No more typing reviews! Try our Samantha, our new voice AI agent.

Cortex XSIAM vs SentinelOne Singularity AI SIEM comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 29, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XSIAM
Ranking in Security Information and Event Management (SIEM)
13th
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
15
Ranking in other categories
Identity Threat Detection and Response (ITDR) (7th), AI-Powered Cybersecurity Platforms (9th)
SentinelOne Singularity AI ...
Ranking in Security Information and Event Management (SIEM)
14th
Average Rating
8.6
Reviews Sentiment
6.1
Number of Reviews
5
Ranking in other categories
AI Observability (12th)
 

Mindshare comparison

As of May 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Cortex XSIAM is 1.8%, down from 2.8% compared to the previous year. The mindshare of SentinelOne Singularity AI SIEM is 1.4%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Cortex XSIAM1.8%
SentinelOne Singularity AI SIEM1.4%
Other96.8%
Security Information and Event Management (SIEM)
 

Featured Reviews

JohnTamakloe - PeerSpot reviewer
Solutions Architect at ostec
Efficient coordination improves operations with seamless integration and rapid automation
The typical use cases for Cortex XSIAM are diverse I would describe the impact of Cortex XSIAM's automation on my security operations center as efficient. I use Cortex XSIAM's behavior analytics, and it helps identify unusual activities. I leverage Cortex XSIAM's incident management features for…
Mohan Janarthanan - PeerSpot reviewer
Associate Vice President at Novac Technology Solutions
AI-driven monitoring has improved real-time threat detection but still needs better automation
I could see some workflows, but I am unable to do automated workflows. For example, some repetitive jobs or repetitive tasks I am doing, but I am trying to have less manual intervention on the front. I am raising some issues that should be resolvable. The SentinelOne team has told me that this can be resolved within a couple of months, but they are saying that it is in future for enhancement and it may take some time. So far, the numbers are great. Regarding disadvantages or areas for improvement, I could say that 35 percent of my manual effort can be detected since I implemented it very recently. I could be able to say my current data talks about only 35 percent, and it may improve further, as I am expecting. But I can only comment based on my alerts and events. The adoption rate will be less compared to other products, as this can be a time-taken process because all my data needs to be offloaded and the system needs to understand my existing alerts, logs, and other things. This will take some more time, probably another month. Another area for improvement is that the product is somewhat expensive. Pricing could be improved as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"One of the valued aspects of the product is its use of artificial intelligence to detect security vulnerabilities."
"The product integrates seamlessly with third-party solutions."
"The most valuable feature is the integration capability."
"Its ability to deliver a substantial amount of security intelligence greatly enhances and optimizes our security operations program."
"The flexibility for creating manual workflows stands out."
"Cortex XSIAM enhances our ability to apply endpoint protection policies, implement restrictions, conduct scans, and engage in sandboxing."
"The most valuable aspect is that Cortex XSIAM doesn't generate excessive alerts, refines all search results effectively, and filters out incidents where SOC intervention isn't necessary, allowing engineers to focus only on what matters."
"The flexibility for creating manual workflows stands out."
"When they face attacks such as ransomware and are dissatisfied with their existing solutions, they switch to SentinelOne Singularity AI SIEM, which is quite good in detecting unknown threats, cleaning the system, and handling ransomware."
"AI-driven capabilities will give me real-time detection and will protect my autonomous AI interruption."
"After using SentinelOne Singularity AI SIEM, it has reduced our incident response time by forty to fifty percent compared to other tools."
"Overall, I would assess the overall security posture after implementing SentinelOne Singularity AI SIEM as significantly better."
"SentinelOne Singularity AI SIEM's AI-powered analytics does affect our SOC's ability to reduce false positives; that is one of the biggest advantages because the manpower that I have is limited."
 

Cons

"The first impression is that XSIAM would be more expensive than others we tried."
"The standard integrations are very limited, and the integrations available are not listed in the marketplace. Obtaining validation for integrations from Palo Alto takes around eight months, which is quite long."
"Cortex could improve the detection and online resolution of security vulnerabilities."
"Cortex XSIAM is on the expensive side and requires substantial improvement in pricing."
"Cortex XSIAM needs improvements in terms of data onboarding, parsers, and third-party integration supports."
"I am not sure if any improvements are needed right now."
"The support could be a bit faster."
"The platform isn't very developer-friendly and it should provide more flexibility and ease."
"It is quite good, but the only downside is that it is costly."
"At the moment, I feel the pricing is a little bit on the higher side, but the tool is positioned in a place where risk is very high, and we do not want to take chances, so we are prepared to pay the premium."
"In AI SIEM, the areas that have room for improvement are the parsers for third-party integrated data or for third-party data sources that are not native integrations, which could be made a bit easier."
"Another area for improvement is that the product is somewhat expensive. Pricing could be improved as well."
"SentinelOne Singularity AI SIEM has some performance and reliability issues that need improvement."
 

Pricing and Cost Advice

"The product cost could be considered value for money compared to other solutions in the market, though it is quite high."
"In terms of pricing, we found Cortex XSIAM to offer a very reasonable and competitive rate."
"The solution is expensive compared to its competitors."
"Since Palo Alto is trying to get as many new customers as possible, they're offering very competitive pricing."
"The solution comes at a significant cost."
Information not available
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
896,034 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
10%
Manufacturing Company
9%
Government
6%
Outsourcing Company
9%
Construction Company
8%
Comms Service Provider
7%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise2
Large Enterprise4
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise2
Large Enterprise2
 

Questions from the Community

What is your experience regarding pricing and costs for Cortex XSIAM?
I did not participate in pricing discussions for Cortex XSIAM solutions, so I cannot provide a review regarding prices for this solution.
What needs improvement with Cortex XSIAM?
Cortex XSIAM is on the expensive side and requires substantial improvement in pricing. There are other features that could be improved, including integration with vendors such as CyberArk. I would ...
What is your primary use case for Cortex XSIAM?
With Cortex XSIAM, we installed an agent on Active Directory on-premise. We connected our Firewalls to the Data Lake and the Active Directory, and protected the Firewalls with another authenticatio...
What needs improvement with SentinelOne Singularity AI SIEM?
I would not say there is anything that could be better in SentinelOne Singularity AI SIEM; I think we have seen something unique in the product. This product has the potential to add more SOC funct...
What is your primary use case for SentinelOne Singularity AI SIEM?
For us, the use case is primarily to analyze security events that are coming in and also events that are kept over a period of time, to track and use it for investigation and maybe analysis, someti...
What advice do you have for others considering SentinelOne Singularity AI SIEM?
I assess the overall security posture of the company after implementation as positive; I see a big impact on that. I would rate this review as an overall eight.
 

Overview

Find out what your peers are saying about Cortex XSIAM vs. SentinelOne Singularity AI SIEM and other solutions. Updated: April 2026.
896,034 professionals have used our research since 2012.