

Palo Alto Networks WildFire and Anomali compete in the cybersecurity solutions category. Palo Alto Networks WildFire seems to have the upper hand, especially in threat prevention and seamless integration with existing firewalls, while Anomali shines in providing comprehensive threat intelligence capabilities.
Features: Palo Alto Networks WildFire's features include robust threat prevention capabilities, seamless integration with Palo Alto firewalls, and ease of deployment with minimal false positives. Anomali offers strong threat intelligence capabilities, pulling data from multiple sources and providing a unified view with features like threat modeling and prioritized intelligence.
Room for Improvement: Users suggest improvements for WildFire in deployment ease, pricing, and support responsiveness. There are also requests for better third-party integration and more comprehensive threat detection for non-Windows platforms. Anomali could enhance its intelligence-sharing capabilities, consolidate tags, and expand its credential monitoring.
Ease of Deployment and Customer Service: Palo Alto Networks WildFire supports various deployment models, including On-premises, Hybrid Cloud, and Public Cloud. Its customer service is generally well regarded, though some users report slow response times and difficulties in escalation. Anomali, mainly available in Hybrid and Public Cloud, has similarly mixed reviews, facing challenges in obtaining technical expertise without premium packages.
Pricing and ROI: WildFire is considered expensive, especially for smaller organizations, but its extensive security features justify the high cost, offering flexible licensing options and a quick ROI. Anomali is noted to be on the higher side cost-wise, but its centralized threat intelligence platform offers value by saving resources on manual data analysis. Both products receive commendations for reducing operational costs and improving security posture.
Analyst productivity has improved significantly, with hours saved because of automation and AI-driven work that Anomali performs.
Anomali provides us with a very cost-effective value compared to the market, and I would rate it ten out of ten for return on investment metrics.
There is a return on investment concerning time and effort saved by 40% after implementing Anomali.
The service generates a low rate of false positives, reducing the overhead of managing false positive events.
They have strong onboarding and deployment assistance, provide a dedicated technical account manager for large customers, and engage in regular product updates and customer interaction.
The technical support at Anomali is excellent.
It doesn't seem very professional how they're handling support anymore.
There is a lack of SLA adherence, and third-party partners do not provide prompt responses.
We have had some open tickets for months, maybe half a year, and there is no real answer.
The service response times are aligned with standards, responding within a few hours based on the problem's criticality.
The scalability is massive, allowing us to store millions of indicators.
I believe Anomali's scalability is good; whether it is an organization for ten people or one hundred thousand people, the job a threat intel platform has to do will be the same.
Anomali's scalability is impressive as a mature platform capable of processing large amounts of threat intelligence and indicators of compromise data.
Wildfire is highly scalable.
Palo Alto Networks WildFire is scalable, and I give it a nine for scalability.
The on-premises version is expensive to scale as it might need an additional device to be installed in the setup.
From a reliability perspective, Anomali consistently injects threat feeds, works on automation, performs reliable API integrations, and supports enterprise scale globally.
For example, while Microsoft allows ample time for users to adapt to deprecated features, Anomali only gave us three weeks before switching, so they need to be more cognizant of customer use cases from their engineering side.
The good thing is that they have a health check page, and if any issues arise, they notify us.
It performs filtering, malware blocking, and scanning.
The solution is scalable and stable.
Combining all aliases into a coherent solution would be beneficial, as we had to review each individual source ourselves.
Anomali should increase their capability to fetch details from various dark web solutions where threat actors post compromised credentials.
Anomali's ability to correlate and integrate different Threat Intel platforms, such as Mandiant and PolySwarm, is another valuable feature, removing duplicacy and enabling the application of specific IOCs across various security controls.
It should be easier to establish the Palo Alto Networks WildFire cluster between the devices.
The dashboard should provide better visibility, especially in showing how many files are sent to Wildfire and their findings.
It is a very good product.
Pricing and licensing are good, but the costs for purchasing threat feeds are somewhat complicated and a bit on the higher side.
My experience with pricing, setup cost, and licensing is that there are not many follow-ups, but once we interacted with the product team or the leadership of Anomali, they managed a lot with us, and it all paid off to reach a conclusion that we would continue with this product.
I would rate it an eight out of ten in terms of affordability.
Regarding integration, Anomali has capabilities to integrate with different downstream applications such as Palo Alto, allowing us to create playbooks to block domains, URLs, or IPs directly within the firewall.
Correlating IOCs with the telemetry data we are ingesting from our data sources allows us to pull monthly reports identifying how many assets and users interacted with malicious content, giving insight into whether communications failed or users accessed restricted content, providing complete visibility of the IOCs traveling throughout our environment.
It aggregates intelligence from hundreds of sources, automatically de-duplicates, applies risk scoring, applies context, and reduces much manual effort.
Integrating Palo Alto Networks WildFire with various security protocols similar to a firewall has significantly improved the overall threat detection capabilities in our organization.
The most valuable feature of Wildfire is its sandboxing capability for examining suspicious files or locations.
The integration and working with third-party solutions was very seamless and smooth.
| Product | Mindshare (%) |
|---|---|
| Palo Alto Networks WildFire | 7.3% |
| Anomali | 3.4% |
| Other | 89.3% |

| Company Size | Count |
|---|---|
| Small Business | 3 |
| Midsize Enterprise | 1 |
| Large Enterprise | 14 |
| Company Size | Count |
|---|---|
| Small Business | 38 |
| Midsize Enterprise | 15 |
| Large Enterprise | 29 |
Anomali delivers user-friendly cyber threat intelligence, offering concise insights with robust capabilities for evolving scenarios.
Anomali offers a powerful platform for cyber threat intelligence, allowing organizations to efficiently stream and analyze threat feeds. It excels in threat modeling, prioritizing intelligence, and supporting large-scale automation through its API, fostering a proactive security approach.
What are Anomali's Key Features?Anomali serves as a crucial tool for threat intelligence in industries ranging from finance to healthcare. Organizations stream threat feeds into Anomali to correlate and aggregate data, enhancing security measures and facilitating thorough threat investigations. Its adaptability makes it suitable across different sectors.
Palo Alto Networks WildFire provides robust threat prevention with emphasis on automated malware detection and real-time security updates. Seamless integration and intuitive deployment enhance its ability to protect environments effectively, addressing advanced threat scenarios.
Palo Alto Networks WildFire is recognized for its threat detection capabilities, offering automated analysis of emails and effective malware response. The integration with Palo Alto's ecosystem ensures users benefit from seamless operations while safeguarding on-premise and cloud infrastructures. It supports VPN, URL filtering, and user identification with a focus on reducing manual intervention. Users note its complexity and high pricing but appreciate the efficient deployment once configured. Integration with third-party systems requires attention, but it remains vital for those requiring advanced network security measures.
What are the key features of Palo Alto Networks WildFire?Industries like banking leverage Palo Alto Networks WildFire for securing infrastructure against zero-day threats and cyber-attacks. It is widely used for scanning files and emails, ensuring malicious activity is prevented. Integrated with firewalls, WildFire strengthens cybersecurity frameworks, protecting organizations from evolving security challenges.
We monitor all Advanced Threat Protection (ATP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.