Try our new research platform with insights from 80,000+ expert users

Cortex XSIAM vs Varonis Platform comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 7, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XSIAM
Ranking in Identity Threat Detection and Response (ITDR)
5th
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
14
Ranking in other categories
Security Information and Event Management (SIEM) (13th), AI-Powered Cybersecurity Platforms (7th)
Varonis Platform
Ranking in Identity Threat Detection and Response (ITDR)
7th
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
14
Ranking in other categories
Email Security (20th), Data Loss Prevention (DLP) (9th), User Entity Behavior Analytics (UEBA) (6th), Data Governance (4th), Advanced Threat Protection (ATP) (18th), Threat Intelligence Platforms (12th), SaaS Security Posture Management (SSPM) (5th), Data Security Posture Management (DSPM) (3rd), Compliance Management (7th), Ransomware Protection (10th)
 

Mindshare comparison

As of September 2025, in the Identity Threat Detection and Response (ITDR) category, the mindshare of Cortex XSIAM is 5.5%, up from 3.6% compared to the previous year. The mindshare of Varonis Platform is 5.7%, up from 5.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Identity Threat Detection and Response (ITDR) Market Share Distribution
ProductMarket Share (%)
Cortex XSIAM5.5%
Varonis Platform5.7%
Other88.8%
Identity Threat Detection and Response (ITDR)
 

Featured Reviews

AKASH MAJUMDER - PeerSpot reviewer
Incident response times have significantly reduced with efficient device integration and log parsing capabilities
Cortex XSIAM needs improvements in terms of data onboarding, parsers, and third-party integration supports. Additionally, a future update request is to enable tagging of endpoints in groups, similar to a feature available in Cortex XDR. The AI analytics need fine-tuning because some use cases are not working from my side.
Frederic  Delos - PeerSpot reviewer
Offers the ability to identify sensitive areas, allowing you to drill down into the sensitive data
The most effective feature for me is its ability to identify sensitive areas, allowing you to drill down into the sensitive data, provided you have access, to determine whether it's a false positive or a true positive. That's the best thing for me, out of all of it. It's got everything, like other ones, but I like to be able to look at something if I'm doing forensics on the alert and say, "Okay, do I really need to do something with this?" For example, we don't want sensitive data in our OneDrive. So it identifies the sensitive data that's possibly in the OneDrive. And what I can do is look at it and identify whether it's actually sensitive data in Datalert or whether it looks like sensitive data, but I know it's a false positive. If it is a false positive, I can basically say ignore this pattern based on X, Y, and Z, you know, whether it's Redjax or keyword proximity. So I like that. With other tools, I gotta go through a whole process because it's a little bit more complex. Here, I can tag it and bag it in one shot. And the next good time I scan, it slips over it. So it helps in that.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product integrates seamlessly with third-party solutions."
"The most valuable feature is the integration capability."
"The most valuable features of Cortex XSIAM are the machine learning used to identify threats, the complexity of the environment of products, and efficiency."
"It operates on a single, extensive database which enables it to excel in detecting threats and anomalies across the network and endpoints, delivering a highly effective and comprehensive security solution."
"The automation capabilities significantly improve response times by allowing us to respond to incidents from a single dashboard rather than navigating multiple dashboards."
"The most valuable aspect is that Cortex XSIAM doesn't generate excessive alerts, refines all search results effectively, and filters out incidents where SOC intervention isn't necessary, allowing engineers to focus only on what matters."
"One of the valued aspects of the product is its use of artificial intelligence to detect security vulnerabilities."
"Its ability to deliver a substantial amount of security intelligence greatly enhances and optimizes our security operations program."
"Varonis Platform is transparent and captures everything in the environment without impacting the performance. The tool helps us unify data feeds into a single reporting system."
"I also appreciate the reporting feature, which allows for the extraction of various reports based on specific needs. These reports can be used for audit purposes, such as tracking changes in file locations or deletions."
"There's also a 90-day policy where if a user is not using the warehouse, it will automatically delete that username."
"The solution's classification engine is highly configurable and efficient."
"Varonis offers robust data access governance, allowing us to understand which sensitive data exists and who has access to it."
"Technical support from Varonis is rated as nine out of ten."
"The 24/7 support is the most valuable feature. They have been able to answer support questions pretty quickly."
"The solution has significantly improved data security and compliance posture by allowing us to track and monitor activities. We can see who accesses data and when files are created and understand what's happening in our environment."
 

