Cortex Xpanse Reviews

Name: Cortex Xpanse
Brand: Palo Alto Networks
Rating: 4.4 (5 reviews)

4.4 out of 5

5 reviews
100% willing to recommend

What is Cortex Xpanse?

Xpanse provides a complete, accurate and continuously updated inventory of all global internet-facing assets. This allows you to discover, evaluate, and mitigate cyber attack surface risks. You can also evaluate supplier risk and assess the security of acquired companies.
Manual asset inventory maintenance is slow and prone to error. An outside-in view of your attack surface catches assets and exposures you never knew existed to help with attack surface reduction.

Get the Attack Surface Management (ASM) Buyer's Guide and find out what your peers are saying about Cortex Xpanse, CrowdStrike Falcon, Mandiant Advantage and more!

Cortex Xpanse is the #6 ranked solution in top Attack Surface Management (ASM) solutions. PeerSpot users give Cortex Xpanse an average rating of 8.8 out of 10. Cortex Xpanse is most commonly compared to CrowdStrike Falcon: Cortex Xpanse vs CrowdStrike Falcon. Cortex Xpanse is popular among the large enterprise segment, accounting for 57% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 16% of all views.

Buyer's Guide

Attack Surface Management (ASM)

June 2025

Get the category report

Helped 860,592 peers since 2012

Featured Cortex Xpanse reviews

Ali Mohamed

Account Manager at Cairo International Airport Co.

We use Cortex Xpanse as a security control for attack surface management in our organization When there is an alert from Cortex Xpanse regarding a certificate or surface, it prompts us to take immediate action. It checks vulnerabilities periodically, ensuring they are addressed, which helps in…

Read full review

Jitendra_Singh

Senior Vice President at Chi Networks

The solution is primarily used for protecting our applications and databases, shielding them from threats such as ransomware and malware The most valuable aspect is its ability to catch trojans and malware. The definitions running behind it effectively detect threats that antivirus programs do…

Read full review

Mostafa-Ahmed

Cybersecurity incident response team lead at Information Technology Solutions- ITS

Cortex Xpanse has an easy-to-use user interface. It has two models: 1. You can get quarterly reports about your environment. 2. If you have a yearly subscription, real-time case reporting and attack surface management. No. 1 benefits smaller companies because they have a huge number of assets. They just need a report in order to work through it. No 2. Targets large-scale companies that will benefit from it as the very fact that it discovers assets and their vulnerabilities is a benefit.

Read full review

Cortex Xpanse mindshare

As of July 2025, the mindshare of Cortex Xpanse in the Attack Surface Management (ASM) category stands at 4.3%, down from 4.3% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Attack Surface Management (ASM)

Key learnings from peers

Valuable Features

Cortex Xpanse provides an intuitive interface and two subscription models: quarterly reports for smaller entities and real-time management for larger ones. Its essential features include attack surface management, firewall, antivirus, and XDR capabilities. It excels in detecting threats like trojans and malware, regularly checking vulnerabilities, and asset discovery. It offers continuous monitoring, digital brand protection, and intelligence on exposed assets. Detailed vulnerability reporting helps prioritize threats based on attack surface insights.

"Cortex Xpanse is a strong solution for attack surface management, including digital brand protection and continuous monitoring."
"As an attack surface manager, I highly recommend Cortex Xpanse, especially if there are many services exposed publicly on the internet."
"When there is an alert from Cortex Xpanse regarding a certificate or surface, it prompts us to take immediate action."

Room for Improvement

Cortex Xpanse could benefit from improvements in endpoint connectivity in the cloud, particularly when dealing with older OS versions. Users encounter difficulties with installation and password management. There is a demand for enhancements to the user interface and dashboard customization. Pricing is seen as needing better alignment with its advantages. Visibility into adversaries and threats is lacking, and penetration into the Dark Web requires more comprehensive intelligence, challenging its perceived value among customers.

"It's challenging to confirm the absolute coverage and penetration of Cortex Xpanse into the Dark Web. The solution lacks comprehensive intelligence on adversaries and risks, which other competitors might provide."
"Cortex Xpanse should offer better customization and configuration options on its dashboard."
"Cortex Xpanse should offer better customization and configuration options on its dashboard."

Pricing

Cortex Xpanse pricing is perceived as expensive compared to solutions like Sophos and Kaspersky, yet some enterprise users find its costs align with budgets due to the advanced technology offered. It's seen as an investment in security, with pricing often higher than other market solutions like FortyRicoh and RiskIQ. Annual cost increases are noted, but for some users, the security benefits justify the pricing for their enterprise needs.

"The tool's cost is too high."
"Cortex Xpanse is cheaper than other solutions."

Popular Use Cases

Organizations primarily use Cortex Xpanse for attack surface management and application protection, shielding databases from threats like ransomware and malware. It facilitates custom vulnerability remediation policies and offers device control, though its firewall setup can be challenging. Ideal for large enterprises with Security Operations Centers, Cortex Xpanse is notable for its robust installation capabilities.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Attack Surface Management (ASM) Buyer's Guide for additional reliable information.

Top industries

By visitors reading reviews

Computer Software Company

16%

Financial Services Firm

11%

Manufacturing Company

11%

Government

Media Company

Construction Company

Healthcare Company

University

Retailer

Educational Organization

Comms Service Provider

Insurance Company

Non Profit

Wholesaler/Distributor

Energy/Utilities Company

Hospitality Company

Real Estate/Law Firm

Performing Arts

Logistics Company

Transportation Company

Outsourcing Company

Pharma/Biotech Company

Legal Firm

Recreational Facilities/Services Company

Leisure / Travel Company

Computer Retailer

Compare Cortex Xpanse with alternative products

Learn more about Cortex Xpanse

Get ahead of your ransomware risk assessment by discovering and remediating RDP exposures, the leading attack vector in ransomware attacks. Find exposed assets before attackers do.

Integration with Cortex XSOAR, Prisma Cloud, and our broader portfolio allows our ASM findings to enhance security workflows, and secure unknown, unmanaged risks on your cloud attack surface.