---
title: Cortex XDR Reviews
meta_title: 'Cortex XDR Reviews 2026: Details, Pricing, & Features | G2'
meta_description: Filter 63 reviews by the users' company size, role or industry to
  find out how Cortex XDR works for a business like yours.
aggregate_rating:
  rating_value: 4.5
  review_count: 63
  scale: '5'
date_modified: '2026-07-21'
parent_category:
  name: Cloud Security
  url: https://www.g2.com/categories/cloud-security
---

# Cortex XDR Reviews
**Vendor:** Palo Alto Networks  
**Category:** [Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms)  
**Average Rating:** 4.5/5.0  
**Total Reviews:** 63
## About Cortex XDR
Cortex XDR is the industry’s first extended detection and response platform that stops modern attacks by integrating data from any source. With Cortex XDR, you can harness the power of AI, analytics and rich data to detect stealthy threats. Your SOC team can cut through the noise and focus on what matters most with intelligent alert grouping and incident scoring. Cross-data insights accelerate investigations, so you can streamline incident response and recovery. Cortex XDR delivers peace of mind with best-in-class endpoint protection that achieved the highest combined protection and detection scores in the MITRE ATT&amp;CK® round 3 evaluation. The Cortex XDR platform collects and analyzes all data, so you can gain complete visibility and holistic protection to secure what’s next.



## Cortex XDR Pros & Cons
**What users like:**

- Users value the **important alert notifications** from Cortex XDR, which enhance security without overwhelming them. (2 reviews)
- Users appreciate the **simplicity and manageability** of Cortex XDR, finding it easy to navigate and utilize effectively. (2 reviews)
- Users love the **unique features** of Cortex XDR, especially its effective threat detection without compromising system speed. (2 reviews)
- Users praise the **unified detection and response capability** of Cortex XDR, enhancing threat investigation efficiency and accuracy. (2 reviews)
- Users value the **unified detection and response capability** of Cortex XDR for swift and precise threat investigations. (2 reviews)
- AI (1 reviews)
- AI Technology (1 reviews)
- Alerting (1 reviews)
- Alerts (1 reviews)
- Users appreciate the **effective antivirus protection** of Cortex XDR, as it quickly detects and handles various threats. (1 reviews)

**What users dislike:**

- Users find **limited features** in Cortex XDR, with restrictions affecting core OS functionalities and usability issues on lower-end systems. (2 reviews)
- Users experience a **noticeable performance impact** on lower-end systems with the Cortex XDR agent installed. (1 reviews)
- Users face **compatibility issues** with Cortex XDR, restricting core functionalities and software installations on their machines. (1 reviews)
- Users find the **system complexity** challenging, often struggling with management and a steep learning curve. (1 reviews)
- Users find the **complex management** of Cortex XDR challenging due to its steep learning curve and customization difficulties. (1 reviews)
- Users find the **difficult learning curve** challenging, especially when managing policies and customizing detections in Cortex XDR. (1 reviews)
- Users find the Cortex XDR to be **expensive** for public school systems, but value its worth despite the cost. (1 reviews)
- Users note the **restrictive core functionalities** of Cortex XDR, limiting certain installations and affecting usability. (1 reviews)
- High Resource Usage (1 reviews)
- Users face **installation difficulties** with Cortex XDR, as it restricts some core OS functionalities during setup. (1 reviews)


## Cortex XDR Discussions
  - [What is Cortex XDR?](https://www.g2.com/discussions/what-is-cortex-xdr) - 1 comment

- [View Cortex XDR pricing details and edition comparison](https://www.g2.com/products/palo-alto-networks-cortex-xdr/reviews?order=most_recent&page=3&section=pricing&secure%5Bexpires_at%5D=2026-07-23+03%3A03%3A38+-0500&secure%5Bsession_id%5D=2a1cb0cf-6deb-4204-a8de-0e87929b286b&secure%5Btoken%5D=3d02e23e61bc53463226b8383f87a8957b65af3c8e311363b7c3388d8a003825&format=llm_user)
## Cortex XDR Integrations
  - [Amazon Simple Storage Service (S3)](https://www.g2.com/products/amazon-simple-storage-service-s3/reviews)
  - [Google Cloud Storage](https://www.g2.com/products/google-cloud-storage/reviews)
  - [Google Security Operations](https://www.g2.com/products/google-security-operations/reviews)
  - [Google Workspace](https://www.g2.com/products/google-workspace/reviews)
  - [Graylog](https://www.g2.com/products/graylog/reviews)
  - [Microsoft Sentinel](https://www.g2.com/products/microsoft-sentinel/reviews)
  - [RadarQ](https://www.g2.com/products/radarq/reviews)

## Cortex XDR Features
**Administration**
- Compliance
- Web Control
- Application Control
- Asset Management
- Device Control

**Analysis**
- Incident Reporting
- Network Visibility
- Metadata Enrichment
- Metadata Management

**Detection & Response**
- Response Automation
- Threat Hunting
- Rule-Based Detection
- Real-Time Detection

**Services - Endpoint Detection & Response (EDR) **
- Managed Services

**Cloud Visibility**
- Data Discovery
- Cloud Registry
- Cloud Gap Analytics

**System Control**
- Device Control
- Web Control
- Application Control
- Asset Management
- System Isolation

**Functionality**
- System Isolation
- Firewall
- Endpoint Intelligence
- Malware Detection

**Response**
- Incident Alerts
- Response Orchestration
- Response Automation

**Management**
- Extensibility
- Workflow Automation
- Unified Visibility

**Security**
- Data Security
- Data loss Prevention
- Security Auditing

**Vulnerability Prevention**
- Endpoint Intelligence
- Firewall
- Malware Detection

**Analysis**
- Automated Remediation
- Incident Reports
- Behavioral Analysis

**Detection**
- Multi-Network Monitoring
- Asset Discovery
- Anomaly Detection

**Analytics**
- Threat Intelligence
- Artificial Intelligence & Machine Learning
- Data Collection

**Identity**
- SSO
- Governance
- User Analytics

**Security Management**
- Incident Reports
- Security Validation
- Compliance 

**Agentic AI - Extended Detection and Response (XDR) Platforms**
- Autonomous Task Execution
- Proactive Assistance
- Decision Making

**Agentic AI - Cloud Detection and Response (CDR)**
- Autonomous Task Execution
- Proactive Assistance
- Decision Making

**Services - Network Detection and Response (NDR)**
- Managed Services

**Services - Extended Detection and Response (XDR)**
- Managed Services

**Services - Cloud Detection and Response (CDR) **
- Managed Services

## Top Cortex XDR Alternatives
  - [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) - 4.7/5.0 (792 reviews)
  - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - 4.6/5.0 (416 reviews)
  - [ESET PROTECT](https://www.g2.com/products/eset-protect/reviews) - 4.6/5.0 (962 reviews)

