Cortex XSIAM vs Sweet Security comparison

Palo Alto Networks and Sweet Security are both solutions in the Identity Threat Detection and Response (ITDR) category. Palo Alto Networks is ranked #6 with an average rating of 8.4, while Sweet Security is ranked #11 with an average rating of 8.8. Additionally, 100% of Palo Alto Networks users are willing to recommend the solution, compared to 100% of Sweet Security users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Cortex XSIAM and Sweet Security based on real PeerSpot user reviews.

Find out in this report how the two Identity Threat Detection and Response (ITDR) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Cortex XSIAM vs. Sweet Security Report (Updated: February 2026).

Buyer's Guide

Cortex XSIAM vs. Sweet Security

February 2026

Download the complete report

Helped 885,311 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Clo...

Featured Reviews

Satyavijay Chavan

Information Security Engineer at DataVigilant Infotech

Enables us to prioritize and effectively address critical security issues

Evidence-based reporting helps us to prioritize and solve critical security issues. The new visualization feature demonstrates how an attacker can enter the system, highlighting the potential path that can be exploited and outlining all the steps the attacker could take. With that visibility, we can ensure the perimeter is strong and attackers cannot enter, thus reducing the risk. It has helped us prioritize issues. The visibility into how an attack could happen is valuable. For example, it highlights the system vulnerability and outlines where an attack could propagate. The visualization helps me to prioritize remediation, and if I don't know where to start, I can check to see the score that enables me to prioritize issues. I am using infrastructure-as-code scanning, and it's one of the useful features. In pre-production, it identifies embedded secrets and misconfigurations, including issues with Kubernetes or some privileged containers. This feature allows us to pass the audit and secure IaC code so that it isn't easily exploitable by attackers. We can more proactively work to identify and resolve vulnerabilities by using the dashboard and the alerting system that SentinelOne provides. It helps us with audits and compliance. We can show the compliance in percentage. We can confidently say that our company or infrastructure is very secure. It has improved our security posture by 30% to 35%. It has reduced our false positives by 30%. It has helped teams collaborate better. The security team manages SentinelOne Singularity Cloud Security, and when it flags vulnerabilities, they are forwarded to DevOps for remediation. Previously, we needed to identify and report the issues, but there would be lapses in communication. Now, there is a centralized dashboard that anyone can look at and see the open issues and work on them.

Read full review

JohnTamakloe

Solutions Architect at ostec

Efficient coordination improves operations with seamless integration and rapid automation

The typical use cases for Cortex XSIAM are diverse I would describe the impact of Cortex XSIAM's automation on my security operations center as efficient. I use Cortex XSIAM's behavior analytics, and it helps identify unusual activities. I leverage Cortex XSIAM's incident management features for…

Read full review

Filippos Malandrakis

Infrastructure & Dev Ops Lead at Babylon Labs

Continuous runtime security has improved visibility while the interface still needs refinement

One thing I think Sweet Security can definitely improve is that they have a lot of features, but the UI right now is not so well designed in my opinion. It's a bit difficult to navigate and get to the signal. There is a lot of signal there, but it's a bit difficult to get to the correct place and understand what I am seeing. It has a small learning curve that I don't think such a product should have. It should be very straightforward. Sweet Security has a mechanism where they initially show all the vulnerabilities that are in my infrastructure, which they show as a huge number, maybe around ten thousand, and they narrow it down to which of these could actually be exploited and are actually severe. It's nice that they are able to narrow it down to a few incidents. However, they don't really need to show this in the UI. Maybe they can just show the actual signal and not show that there is a lot of vulnerabilities, but indicate which are important. That's good that they can do it, but it's not so important to see it every time in the platform.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"With SentinelOne Singularity Cloud Security, it's easy to onboard new accounts."

"We like SentinelOne Singularity Cloud Security's vulnerability assessment and management features, and its vulnerability databases."

"We mostly use alerts. That has been pretty good. If we use the alert system from Amazon, it is much costlier to us, so we use SentinelOne Singularity Cloud Security."

"The management console is highly intuitive to comprehend and operate."

"SentinelOne is far superior to our previous solution, Accops, due to its seamless updates, effortless maintenance, and user-friendly interface and dashboard."

"Support has been very helpful and provides regular feedback and help whenever needed. They've been very useful."

"It is advantageous in terms of time-saving and cost reduction."

"The offensive security feature is valuable because it publicly detects the offensive and vulnerable things present in our domain or applications. It checks any applications with public access. Some of the applications give public access to certain files or are present over a particular domain. It detects and lets us know with evidence. That is quite good. It is protecting our infrastructure quite well."

More SentinelOne Singularity Cloud Security pros

"It is an effective solution in terms of performance and functionalities."

"The product integrates seamlessly with third-party solutions."

