Try our new research platform with insights from 80,000+ expert users
Palo Alto Networks AutoFocus Logo

Palo Alto Networks AutoFocus Reviews

Vendor: Palo Alto Networks
3.7 out of 5
Leave a review

What is Palo Alto Networks AutoFocus?

AutoFocus contextual threat intelligence service accelerates analysis, correlation and prevention workflows. Unique, targeted attacks are automatically prioritized with full context, allowing security teams to respond to critical attacks faster, without additional IT security resources.

Get the Threat Intelligence Platforms Buyer's Guide and find out what your peers are saying about Palo Alto Networks AutoFocus, CrowdStrike Falcon, Recorded Future and more!
Palo Alto Networks AutoFocus is the #29 ranked solution in top Threat Intelligence Platforms. PeerSpot users give Palo Alto Networks AutoFocus an average rating of 7.4 out of 10. Palo Alto Networks AutoFocus is most commonly compared to CrowdStrike Falcon: Palo Alto Networks AutoFocus vs CrowdStrike Falcon. Palo Alto Networks AutoFocus is popular among the large enterprise segment, accounting for 49% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a performing arts, accounting for 12% of all views.
Buyer's Guide
Threat Intelligence Platforms
July 2025
Get the category report
Helped 866,218 peers since 2012

Featured Palo Alto Networks AutoFocus reviews

Read more reviews

Palo Alto Networks AutoFocus mindshare

As of August 2025, the mindshare of Palo Alto Networks AutoFocus in the Threat Intelligence Platforms category stands at 1.2%, down from 1.5% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Threat Intelligence Platforms Market Share Distribution
ProductMarket Share (%)
Palo Alto Networks AutoFocus1.2%
Recorded Future15.6%
CrowdStrike Falcon8.5%
Other74.7%
Threat Intelligence Platforms
 
 
Key learnings from peers

Valuable Features

Palo Alto Networks AutoFocus' most valued attributes include its seamless integration with the Palo Alto Networks ecosystem, enabling automatic threat intelligence consumption. Users appreciate the dashboard, reliable performance, and effective search capabilities. Integration with other Palo Alto products is easy and satisfactory. The system offers advanced threat detection, behavioral analytics, reputation scoring, and tagging features. Its interface and alerting capabilities are user-friendly, and its threat analysis is thorough, leveraging multiple data feeds and specific tagging for efficient threat identification.
  • "Palo Alto Networks AutoFocus has had a positive impact on my company as we can reduce the cost for the SOC investment, and we can also get good feedback on how to strengthen our network from the expertise people available."
  • "I would rate Palo Alto Networks AutoFocus a ten out of ten."
  • "I am impressed with the tool's integration of Palo Alto products which serves as a platform for security."

Room for Improvement

Palo Alto Networks AutoFocus needs more detailed technical documentation and integration with threat feeds. Improvement in the pricing model and documentation for configuration is required. Users want an on-premises option and enhanced Cortex XDR integration. The slow performance and absence of MDR capabilities are concerns. Temporary license charges for BPA practice assessments and the need for a second threat intelligence source for zero-day vulnerabilities coverage were also mentioned.
  • "I would like the tool to see more integration with Cortex XDR. There is no real reason to keep them separate."
  • "It would be helpful to have better documentation for configuring and installing the solution."
  • "It is a completely cloud-based product at present."

ROI

Users noted significant savings on investigative hours, a remarkable enhancement in threat intelligence, and improved detection rates with Palo Alto Networks AutoFocus. Several users mentioned decreased incident response times and highlighted an enhancement in operational efficiency. Budget justifications became easier due to the precise threat attribution and rich context provided, leading to better resource allocation.

Pricing

Palo Alto Networks AutoFocus provides a threat intelligence service with flexible pricing options tailored for enterprises. Users report that pricing varies based on the scale and specific requirements of the deployment. Basic packages cover essential features, while advanced tiers offer enhanced capabilities and integrations, leading to higher costs. Potential buyers should prepare for costs that align with their network size and security needs.

  • "The solution is reasonably priced."
  • "It is expensive."

Popular Use Cases

The primary use case for Palo Alto Networks AutoFocus is threat detection and prevention. Clients use it for network security, threat intelligence, and malware alerts. Organizations integrate it with playbooks for daily threat monitoring, employing its features for threat data correlation and intelligence analysis. It aids companies in detecting threats and verifying alerts by cross-checking known feeds and malicious activities. AutoFocus is part of the broader Palo Alto Networks ecosystem, supporting various firewalls and security setups.

Service and Support

Customer service and support for Palo Alto Networks AutoFocus are generally described as knowledgeable, responsive, and good. They adhere to tight SLAs and provide prompt assistance. Users find reaching technical support straightforward. However, some express concerns about response time, leading to mixed satisfaction levels, with some rating support five out of ten.

Deployment

Users found Palo Alto Networks AutoFocus's initial setup to be easy and straightforward, with installation and deployment taking about a day. Some noted that deployment, including licensing, might take a couple of hours. However, a lack of a free trial was mentioned as a downside to the setup experience. Companies often have teams of security engineers maintaining it to ensure smooth operations.

