No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Cortex XDR by Palo Alto Networks provides a multi-layered security approach, offering peace of mind by stopping exploits, ransomware, worms, or viruses from compromising endpoints.
It integrates seamlessly with existing solutions, effectively consolidating security features and simplifying management.
WildFire AI enhances threat detection capabilities, ensuring protection against sophisticated threats.
The automation and playbooks reduce the workload for security teams, allowing for faster and more efficient threat response.
Cortex XDR by Palo Alto Networks improves security posture by utilizing advanced AI and machine learning for behavior-based detection.

CONS

Cortex XDR by Palo Alto Networks has significant gaps in functionality between Windows, Linux, and Mac versions.
Licensing changes over time, introducing costs for previously free features.
The cost of Cortex XDR by Palo Alto Networks is comparatively high.
There is a lack of real-time, on-demand antivirus capabilities.
The false-positive rate with Cortex XDR by Palo Alto Networks is high.
 

Cortex XDR by Palo Alto Networks Pros review quotes

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Nov 14, 2025
The most valuable aspect of Cortex XDR by Palo Alto Networks for me is its integration with AI detection, where we get to know the behavioral detection based on users, traffic patterns, and different services that we consume.
Surya Kumar Gedala - PeerSpot reviewer
Final Year Student at Gitam University
Nov 9, 2025
Cortex is the best tool for endpoint detection, and I have used it to verify hashes or domains to identify malicious activity, trigger playbooks that automate and gather endpoint logs, block malicious processes, and update incident tickets, showcasing end-to-end processes with automation in investigation and reducing the analysis workflow.
Vaibhav Mahendra Kolhe - PeerSpot reviewer
Soc Analyst at Softcell Technologies Limited
Jun 26, 2026
Stability-wise, it is good; I did not hear about any issues in terms of stability, and Cortex XDR by Palo Alto Networks can be trusted completely.
Learn what your peers think about Cortex XDR by Palo Alto Networks. Get advice and tips from experienced pros sharing their opinions. Updated: July 2026.
907,768 professionals have used our research since 2012.
Jagannath S - PeerSpot reviewer
Cyber Security Engineer at Olacabs
Feb 19, 2026
Implementing Cortex XDR by Palo Alto Networks has had a significant impact on my security analyst workload because it becomes much easier.
Pasan Jayarathna - PeerSpot reviewer
Network Security Engineer at Cyberwell Solution
Mar 18, 2026
I can highlight that we have not faced any security incidents with Cortex XDR by Palo Alto Networks, and even though our environment is quite dynamic, we have not faced any security incident with Cortex XDR by Palo Alto Networks until now.
NikhilSharma1 - PeerSpot reviewer
Cyber Engineering Manager at a tech vendor with 10,001+ employees
May 18, 2026
In one single alert, we are getting the network telemetry, endpoint telemetry, email security telemetry, and proxy telemetry all in one single ticket, making it very easy.
AmjadKhan1 - PeerSpot reviewer
Head of data centers at a non-profit with 10,001+ employees
Nov 10, 2025
After installing this solution, it identified, blocked, and provided the complete attack chain, which was very helpful.
reviewer1980216 - PeerSpot reviewer
Business Development Manager For Palo Alto Networks at a tech services company with 1,001-5,000 employees
May 21, 2026
Cortex XDR by Palo Alto Networks is specifically designed to prevent zero-day attacks and is part of an ecosystem of Palo Alto, providing customers with a long-term vision to modify and redesign how security is applied in their company.
Tejas Jain - PeerSpot reviewer
Principle Cloud Architect at a tech services company with 11-50 employees
May 21, 2026
The biggest positive impact I see from Cortex XDR by Palo Alto Networks is a significant reduction in the number of people required to manage it.
Raj-Yadav - PeerSpot reviewer
Network Security Administrator at Alethe Consulting Pvt. Ltd
Jan 13, 2026
The main benefit of using Cortex XDR by Palo Alto Networks while employing Palo Alto Firewall at the internet edge is that it improves security on our endpoint devices, integrating seamlessly with Palo Alto Firewalls to deliver comprehensive network, analyst, and security details all in a single dashboard, which allows us to manage everything from our network devices.
 

Cortex XDR by Palo Alto Networks Cons review quotes

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Nov 14, 2025
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth.
Surya Kumar Gedala - PeerSpot reviewer
Final Year Student at Gitam University
Nov 9, 2025
Enhancing UI simplicity and playbook flexibility are areas that could benefit from more low-code automation options for smoother integrations.
Vaibhav Mahendra Kolhe - PeerSpot reviewer
Soc Analyst at Softcell Technologies Limited
Jun 26, 2026
Fine-tuning the detection policy requires experience because the policy is very complex in Cortex XDR by Palo Alto Networks, and we get high false positive alerts.
Learn what your peers think about Cortex XDR by Palo Alto Networks. Get advice and tips from experienced pros sharing their opinions. Updated: July 2026.
907,768 professionals have used our research since 2012.
Jagannath S - PeerSpot reviewer
Cyber Security Engineer at Olacabs
Feb 19, 2026
If he is using a smaller company, he can depend on some other tools because Cortex XDR by Palo Alto Networks is a bit expensive.
Pasan Jayarathna - PeerSpot reviewer
Network Security Engineer at Cyberwell Solution
Mar 18, 2026
I feel that it should not be a licensed activity because a feature should allow us to see applications running on end devices.
NikhilSharma1 - PeerSpot reviewer
Cyber Engineering Manager at a tech vendor with 10,001+ employees
May 18, 2026
A potential area of improvement for Cortex XDR by Palo Alto Networks is the cost.
AmjadKhan1 - PeerSpot reviewer
Head of data centers at a non-profit with 10,001+ employees
Nov 10, 2025
Cortex XDR by Palo Alto Networks is a very good product, but financially, it is very expensive, so the company should look into that area.
reviewer1980216 - PeerSpot reviewer
Business Development Manager For Palo Alto Networks at a tech services company with 1,001-5,000 employees
May 21, 2026
The negative aspect I see is the economic model used by Palo Alto.
Tejas Jain - PeerSpot reviewer
Principle Cloud Architect at a tech services company with 11-50 employees
May 21, 2026
Cortex XDR by Palo Alto Networks is not only pricey; it is extremely expensive.
Raj-Yadav - PeerSpot reviewer
Network Security Administrator at Alethe Consulting Pvt. Ltd
Jan 13, 2026
If Palo Alto reduces the pricing slightly for their products, it would make them more scalable in markets such as India and globally for cybersecurity.