No more typing reviews! Try our Samantha, our new voice AI agent.

Palo Alto Networks AutoFocus vs Varonis Platform comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 15, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Palo Alto Networks AutoFocus
Average Rating
7.4
Reviews Sentiment
6.8
Number of Reviews
7
Ranking in other categories
Threat Intelligence Platforms (TIP) (18th)
Varonis Platform
Average Rating
8.4
Reviews Sentiment
6.3
Number of Reviews
20
Ranking in other categories
Email Security (15th), Data Loss Prevention (DLP) (9th), User Entity Behavior Analytics (UEBA) (6th), Data Governance (5th), SaaS Security Posture Management (SSPM) (1st), Data Security Posture Management (DSPM) (3rd), Compliance Management (8th), Ransomware Protection (7th), Identity Threat Detection and Response (ITDR) (5th), Insider Risk Management (1st), AI Security (8th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Palo Alto Networks AutoFocus is designed for Threat Intelligence Platforms (TIP) and holds a mindshare of 1.5%, up 1.3% compared to last year.
Varonis Platform, on the other hand, focuses on Data Loss Prevention (DLP), holds 4.2% mindshare, down 7.3% since last year.
Threat Intelligence Platforms (TIP) Mindshare Distribution
ProductMindshare (%)
Palo Alto Networks AutoFocus1.5%
Recorded Future6.0%
Anomali3.9%
Other88.6%
Threat Intelligence Platforms (TIP)
Data Loss Prevention (DLP) Mindshare Distribution
ProductMindshare (%)
Varonis Platform4.2%
Microsoft Purview Data Loss Prevention5.6%
Forcepoint Data Loss Prevention4.3%
Other85.9%
Data Loss Prevention (DLP)
 

Featured Reviews

Tejas Jain - PeerSpot reviewer
Principle Cloud Architect at a tech services company with 11-50 employees
Seamless integration into existing ecosystem empowers effective threat detection
The most valuable feature of Palo Alto Networks AutoFocus is its seamless integration into the Palo Alto Networks ecosystem, allowing the threat intelligence feeds to be automatically consumed without manual effort. It uses the STIX format, which is automatically understood by the firewalls. AutoFocus also excels in behavioral analytics and reputation scoring, providing thorough threat analysis.
TarunKumar11 - PeerSpot reviewer
Global Leadership Council at a tech company with 10,001+ employees
Data governance has strengthened and automation now reduces risk and manual compliance work
Varonis Platform offers key features including data discovery, data classification, data analysis, governance, user and entity behavior analysis, also known as UEBA, which helps in ransomware detection, insider threat detection, and compliance reporting. It does a lot of automation from a remediation standpoint, as well as investigation and forensics. The number one feature that makes the biggest difference for my clients is visibility into unstructured data; that is the most difficult for organizations to achieve. They do not have a good understanding of where sensitive data resides, who has access to this data, whether this access is appropriate, and how data is being used. Varonis Platform provides visibility, governance, threat detection, and automated remediation around data. Varonis Platform is a great data discovery platform that provides visibility into sensitive data estimates and how it is being used. Clients have been able to reduce excessive permissions, strengthen their compliance posture, detect insider threats, and ransomware activity, which would otherwise be difficult and manual. Varonis Platform is deployed in my clients' organizations in a combination of all types. Many clients use Varonis Platform in a largely SaaS-based model since it is a data security platform consumed in this way, and many organizations still operate hybrid environments. As far as Varonis Platform is in a position to get the data source and identify systems, it can discover and classify more secure data. Deployment in most of our clients is cloud-based, connecting to Microsoft 365, AWS, or other SaaS applications such as Salesforce. In other environments, it is a hybrid deployment with SaaS and on-premises, including file servers, NAS devices, and AD servers.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I would rate Palo Alto Networks AutoFocus a ten out of ten."
"It's a very good solution, it identifies critical attacks and alerts you."
"I am impressed with the tool's integration of Palo Alto products which serves as a platform for security."
"The feature that I like best is the dashboard."
"It is very easy to install and set up AutoFocus."
"It integrates well with other solutions and provides good threat intelligence in terms of external threats."
"The most valuable feature is alerting."
"Palo Alto Networks AutoFocus has had a positive impact on my company as we can reduce the cost for the SOC investment, and we can also get good feedback on how to strengthen our network from the expertise people available."
"It can easily identify unusual behavior or access patterns that may pose a potential threat, while operating as a unified reporting system."
"Varonis Platform has positively impacted my organization by providing clarity regarding data and permissions, improving visibility, security, and compliance."
"The most important feature is remediation. In remediation support, there is no group permission. We'll go ahead and remediate the access from the Dell folder to the parent folder."
"I also appreciate the reporting feature, which allows for the extraction of various reports based on specific needs. These reports can be used for audit purposes, such as tracking changes in file locations or deletions."
"Varonis Platform is transparent and captures everything in the environment without impacting the performance. The tool helps us unify data feeds into a single reporting system."
"Varonis Platform support has been amazing throughout every step that we have taken with them."
"The 24/7 support is the most valuable feature, and they have been able to answer support questions pretty quickly."
"This solution informs us about who's moving data, whether accidentally or on purpose."
 

