No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Cortex XDR by Palo Alto Networks provides robust security, significantly reducing endpoint attack surfaces and offering protection against modern threats like ransomware and viruses.
It is highly scalable, integrates seamlessly with other Palo Alto Networks tools, and supports a wide range of platforms, providing comprehensive network and endpoint security.
The solution employs advanced AI and machine learning capabilities for effective behavior-based threat detection, improving visibility and offering strong protection against sophisticated threats.
Cortex XDR offers excellent support and stability, with no downtime or crashes, providing organizations with confidence in its ability to secure endpoints and servers effectively.
Its automated features, including easy endpoint isolation and policy enforcement, significantly reduce the workload for security analysts and improve threat detection and response times.

CONS

There is a severe gap in functionality between Windows, Linux, and Mac versions, with certain features like folder restriction settings available only for Windows.
There are issues with licensing changes and a lack of integration as users might expect to have all necessary tools included initially without extra charges.
Pricing is considered very high, making Cortex XDR by Palo Alto Networks not suitable for smaller businesses or more cost-sensitive markets.
Cortex XDR sometimes fails to detect certain viruses, requiring additional protection solutions for comprehensive security.
The tool is complex to implement and manage, with some support services described as unresponsive or lacking in helpful knowledge.
 

Cortex XDR by Palo Alto Networks Pros review quotes

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Nov 14, 2025
The most valuable aspect of Cortex XDR by Palo Alto Networks for me is its integration with AI detection, where we get to know the behavioral detection based on users, traffic patterns, and different services that we consume.
Surya Kumar Gedala - PeerSpot reviewer
Final Year Student at Gitam University
Nov 9, 2025
Cortex is the best tool for endpoint detection, and I have used it to verify hashes or domains to identify malicious activity, trigger playbooks that automate and gather endpoint logs, block malicious processes, and update incident tickets, showcasing end-to-end processes with automation in investigation and reducing the analysis workflow.
Jagannath S - PeerSpot reviewer
Cyber Security Engineer at Olacabs
Feb 19, 2026
Implementing Cortex XDR by Palo Alto Networks has had a significant impact on my security analyst workload because it becomes much easier.
Learn what your peers think about Cortex XDR by Palo Alto Networks. Get advice and tips from experienced pros sharing their opinions. Updated: June 2026.
899,917 professionals have used our research since 2012.
Pasan Jayarathna - PeerSpot reviewer
Network Security Engineer at Cyberwell Solution
Mar 18, 2026
I can highlight that we have not faced any security incidents with Cortex XDR by Palo Alto Networks, and even though our environment is quite dynamic, we have not faced any security incident with Cortex XDR by Palo Alto Networks until now.
NikhilSharma1 - PeerSpot reviewer
Cyber Engineering Manager at a tech vendor with 10,001+ employees
May 18, 2026
In one single alert, we are getting the network telemetry, endpoint telemetry, email security telemetry, and proxy telemetry all in one single ticket, making it very easy.
AmjadKhan1 - PeerSpot reviewer
Head of data centers at a non-profit with 10,001+ employees
Nov 10, 2025
After installing this solution, it identified, blocked, and provided the complete attack chain, which was very helpful.
reviewer1980216 - PeerSpot reviewer
Business Development Manager For Palo Alto Networks at a tech services company with 1,001-5,000 employees
May 21, 2026
Cortex XDR by Palo Alto Networks is specifically designed to prevent zero-day attacks and is part of an ecosystem of Palo Alto, providing customers with a long-term vision to modify and redesign how security is applied in their company.
TJ
Principle Cloud Architect at a tech services company with 11-50 employees
May 21, 2026
The biggest positive impact I see from Cortex XDR by Palo Alto Networks is a significant reduction in the number of people required to manage it.
Raj-Yadav - PeerSpot reviewer
Network Security Administrator at Alethe Consulting Pvt. Ltd
Jan 13, 2026
The main benefit of using Cortex XDR by Palo Alto Networks while employing Palo Alto Firewall at the internet edge is that it improves security on our endpoint devices, integrating seamlessly with Palo Alto Firewalls to deliver comprehensive network, analyst, and security details all in a single dashboard, which allows us to manage everything from our network devices.
reviewer1412415 - PeerSpot reviewer
Chief of IT Architecture at a financial services firm with 10,001+ employees
Nov 27, 2025
Palo Alto is the core of the security infrastructure in the environment.
 

Cortex XDR by Palo Alto Networks Cons review quotes

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Nov 14, 2025
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth.
Surya Kumar Gedala - PeerSpot reviewer
Final Year Student at Gitam University
Nov 9, 2025
Enhancing UI simplicity and playbook flexibility are areas that could benefit from more low-code automation options for smoother integrations.
Jagannath S - PeerSpot reviewer
Cyber Security Engineer at Olacabs
Feb 19, 2026
If he is using a smaller company, he can depend on some other tools because Cortex XDR by Palo Alto Networks is a bit expensive.
Learn what your peers think about Cortex XDR by Palo Alto Networks. Get advice and tips from experienced pros sharing their opinions. Updated: June 2026.
899,917 professionals have used our research since 2012.
Pasan Jayarathna - PeerSpot reviewer
Network Security Engineer at Cyberwell Solution
Mar 18, 2026
I feel that it should not be a licensed activity because a feature should allow us to see applications running on end devices.
NikhilSharma1 - PeerSpot reviewer
Cyber Engineering Manager at a tech vendor with 10,001+ employees
May 18, 2026
A potential area of improvement for Cortex XDR by Palo Alto Networks is the cost.
AmjadKhan1 - PeerSpot reviewer
Head of data centers at a non-profit with 10,001+ employees
Nov 10, 2025
Cortex XDR by Palo Alto Networks is a very good product, but financially, it is very expensive, so the company should look into that area.
reviewer1980216 - PeerSpot reviewer
Business Development Manager For Palo Alto Networks at a tech services company with 1,001-5,000 employees
May 21, 2026
The negative aspect I see is the economic model used by Palo Alto.
TJ
Principle Cloud Architect at a tech services company with 11-50 employees
May 21, 2026
Cortex XDR by Palo Alto Networks is not only pricey; it is extremely expensive.
Raj-Yadav - PeerSpot reviewer
Network Security Administrator at Alethe Consulting Pvt. Ltd
Jan 13, 2026
If Palo Alto reduces the pricing slightly for their products, it would make them more scalable in markets such as India and globally for cybersecurity.
reviewer1412415 - PeerSpot reviewer
Chief of IT Architecture at a financial services firm with 10,001+ employees
Nov 27, 2025
However, if you do not have Palo Alto in your environment, you are paying these additional services just for Cortex XDR by Palo Alto Networks, so it is not a cost-effective solution.