Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Cortex XSOAR View product | TheHive by StrangeBee View product |
|---|---|---|
| Overview | ||
| What it is | Looking for SOAR software? Cortex XSOAR by Palo Alto Networks provides indicator scoring for automated incident response. Compare features and alternatives. | TheHive by StrangeBee: alert triage and audit trails. Ideal for alert investigation. Deployment: self-hosted. See how it compares with top Incident Response alternatives. |
| Product type | Security Orchestration, Automation, and Response (SOAR) | Open-Source Security Incident Response Platform |
| Best for | Cross-industry, Financial Services, Telecommunications, Healthcare, MSSPs, Government | Cross-industry, SOCs, CERTs, Enterprise IT |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudHybridOn-Premise | On-Premise |
| Deployment details | Cloud SaaS; On-premises; Hybrid; Cloud SaaS; On-premises Linux virtual appliance (ESXi, KVM); AWS/Azure hosted | Self-hosted; Docker; Linux; Docker Compose; Debian/Ubuntu Packages; Kubernetes |
| Data residency | Customer-selected data residency (US, EU, APAC) | Self-Hosted / On-Premises |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: yes | Mobile app: no |
| Supported platforms | CloudLinux on-premises serversAWSAzureGCP | Docker ContainersKubernetesOn-Premises Linux |
| Compliance | SOC 2 Type II, ISO 27001, HIPAA, GDPR | Open Source (AGPL-3.0) |
| Integrations & coverage | ||
| Integrations | Cortex XDRSplunkMicrosoft SentinelCrowdStrikeQRadarServiceNowJiraSlack | CortexMISPSuricataElasticSplunkQRadar |
| Industries | Cross-industryFinancial ServicesTelecommunicationsHealthcareMSSPsGovernment | Cross-industrySOCsCERTsEnterprise IT |
| Regions | Global | Global |
| Vendor | ||
| Company | Palo Alto Networks | StrangeBee |
| Headquarters | Santa Clara, California, USA | Paris, France |
| Company size | 15,000+ | 51-200 |
| Founded | 2005 | 2018 |
Overview
What it is
Cortex XSOAR
Looking for SOAR software? Cortex XSOAR by Palo Alto Networks provides indicator scoring for automated incident response. Compare features and alternatives.TheHive
TheHive by StrangeBee: alert triage and audit trails. Ideal for alert investigation. Deployment: self-hosted. See how it compares with top Incident Response alternatives.Product type
Cortex XSOAR
Security Orchestration, Automation, and Response (SOAR)TheHive
Open-Source Security Incident Response PlatformBest for
Cortex XSOAR
Cross-industry, Financial Services, Telecommunications, Healthcare, MSSPs, GovernmentTheHive
Cross-industry, SOCs, CERTs, Enterprise ITPricing
Pricing model
Cortex XSOAR
Contact VendorTheHive
Contact VendorFree trial
Cortex XSOAR
Free trial: yesTheHive
Free trial: yesDeployment
Deployment options
Cortex XSOAR
SaaSCloudHybridOn-Premise
TheHive
On-Premise
Deployment details
Cortex XSOAR
Cloud SaaS; On-premises; Hybrid; Cloud SaaS; On-premises Linux virtual appliance (ESXi, KVM); AWS/Azure hostedTheHive
Self-hosted; Docker; Linux; Docker Compose; Debian/Ubuntu Packages; KubernetesData residency
Cortex XSOAR
Customer-selected data residency (US, EU, APAC)TheHive
Self-Hosted / On-PremisesKey features
What it offers
Cortex XSOAR
- Automated playbook engine
- Collaborative incident war room
- Threat intelligence management
- 900+ prebuilt integration packs
- Automated IOC extraction
- Indicator scoring
- Custom Python/JS automation
- Automated incident response
TheHive
- Collaborative incident response
- Alert triage
- Observable analysis
- MISP synchronization
- Task assignment
- Audit trails
- Security incident tracking
- Alert investigation
Platform & access
API access
Cortex XSOAR
API access: yesTheHive
API access: yesSingle sign-on (SSO)
Cortex XSOAR
SSO: yesTheHive
SSO: yesRole-based access (RBAC)
Cortex XSOAR
RBAC: yesTheHive
RBAC: yesMulti-tenant
Cortex XSOAR
Multi-tenant: yesTheHive
Multi-tenant: yesMobile app
Cortex XSOAR
Mobile app: yesTheHive
Mobile app: noSupported platforms
Cortex XSOAR
CloudLinux on-premises serversAWSAzureGCP
TheHive
Docker ContainersKubernetesOn-Premises Linux
Compliance
Cortex XSOAR
SOC 2 Type II, ISO 27001, HIPAA, GDPR
TheHive
Open Source (AGPL-3.0)
Integrations & coverage
Integrations
Cortex XSOAR
Cortex XDRSplunkMicrosoft SentinelCrowdStrikeQRadarServiceNowJiraSlack
TheHive
CortexMISPSuricataElasticSplunkQRadar
Industries
Cortex XSOAR
Cross-industryFinancial ServicesTelecommunicationsHealthcareMSSPsGovernment
TheHive
Cross-industrySOCsCERTsEnterprise IT
Regions
Cortex XSOAR
Global
TheHive
Global
Vendor
Company
Cortex XSOAR
Palo Alto NetworksTheHive
StrangeBeeHeadquarters
Cortex XSOAR
Santa Clara, California, USATheHive
Paris, FranceCompany size
Cortex XSOAR
15,000+TheHive
51-200Founded
Cortex XSOAR
2005TheHive
2018