Cortex XSIAM vs Qualys CyberSecurity Asset Management comparison

Cortex XSIAM vs. Qualys CyberSecurity Asset Management

September 2024

Download the complete report

Helped 881,733 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

ROI

Sentiment score

4.6

Cortex XSIAM enhances incident management and provides significant financial returns by automating detection and response, reducing staffing needs.

Sentiment score

4.9

Qualys CyberSecurity Asset Management boosts efficiency, reduces costs, enhances security, and delivers a 95% ROI with 35% cost reduction.

No quotes available

For more quotes and insights, download the Cortex XSIAM report

Improvements to our security infrastructure contributed to overall business growth of approximately 150 percent over the past year.

For more quotes and insights, download the Qualys CyberSecurity Asset Management report

Android Developer at Droidforge

By automating tasks, it significantly reduces the human resources required, leading to increased efficiency and productivity.

reviewer2590986

Senior Manager at a consultancy with 10,001+ employees

It has reduced the number of development and scripting hours along with maintenance hours.

Curtis Nielson

Security Operations Manager at Solventum

Customer Service

Sentiment score

5.8

Cortex XSIAM support varies; premium service excels, while non-premium experiences depend on distributor expertise and sometimes face delays.

Sentiment score

7.5

Qualys CyberSecurity Asset Management's customer service is highly praised for its responsiveness, effectiveness, and swift problem resolution capabilities.

With premium support, core Palo Alto technical experts handle issues directly.

joshiamarpreet

Team Lead, Security at seamlessinfotech.com

It is ineffective in terms of responding to basic queries and addressing future requirements.

Associate Director at a financial services firm with 5,001-10,000 employees

The Palo Alto support team is fully responsive and helpful.

For more quotes and insights, download the Cortex XSIAM report

SOC Analyst at OVELOSEC

The support team was knowledgeable and offered a variety of quick resolution options.

For more quotes and insights, download the Qualys CyberSecurity Asset Management report

Android Developer at Droidforge

Their SMEs have sufficient knowledge, and if they are not the right contact, they quickly redirect us to someone who can help resolve issues.

Ramachandran Sugumar

Senior Information Security Engineer at a consultancy with 10,001+ employees

I would rate their customer support a ten out of ten.

reviewer2590236

Information Security Lead at a consultancy with 10,001+ employees

Scalability Issues

Sentiment score

6.5

Cortex XSIAM is scalable for various business sizes with cloud-based integration, but lacks on-premises deployment and mixed reviews.

Sentiment score

7.8

Qualys CyberSecurity Asset Management excels in scalability, supporting diverse environments with numerous users, networks, and large datasets efficiently.

Without proper integration, scaling up with more servers is meaningless.

Associate Director at a financial services firm with 5,001-10,000 employees

Cortex XSIAM is highly scalable.

For more quotes and insights, download the Cortex XSIAM report

SOC Analyst at OVELOSEC

We have about 300,000 assets installed with agents worldwide.

reviewer2590236

Information Security Lead at a consultancy with 10,001+ employees

The scalability is excellent as we manage more than one hundred thousand assets, including over one hundred thousand endpoints, approximately 2,600 servers, and more than 1,200 network devices.

Arshad N. R.

Cyber Security Specialist at UBS Financial

Qualys Cybersecurity Asset Management has proven to be a highly scalable solution for us over the past couple of years.

reviewer2593263

Manager Information Security at a consultancy with 10,001+ employees

For more quotes and insights, download the Qualys CyberSecurity Asset Management report

Stability Issues

Sentiment score

7.6

Cortex XSIAM is praised for its stability, rapid issue resolution, and efficient performance despite minor post-update challenges.

Sentiment score

7.5

Qualys CyberSecurity Asset Management is stable, highly rated, with minimal issues, and appreciated for its consistent enhancements and features.

The product was easy to install and set up and worked right.

Oscar Ojeda

Owner at Xelere

Overall, Cortex XSIAM is stable.

For more quotes and insights, download the Cortex XSIAM report

SOC Analyst at OVELOSEC

It works really nice and performs really efficiently after configuration.

HectorRios

IT COMMUNICATIONS AND NETWORKS at Américas BPS

I would rate the stability of Qualys CSAM a ten out of ten.

Bharawaj S

IT Engineer at a consultancy with 10,001+ employees

The product stability has notably declined over the last two months, and the performance to fulfill a page request is very slow compared to its previous performance.

