--- title: Cortex XDR Reviews meta\_title: 'Cortex XDR Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 85 reviews by the users' company size, role or industry to find out how Cortex XDR works for a business like yours. aggregate\_rating: rating\_value: 4.5 review\_count: 85 scale: '5' date\_modified: '2026-08-11' parent\_category: name: Cloud Security url: https://www.g2.com/categories/cloud-security --- # Cortex XDR Reviews & Product Details Visit Website Cortex XDR is the industry’s first extended detection and response platform that stops modern attacks by integrating data from any source. With Cortex XDR, you can harness the power of AI, analytics and rich data to detect stealthy threats. Your SOC team can cut through the noise and focus on what matters most with intelligent alert grouping and incident scoring. Cross-data insights accelerate investigations, so you can streamline incident response and recovery. Cortex XDR delivers peace of mind with best-in-class endpoint protection that achieved the highest combined protection and detection scores in the MITRE ATT&CK® round 3 evaluation. The Cortex XDR platform collects and analyzes all data, so you can gain complete visibility and holistic protection to secure what’s next. * * * Product Website Cortex XDR Seller [Palo Alto Networks](https://www.g2.com/sellers/palo-alto-networks) Discussions [Cortex XDR Community](https://www.g2.com/products/palo-alto-networks-cortex-xdr/discuss) Solution Type All-in-One Overview by Kasey Cross Show More ## Value at a Glance Averages based on real user reviews. ### Time to Implement 2 months [ View More Pricing Information ](https://www.g2.com/products/palo-alto-networks-cortex-xdr/pricing) ## Cortex XDR Integrations (11) What do users say about integrations? Verified by Cortex XDR [ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Amazon Simple Storage Service (S3) ](https://www.g2.com/products/amazon-simple-storage-service-s3/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Google Cloud Storage ](https://www.g2.com/products/google-cloud-storage/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Google Security Operations ](https://www.g2.com/products/google-security-operations/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Google Workspace ](https://www.g2.com/products/google-workspace/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Graylog ](https://www.g2.com/products/graylog/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") IBM QRadar SIEM ](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft Sentinel ](https://www.g2.com/products/microsoft-sentinel/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Palo Alto Networks Cortex XSOAR ](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Palo Alto Networks Next-Generation Firewalls ](https://www.g2.com/products/palo-alto-networks-next-generation-firewalls/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") RadarQ ](https://www.g2.com/products/radarq/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Splunk Enterprise ](https://www.g2.com/products/splunk-enterprise/reviews) Show More ![Verified User in Hospitality](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Hospitality") GH Verified User in Hospitality Mid-Market (51-1000 emp.) 7/29/2026 "Effective Endpoint Monitoring, Smooth Workflow" 4/5 What do you like best about Cortex XDR? I found Cortex XDR effective for checking and reviewing security alerts. I really like how it combines activity, network, and user actions all together, which makes investigating any intention super smooth. It's great for process activity and network connections, helping me review security alerts much faster since all related steps and activity are in one place. I totally recommend it. Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? As i said i didn't use it much to judge, just for a while and it was perfect along that. Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? I use Cortex XDR for endpoint monitoring and basic threat investigation. It effectively checks and reviews security alerts by combining process activity, network connections, and user actions, making it easier to investigate issues and reducing the need to switch between multiple tools. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic SM Sushriya M. Advisory Analyst Enterprise (\> 1000 emp.) 3/13/2026 "Cortex XDR Delivers Unified Threat Visibility and Faster Incident Response" 5/5 What do you like best about Cortex XDR? Cortex XDR helps solve the problem of detecting and responding to security threats across endpoints, network and cloud in one platform. It benefits me by giving better visibility into attacks and helping investigate and respond to incidents faster with fewer alerts to analyze. Integration with SIEM solutions is effective. Easy to use on a daily basis. Customer support is effective. Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? It can be expensive and some advanced features require additional configuration or licensing to use fully. Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? The grouping of alerts and the ability to provide a detailed yet concise overview of each alert including implementation, artifacts, impacts, and the timeline make it much easier to understand what’s happening. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite EM Ernesto M. IT Security Engineer Mid-Market (51-1000 emp.) 5/7/2026 "Centralized Palo Alto Logging That Keeps Everything Easy to Review" 5/5 What do you like best about Cortex XDR? It provides a centralized logging system for all of my Palo Alto logs, keeping everything in one place and easier to review. Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? It requires a license, and some parts can be difficult to learn if you don’t follow the proper guidance. I think this is because Palo Alto has changed names a few times now. Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? It’s helpful to have centralized log ingestion and monitoring in one place. Review collected by and hosted on G2.com. Show More Our network of Icons are G2 members who are recognized for their outstanding contributions and commitment to helping others through their expertise.G2 IconCurrent UserValidated ReviewerIncentivizedSource: G2 invite ![Christian Noel C.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Christian Noel C.") CC Christian Noel C. Jefe Regional de Inteligencia de Ciberseguridad | CIC | Enterprise (\> 1000 emp.) 4/28/2026 "Advanced Detection and Extended Telemetry" 4/5 What do you like best about Cortex XDR? I like the analysis and anomaly detection capabilities of Cortex XDR, as it supports my Blue Team in detecting potential cybersecurity incidents on a daily basis. I also highly value the extended telemetry capability that provides us with extensive details of all alerts and the validations that Cortex XDR has already performed on its own. Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? The control of applications Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? I use Cortex XDR to protect endpoints and servers, it is compatible with Ubuntu and Windows legacy operating systems. It helps us with the detection of cybersecurity incidents and its extended telemetry provides us with complete details and automatic validations. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 inviteAI Translated ![Verified User in Computer & Network Security](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer & Network Security") UC Verified User in Computer & Network Security Small-Business (50 or fewer emp.) 7/18/2026 "Advanced Analytics and Root-Cause Clarity for Faster Threat Detection" 5/5 What do you like best about Cortex XDR? Advanced analytics and root-cause analysis. It displays the exact chain of events during an attack, points out precisely how a threat entered the network, and uses machine learning to spot abnormal user or device behavior. Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? High cost and licensing complexity. It costs significantly more than entry-level EDR solutions and often requires additional licenses to access advanced features such as forensics or identity analytics. Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? Cortex XDR automatically stitches together telemetry from endpoints, network firewalls, cloud workloads, and identity providers, giving us total visibility. As a result, analysts no longer have to manually piece together logs from different consoles just to understand what happened. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Hospitality](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Hospitality") AH Verified User in Hospitality Small-Business (50 or fewer emp.) 7/27/2026 "Strong Threat Protection, but Too Many Emails and a Less User-Friendly Experience" 2.5/5 What do you like best about Cortex XDR? It is an endpoint detection and response product. It’s used by your IT department to protect you from threats and detect malicious behavior. Which is good Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? A lot of communication emails and alot of promotional emails which are a bit annoying and the software could be a bit more user friendly than what it is now Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? Cortex XDR detects and responds to cyber threats faster by correlating security data, reducing false positives, automating responses, and improving visibility. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite AY anshu Y. Network Security Engineer Mid-Market (51-1000 emp.) 12/1/2025 Business partner of the seller or seller's competitor, not included in G2 scores. "Exceptional Threat Detection and Endpoint Protection" 5/5 What do you like best about Cortex XDR? Ability to investigate and remediate security incidents. Cortex XDR protects our endpoints against advanced threats like malware, viruses and ransomware. Cortex XDR is a convenient tool for hunting advanced threats. It is a reliable tool that reduces false positives. Support and integrations with native apps and Broker VM are very simple. Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? Cortex XDR is a well-suited solution for endpoint protection, hence I don't have any limitations to pinpoint. Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? I am happy to say that Cortex XDR uses the power of AI and Machine Learning to speed up security threat detection and response. Again, Cortex XDR provides bird's-eye visibility into our organization's endpoints. Cortex XDR integrates seamlessly with other security tools, thus improving our security posture. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic PS Parth S. Security Administrator Mid-Market (51-1000 emp.) 12/10/2025 "Unified Threat Detection That Accelerates Investigations" 4.5/5 What do you like best about Cortex XDR? Its unified detection and response capability that correlates endpoint, network, and cloud telemetry for faster, more accurate threat investigation Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? Sometimes it feels a bit heavy to manage, and the learning curve can be steeper than expected when tuning policies or customizing detections Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? It pulls together alerts from across endpoints and the network to spot threats sooner, making investigations faster and reducing a lot of manual security noise. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Carlos J.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Carlos J.") CJ Carlos J. Threat Detection and Response Engineer Enterprise (\> 1000 emp.) 9/24/2025 "Cortex XDR: Threat Detection made simple" 4/5 What do you like best about Cortex XDR? I like it's ability to dig into the niche areas of cmd and process trees to identify common used TTPs. Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? Too many false positives, needs fine tuning or alert fatigue will be a big problem. Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? Cortex is identifying threats in all the systems layers Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![Nixon L.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Nixon L.") NL Nixon L. Especialista de ciberseguridad Enterprise (\> 1000 emp.) 9/30/2025 "Excellent detection and minimal false positives of cortex." 5/5 What do you like best about Cortex XDR? I highlight its broad scope for detecting potential threats. Review collected by and hosted on G2.com. What do you dislike about Cortex XDR? The customization it offers usually requires a very manual process. Review collected by and hosted on G2.com. What problems is Cortex XDR solving and how is that benefiting you? It is offering exceptional protection. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 inviteAI Translated ## Questions about Cortex XDR? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about Cortex XDR ](https://www.g2.com/products/palo-alto-networks-cortex-xdr/discussions/new) ![Dr. Jagannath S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Dr. Jagannath S.") DS Dr. Jagannath Sahoo • Last activity 19 days ago How are you handling Cortex XDR deployment complexity and ongoing tuning? 1 Upvote 0 [ Join the conversation ](https://www.g2.com/discussions/how-are-you-handling-cortex-xdr-deployment-complexity-and-ongoing-tuning) GU Guest User • Last activity about 4 years ago What is Cortex XDR? 0 Upvotes 1 [ Join the conversation ](https://www.g2.com/discussions/what-is-cortex-xdr) [ View all Discussions ](https://www.g2.com/products/palo-alto-networks-cortex-xdr/discuss) ## Pricing Insights Averages based on real user reviews. ### Time to Implement 2 months ### Return on Investment 11 months ### Average Discount 17% [ View More Pricing Information ](https://www.g2.com/products/palo-alto-networks-cortex-xdr/pricing) Cortex XDR Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_56db399f44b6fabb7c667f09bc770579/crowdstrike-falcon-endpoint-protection-platform.png "Product Avatar Image") CrowdStrike Falcon Endpoint... 4.6/5(441) [ Compare Now ](https://www.g2.com/compare/palo-alto-networks-cortex-xdr-vs-crowdstrike-falcon-endpoint-protection-platform) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_5292562d6a2cb01ab3d34a4e57a3225a/sentinelone-singularity-endpoint.png "Product Avatar Image") SentinelOne Singularity... 4.7/5(212) [ Compare Now ](https://www.g2.com/compare/palo-alto-networks-cortex-xdr-vs-sentinelone-singularity-endpoint) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_4e2b08dd17397bdc99a5658447cbc589/microsoft-defender-for-endpoint.jpg "Product Avatar Image") Microsoft Defender for... 4.4/5(312) [ Compare Now ](https://www.g2.com/compare/palo-alto-networks-cortex-xdr-vs-microsoft-defender-for-endpoint) ##### ##### Cortex XDR Features Detection & Response Response Automation Threat Hunting Rule-Based Detection Management Workflow Automation Unified Visibility Analytics Threat Intelligence Artificial Intelligence & Machine Learning Data Collection [ View More Features ](https://www.g2.com/products/palo-alto-networks-cortex-xdr/features) ## Top-Rated Alternatives [ ![Sophos Endpoint](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Sophos Endpoint") Sophos Endpoint 4.7/5(837) ](https://www.g2.com/products/sophos-endpoint/reviews) [ ![CrowdStrike Falcon Endpoint Protection Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "CrowdStrike Falcon Endpoint Protection Platform") CrowdStrike Falcon Endpoint Protection Platform 4.6/5(441) ](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) [ ![ESET PROTECT](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "ESET PROTECT") ESET PROTECT 4.6/5(1,003) ](https://www.g2.com/products/eset-protect/reviews) [ View All Alternatives ](https://www.g2.com/products/palo-alto-networks-cortex-xdr/competitors/alternatives) ##### Categories on G2 [Endpoint Protection Platforms](https://www.g2.com/categories/endpoint-protection-platforms)[Endpoint Detection & Response (EDR)](https://www.g2.com/categories/endpoint-detection-response-edr)[Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms) [Endpoint Protection Platforms](https://www.g2.com/categories/endpoint-protection-platforms)[Endpoint Detection & Response (EDR)](https://www.g2.com/categories/endpoint-detection-response-edr)[Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms)[Cloud Detection and Response (CDR)](https://www.g2.com/categories/cloud-detection-and-response-cdr)[Network Detection and Response (NDR)](https://www.g2.com/categories/network-detection-and-response-ndr) [Show MoreShow Less](javascript:void(0);) ##### Explore More [Top-rated event planning platforms for multi-day events](https://www.g2.com/discussions/event-planning-top-rated-event-planning-platforms-for-multi-day-events)[Top-rated email template builders for agencies](https://www.g2.com/discussions/what-are-the-top-rated-email-template-builders-for-agencies)[Best-rated onboarding software for sales teams](https://www.g2.com/discussions/best-rated-onboarding-software-for-sales-teams) [User-friendly payroll software for companies in multiple countries](https://www.g2.com/discussions/what-is-the-most-user-friendly-payroll-software-for-companies-in-multiple-countries)[Highest rated project management tool for mobile use](https://www.g2.com/discussions/highest-rated-project-management-tool-for-mobile-use)[Pros and Cons Details](https://www.g2.com/products/palo-alto-networks-cortex-xdr/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)