"The way the solution responds to detections and warnings is really impressive."

"The advanced visualization capabilities of the product are important for understanding security trends in an organization."

"It operates on a single, extensive database which enables it to excel in detecting threats and anomalies across the network and endpoints, delivering a highly effective and comprehensive security solution."

"One of the valued aspects of the product is its use of artificial intelligence to detect security vulnerabilities."

"Cortex XSIAM enhances our ability to apply endpoint protection policies, implement restrictions, conduct scans, and engage in sandboxing."

"Since implementing Cortex XSIAM, incident response times have been significantly reduced by approximately twenty percent."

More Cortex XSIAM pros

"The value of having real-time visibility in our cloud environment with Sweet Security changes everything because it differentiates between identifying and reacting to something that is not really a risk and something that is truly a risk that needs to be treated."

"The value we see from having real-time visibility into our cloud environment is significant, as Sweet Security serves as our eyes and ears inside AWS, telling us what we are doing wrong so we can fix it."

"Before we had Sweet Security, upon any type of detection of activity, we needed to conduct lots of investigations in different platforms and logs until we could build the larger picture, but once we inserted Sweet Security, we are able to actually see each and every request being made from the application level towards the infrastructure, making it much easier and reducing the time for an analyst to understand what's really happening."

"For the time I have been using Sweet Security, I feel a bit more safe in the sense that there is something that continuously scans my infrastructure for issues."

Cons

"We use SentinelOne Singularity Cloud Security and also SentinelOne. If SentinelOne Singularity Cloud Security integrated some of the endpoint security features of SentinelOne, it would be the perfect one-stop solution for everything. We wouldn't need to switch between the products. At my organization, I am responsible for endpoint security and vulnerability management. Integrating both functions into one application would be ideal because I could see all the alerts, heat maps, and reports in one console."

"From my personal experience, the alerting system needs to be faster. If something happens in our infrastructure, the alert appears on the dashboard, but I have to log in to the dashboard and refresh it."

"In version 2, a lot of rules have been deployed for Kubernetes security and CDR, which makes a lot of issues of critical severity, whereas they are not critical or of high severity. There is a mismatch of severities."

"The integration with Oracle has room for improvement."

"The cloud-based operations might pose challenges in areas with limited or unavailable internet connectivity. Desktop features might be useful for smaller organizations with less complex security needs."

"The documentation could be better."

"SentinelOne Singularity Cloud Security has limited legacy system support and may not fully support older operating systems or legacy environments."

"To enhance the notification system's efficiency, resolved issues should be promptly removed from the portal."

More SentinelOne Singularity Cloud Security cons

"Further integration capabilities with various other software products that can seamlessly tie into Cortex XSIAM would be advantageous."

"Cortex XSIAM is on the expensive side and requires substantial improvement in pricing."

"At the beginning, we experienced some difficulties setting up the product with connectivity and infrastructure, but ultimately it functioned really effectively."

"I am not sure if any improvements are needed right now."

"The standard integrations are very limited, and the integrations available are not listed in the marketplace."

"It could provide more integration with a large variety of products."

"I would rate the overall stability a six or seven, as we have only used it for a few months and need a year of experience to provide a full assessment."

More Cortex XSIAM cons

"One thing I think Sweet Security can definitely improve is that they have a lot of features, but the UI right now is not so well designed in my opinion."

"The option to run specific playbooks through Sweet Security platform would help us a lot, but these must be fully customizable."

"One area for improvement could be the alerts, as we have an issue with the alert time, the time it takes for the system to send the alert, but besides that, there is nothing special."

"There was something a year ago that caused a production issue in my company, but they fixed it within an hour."

Pricing and Cost Advice

"Singularity Cloud Security by SentinelOne is cost-efficient."

"While SentinelOne Singularity Cloud Security offers robust protection, its high cost may be prohibitive for small and medium-sized businesses."

"It is a little expensive. I would rate it a four out of ten for pricing."

"PingSafe is not very expensive compared to Prisma Cloud, but it's also not that cheap. However, because of its features, it makes sense to us as a company. It's fairly priced."

"PingSafe is fairly priced."

"The tool is cost-effective."

"PingSafe falls somewhere in the middle price range, neither particularly cheap nor expensive."

"SentinelOne provided competitive pricing compared to other vendors, and we are satisfied with the deal."

More SentinelOne Singularity Cloud Security pricing and cost advice

"In terms of pricing, we found Cortex XSIAM to offer a very reasonable and competitive rate."

"The solution comes at a significant cost."

"The solution is expensive compared to its competitors."

"Since Palo Alto is trying to get as many new customers as possible, they're offering very competitive pricing."

"The product cost could be considered value for money compared to other solutions in the market, though it is quite high."