Christopher Mateski

SENIOR MANAGER, CYBERSECURITY THREAT, RISK & ARCHITECTURE at a tech vendor with 1,001-5,000 employees

They are constantly adding capabilities.

Scott Frederick

Director of Vulnerability Management at a insurance company with 1,001-5,000 employees

For more quotes and insights, download the Qualys CyberSecurity Asset Management report

Room For Improvement

Cortex XSIAM needs improved integration, performance, interface, pricing, support, ASM, AI, onboarding, tagging, and identity management enhancements.

Qualys CyberSecurity Asset Management struggles with integration, configuration flexibility, tagging accuracy, and performance issues needing improvement.

Obtaining validation for integrations from Palo Alto takes around eight months, which is quite long.

Associate Director at a financial services firm with 5,001-10,000 employees

Cortex XSIAM needs improvements in terms of data onboarding, parsers, and third-party integration supports.

For more quotes and insights, download the Cortex XSIAM report

SOC Analyst at OVELOSEC

Cortex XSIAM is on the expensive side and requires substantial improvement in pricing.

JohnTamakloe

Solutions Architect at ostec

Qualys is currently not able to identify assets lacking DNS information.

reviewer2589096

Senior Information Security Engineer at a consultancy with 10,001+ employees

Features enhancing the interaction with IT or security teams should be added, such as a ticketing feature that, if an issue arises in the CSAM module, enables direct ticket creation in systems like ServiceNow.

SurajTripathi

Senior Security Consultant at CyberNxt Solutions LLP

If there's one key aspect to focus on, it's discovery—the ability to identify assets that you are not aware of, even when you can see they are present.

Nicki Møller

Information Security Engineer at a manufacturing company with 5,001-10,000 employees

For more quotes and insights, download the Qualys CyberSecurity Asset Management report

Setup Cost

Cortex XSIAM is viewed as competitively priced but complex, aligning with market expectations despite some regional variations.

Qualys offers high yet flexible pricing, valued for comprehensive features and cost-effectiveness, especially when bundled with other services.

The first impression is that XSIAM would be more expensive than others we tried.

Oscar Ojeda

Owner at Xelere

The product is very expensive.

For more quotes and insights, download the Cortex XSIAM report

Associate Director at a financial services firm with 5,001-10,000 employees

Cortex XSIAM is pretty expensive, and the licensing process is not very comfortable.

Rajiv John

Director at MICROLOGIC NETWORKS PRIVATE LIMITED

A cost-effective solution.

Arshad Nr

Senior Security Consultant at CyberNxt Solutions LLP

I believe that the stability and reliability of Qualys offer great value for the money.

Nicki Møller

Information Security Engineer at a manufacturing company with 5,001-10,000 employees

A monthly subscription starting at approximately $72 per month, depending on the specific package and features included.

For more quotes and insights, download the Qualys CyberSecurity Asset Management report

Android Developer at Droidforge

Valuable Features

Cortex XSIAM excels in machine learning threat detection, SOAR features, and advanced automation for efficient security management.

Qualys CyberSecurity Asset Management enhances security with real-time visibility, integration, TruRisk scoring, and simplified asset and patch management.

The advanced visualization capabilities of the product are important for understanding security trends in an organization.

JohnTamakloe

Solutions Architect at ostec

One of the valued aspects of the product is its use of artificial intelligence to detect security vulnerabilities.

Oscar Ojeda

Owner at Xelere

The flexibility for creating manual workflows stands out.

For more quotes and insights, download the Cortex XSIAM report

Associate Director at a financial services firm with 5,001-10,000 employees

By correlating this with QDS scores, we can accurately assess the risk level of high or low QDS scores associated with each asset and monitor them accordingly.

reviewer2589096

Senior Information Security Engineer at a consultancy with 10,001+ employees

The most valuable feature is the real-time visibility Qualys CyberSecurity Asset Management provides into all assets across our development and operational environments.

For more quotes and insights, download the Qualys CyberSecurity Asset Management report

Android Developer at Droidforge

It also performs scans to identify any vulnerabilities, which helps to take proactive measures before those vulnerabilities are identified by any attacker.

reviewer2590236

Information Security Lead at a consultancy with 10,001+ employees

Categories and Ranking

Cortex XSIAM

Average Rating

8.6

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Security Information and Event Management (SIEM) (12th), Identity Threat Detection and Response (ITDR) (7th), AI-Powered Cybersecurity Platforms (7th)

Qualys CyberSecurity Asset ...

