Try our new research platform with insights from 80,000+ expert users

Cortex XSIAM vs SentinelOne Singularity Identity comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 5, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
4.6
Cortex XSIAM enhances incident management and provides significant financial returns by automating detection and response, reducing staffing needs.
Sentiment score
6.8
SentinelOne Singularity Identity offers enhanced protection and value, saving users over 200 hours annually in security investigations.
 

Customer Service

Sentiment score
5.8
Cortex XSIAM support varies; premium service excels, while non-premium experiences depend on distributor expertise and sometimes face delays.
Sentiment score
7.3
SentinelOne Singularity Identity is lauded for comprehensive, responsive support, offering rapid issue resolution and dedicated customer success resources.
With premium support, core Palo Alto technical experts handle issues directly.
Team Lead, Security at seamlessinfotech.com
It is ineffective in terms of responding to basic queries and addressing future requirements.
Associate Director at a financial services firm with 5,001-10,000 employees
I would rate the support of Palo Alto a nine out of ten.
Solutions Architect at ostec
They have been responsive to our needs as integrators and those of the client.
Senior Consultant at CGI
 

Scalability Issues

Sentiment score
6.5
Cortex XSIAM is scalable for various business sizes with cloud-based integration, but lacks on-premises deployment and mixed reviews.
Sentiment score
7.9
SentinelOne Singularity Identity is scalable and flexible but faces challenges with deployment maturity and third-party integration scalability.
Without proper integration, scaling up with more servers is meaningless.
Associate Director at a financial services firm with 5,001-10,000 employees
Cortex XSIAM is highly scalable.
SOC Analyst at OVELOSEC
 

Stability Issues

Sentiment score
7.6
Cortex XSIAM is praised for its stability, rapid issue resolution, and efficient performance despite minor post-update challenges.
Sentiment score
8.1
SentinelOne Singularity Identity is highly stable with minimal disruptions, responsive support, and low CPU resource usage.
The product was easy to install and set up and worked right.
Owner at Xelere
Overall, Cortex XSIAM is stable.
SOC Analyst at OVELOSEC
It works really nice and performs really efficiently after configuration.
IT COMMUNICATIONS AND NETWORKS at Américas BPS
 

Room For Improvement

Cortex XSIAM needs improved integration, performance, interface, pricing, support, ASM, AI, onboarding, tagging, and identity management enhancements.
SentinelOne Singularity Identity needs improved policies, interfaces, support, and features like reporting, updates, and integration for better usability.
In terms of incident response automation, it is quite poor due to the lack of integration with all security tools, making manual intervention necessary.
Associate Director at a financial services firm with 5,001-10,000 employees
Cortex XSIAM needs improvements in terms of data onboarding, parsers, and third-party integration supports.
SOC Analyst at OVELOSEC
Cortex XSIAM is on the expensive side and requires substantial improvement in pricing.
Solutions Architect at ostec
There is a clear roadmap for improvements, including enhancing capabilities with AI and seamless functionality in an MSP model for deeper visibility across multiple agencies.
Senior Consultant at CGI
 

Setup Cost

Cortex XSIAM is viewed as competitively priced but complex, aligning with market expectations despite some regional variations.
SentinelOne Singularity Identity offers flexible pricing seen as both cost-effective and sometimes expensive, reflecting its comprehensive features.
The product is very expensive.
Associate Director at a financial services firm with 5,001-10,000 employees
Cortex XSIAM is pretty expensive, and the licensing process is not very comfortable.
Director at MICROLOGIC NETWORKS PRIVATE LIMITED
The first impression is that XSIAM would be more expensive than others we tried.
Owner at Xelere
 

Valuable Features

Cortex XSIAM excels in machine learning threat detection, SOAR features, and advanced automation for efficient security management.
SentinelOne Singularity Identity offers AI-driven security with dynamic threat detection, seamless management, and enhanced visibility for rapid remediation.
The advanced visualization capabilities of the product are important for understanding security trends in an organization.
Solutions Architect at ostec
Its signature-less subscriptions and robust detection power stand out in improving threat detection.
Senior Vice President at Chi Networks
Cortex XSIAM allows us to onboard almost every device, whether they are on-prem or on SaaS.
SOC Analyst at OVELOSEC
With visibility into endpoint telemetry, SentinelOne does provide useful information to find threat actors and empowers those who are in the business of threat hunting.
Senior Consultant at CGI
 

