Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Cortex XSOAR View product | Splunk SOAR by Splunk View product |
|---|---|---|
| Overview | ||
| What it is | Looking for SOAR software? Cortex XSOAR by Palo Alto Networks provides indicator scoring for automated incident response. Compare features and alternatives. | Splunk SOAR from Splunk focuses on security orchestration. Key capabilities: case management and automated containment. Compare it with the leading SOAR alternatives. |
| Product type | Security Orchestration, Automation, and Response (SOAR) | Security Orchestration, Automation & Response |
| Best for | Cross-industry, Financial Services, Telecommunications, Healthcare, MSSPs, Government | Cross-industry, Enterprise SOC, Managed Detection Providers |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudHybridOn-Premise | SaaSCloudOn-Premise |
| Deployment details | Cloud SaaS; On-premises; Hybrid; Cloud SaaS; On-premises Linux virtual appliance (ESXi, KVM); AWS/Azure hosted | Cloud; On-premises; Cloud-hosted SaaS; On-premises virtual appliance |
| Data residency | Customer-selected data residency (US, EU, APAC) | Global; US; EU; APAC |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: yes | Mobile app: no |
| Supported platforms | CloudLinux on-premises serversAWSAzureGCP | Enterprise SOCSecurity Workflows |
| Compliance | SOC 2 Type II, ISO 27001, HIPAA, GDPR | SOC 2ISO 27001GDPRHIPAA |
| Integrations & coverage | ||
| Integrations | Cortex XDRSplunkMicrosoft SentinelCrowdStrikeQRadarServiceNowJiraSlack | Splunk ESCrowdStrikePalo AltoCheck PointServiceNowJira |
| Industries | Cross-industryFinancial ServicesTelecommunicationsHealthcareMSSPsGovernment | Cross-industryEnterprise SOCManaged Detection Providers |
| Regions | Global | Global |
| Vendor | ||
| Company | Palo Alto Networks | Splunk |
| Headquarters | Santa Clara, California, USA | San Francisco, California, USA |
| Company size | 15,000+ | 8,000+ |
| Founded | 2005 | 2003 |
Overview
What it is
Cortex XSOAR
Looking for SOAR software? Cortex XSOAR by Palo Alto Networks provides indicator scoring for automated incident response. Compare features and alternatives.Splunk SOAR
Splunk SOAR from Splunk focuses on security orchestration. Key capabilities: case management and automated containment. Compare it with the leading SOAR alternatives.Product type
Cortex XSOAR
Security Orchestration, Automation, and Response (SOAR)Splunk SOAR
Security Orchestration, Automation & ResponseBest for
Cortex XSOAR
Cross-industry, Financial Services, Telecommunications, Healthcare, MSSPs, GovernmentSplunk SOAR
Cross-industry, Enterprise SOC, Managed Detection ProvidersPricing
Pricing model
Cortex XSOAR
Contact VendorSplunk SOAR
Contact VendorFree trial
Cortex XSOAR
Free trial: yesSplunk SOAR
Free trial: yesDeployment
Deployment options
Cortex XSOAR
SaaSCloudHybridOn-Premise
Splunk SOAR
SaaSCloudOn-Premise
Deployment details
Cortex XSOAR
Cloud SaaS; On-premises; Hybrid; Cloud SaaS; On-premises Linux virtual appliance (ESXi, KVM); AWS/Azure hostedSplunk SOAR
Cloud; On-premises; Cloud-hosted SaaS; On-premises virtual applianceData residency
Cortex XSOAR
Customer-selected data residency (US, EU, APAC)Splunk SOAR
Global; US; EU; APACKey features
What it offers
Cortex XSOAR
- Automated playbook engine
- Collaborative incident war room
- Threat intelligence management
- 900+ prebuilt integration packs
- Automated IOC extraction
- Indicator scoring
- Custom Python/JS automation
- Automated incident response
Splunk SOAR
- Security orchestration
- 300+ pre-built integration apps
- Visual playbook editor
- Automated containment
- Case management
- Automated response playbooks
- Rapid threat containment
Platform & access
API access
Cortex XSOAR
API access: yesSplunk SOAR
API access: yesSingle sign-on (SSO)
Cortex XSOAR
SSO: yesSplunk SOAR
SSO: yesRole-based access (RBAC)
Cortex XSOAR
RBAC: yesSplunk SOAR
RBAC: yesMulti-tenant
Cortex XSOAR
Multi-tenant: yesSplunk SOAR
Multi-tenant: yesMobile app
Cortex XSOAR
Mobile app: yesSplunk SOAR
Mobile app: noSupported platforms
Cortex XSOAR
CloudLinux on-premises serversAWSAzureGCP
Splunk SOAR
Enterprise SOCSecurity Workflows
Compliance
Cortex XSOAR
SOC 2 Type II, ISO 27001, HIPAA, GDPR
Splunk SOAR
SOC 2ISO 27001GDPRHIPAA
Integrations & coverage
Integrations
Cortex XSOAR
Cortex XDRSplunkMicrosoft SentinelCrowdStrikeQRadarServiceNowJiraSlack
Splunk SOAR
Splunk ESCrowdStrikePalo AltoCheck PointServiceNowJira
Industries
Cortex XSOAR
Cross-industryFinancial ServicesTelecommunicationsHealthcareMSSPsGovernment
Splunk SOAR
Cross-industryEnterprise SOCManaged Detection Providers
Regions
Cortex XSOAR
Global
Splunk SOAR
Global
Vendor
Company
Cortex XSOAR
Palo Alto NetworksSplunk SOAR
SplunkHeadquarters
Cortex XSOAR
Santa Clara, California, USASplunk SOAR
San Francisco, California, USACompany size
Cortex XSOAR
15,000+Splunk SOAR
8,000+Founded
Cortex XSOAR
2005Splunk SOAR
2003