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Identity Threat Detection and Response (ITDR) solutions are best for your needs.

See recommendations

885,311 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

14%

Computer Software Company

11%

Manufacturing Company

Government

Computer Software Company

11%

Financial Services Firm

10%

Manufacturing Company

Government

Wellness & Fitness Company

11%

Healthcare Company

10%

Manufacturing Company

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	49
Midsize Enterprise	22
Large Enterprise	55

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	2
Large Enterprise	4

No data available

Questions from the Community

What do you like most about PingSafe?

The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...

See all answers

What is your experience regarding pricing and costs for PingSafe?

Regarding the pricing for SentinelOne Singularity Cloud Security, I do not think it is something I can compare.

See all answers

What needs improvement with PingSafe?

I do not see room for improvement in SentinelOne Singularity Cloud Security. In the future, I would like to see the i...

See all answers

What is your experience regarding pricing and costs for Cortex XSIAM?

I did not participate in pricing discussions for Cortex XSIAM solutions, so I cannot provide a review regarding price...

See all answers

What needs improvement with Cortex XSIAM?

Cortex XSIAM is on the expensive side and requires substantial improvement in pricing. There are other features that ...

See all answers

What is your primary use case for Cortex XSIAM?

With Cortex XSIAM, we installed an agent on Active Directory on-premise. We connected our Firewalls to the Data Lake ...

See all answers

What is your experience regarding pricing and costs for Sweet Security?

One very strong point of Sweet Security is their pricing. It's really good. Also, their team is very good, very respo...

See all answers

What needs improvement with Sweet Security?

One thing I think Sweet Security can definitely improve is that they have a lot of features, but the UI right now is ...

See all answers

What is your primary use case for Sweet Security?

I'm mostly using Sweet Security for real-time infrastructure security. If there is any threat, I want to detect it in...

See all answers

Comparisons

Wiz vs SentinelOne Singularity Cloud Security

Compared 10% of the time

Prisma Cloud by Palo Alto Networks vs SentinelOne Singularity Cloud Security

Compared 9% of the time

Microsoft Defender for Cloud vs SentinelOne Singularity Cloud Security

Compared 6% of the time

CrowdStrike Falcon Cloud Security vs SentinelOne Singularity Cloud Security

Compared 5% of the time

AWS GuardDuty vs SentinelOne Singularity Cloud Security

Compared 4% of the time

More SentinelOne Singularity Cloud Security Competitors

Palo Alto Networks Cortex XSOAR vs Cortex XSIAM

Compared 21% of the time

Microsoft Sentinel vs Cortex XSIAM

Compared 10% of the time

Cortex XDR by Palo Alto Networks vs Cortex XSIAM

Compared 8% of the time

IBM Security QRadar vs Cortex XSIAM

Compared 6% of the time

CrowdStrike Falcon vs Cortex XSIAM

Compared 6% of the time

More Cortex XSIAM Competitors

Upwind vs Sweet Security

Compared 23% of the time

Wiz vs Sweet Security

Compared 19% of the time

Prisma Cloud by Palo Alto Networks vs Sweet Security

Compared 6% of the time

Stream.Security vs Sweet Security

Compared 5% of the time

SentinelOne Singularity Identity vs Sweet Security

Compared 5% of the time

More Sweet Security Competitors

Product Reports

Buyer's Guide

SentinelOne Singularity Cloud Security

March 2026

SentinelOne Singularity Cloud Security report

Download SentinelOne Singularity Cloud Security product report

Buyer's Guide

Cortex XSIAM

March 2026

Download Cortex XSIAM product report

Buyer's Guide

Sweet Security

March 2026

Download Sweet Security product report

Also Known As

PingSafe

No data available

Overview

SentinelOne Singularity Cloud Security offers a streamlined approach to cloud security with intuitive operation and strong integration capabilities for heightened threat detection and remediation efficiency.

Singularity Cloud Security stands out for its real-time detection and response, effectively minimizing detection and remediation timelines. Its automated remediation integrates smoothly with third-party tools enhancing operational efficiency. The comprehensive console ensures visibility and support for forensic investigations. Seamless platform integration and robust support for innovation are notable advantages. Areas for development include improved search functionality, affordability, better firewall capabilities for remote users, stable agents, comprehensive reporting, and efficient third-party integrations. Clarity in the interface, responsive support, and real-time alerting need enhancement, with a call for more automation and customization. Better scalability and cost-effective integration without compromising capabilities are desired.

What are SentinelOne Singularity Cloud Security's standout features?

Ease of Use: Intuitive operation simplifies navigation across platforms.
Real-Time Detection: Quick identification and response to threats.
Automated Remediation: Streamlines recovery processes with integration capabilities.
Forensic Visibility: Aids in thorough threat analysis and prevention strategies.
Comprehensive Console: Offers full visibility and historical data tracking.
Platform Integration: Supports seamless operation across cloud and hybrid environments.

