Try our new research platform with insights from 80,000+ expert users

Palo Alto Networks Cortex XSOAR vs Rapid7 InsightConnect comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 5, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Palo Alto Networks Cortex X...
Ranking in Security Orchestration Automation and Response (SOAR)
2nd
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
47
Ranking in other categories
SOC as a Service (2nd)
Rapid7 InsightConnect
Ranking in Security Orchestration Automation and Response (SOAR)
19th
Average Rating
8.0
Reviews Sentiment
7.4
Number of Reviews
4
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2025, in the Security Orchestration Automation and Response (SOAR) category, the mindshare of Palo Alto Networks Cortex XSOAR is 10.4%, down from 12.6% compared to the previous year. The mindshare of Rapid7 InsightConnect is 0.9%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Orchestration Automation and Response (SOAR)
 

Featured Reviews

NikhilSharma2 - PeerSpot reviewer
Ability to multiple playbooks to fetch data from multiple firewalls and utomated several tasks, including vulnerability scans and SOCL (Security Orchestration, Automation
Recently, they started implementing microservices in XSOAR, which has improved quality and addressed previous issues. However, they should focus more on licensing costs. The user licensing fees are quite high. For example, I received a quote for XSOAR, and it was $12,000 per user per year. If you have a SOC team of 30 members/analysts, you're looking at a substantial expense. They should consider reducing these costs since this high pricing seems to be more about profit. So, there is room for improvement in the pricing. Moreover, the reporting and dashboard features are decent but could be improved. The user interface (UI) is quite heavy and takes time to load, which is a major drawback.
Chamindu Pramodya - PeerSpot reviewer
Enables us to design workflows and integrate various processes
I design workflows and integrate various processes using Rapid7 InsightConnect. This includes integrating with value management and packaging and incorporating InsightVMware performance through Rapid7 InsightConnect The product is user-friendly. Customers are familiar with its usage. The…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It’s easy to install."
"The strengths of Palo Alto Networks Cortex XSOAR stem from the fact that it provides functionalities related to patching and URL blocking...It is a scalable solution."
"I have found the solution very useful, it integrates well with other platforms."
"The most valuable feature is its capability to automate responses and collect information for any security event before you even delve into the details. It's a vast product with an active roadmap, so I'm satisfied with it for now. It's very efficient at data collection and correlation."
"The automation is excellent."
"Cortex XSOAR's playbook for incident management and automation is highly valuable."
"We use the solution to automate our SIEM tools and incidents."
"The most valuable features are simplicity and ease of integration."
"The tool is stable. The initial setup is straightforward. The product is user-friendly."
"The fact that it's a security orchestration, automated response solution with a vast level of insights and the ability to integrate with a number of other security tools."
"Based on my user experience, I would recommend InsightConnect for its user-friendly interface and excellent documentation."
"InsightIDR's Attacker Behavioral Analytics (ABA) and User and Entity Behavior Analytics (UEBA) features have been very useful in maintaining our security posture."
 

Cons

"Palo Alto Networks Cortex XSOAR lacks to offer SIEM functionalities currently."
"The user interface could be a bit better."
"I would like to see Cortex become less dependent on Active Directory and group policies to manage the deployment. Maybe I need to update my understanding of how to deploy it, but that's the way I know how to use it."
"They should provide integration with machine learning platforms."
"Previously, when Demisto was, there was a community edition; we could use it, reinstall it, and customize it. Since Palo Alto took over, it has become more financially oriented. It's business, but they could offer a pro model and a lighter model for different needs."
"The price of the solution could be lower."
"In terms of improvement, it needs to be more modular. It's not. When you're working in layouts and you create specific apps within layouts, there's no portability right now in order to reuse that code across multiple layouts. I can't take a tab and say I want to use this tab on these other layouts. I have to physically go in there and recreate it from scratch, which is maddening."
"I think they should increase their collaboration base."
"The GUI needs improvement, as creating workflows can be cumbersome. More updated plugins are needed to leverage existing functionalities, such as APIs for functions like blocking malicious IPs in FortiGate."
"The GUI needs improvement, as creating workflows can be cumbersome."
"The technical support should be improved."
 

Pricing and Cost Advice

"The price of Palo Alto Networks Cortex XSOAR is comparable to other solutions in the market."
"The pricing is fair. The pricing reflects the value and feature set it offers."
"My company did not make any payments towards the licensing costs attached to the product since we were only using its pilot version."
"The price of Palo Alto Networks Cortex XSOAR could be reduced. We are always looking for a discount. There is an annual license needed to use this solution."
"The solution's cost is high."
"The price of Palo Alto Networks Cortex XSOAR is expensive."
"Palo Alto offers significant discounts to customers who purchase the products repeatedly."
"There is a perception that it is priced very high compared to other solutions."
Information not available
report
Use our free recommendation engine to learn which Security Orchestration Automation and Response (SOAR) solutions are best for your needs.
859,687 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
12%
Manufacturing Company
10%
Government
7%
Computer Software Company
11%
Financial Services Firm
9%
University
7%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Palo Alto Networks Cortex XSOAR?
Even though customers often comment on the price, the potential savings come from managing a large number of security events with a limited number of analysts. This leads to economic advantages des...
What needs improvement with Palo Alto Networks Cortex XSOAR?
For Palo Alto Networks Cortex XSOAR, there is always room for improvement. One of the significant issues we encounter is system slowdown when we receive an influx of alerts, which inhibits how quic...
What is your experience regarding pricing and costs for Rapid7 InsightConnect?
Compared to other SOAR solutions, the pricing is reasonable as Rapid7 provides it as a bundle called InsightIDR Ultimate, with unlimited workflows.
What needs improvement with Rapid7 InsightConnect?
The GUI needs improvement, as creating workflows can be cumbersome. More updated plugins are needed to leverage existing functionalities, such as APIs for functions like blocking malicious IPs in F...
What is your primary use case for Rapid7 InsightConnect?
We are using Rapid7 InsightConnect in a partner model, operating as a service provider. We buy licenses under World Data Direct and distribute them internally, acting as an MSSP.
 

Also Known As

Demisto Enterprise, Cortex XSOAR, Demisto
Rapid7 Insight Connect, Komand
 

Overview

 

Sample Customers

Cellcom Israel, Blue Cross and Blue Shield of Kansas City, esri, Cylance, Flatiron Health, Veeva, ADT Cybersecurity
Starr Companies, Landmark Health
Find out what your peers are saying about Palo Alto Networks Cortex XSOAR vs. Rapid7 InsightConnect and other solutions. Updated: June 2025.
859,687 professionals have used our research since 2012.