Categories and Ranking

Cortex XSIAM
Ranking in Identity Threat Detection and Response (ITDR)
7th
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
15
Ranking in other categories
Security Information and Event Management (SIEM) (13th), AI-Powered Cybersecurity Platforms (8th)
SentinelOne Singularity Ide...
Ranking in Identity Threat Detection and Response (ITDR)
5th
Average Rating
9.0
Reviews Sentiment
7.3
Number of Reviews
22
Ranking in other categories
Vulnerability Management (22nd), Advanced Threat Protection (ATP) (14th), Threat Deception Platforms (3rd)
 

Mindshare comparison

As of December 2025, in the Identity Threat Detection and Response (ITDR) category, the mindshare of Cortex XSIAM is 5.3%, up from 4.2% compared to the previous year. The mindshare of SentinelOne Singularity Identity is 5.1%, up from 2.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Identity Threat Detection and Response (ITDR) Market Share Distribution
ProductMarket Share (%)
SentinelOne Singularity Identity5.1%
Cortex XSIAM5.3%
Other89.6%
Identity Threat Detection and Response (ITDR)
 

Featured Reviews

reviewer2666148 - PeerSpot reviewer
Associate Director at a financial services firm with 5,001-10,000 employees
Integration challenges highlight the need for manual workflows
The standard integrations are very limited, and the integrations available are not listed in the marketplace. Obtaining validation for integrations from Palo Alto takes around eight months, which is quite long. The solution would benefit from having more standard playbooks and templates available, as in other partners. Currently, everything must be created from scratch. In terms of incident response automation, it is quite poor due to the lack of integration with all security tools, making manual intervention necessary.
MM
Senior Consultant at CGI
We have seen a night and day difference in mean time to detect reduction
Incident response is one of the key areas where the solution has been very useful. Whenever there is an incident, instead of being reactive, the government is now able to quickly gain the data that it needs to see what its end agency is also seeing and partner with them in real-time to look at the same data and to collaborate where needed, empowering the agency to be able to do their job. When it comes to the mean time to detect, we see a night and day difference. When you have an MSP model with visibility across multiple entities, your ability to get a tip, follow up on the tip, and investigate it is night and day. There's no comparison between having visibility and having across-agency visibility. SentinelOne has definitely reduced their mean time to respond. With this visibility, you can now respond. Before, there was no visibility, so we definitely see a big difference. With visibility into endpoint telemetry, SentinelOne does provide useful information to find threat actors and empowers those who are in the business of threat hunting. Prior to this, the alternative was partnering with an agency. going on-site and getting access. Now, being able to do that work remotely in real-time, it's a ninety-day difference in terms of being able to quickly, correctly, quickly respond and partner with the end agencies. That's a definite benefit. As an architect, I'm very curious about how AI takes security the next step forward, what it enables people to do differently, more quickly, or more comprehensively, and how that meets some of the needs today. I think that AI holds a lot of potential, and it can allow analysts to do their job quicker. It can allow them to do their job with more helpful context and, as a result, be able to perform orders of magnitude better than they would have without the tool.
report
Use our free recommendation engine to learn which Identity Threat Detection and Response (ITDR) solutions are best for your needs.
879,259 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
10%
Manufacturing Company
9%
Government
7%
Computer Software Company
12%
Manufacturing Company
8%
Financial Services Firm
7%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise2
Large Enterprise4
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise5
Large Enterprise13
 

Questions from the Community

What do you like most about Cortex XSIAM?
It is an effective solution in terms of performance and functionalities.
What is your experience regarding pricing and costs for Cortex XSIAM?
I did not participate in pricing discussions for Cortex XSIAM solutions, so I cannot provide a review regarding prices for this solution.
What needs improvement with Cortex XSIAM?
Cortex XSIAM is on the expensive side and requires substantial improvement in pricing. There are other features that could be improved, including integration with vendors such as CyberArk. I would ...
What is your experience regarding pricing and costs for SentinelOne Singularity Identity?
I have no visibility into pricing, setup costs, or licensing as the government handles these aspects directly with SentinelOne. We do the integrating, and they process the payments.
What needs improvement with SentinelOne Singularity Identity?
Regarding improvements, I believe that API integration in third-party applications could be better. The Singularity tool uses its own credential in the record features.
What is your primary use case for SentinelOne Singularity Identity?
One of the main use cases I describe is that we face lateral movement in our customer's server side. The customer is using 50 or more servers for the news channel, Daily Thanthi. Among those, one s...
 

Overview

Find out what your peers are saying about Cortex XSIAM vs. SentinelOne Singularity Identity and other solutions. Updated: December 2025.
879,259 professionals have used our research since 2012.