Try our new research platform with insights from 80,000+ expert users

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the category report

Prominent pros & cons

PROS

Cortex XSIAM enhances security operations with substantial security intelligence and optimizes threat detection across networks and endpoints.
Integration capability and artificial intelligence usage in Cortex XSIAM enable effective detection of security vulnerabilities and incidents of compromise.
Cortex XSIAM's automation capability streamlines response times by centralizing incident responses on a single dashboard.
The flexibility in creating manual workflows and applying endpoint protection policies is notable in Cortex XSIAM.
Cortex XSIAM improves response times by 20% and effectively filters unnecessary alerts, ensuring focus on critical incidents.

CONS

Further integration capabilities with various software products would be advantageous for Cortex XSIAM.
The pricing and technical support could be improved.
Cortex XSIAM could provide more flexibility and ease for developers.
Integration with a larger variety of products could be enhanced.
Improvements are needed in terms of data onboarding, parsers, and third-party integration supports.
 

Cortex XSIAM Pros review quotes

Forrest Stevens - PeerSpot reviewer
Sep 28, 2023
Its ability to deliver a substantial amount of security intelligence greatly enhances and optimizes our security operations program.
Mostafa-Ahmed - PeerSpot reviewer
Sep 29, 2023
It operates on a single, extensive database which enables it to excel in detecting threats and anomalies across the network and endpoints, delivering a highly effective and comprehensive security solution.
AS
Aug 14, 2025
The most valuable aspect is that Cortex XSIAM doesn't generate excessive alerts, refines all search results effectively, and filters out incidents where SOC intervention isn't necessary, allowing engineers to focus only on what matters.
Find out what your peers are saying about Palo Alto Networks, Microsoft, IBM and others in Security Information and Event Management (SIEM). Updated: August 2025.
865,295 professionals have used our research since 2012.
reviewer2562009 - PeerSpot reviewer
Sep 30, 2024
The most valuable feature is the integration capability.
VishalPathak2 - PeerSpot reviewer
Dec 27, 2023
It is an effective solution in terms of performance and functionalities.
reviewer2666148 - PeerSpot reviewer
Feb 20, 2025
The flexibility for creating manual workflows stands out.
AKASH MAJUMDER - PeerSpot reviewer
Mar 28, 2025
Since implementing Cortex XSIAM, incident response times have been significantly reduced by approximately twenty percent.
Jitendra_Singh - PeerSpot reviewer
Feb 28, 2025
Cortex XSIAM enhances our ability to apply endpoint protection policies, implement restrictions, conduct scans, and engage in sandboxing.
reviewer2590284 - PeerSpot reviewer
Nov 12, 2024
One of the valued aspects of the product is its use of artificial intelligence to detect security vulnerabilities.
reviewer2509914 - PeerSpot reviewer
Jul 3, 2024
It does a better job of identifying anomalies that are more likely to be incidents of compromise without as many false positives or false negatives.
 

Cortex XSIAM Cons review quotes

Forrest Stevens - PeerSpot reviewer
Sep 28, 2023
Further integration capabilities with various other software products that can seamlessly tie into Cortex XSIAM would be advantageous.
Mostafa-Ahmed - PeerSpot reviewer
Sep 29, 2023
The platform isn't very developer-friendly and it should provide more flexibility and ease.
reviewer2562009 - PeerSpot reviewer
Sep 30, 2024
I am not sure if any improvements are needed right now.
Find out what your peers are saying about Palo Alto Networks, Microsoft, IBM and others in Security Information and Event Management (SIEM). Updated: August 2025.
865,295 professionals have used our research since 2012.
VishalPathak2 - PeerSpot reviewer
Dec 27, 2023
The support could be a bit faster.
reviewer2666148 - PeerSpot reviewer
Feb 20, 2025
The standard integrations are very limited, and the integrations available are not listed in the marketplace.
AKASH MAJUMDER - PeerSpot reviewer
Mar 28, 2025
Cortex XSIAM needs improvements in terms of data onboarding, parsers, and third-party integration supports.
Jitendra_Singh - PeerSpot reviewer
Feb 28, 2025
I would rate the overall stability a six or seven, as we have only used it for a few months and need a year of experience to provide a full assessment.
reviewer2590284 - PeerSpot reviewer
Nov 12, 2024
Cortex could improve the detection and online resolution of security vulnerabilities.
reviewer2509914 - PeerSpot reviewer
Jul 3, 2024
It could provide more integration with a large variety of products.
YP
Jul 26, 2024
There is room for improvement in expanding integrations to include more cybersecurity solutions.