Palo Alto Networks (Cortex XSOAR)

Name: Palo Alto Networks (Cortex XSOAR)
Brand: Palo Alto Networks
Rating: 4.5 (106 reviews)

Leader

The industry's most comprehensive AI security platform.

Est 2005|Valuation $290.3B|Raised $261.3M|97 Ref Customers

LinkedIn 2.0M|Website|Web traffic 3.9M|FTEs 21,921|HQ Santa Clara, CA

MarketsSecurity Information and Event Management (SIEM)Security Orchestration, Automation, and Response (SOAR)

Palo Alto Networks (Cortex XSOAR) screenshot

01Competitive Landscape

| Aspect | Cortex XSOAR | Splunk SOAR (Phantom) | Swimlane Turbine | |--------|---------------|------------------------|------------------| | Starting price | Not publicly standardized on main product pages; procurement is sales-led | Public materials emphasize packaging and may include pricing FAQs, but clear list pricing was not found in sources reviewed | Pricing is typically sales-led and not publicly standardized in sources reviewed | | Recommended for | Enterprise SOCs requiring integrated case management, automation, and threat-intel workflows, particularly organizations invested in the Palo Alto ecosystem | Splunk-centric security teams where close integration with the Splunk platform is a priority | Teams that prioritize scalability and flexible automation workflows; evaluate customer satisfaction claims directly | | Key strength | Marketplace content packs; integrated workflow for incident management; alignment with Palo Alto platform | Tight alignment with the Splunk platform and security packaging | Market positioning around flexibility and scale; validate integration depth independently | | Key weakness | Reported operational overhead and developer experience concerns; some reviewers note reporting and case management limitations | Perceived pricing complexity and platform dependence for organizations outside the Splunk ecosystem | Market messaging is vendor-provided; buyers should validate claims and integration depth independently |

Narrative analysis

- Cortex XSOAR vs Splunk SOAR - Community discussions and comparison pieces frequently place these products as enterprise SOAR contenders; many comparison articles are not independent analyst reports and may include biases. Prospective buyers should perform hands-on PoCs. - Cortex XSOAR vs Swimlane - Some competitor-published comparisons highlight reviewer-expressed pain points for XSOAR; these materials are selective and should be balanced with primary review sources and reference checks.

Market share and adoption trends

An engagement-based proxy (review platform mindshare) reported a decline in engagement share for XSOAR on a review platform between the prior year and a recent measurement period; this metric reflects platform engagement rather than audited market share and should be interpreted accordingly.

01Competitive Landscape

Aspect	Cortex XSOAR	Splunk SOAR (Phantom)	Swimlane Turbine
Starting price	Not publicly standardized on main product pages; procurement is sales-led	Public materials emphasize packaging and may include pricing FAQs, but clear list pricing was not found in sources reviewed	Pricing is typically sales-led and not publicly standardized in sources reviewed
Recommended for	Enterprise SOCs requiring integrated case management, automation, and threat-intel workflows, particularly organizations invested in the Palo Alto ecosystem	Splunk-centric security teams where close integration with the Splunk platform is a priority	Teams that prioritize scalability and flexible automation workflows; evaluate customer satisfaction claims directly
Key strength	Marketplace content packs; integrated workflow for incident management; alignment with Palo Alto platform	Tight alignment with the Splunk platform and security packaging	Market positioning around flexibility and scale; validate integration depth independently
Key weakness	Reported operational overhead and developer experience concerns; some reviewers note reporting and case management limitations	Perceived pricing complexity and platform dependence for organizations outside the Splunk ecosystem	Market messaging is vendor-provided; buyers should validate claims and integration depth independently

Narrative analysis

Cortex XSOAR vs Splunk SOAR
- Community discussions and comparison pieces frequently place these products as enterprise SOAR contenders; many comparison articles are not independent analyst reports and may include biases. Prospective buyers should perform hands-on PoCs.
Cortex XSOAR vs Swimlane
- Some competitor-published comparisons highlight reviewer-expressed pain points for XSOAR; these materials are selective and should be balanced with primary review sources and reference checks.

Market share and adoption trends

An engagement-based proxy (review platform mindshare) reported a decline in engagement share for XSOAR on a review platform between the prior year and a recent measurement period; this metric reflects platform engagement rather than audited market share and should be interpreted accordingly.