Average Rating

9.0

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Vulnerability Management (9th), Patch Management (4th), Cyber Asset Attack Surface Management (CAASM) (2nd), Attack Surface Management (ASM) (2nd), Software Supply Chain Security (3rd)

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Cortex XSIAM is designed for Security Information and Event Management (SIEM) and holds a mindshare of 2.1%, down 2.5% compared to last year.
Qualys CyberSecurity Asset Management, on the other hand, focuses on Cyber Asset Attack Surface Management (CAASM), holds 10.9% mindshare, up 5.8% since last year.

Security Information and Event Management (SIEM) Market Share Distribution
Product	Market Share (%)
Cortex XSIAM	2.1%
Splunk Enterprise Security	7.1%
Wazuh	6.4%
Other	84.4%

Security Information and Event Management (SIEM)

Cyber Asset Attack Surface Management (CAASM) Market Share Distribution
Product	Market Share (%)
Qualys CyberSecurity Asset Management	10.9%
Axonius	28.5%
Armis	17.9%
Other	42.7%

Cyber Asset Attack Surface Management (CAASM)

Featured Reviews

Integration challenges highlight the need for manual workflows

Associate Director at a financial services firm with 5,001-10,000 employees

The standard integrations are very limited, and the integrations available are not listed in the marketplace. Obtaining validation for integrations from Palo Alto takes around eight months, which is quite long. The solution would benefit from having more standard playbooks and templates available, as in other partners. Currently, everything must be created from scratch. In terms of incident response automation, it is quite poor due to the lack of integration with all security tools, making manual intervention necessary.

Read full review

Arshad N. R.

Cyber Security Specialist at UBS Financial

Customized dashboards and quick deployment support comprehensive asset management

We use the True Risk Score for vulnerability prioritization, though we do not solely rely upon it since some assets may be decommissioned soon or not in use. From Qualys CyberSecurity Asset Management, we primarily focus on internet-facing assets. We have created separate tasks for internet-facing assets and track the True Risk dashboard specifically for these assets. If the True Risk Score is higher for any internet-facing assets, then we take action accordingly. The True Risk Score is very helpful for prioritization. The initial setup was straightforward and easy. We needed to create customized tags, group them twice, and validate whether the operating system detection was true positive or false positive. We encountered some false positives, which required coordination with the IT team for verification. In six months, we had approximately 20-25 machines that needed verification on a weekly basis. We coordinated with the IT team to identify the exact operating system specifications.

Read full review

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

881,733 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

11%

Financial Services Firm

10%

Manufacturing Company

Government

Computer Software Company

12%

Financial Services Firm

12%

Manufacturing Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	2
Large Enterprise	4

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	2
Large Enterprise	23

Questions from the Community

What is your experience regarding pricing and costs for Cortex XSIAM?

I did not participate in pricing discussions for Cortex XSIAM solutions, so I cannot provide a review regarding prices for this solution.

What needs improvement with Cortex XSIAM?

Cortex XSIAM is on the expensive side and requires substantial improvement in pricing. There are other features that could be improved, including integration with vendors such as CyberArk. I would ...

What is your primary use case for Cortex XSIAM?

With Cortex XSIAM, we installed an agent on Active Directory on-premise. We connected our Firewalls to the Data Lake and the Active Directory, and protected the Firewalls with another authenticatio...

What is your experience regarding pricing and costs for Qualys CyberSecurity Asset Management?

I'm not entirely sure about the pricing; I don't know.

What needs improvement with Qualys CyberSecurity Asset Management?

I think the one thing Qualys CyberSecurity Asset Management can do better is the package management and the updating process. Knowing that you can't update any of the packages until you've done the...

What is your primary use case for Qualys CyberSecurity Asset Management?

I primarily use it for a small, single-site, multi-source setup with multi-WAN inputs. I have a main fiber connection and a couple of failovers while managing different networks across different se...

