Try our new research platform with insights from 80,000+ expert users

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Cortex XSOAR excels in automation and playbook creation, significantly aiding security operation centers by handling about 50% of the work.
It offers extensive integration capabilities with a comprehensive list of plugins, allowing seamless incorporation with various tools and platforms.
Its orchestration features provide a high-level overview of critical log information, efficiently coordinating across different devices.
The platform enhances cybersecurity through effective threat intelligence integration and streamlined responses to security events.
Many users appreciate its scalability, reliability, and overall impact on improving organizational cybersecurity.

CONS

Implementing Palo Alto Networks Cortex XSOAR requires significant vendor involvement, and it should be easier for partners.
The documentation for building automation is not very good and requires improvement.
The pricing increased by 50% after Palo Alto acquired it, making it very expensive.
Managing its setup phase is complicated, and the technical support could be improved with faster response times.
The lack of SIEM functionalities and insufficient integration options are notable drawbacks of Palo Alto Networks Cortex XSOAR.
 

Palo Alto Networks Cortex XSOAR Pros review quotes

it_user1333062 - PeerSpot reviewer
Director at a tech services company with 11-50 employees
Apr 23, 2020
The most valuable features are simplicity and ease of integration.
SA
Network Security Engineer at a tech services company with 201-500 employees
Nov 4, 2020
The automation part and the playbook creation part are awesome. The way it is responding to the customers and incidents is also very good. In the SOC environment, I guess it will carry out around 50% of the work.
reviewer1520922 - PeerSpot reviewer
Regional Director, Customer Success (GTM Solutions & Services) at a tech services company with 51-200 employees
Apr 16, 2021
The pricing is very good.
Learn what your peers think about Palo Alto Networks Cortex XSOAR. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
880,745 professionals have used our research since 2012.
Chetankumar Savalagimath - PeerSpot reviewer
Delivery Manager at a tech services company with 1,001-5,000 employees
May 15, 2021
The automation is excellent.
DS
Consultant at a tech services company with 501-1,000 employees
Jun 4, 2021
The most valuable features are the orchestration because of the way in which it coordinates the loss from all the devices and it provides us with a high-level overview of the critical log information.
reviewer1480533 - PeerSpot reviewer
Vice President Global Technology Infrastructure Automation at a financial services firm with 10,001+ employees
Jul 2, 2021
The solution is very reliable.
reviewer1469436 - PeerSpot reviewer
Splunker, Networking and E-Mail Security Architect, Engineer and Guru at a healthcare company with 10,001+ employees
Sep 8, 2021
It has an extensive list of integrations that are available out of the box which makes it easy to start.
reviewer1714731 - PeerSpot reviewer
Cybersecurity Cyber Crime Infrastructure Engineer & Investigator at a government with 5,001-10,000 employees
Nov 11, 2021
Palo Alto has gotten the investigators more presence to actually go in the report because being that the platform will email the investigator that it's been assigned to, now the investigators will jump in there and start going through the review process a lot quicker.
reviewer1726734 - PeerSpot reviewer
Supervisor SOC at a tech services company with 51-200 employees
Jan 12, 2022
I have found the solution very useful, it integrates well with other platforms.
ShubhamAgarwal - PeerSpot reviewer
Senior CyberSecurity Specialist at LTIMindtree
Nov 28, 2023
Cortex XSOAR's most valuable features are the playbooks, custom integration, the machine-learning model, and the layout, classifier, and mapper.
 

Palo Alto Networks Cortex XSOAR Cons review quotes

it_user1333062 - PeerSpot reviewer
Director at a tech services company with 11-50 employees
Apr 23, 2020
Implementing this solution requires a lot of involvement from the vendor and it should be made easier for the partners.
SA
Network Security Engineer at a tech services company with 201-500 employees
Nov 4, 2020
For building automation, there is not a lot of good documentation. The documentation is there, but it is not very good from my perspective. There should be an improvement in this area. I don't see issues with anything else. In terms of new features, I have heard that other products have EBA functionality. It would be good if this functionality could be added.
reviewer1520922 - PeerSpot reviewer
Regional Director, Customer Success (GTM Solutions & Services) at a tech services company with 51-200 employees
Apr 16, 2021
The user interface could be a bit better.
Learn what your peers think about Palo Alto Networks Cortex XSOAR. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
880,745 professionals have used our research since 2012.
Chetankumar Savalagimath - PeerSpot reviewer
Delivery Manager at a tech services company with 1,001-5,000 employees
May 15, 2021
When Palo Alto bought the solution, the pricing increased by 1.5 times. There's been a 50% increase, which is a lot.
DS
Consultant at a tech services company with 501-1,000 employees
Jun 4, 2021
There should be an on-premise version available for customers to have different choices.
reviewer1480533 - PeerSpot reviewer
Vice President Global Technology Infrastructure Automation at a financial services firm with 10,001+ employees
Jul 2, 2021
The solution is very expensive.
reviewer1469436 - PeerSpot reviewer
Splunker, Networking and E-Mail Security Architect, Engineer and Guru at a healthcare company with 10,001+ employees
Sep 8, 2021
I would love to see more flexibility on what we can display and design on the dashboards.
reviewer1714731 - PeerSpot reviewer
Cybersecurity Cyber Crime Infrastructure Engineer & Investigator at a government with 5,001-10,000 employees
Nov 11, 2021
In terms of improvement, it needs to be more modular. It's not. When you're working in layouts and you create specific apps within layouts, there's no portability right now in order to reuse that code across multiple layouts. I can't take a tab and say I want to use this tab on these other layouts. I have to physically go in there and recreate it from scratch, which is maddening.
reviewer1726734 - PeerSpot reviewer
Supervisor SOC at a tech services company with 51-200 employees
Jan 12, 2022
The configuration of the solution could improve it is difficult.
ShubhamAgarwal - PeerSpot reviewer
Senior CyberSecurity Specialist at LTIMindtree
Nov 28, 2023
Corex XSOAR could be improved by reducing the time it takes to process large amounts of data and increasing the number of integrations.