Deepwatch vs Exabeam comparison

Deepwatch and Exabeam are both solutions in the AI-Powered Cybersecurity Platforms category. Deepwatch is ranked #19, while Exabeam is ranked #9 with an average rating of 7.5. Deepwatch holds a 0.4% mindshare in AICP, compared to Exabeam’s 3.6% mindshare. Additionally, 100% of Deepwatch users are willing to recommend the solution, compared to 75% of Exabeam users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Deepwatch and Exabeam based on real PeerSpot user reviews.

Find out what your peers are saying about CrowdStrike, Palo Alto Networks, TrendAI and others in AI-Powered Cybersecurity Platforms.

To learn more, read our detailed AI-Powered Cybersecurity Platforms Report (Updated: March 2026).

Buyer's Guide

AI-Powered Cybersecurity Platforms

March 2026

Download the complete report

Helped 885,789 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of April 2026, in the AI-Powered Cybersecurity Platforms category, the mindshare of Cortex XDR by Palo Alto Networks is 9.9%, down from 10.9% compared to the previous year. The mindshare of Deepwatch is 0.4%, up from 0.1% compared to the previous year. The mindshare of Exabeam is 3.6%, up from 2.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

AI-Powered Cybersecurity Platforms Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	9.9%
Exabeam	3.6%
Deepwatch	0.4%
Other	86.1%

AI-Powered Cybersecurity Platforms

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Shivam Dhang

IT Infrastructure & Cloud Manager at Softcell Technologies Limited

Continuous monitoring has improved threat detection and reduces incident response time

Deepwatch could improve with more granular customization of detection rules and alert tuning to better fit specific cloud workloads and use cases. Additionally, it can be improved by enhancing the dashboarding. It should also support deeper cloud-native integrations such as AWS, Azure, and GCP, which would further improve operational efficiency and control. Regarding the support, I would say that the support team should be more responsive because ideally, the response time of the support is quite long, which is sometimes frustrating. However, I do agree that for easy issues, they respond within the expected time, but for complex issues, they do take time to respond.

Read full review

Deepanshu Hans

Solution Architect at CTC

Improved threat detection has provided clear user risk insights and streamlined incident response

Exabeam's UEBA is the most valuable feature that I have found so far. Exabeam's UEBA displays the type of description that it could show in a console regarding one particular user, the rating that it shows, and how vulnerable the user is, which is very good. Exabeam's automation for incident response is very good. The machine learning capabilities of Exabeam are also good.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The stability of the solution is very good. We have about 100 users on it right now, and we use it twice a week."

"The best feature of Cortex XDR by Palo Alto Networks is that it collects logs from different sections such as the endpoint, the network, and the cloud, making it easy to investigate alerts, collect some of the investigation packages related to the infected machines, and provide live response."

"It blocks malicious files. It prevents attacks. It doesn't require many updates, it's a very light application."

"The anti-exploit is impenetrable. We chose Traps because it is the only product that we were not able to get anything past."

"What I like about Cortex XDR by Palo Alto Networks is that it is a comprehensive solution that contains everything the organization may need when using endpoints."

"On a scale from one to ten, I would rate Cortex XDR by Palo Alto Networks a nine."

"Cortex XDR by Palo Alto Networks saves time in various ways, although the user interface is fairly standard."

"But overall, when we speak about security and protection, they are one of the top providers."

More Cortex XDR by Palo Alto Networks pros

"With Deepwatch, I have seen a 40 to 50% reduction in MTTR due to faster detection and guided response playbooks, and false positives have also dropped significantly by 40 to 50% through better correlation and risk scoring, which significantly reduced SOC workload and improved analyst efficiency."

"The user interface and the timelines they use are the most valuable features, and the price model is very simple so that one can understand it easily and there are no surprises within it."

"Exabeam is very easy to use, with a straightforward platform and workflow, unlike other tools that require more expertise."

"The setup is not difficult. It was easy."

"The platform is not extremely expensive compared to its direct competitors; I would rate its pricing around six out of ten."

"Exabeam Fusion SIEM has a good performance and more advantages than traditional solutions."

"The UI was very clean."

"Valuable features are its timeline based analysis and that it's user friendly."

"The most valuable feature of Exabeam Fusion SIEM is the easy-to-use user interface."

More Exabeam pros

Cons

"There are some limitations on the Traps agents."

"We had a problem with getting our older endpoints up to date, but their newest updates have been really good. I've been pleased with it in terms of what our needs are. It's doing what we want it to do."

"The MAC agent is not as robust feature-wise as the PC version."

"This is a very costly product."

"A little bit more automation would be nice."

"I feel that it should not be a licensed activity because a feature should allow us to see applications running on end devices."

"While using Cortex, I noticed some aspects that could be improved, such as increasing the synchronization speed between XDR and Xnor."

"The deployment is pretty hard."

