Overall experience with
How helpful reviews are selected
Favorable Review
Product: Cortex XDR
Top-level correlation and response, with significant learning curve and investment.
Critical Review
Product: Cortex XDR
Positive dashboard and support experience, but contract process was difficult
Likes and dislikes about
likes
The correlation of events across endpoint, network, and identity on a single timeline is what we value most; instead of manually piecing together information from different sources, Cortex XDR presents the incident already correlated with the entire context. The automated response playbooks have helped us contain threats in minutes instead of hours, especially in cases of lateral movement or early-stage ransomware. The threat hunting engine with XQL-like queries is very powerful once the team gets the hang of it, allowing for quite in-depth investigations without relying heavily on external scripts.
June 30, 2026
dislikes
The issues that our organization had were about scalability, as well as the overall risk and risk mitigation of dealing with PA. Difficult contract negotiations around third party liability and cybersecurity insurance.
July 2, 2026
This service may contain translations provided by Google. Google disclaims all warranties related to the translations, express or implied, including any warranties of accuracy, reliability, and any implied warranties of merchantability, fitness for a particular purpose and noninfringement. Gartner's use of this provider is for operational purposes and does not constitute an endorsement of its products or services.