What benefits should users expect from SentinelOne Singularity Cloud Security?

Enhanced Efficiency: Automation and third-party integration improve threat response.
Improved Detection: Reduces mean time to detect and respond to threats.
Operational Support: Comprehensive visibility and forensic tools aid operational decisions.
Cost Efficiency: Affordable integration with scaling capabilities without high overhead.

SentinelOne Singularity Cloud Security is deployed in industries needing robust cloud security posture management, endpoint protection, and threat hunting. Utilized frequently across AWS and Azure, it assists in monitoring, threat detection, and maintaining compliance in diverse environments while providing real-time alerts and recommendations for proactive threat management.

SentinelOne

Cortex XSIAM acts as a critical element for SOC foundations, integrating SIEM and EDR capabilities, valued for threat detection and seamless security orchestration with Palo Alto Networks products.

Organizations find Cortex XSIAM beneficial for SOC foundations due to its capability to integrate SIEM and EDR tools, facilitating data collection, detection, and response. It connects with third-party data sources while reducing management effort and offering cost-effective alternatives to competitors like CrowdStrike and Trend Micro. Featuring automation and integration with Palo Alto Networks products, Cortex XSIAM enhances threat detection. Unified architecture allows a comprehensive view of attacks, further supported by machine learning and integration with existing vendor solutions, ensuring that users gain insights without significant manual log analysis.

What are Cortex XSIAM's key features?

Security Orchestration: Streamlines processes across security operations.
Automation and Response: Efficient incident response management.
Detection Enrichment: Enhances identification of threats.
Centralized Endpoint Security: Comprehensive protection and monitoring of endpoints.
Forensic Investigation: Automated investigation to expedite threat analysis.

What benefits are evident in Cortex XSIAM reviews?

Cost-Effectiveness: Provides economical options compared to other market players.
Comprehensive Integration: Seamlessly integrates with multiple data sources and vendors.
Reduced Management Effort: Simplifies the administration of security operations.
Enhanced Threat Detection: Strengthens identification and remediation processes.

Industries implement Cortex XSIAM mainly in technology-driven sectors where centralized endpoint protection and automation of forensic investigation are paramount. By integrating several third-party systems for incident response, companies in competitive markets leverage its attributes for heightened operational security efficiency. However, users note areas for improvement, such as Attack Surface Management and integration enhancements, to better suit tech-heavy industries needing extensive connectivity with cybersecurity solutions.

Palo Alto Networks

Sweet Security offers advanced cybersecurity measures designed to protect enterprise-level networks from complex threats, providing efficient monitoring and robust protection capabilities.

Focused on sophisticated threat detection and network security, Sweet Security provides an enterprise-grade solution for cybersecurity challenges. It integrates seamlessly with existing systems, offering real-time analytics and threat intelligence. Its comprehensive approach ensures high-level data protection and security management, allowing organizations to focus on core functionalities.

What features make Sweet Security stand out?

Real-time Threat Monitoring: Ensures proactive identification and response to emerging threats.
Seamless Integration: Easily integrates with current systems for enhanced security without disrupting operations.
Advanced Analytics: Provides insightful data for efficient threat management and decision-making.
Threat Intelligence Capabilities: Robust mechanisms to enhance awareness and preparedness against attacks.

What benefits or ROI can users expect from Sweet Security?

Enhanced Security Posture: Offers improved protection for sensitive data and assets.
Cost Efficiency: Reduces potential loss from security breaches by preemptively protecting systems.
Productivity Improvement: Frees up resources by automating threat detection and response processes.
Scalability: Supports growth and expansion without the need for constant re-evaluation of security resources.

Implementation of Sweet Security across industries like finance, healthcare, and e-commerce demonstrates its versatility and effectiveness. In finance, it safeguards sensitive financial data; in healthcare, it ensures patient data privacy; and in e-commerce, it protects online transactions from fraud, making it an invaluable asset in today's digital landscape.

Sweet Security

Buyer's Guide

Cortex XSIAM vs. Sweet Security

February 2026

Free Report: Cortex XSIAM vs. Sweet Security

Find out what your peers are saying about Cortex XSIAM vs. Sweet Security and other solutions. Updated: February 2026.

DOWNLOAD NOW

885,311 professionals have used our research since 2012.

See our Cortex XSIAM vs. Sweet Security report.

See our list of best Identity Threat Detection and Response (ITDR) vendors, best Cloud Workload Protection Platforms (CWPP) vendors, and best Cloud Security Posture Management (CSPM) vendors.

We monitor all Identity Threat Detection and Response (ITDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.