Scalability

Palo Alto Networks AutoFocus demonstrates strong scalability, integrating seamlessly with Playbooks. Six users frequently access it. Rated highly, organizations employ it extensively and intend to expand usage. Being a cloud service, it scores the highest in scalability. Periodic threat intelligence feeds indicate efficiency, with no major challenges reported. Proactive support from Palo Alto Networks aids in reclassification needs. Multiple enterprise-level businesses utilize it effectively, with ten people using it across two entities.

Stability

Palo Alto Networks AutoFocus demonstrates strong stability. Users consistently find it reliable, experiencing no downtime or issues with its performance. Ratings range from eight to ten out of ten for stability. On rare occasions, firewalls had difficulty receiving threat intelligence feeds due to a database issue, which was quickly resolved by rebooting. Users value its scalability and stability, acknowledging minor incidents promptly addressed by support.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Threat Intelligence Platforms Buyer's Guide for additional reliable information.

Top industries

By visitors reading reviews
Performing Arts
12%
Insurance Company
10%
Computer Software Company
9%
Manufacturing Company
8%
Financial Services Firm
7%
Media Company
5%
University
5%
Comms Service Provider
4%
Government
4%
Retailer
3%
Legal Firm
3%
Wholesaler/Distributor
3%
Healthcare Company
3%
Transportation Company
3%
Non Profit
3%
Outsourcing Company
3%
Energy/Utilities Company
2%
Educational Organization
2%
Consumer Goods Company
2%
Recreational Facilities/Services Company
1%
Pharma/Biotech Company
1%
Security Firm
1%
Logistics Company
1%
Engineering Company
1%
Construction Company
1%
Real Estate/Law Firm
1%

Compare Palo Alto Networks AutoFocus with alternative products

Go!

Learn more about Palo Alto Networks AutoFocus

Palo Alto Networks AutoFocus was previously known as Palo Alto Threat Intelligence Management.

Palo Alto Networks AutoFocus customers

Telkom Indonesia

Related questions

  • 90
Is there a common threat intelligence tool that aggregates multiple threat intelligence sources?
  • 50
How inadvisable is it to use a single vulnerability analysis tool?
  • 21
Threat intelligence tools for large organization
  • 133
What is your recommended cost-effective solution to detect and prevent APT attacks?
  • 73
Compromise Assessment vs Threat Hunting
  • 26
When evaluating Threat Intelligence Platforms (TIP), what aspect do you think is the most important to look for?
  • 7
What are some of the biggest mistakes that businesses make when it comes to monitoring cyber threats?
  • 120
What is the difference between internal and external threat intelligence?
  • 15
Which enterprise threat modeling tool do you recommend?
  • 22
Can someone provide any independent comparison of threat modeling solutions?

Product Categories

Product Categories
Threat Intelligence Platforms

Popular Comparisons

Popular Comparisons
CrowdStrike Falcon vs Palo Alto Networks AutoFocus Logo
CrowdStrike Falcon vs Palo Alto Networks AutoFocus
Recorded Future vs Palo Alto Networks AutoFocus Logo
Recorded Future vs Palo Alto Networks AutoFocus
VirusTotal vs Palo Alto Networks AutoFocus Logo
VirusTotal vs Palo Alto Networks AutoFocus
Anomali vs Palo Alto Networks AutoFocus Logo
Anomali vs Palo Alto Networks AutoFocus
ThreatConnect Threat Intelligence Platform (TIP) vs Palo Alto Networks AutoFocus Logo
ThreatConnect Threat Intelligence Platform (TIP) vs Palo Alto Networks AutoFocus
Cisco Threat Grid vs Palo Alto Networks AutoFocus Logo
Cisco Threat Grid vs Palo Alto Networks AutoFocus
See all alternatives
 
Palo Alto Networks AutoFocus Reviews Summary
Author infoRatingReview Summary
Principal Security Architect at Deloitte5.0I use Palo Alto Networks AutoFocus for threat intelligence, benefiting from its seamless integration and automatic threat intelligence feeds. Its strong analytics and reputation scoring are valuable, though I prefer an additional intelligence source for zero-day vulnerability coverage.
Technical Manager at PSR3.0I use Palo Alto Networks AutoFocus mainly for threat monitoring and integration with other Palo Alto products, finding it useful and stable, though lacking MDR features and with moderate support; overall, I rate it a six out of ten.
Internship Cybersecurity Engineer at ATOS3.5I find Palo Alto Networks AutoFocus impressive, especially its advanced persistent threat detection. However, the pricing model and documentation need improvement. Better instructions for configuration and installation would help as the current documentation lacks comprehensive guidance.
Enterprise Architect at a tech services company with 5,001-10,000 employees4.0I find Palo Alto Networks AutoFocus valuable for its integration with other Palo Alto products, enhancing security. However, better integration with Cortex XDR is needed. In high-risk environments, the investment is justified despite lacking previous comparisons or specific deployment details.
Senior Staff Security Engineer at a renewables & environment company with 1,001-5,000 employees4.0No summary available
Consultant at a tech services company with 501-1,000 employees4.0No summary available
Pre-sales Engineer at VFM Systems And Services4.0No summary available