More Cortex XDR by Palo Alto Networks cons

"Regarding the support, I would say that the support team should be more responsive because ideally, the response time of the support is quite long, which is sometimes frustrating."

"One area for the solution's improvement is integration capabilities, particularly out-of-the-box integration which sometimes requires additional professional services."

"Exabeam needs to improve its adaptive nature towards rules and its capability to understand the entire client environment faster."

"Exabeam needs to improve its documentation and provide more customization for dashboards and case management."

"The organzation is rigid and not flexible in the way they operate"

"Adding to the number of certifications that they have, for example, ISO 27001, would be helpful."

"There is a lack of Indonesian support, it would benefit us to have more support for the customers."

"We had a large volume right from the beginning and they weren't quite prepared for that. That's something that they should think about when it comes to customers that have a large volume to start off with."

"They should provide detailed information about detecting phishing emails."

More Exabeam cons

Pricing and Cost Advice

"I don't have any issues with the pricing. We are satisfied with the price."

"The cost depends on your chosen license type, like Pro or other licenses."

"Very costly product."

"The tool's price is moderate."

"Cortex XDR's pricing is ok."

"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."

"The price of the product is not very economical."

"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."

More Cortex XDR by Palo Alto Networks pricing and cost advice

Information not available

"They have a great model for pricing that can be based either on user count or gigabits per day."

"The solution is expensive."

"Exabeam Fusion SIEM's pricing is reasonable."

"Exabeam is not a cheap solution."

"There is an annual license required to use Exabeam Fusion SIEM. The price of the solution should be reduced."

"The platform is not extremely expensive compared to its direct competitors; I would rate its pricing around six out of ten."

See which vendors are best for you

Use our free recommendation engine to learn which AI-Powered Cybersecurity Platforms solutions are best for your needs.

See recommendations

885,789 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

14%

Financial Services Firm

12%

Comms Service Provider

Manufacturing Company

Construction Company

29%

Manufacturing Company

12%

Healthcare Company

Media Company

Financial Services Firm

11%

Manufacturing Company

Computer Software Company

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	48

No data available

By reviewers
Company Size	Count
Small Business	12
Midsize Enterprise	4
Large Enterprise	7

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

Ask a question

Earn 20 points

What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?

It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendli...

See all answers

What is your experience regarding pricing and costs for Exabeam Fusion SIEM?

I do not have much information about the pricing. However, I am aware that Exabeam is cheaper than Palo Alto based on...

See all answers

What needs improvement with Exabeam Fusion SIEM?

Exabeam's integration capabilities are not good, as Exabeam has a very limited number of integrations and no out-of-b...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 8% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Proficio Managed Detection and Response vs Deepwatch

Compared 21% of the time

Rapid7 MDR vs Deepwatch

Compared 19% of the time

Expel vs Deepwatch

Compared 16% of the time

Arctic Wolf Managed Detection and Response vs Deepwatch

Compared 13% of the time

ReliaQuest GreyMatter vs Deepwatch

Compared 12% of the time

More Deepwatch Competitors

Splunk Enterprise Security vs Exabeam

Compared 6% of the time

Securonix Next-Gen SIEM vs Exabeam

Compared 4% of the time

Dtex Systems vs Exabeam

Compared 4% of the time

IBM Security QRadar vs Exabeam

Compared 4% of the time

DTEX InTERCEPT vs Exabeam

Compared 4% of the time

More Exabeam Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

April 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Managed Detection and Response (MDR)

April 2026

Download Deepwatch product report

Buyer's Guide

Exabeam

April 2026

Download Exabeam product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

No data available

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

deepwatch delivers results-driven managed security services by extending customers’ cybersecurity teams and proactively advancing their SecOps maturity. Powered by its cloud SecOps platform, deepwatch is trusted by leading global organizations to provide 24/7/365 managed security services.

Deepwatch

Exabeam Fusion is a cloud-delivered solution that that enables you to:

-Leverage turnkey threat detection, investigation, and response
-Collect, search and enhance data from anywhere
-Detect threats missed by other tools, using market-leading behavior analytics
-Achieve successful SecOps outcomes with prescriptive, threat-centric use case packages
-Enhance productivity and reduce response times with automation
-Meet regulatory compliance and audit requirements with ease

Exabeam

Sample Customers

CBI Health Group, University Honda, VakifBank

Premise Health, Dover, Follett, Genuine Parts Company

Hulu, ADP, Safeway, BBCN Bank

Buyer's Guide

AI-Powered Cybersecurity Platforms

March 2026

Download Free Report

Find out what your peers are saying about CrowdStrike, Palo Alto Networks, TrendAI and others in AI-Powered Cybersecurity Platforms. Updated: March 2026.

DOWNLOAD NOW

885,789 professionals have used our research since 2012.

See our list of best AI-Powered Cybersecurity Platforms vendors.

We monitor all AI-Powered Cybersecurity Platforms reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.