Palo Alto Networks Cortex XSOAR vs Cortex XSIAM

Comparisons

Compared 23% of the time

Microsoft Sentinel vs Cortex XSIAM

Compared 11% of the time

Cortex XDR by Palo Alto Networks vs Cortex XSIAM

Compared 8% of the time

CrowdStrike Falcon vs Cortex XSIAM

Compared 6% of the time

IBM Security QRadar vs Cortex XSIAM

Compared 6% of the time

More Cortex XSIAM Competitors

Armis vs Qualys CyberSecurity Asset Management

Compared 7% of the time

CrowdStrike Falcon vs Qualys CyberSecurity Asset Management

Compared 5% of the time

Axonius vs Qualys CyberSecurity Asset Management

Compared 5% of the time

Amazon Inspector vs Qualys CyberSecurity Asset Management

Compared 4% of the time

Bitsight vs Qualys CyberSecurity Asset Management

Compared 4% of the time

More Qualys CyberSecurity Asset Management Competitors

Product Reports

Download Cortex XSIAM product report

Cortex XSIAM

February 2026

Qualys CyberSecurity Asset Management

January 2026

Qualys CyberSecurity Asset Management report

Download Qualys CyberSecurity Asset Management product report

Overview

Cortex XSIAM acts as a critical element for SOC foundations, integrating SIEM and EDR capabilities, valued for threat detection and seamless security orchestration with Palo Alto Networks products.

Organizations find Cortex XSIAM beneficial for SOC foundations due to its capability to integrate SIEM and EDR tools, facilitating data collection, detection, and response. It connects with third-party data sources while reducing management effort and offering cost-effective alternatives to competitors like CrowdStrike and Trend Micro. Featuring automation and integration with Palo Alto Networks products, Cortex XSIAM enhances threat detection. Unified architecture allows a comprehensive view of attacks, further supported by machine learning and integration with existing vendor solutions, ensuring that users gain insights without significant manual log analysis.

What are Cortex XSIAM's key features?

Security Orchestration: Streamlines processes across security operations.
Automation and Response: Efficient incident response management.
Detection Enrichment: Enhances identification of threats.
Centralized Endpoint Security: Comprehensive protection and monitoring of endpoints.
Forensic Investigation: Automated investigation to expedite threat analysis.

What benefits are evident in Cortex XSIAM reviews?

Cost-Effectiveness: Provides economical options compared to other market players.
Comprehensive Integration: Seamlessly integrates with multiple data sources and vendors.
Reduced Management Effort: Simplifies the administration of security operations.
Enhanced Threat Detection: Strengthens identification and remediation processes.

Industries implement Cortex XSIAM mainly in technology-driven sectors where centralized endpoint protection and automation of forensic investigation are paramount. By integrating several third-party systems for incident response, companies in competitive markets leverage its attributes for heightened operational security efficiency. However, users note areas for improvement, such as Attack Surface Management and integration enhancements, to better suit tech-heavy industries needing extensive connectivity with cybersecurity solutions.

Palo Alto Networks

Qualys CyberSecurity Asset Management provides key features including asset inventory management, end-of-life tracking, dynamic tagging, and integration with CMDB, offering extensive visibility and support for proactive threat response.

Qualys offers comprehensive visibility across hardware and software assets, aiding in tracking unauthorized applications and facilitating automated vulnerability remediation. Its user-friendly interface and dynamic risk scoring enhance security posture management. Users leverage it for vulnerability management and compliance, benefiting from real-time risk identification and efficient operations in cloud and on-premises environments.

What are the key features of Qualys CyberSecurity Asset Management?

Asset Inventory Management: Provides detailed visibility over hardware and software assets.
End-of-Life Tracking: Helps identify technical debt by pinpointing outdated hardware and software.
Dynamic Tagging: Allows flexible classification and categorization of assets.
Real-Time Risk Identification: Detects risks as they arise, enhancing threat response capabilities.
CMDB Integration: Streamlines data integration for comprehensive asset insights.

What benefits should users look for in Qualys reviews?

Improved Security Posture: Enables proactive threat management and streamlined operations.
Efficient Remediation: Automates vulnerability management and patch deployment.
User-Friendly Operations: Simplifies cybersecurity operations with an intuitive interface.
Comprehensive Asset Visibility: Offers unparalleled insight into organizational assets.
Scalable Solutions: Facilitates asset tracking across cloud and on-premises environments.

Cybersecurity teams in various industries, such as financial services, healthcare, and manufacturing, utilize Qualys to manage technical debt through end-of-life tracking and facilitate robust patch management. It supports compliance and visibility initiatives, essential for maintaining data integrity and operational security in dynamic environments.

Qualys