Cons

"Cortex XSIAM is on the expensive side and requires substantial improvement in pricing."
"The platform isn't very developer-friendly and it should provide more flexibility and ease."
"The standard integrations are very limited, and the integrations available are not listed in the marketplace."
"It could provide more integration with a large variety of products."
"The first impression is that XSIAM would be more expensive than others we tried."
"There is room for improvement in expanding integrations to include more cybersecurity solutions."
"Cortex could improve the detection and online resolution of security vulnerabilities."
"Cortex XSIAM is pretty expensive, and the licensing process is not very comfortable compared to CrowdStrike."
"Varonis requires more access permissions for its core functions compared to competitors, which can be a concern for companies about data safety."
"There is one thing that if I add something manually, I get so many alerts. That's the biggest bad thing."
"The product is very complicated."
"I'd like to see automatic updates for this solution. Currently, it's a manual process to update all the keywords"
"The solution's areas of improvement are the interface and the dependency on on-premises deployment for some components."
"For unstructured data monitoring, it's one of the top ones, if not the top one, due to its usability."
"The GUI should be more functional. There should be a process for connecting through Chrome, Internet Explorer, etc."
"One area for improvement is the calculation engine. When applying rules in Varonis, especially for large datasets (terabytes of data), the calculations can be slow and require time to process. Speeding up this process would be beneficial."
 

Pricing and Cost Advice

"The product cost could be considered value for money compared to other solutions in the market, though it is quite high."
"The solution comes at a significant cost."
"Since Palo Alto is trying to get as many new customers as possible, they're offering very competitive pricing."
"In terms of pricing, we found Cortex XSIAM to offer a very reasonable and competitive rate."
"The solution is expensive compared to its competitors."
"Licensing is on an annual basis. Maintenance and renewal fees are separate. Varonis Datalert is quite expensive."
"The platform is expensive. I rate the pricing a nine out of ten."
"Varonis Platform wasn't certainly the cheapest solution."
"You could do a subscription, where you pay yearly, or you could purchase it outright. The licensing cost is based on the number of users on the system that you are monitoring."
"It's expensive, kind of, really expensive."
"I would rate the pricing an eight out of ten, with ten being the most expensive."
"The pricing is good. It neither expensive nor cheap. It is average."
report
Use our free recommendation engine to learn which Identity Threat Detection and Response (ITDR) solutions are best for your needs.
867,370 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Manufacturing Company
10%
Financial Services Firm
10%
Government
7%
Financial Services Firm
15%
Manufacturing Company
9%
Computer Software Company
9%
Insurance Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise2
Large Enterprise3
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise1
Large Enterprise11
 

Questions from the Community

What do you like most about Cortex XSIAM?
It is an effective solution in terms of performance and functionalities.
What is your experience regarding pricing and costs for Cortex XSIAM?
The cost of Cortex XSIAM in the India market differs from other regions. When considering competition, from a sales perspective, the pricing is acceptable.
What needs improvement with Cortex XSIAM?
The main area for improvement is the user interface intuitiveness - specifically how quickly users can grasp the portal functionality. For SOC analysts, the focus should be on improving the speed o...
What do you like most about Varonis Platform?
The solution has significantly improved data security and compliance posture by allowing us to track and monitor activities. We can see who accesses data and when files are created and understand w...
What needs improvement with Varonis Platform?
Varonis started as an on-premises solution and is transitioning to cloud. It hasn't fully moved yet, which is an area for improvement. Varonis requires more access permissions for its core function...
What is your primary use case for Varonis Platform?
The primary use case for Varonis Platform is data discovery, specifically for discovering sensitive data in our organization to protect it. We are looking for a solution that can scan our repositor...
 

Also Known As

No data available
SlashNext Complete
 

Overview

 

Sample Customers

Information Not Available
Nottingham Building Society
Find out what your peers are saying about Cortex XSIAM vs. Varonis Platform and other solutions. Updated: July 2025.
867,370 professionals have used our research since 2012.