Try our new research platform with insights from 80,000+ expert users

Cyware Cyber Fusion vs Palo Alto Networks Cortex XSOAR comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 5, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cyware Cyber Fusion
Ranking in Security Orchestration Automation and Response (SOAR)
22nd
Average Rating
7.0
Reviews Sentiment
6.8
Number of Reviews
2
Ranking in other categories
Threat Intelligence Platforms (TIP) (28th)
Palo Alto Networks Cortex X...
Ranking in Security Orchestration Automation and Response (SOAR)
3rd
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
49
Ranking in other categories
SOC as a Service (2nd)
 

Mindshare comparison

As of December 2025, in the Security Orchestration Automation and Response (SOAR) category, the mindshare of Cyware Cyber Fusion is 1.3%, up from 0.7% compared to the previous year. The mindshare of Palo Alto Networks Cortex XSOAR is 9.4%, down from 11.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Orchestration Automation and Response (SOAR) Market Share Distribution
ProductMarket Share (%)
Palo Alto Networks Cortex XSOAR9.4%
Cyware Cyber Fusion1.3%
Other89.3%
Security Orchestration Automation and Response (SOAR)
 

Featured Reviews

reviewer2342886 - PeerSpot reviewer
Director of Cyber Security APAC at a pharma/biotech company with 10,001+ employees
The threat emails are not tailored to our company, though the product is stable
The threat emails are not tailored to our company. It just gives us every newsletter and bombards our email box. The solution must be able to provide threat feeds. We shouldn’t have to rely on third parties and pay for additional licenses. The tool doesn't integrate well with ServiceNow. It is our main ticketing platform.
CC
Enterprise Security Architect V at FirstEnergy
Customization supports seamless workflow while data influx challenges response time
What I appreciate most about Palo Alto Networks Cortex XSOAR is that it is very open, even more so than Anomali. I can create various custom automations and custom fields. There is significant customization ability in this platform. If I already have an established process, I do not have to change my process to fit into the tool. I can modify the tool to fit into my process, which makes things considerably easier. All of our alerts from different tools come into this central place as we have multiple SIEMs. We have items coming from Anomali and other platforms that are not SIEM tools. This serves as our central location where our SOC analysts can work and determine if incident response is needed. The platform provides data enrichment capabilities, offering information upfront so analysts do not have to search for it. They can access details such as username, phone number, email address, and workplace information. For malware files, they can retrieve details from VirusTotal, including file names and environment presence. We have built substantial automation around these features, which also helps us track case metrics, investigation time, and threat mitigation duration.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The technical support team is helpful."
"The product is stable."
"The product is quite easy to use."
"Palo Alto is easy to use."
"The solution provides threat intelligence with EDR."
"The automation part and the playbook creation part are awesome. The way it is responding to the customers and incidents is also very good. In the SOC environment, I guess it will carry out around 50% of the work."
"We use the solution to automate our SIEM tools and incidents."
"For organizations that are stable with their security operations, like those with around 50 members in their security team running full-phased operations 24/7, Cortex is necessary."
"The most valuable features are simplicity and ease of integration."
"The most valuable features are the orchestration because of the way in which it coordinates the loss from all the devices and it provides us with a high-level overview of the critical log information."
 

Cons

"The prices must be reduced."
"The tool doesn't integrate well with ServiceNow."
"The solution's correlation rules and playbooks should be improved."
"The solution’s price and technical support could be improved."
"The price of the solution could be improved."
"The complexity of Cortex XSOAR has a trade-off with its versatility. The deployment requires integration and the development of integration modules."
"I think they should increase their collaboration base."
"I would like to see Cortex become less dependent on Active Directory and group policies to manage the deployment. Maybe I need to update my understanding of how to deploy it, but that's the way I know how to use it."
"It is been decommissioned by Palo Alto."
"The solution's technical support could be better."
 

Pricing and Cost Advice

Information not available
"When I first looked at Demisto, it had a price tag of $250,000 but when we finally purchased it, it was $345,000."
"The solution's pricing needs improvement."
"The price of Palo Alto Networks Cortex XSOAR could be reduced. We are always looking for a discount. There is an annual license needed to use this solution."
"The solution is expensive."
"It is expensive."
"The solution is a bit on the expensive side."
"On a scale of one to ten, where one is a low price, and ten is a high price, I rate the pricing a nine."
"It is approx $10,000 or $20,000 per year for two user licenses."
report
Use our free recommendation engine to learn which Security Orchestration Automation and Response (SOAR) solutions are best for your needs.
879,259 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
17%
Manufacturing Company
14%
Financial Services Firm
12%
Healthcare Company
9%
Financial Services Firm
13%
Computer Software Company
11%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business19
Midsize Enterprise8
Large Enterprise25
 

Questions from the Community

What needs improvement with Cyware Threat Intelligence eXchange?
The threat emails are not tailored to our company. It just gives us every newsletter and bombards our email box. The solution must be able to provide threat feeds. We shouldn’t have to rely on thir...
What is your primary use case for Cyware Threat Intelligence eXchange?
We use the solution for the correlation of threat feeds and reporting.
What is your experience regarding pricing and costs for Palo Alto Networks Cortex XSOAR?
Comparing pricing to Micro Focus, they were offering bundles, making it free with their SIEM. For customers, it is zero versus $20 million, which is why they have to make a decision.
What needs improvement with Palo Alto Networks Cortex XSOAR?
To improve the solution, it needs to have complete features that are low-code, no-code, and should be plug-and-play. We need to see improvements in that area to facilitate cyber analysts.
 

Also Known As

CSOL, Fusion and Threat Response, Threat Intelligence eXchange, Security Orchestration and Automation (SOAR)
Demisto Enterprise, Cortex XSOAR, Demisto
 

Overview

 

Sample Customers

Information Not Available
Cellcom Israel, Blue Cross and Blue Shield of Kansas City, esri, Cylance, Flatiron Health, Veeva, ADT Cybersecurity
Find out what your peers are saying about Cyware Cyber Fusion vs. Palo Alto Networks Cortex XSOAR and other solutions. Updated: December 2025.
879,259 professionals have used our research since 2012.