?
I notice a difference in speed using Purple AI compared to legacy SIEMs such as Sumo Logic; it is fast, taking only a...
 

Comparisons

 

Overview

Find out what your peers are saying about Torq, Anvilogic, Dropzone AI and others in AI-SOC. Updated: May 2026.
900,051 professionals have used our research since 2012.