{"data":{"slug":"cortex-xdr","name":"Cortex XDR","tagline":"Extended detection and response across endpoint, network and cloud","vendor":{"slug":"palo-alto-networks","name":"Palo Alto Networks","website":"https:\/\/www.paloaltonetworks.com","description":"Palo Alto Networks is a cybersecurity company offering network security, SASE, cloud security and security operations platforms.","hq_country":"US","hq_city":"Santa Clara","founded_year":2005,"employees":13900,"employees_as_of":2024,"employee_range":"10,000+","is_public":true,"ticker":"NASDAQ: PANW","deloitte_alliance":true,"deloitte_strategic_alliance":false,"deloitte_alliance_listings":[{"name":"Palo Alto Networks, Inc.","url":"https:\/\/www.deloitte.com\/us\/en\/alliances\/deloitte-palo-alto-networks-digital-transformation-solutions.html"}],"revenue_usd":8000000000,"wikidata_id":"Q7128508","profiles":{},"products":{},"products_count":{},"url":"https:\/\/comparare.echoenes.dev\/vendor\/palo-alto-networks","api_url":"https:\/\/comparare.echoenes.dev\/api\/v1\/vendors\/palo-alto-networks"},"vendor_slug":"palo-alto-networks","vendor_employees":13900,"vendor_hq_country":"US","vendor_founded_year":2005,"deloitte_alliance":true,"categories":["endpoint-security"],"industries":["banking","public-sector","healthcare","tmt","energy","cross-industry"],"features":[{"slug":"api","name":"API access"},{"slug":"role-based-access","name":"Role-based access"},{"slug":"audit-log","name":"Audit log"},{"slug":"automation-workflows","name":"Workflow automation"},{"slug":"ai-features","name":"AI features"},{"slug":"dashboards","name":"Dashboards"}],"pricing":{"model":"quote","starting_price":null,"currency":null,"unit":null,"free_plan":false,"free_trial":false,"label":"Contact for quote"},"open_source":false,"deployment":["cloud"],"platforms":["web","windows","macos","linux","android","ios"],"languages":["en"],"segments":["mid","enterprise"],"metrics":{"active_users":null,"customers":null,"note":null},"rating":null,"reviews_count":0,"website":"https:\/\/www.paloaltonetworks.com\/cortex\/cortex-xdr","url":"https:\/\/comparare.echoenes.dev\/product\/cortex-xdr","api_url":"https:\/\/comparare.echoenes.dev\/api\/v1\/products\/cortex-xdr","description":"Cortex XDR is an extended detection and response platform that combines endpoint protection with analytics over network, cloud and identity data. It prevents malware and exploits on endpoints, detects attacks using behavioural analytics and supports investigation and response from one console. It is part of the Cortex security operations portfolio alongside XSIAM. It is used by security teams in mid-sized and large organisations.","pros_cons":{"pros":["Correlates endpoint, network and cloud telemetry","Strong behavioral threat detection and investigation","Integrates with Palo Alto firewalls and SOC tools"],"cons":["Tuning may be needed to reduce false positives","Cost can be high for smaller organizations","Console has a learning curve","Pricing only on request","No free plan or free trial"]},"company_profile":{"name":"Palo Alto Networks, Inc.","scope":"company","overview":"Palo Alto Networks sells next-generation firewalls, SASE, cloud-native application security and an AI-driven security operations platform. It targets large enterprises and governments seeking to consolidate security tools onto fewer platforms. It is notable for its platformization strategy and acquisitions, including the agreed purchase of CyberArk to add identity security.","ownership":"public","parent_company":null,"ticker":"NASDAQ: PANW","employee_range":"10,001\u201350,000","industries":["banking","public-sector","healthcare","tmt","energy","cross-industry"],"key_offerings":["Strata Network Security (NGFW)","Prisma SASE","Cortex XSIAM","Cortex Cloud","Unit 42"],"use_cases":["Consolidating firewall and remote access into SASE","AI-driven SOC detection and automated response","Securing cloud workloads and application pipelines"],"strengths":["Market-leading firewall and SASE portfolio","Broad platform reduces number of security vendors","Strong threat research through Unit 42"],"considerations":["Premium pricing versus point-solution competitors","Integrating acquired products can be uneven","Platform consolidation increases vendor dependence"],"deloitte_services":["Security platform consolidation and network modernization","SOC transformation and managed detection operations","Cloud security posture and zero trust programs"],"products":{},"source":"editorial"},"alternatives":[{"slug":"crowdstrike-falcon","name":"CrowdStrike Falcon","url":"https:\/\/comparare.echoenes.dev\/product\/crowdstrike-falcon"},{"slug":"microsoft-defender-endpoint","name":"Microsoft Defender for Endpoint","url":"https:\/\/comparare.echoenes.dev\/product\/microsoft-defender-endpoint"},{"slug":"sentinelone-singularity","name":"SentinelOne Singularity","url":"https:\/\/comparare.echoenes.dev\/product\/sentinelone-singularity"},{"slug":"check-point-harmony-endpoint","name":"Check Point Harmony Endpoint","url":"https:\/\/comparare.echoenes.dev\/product\/check-point-harmony-endpoint"}],"data_sources":{"curated":"2026-10-26"},"last_verified_at":"2026-10-26"}}