Try our new research platform with insights from 80,000+ expert users

Cortex XSIAM vs Swimlane comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XSIAM
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
12
Ranking in other categories
Security Information and Event Management (SIEM) (17th), Identity Threat Detection and Response (ITDR) (6th), AI-Powered Cybersecurity Platforms (7th)
Swimlane
Average Rating
7.8
Reviews Sentiment
7.2
Number of Reviews
6
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (18th), AI-Powered Security Automation (1st)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Cortex XSIAM is designed for Security Information and Event Management (SIEM) and holds a mindshare of 2.9%, up 0.8% compared to last year.
Swimlane, on the other hand, focuses on Security Orchestration Automation and Response (SOAR), holds 3.3% mindshare, up 3.3% since last year.
Security Information and Event Management (SIEM)
Security Orchestration Automation and Response (SOAR)
 

Featured Reviews

AKASH MAJUMDER - PeerSpot reviewer
Incident response times have significantly reduced with efficient device integration and log parsing capabilities
Cortex XSIAM needs improvements in terms of data onboarding, parsers, and third-party integration supports. Additionally, a future update request is to enable tagging of endpoints in groups, similar to a feature available in Cortex XDR. The AI analytics need fine-tuning because some use cases are not working from my side.
Srikanth Nuthalapati - PeerSpot reviewer
Great support, scalable, and easier to code
The stability of the solution has room for improvement. I would like Swimlane to provide a single space where we can go to code, build, and automate. Where we have a provision to create tables, playbooks, and tables to produce results, connect all the dots, and make the flow automated. This would make it much easier to navigate than having to jump to different places. I would like to have a single button to click that would start me on the journey of creating my own code from the ground up, from the workflow algorithm to the automation process. This would be simpler than what I had with Splunk Phantom, where I had to piece things together and connect the dots to get the full picture. With this new feature, I could create the full picture with just one button click.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Since implementing Cortex XSIAM, incident response times have been significantly reduced by approximately twenty percent."
"One of the valued aspects of the product is its use of artificial intelligence to detect security vulnerabilities."
"The most valuable features of Cortex XSIAM are the machine learning used to identify threats, the complexity of the environment of products, and efficiency."
"I would give Cortex XSIAM a rating of ten out of ten."
"The most valuable feature is the integration capability."
"It operates on a single, extensive database which enables it to excel in detecting threats and anomalies across the network and endpoints, delivering a highly effective and comprehensive security solution."
"The flexibility for creating manual workflows stands out."
"Cortex XSIAM enhances our ability to apply endpoint protection policies, implement restrictions, conduct scans, and engage in sandboxing."
"The technical support from Swimlane is very good."
"The most valuable feature of the solution is the support."
"It provides us with a single portal for our logs from different solutions."
"Our primary goal was to reduce analyst time, and we have been successful in that."
"Swimlane is a very effective way to represent workflows involving multiple users."
"Swimlane enables two SOC analysts to work efficiently as much as ten analysts would without Swimlane, which translates to significant manpower savings."
 

Cons

"The platform isn't very developer-friendly and it should provide more flexibility and ease."
"I am not sure if any improvements are needed right now."
"Cortex XSIAM needs improvements in terms of data onboarding, parsers, and third-party integration supports."
"There is room for improvement in expanding integrations to include more cybersecurity solutions."
"The standard integrations are very limited, and the integrations available are not listed in the marketplace. Obtaining validation for integrations from Palo Alto takes around eight months, which is quite long."
"It could provide more integration with a large variety of products."
"The first impression is that XSIAM would be more expensive than others we tried."
"Cortex XSIAM is pretty expensive, and the licensing process is not very comfortable compared to CrowdStrike."
"I would like to see improvements in the minor bugs that occur with each update, as some features might have issues."
"The stability of the solution has room for improvement."
"We faced a lot of issues with the product’s stability."
"There is a need for enhanced version control in Swimlane. Currently, our version does not support it, making it tough to move changes between environments during significant updates."
"The initial setup and deployment are complex."
 

Pricing and Cost Advice

"Since Palo Alto is trying to get as many new customers as possible, they're offering very competitive pricing."
"The product cost could be considered value for money compared to other solutions in the market, though it is quite high."
"The solution is expensive compared to its competitors."
"In terms of pricing, we found Cortex XSIAM to offer a very reasonable and competitive rate."
"The solution comes at a significant cost."
Information not available
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
849,686 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Manufacturing Company
10%
Financial Services Firm
10%
Government
7%
Financial Services Firm
16%
Computer Software Company
13%
Government
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Cortex XSIAM?
It is an effective solution in terms of performance and functionalities.
What is your experience regarding pricing and costs for Cortex XSIAM?
The licensing cost of Cortex XSIAM is more or less the same as Splunk, making it quite expensive compared to other tools. There are additional expenses for more functionalities.
What needs improvement with Cortex XSIAM?
Cortex XSIAM needs improvements in terms of data onboarding, parsers, and third-party integration supports. Additionally, a future update request is to enable tagging of endpoints in groups, simila...
What do you like most about Swimlane?
It provides us with a single portal for our logs from different solutions.
What needs improvement with Swimlane?
There is a need for enhanced version control in Swimlane. Currently, our version does not support it, making it tough to move changes between environments during significant updates. Furthermore, d...
What is your primary use case for Swimlane?
We have been using Swimlane for security automation within our company. All the ingestions, automations, and everything within our department goes through Swimlane.
 

Overview

 

Sample Customers

Information Not Available
LinkedIn, TransUnion, Citrix, Aetna, Perspecta
Find out what your peers are saying about Splunk, Wazuh, Microsoft and others in Security Information and Event Management (SIEM). Updated: April 2025.
849,686 professionals have used our research since 2012.