Cons

"It must be on-premises as well; it must have a server on-premises. It is a completely cloud-based product at present."
"It would be better if they used the threat intelligence feeds directly from their side and changing the verdict instead of us requesting it."
"Palo Alto Networks AutoFocus is not affordable."
"There were one or two instances where firewalls were not getting the threat intelligence feeds."
"I would like the tool to see more integration with Cortex XDR. There is no real reason to keep them separate."
"I would like to have more technical documentation that contains greater detail on the types of threats that are occurring."
"It would be helpful to have better documentation for configuring and installing the solution."
"The potential areas of improvement I see for Varonis Platform are that it doesn't have a SIEM or SOAR console where you can see your incidents or a native style incident case management where you can see all your incidents and do the tracking of all those things."
"There is one thing that if I add something manually, I get so many alerts. That's the biggest bad thing."
"We have Microsoft Office 365. I just saw an article today which says that they're actually getting integrated with Microsoft Office 365, which would be a useful feature. For user-based reports, log on activity, and stuff like that, it doesn't seem to really be present like Log360. That could just be my inexperience with it. I've been dealing with it for only about two and a half months."
"For user-based reports, log on activity, and stuff like that, it doesn't seem to really be present like Log360."
"The licensing pricing model and module licensing can be complex for customers to understand."
"While Varonis Platform is powerful, the initial data scanning and indexing can take significant time in large environments."
"The solution's interface is a little complicated with regard to setting up filters and reports."
"It is significantly complex."
 

Pricing and Cost Advice

"It is expensive."
"The solution is reasonably priced."
"I would rate the pricing an eight out of ten, with ten being the most expensive."
"Varonis Platform wasn't certainly the cheapest solution."
"It's expensive, kind of, really expensive."
"Licensing is on an annual basis. Maintenance and renewal fees are separate. Varonis Datalert is quite expensive."
"The platform is expensive. I rate the pricing a nine out of ten."
"The pricing is good. It neither expensive nor cheap. It is average."
"You could do a subscription, where you pay yearly, or you could purchase it outright. The licensing cost is based on the number of users on the system that you are monitoring."
report
Use our free recommendation engine to learn which Threat Intelligence Platforms (TIP) solutions are best for your needs.
917,743 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Performing Arts
14%
Outsourcing Company
11%
Manufacturing Company
8%
Comms Service Provider
6%
Financial Services Firm
14%
Manufacturing Company
11%
Healthcare Company
7%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business5
Large Enterprise4
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise2
Large Enterprise15
 

Questions from the Community

What needs improvement with Palo Alto Networks AutoFocus?
I feel that Palo Alto Networks AutoFocus can improve, especially since most of the OEMs are implementing MDR, Managed Service feature, which is still not available with Palo Alto. The MDR feature i...
What is your primary use case for Palo Alto Networks AutoFocus?
I use Palo Alto Networks AutoFocus for threat monitoring, and it is provided by the OEM itself. I use the threat data correlation feature, which correlates with Cortex. We can use it for data corre...
What advice do you have for others considering Palo Alto Networks AutoFocus?
As a partner with Palo Alto Networks, my email is Sarvajit at bsrgroup.in. My job title is Technical Manager. I confirm that we will publish these reviews on peerspot.com in written or audio format...
What needs improvement with Varonis Platform?
Varonis Platform could be improved because when I used it, we had a significant issue related to the large volume of data on that file share. Although Varonis Platform helped us gain more visibilit...
What is your primary use case for Varonis Platform?
My main use case for Varonis Platform is to monitor access to sensitive data across file shares, Microsoft 365, and SharePoint. The main objective is to identify overexposed data, reduce access ris...
What advice do you have for others considering Varonis Platform?
Varonis Platform receives a rating of seven out of ten. I chose seven out of ten because the user experience was easy, we could apply it and gain more visibility, but the performance of the solutio...
 

Also Known As

Palo Alto Threat Intelligence Management
SlashNext Complete
 

Overview

 

Sample Customers

Telkom Indonesia
Nottingham Building Society
Find out what your peers are saying about Recorded Future, Anomali, SOCRadar and others in Threat Intelligence Platforms (TIP). Updated: October 2026.
917,743 professionals have used our research since 2012.