Palo Alto Networks Reviews, Ratings & Features 2026 | Gartner Peer Insights

Identity Threat Detection and Response (ITDR) encompasses a suite of security practices and technologies dedicated to detecting, investigating, and responding to threats that target digital identities within an organization. As identity-related attacks such as compromised credentials, privilege escalation, and unauthorized access become increasingly common, ITDR solutions play a pivotal role in safeguarding sensitive systems and data. These solutions work by continuously monitoring identity activities, analyzing behavioral patterns, and identifying anomalies that may signal malicious intent. When a threat is detected, ITDR tools empower security teams to respond rapidly through measures like isolating affected accounts, enforcing multi-factor authentication, or triggering automated remediation workflows. In an era where digital identities are a primary attack vector, ITDR is essential for strengthening an organization’s overall security posture.

Who are the target users of Identity Threat Detection and Response (ITDR) solutions?

Primary users of ITDR solutions include security operations teams, IT administrators, and identity and access management (IAM) professionals within organizations of all sizes. Chief Information Security Officers (CISOs), compliance managers, and risk management teams also rely on ITDR to ensure regulatory compliance and reduce the risk of data breaches. These solutions are especially critical for, remote workforces, or heightened regulatory requirements.

What are the core capabilities of Identity Threat Detection and Response (ITDR) solutions?

Anomaly-Based Threat Detection: Tracks identity behavior to detect unusual patterns like odd login times or access spikes that may signal compromised accounts or insider threats.
Real-Time Alerting: Delivers instant notifications when identity-related risks are detected, helping security teams act before damage occurs.
Automated Threat Response: Takes immediate action such as locking accounts or triggering MFA to contain threats without waiting for manual intervention.

What are the benefits of Identity Threat Detection and Response (ITDR) solutions?

ITDR solutions help organizations proactively defend against identity-based attacks, reducing the risk of data breaches and operational disruptions. Security teams benefit from faster threat detection and response, improved visibility into identity-related risks, and reduced manual workloads through automation. Executives and compliance leaders gain confidence in their organization’s ability to meet regulatory requirements and protect sensitive information, ultimately enhancing the organization’s reputation and resilience against evolving cyber threats.

Active

Find the top Identity Threat Detection and Response (ITDR) with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Identity Threat Detection and Response (ITDR)

Cortex XDR

Palo Alto Networks

Director Of It Services

Our organization has been utilizing Palo Alto Networks Cortex XDR to consolidate our endpoint security, user behavioral tracking, and incident response workflows. By leveraging advanced native features like Host Insight, Forensics, and Identity Analytics, the platform has significantly reduced our Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR). The cross-data stitching allows our SOC analysts to view an entire attack lifecycle-from identity compromised to the endpoint modifications made-within a single, unified interface.

<50M USD

250M - 500M USD

50M - 250M USD

500M - 1B USD

30B + USD

1B - 3B USD

3B - 10B USD

10B - 30B USD

Gov't/PS/ED <5,000 Employees

It Associate

Cortex XDR est utilité en production depuis plusieurs années sur l'ensemble de notre parc de pc portables. La solution s'est révélée stable, efficace et transparente pour les utilisateurs. La détection d'anomalie est pertinente, peu de faux positifs et aucun impact notable sur les performances des postes

Cortex XDR has been used in production for several years across our entire fleet of laptops. The solution has proven stable, efficient, and transparent for users. Anomaly detection is accurate, with few false positives and no noticeable impact on workstation performance.

Sales Manager

Cortex XDR provides strong endpoint detection and response capabilities with good visibility across incidents and effective threat correlation. The platform works well in enterprise environments and integrates effectively with the broader Palo Alto NEtworks ecosystem. Deployment and policy management are generally straightforward, and customers appreciate the centalized management and analytics capabilities. The main challenges are related to licensing complexity , pricing , and the lerning curve for advanced features and tuning , in some environments , initial configuration and optimization require experienced administrators to fully utilize the platform`s capabilities . Overall , the product delivers solid security outcomes and reliable protection  for enterprise customers.

Microsoft

CrowdStrike

SentinelOne

Cisco Systems

Sophos

Proofpoint

Silverfort

Delinea

Seceon

Gurucul

Blackpoint Cyber

Semperis

Huntress

Guardz

Palo Alto Networks is a global cybersecurity organization shaping the future of cloud-centric technology. The main business objective is to provide effective cybersecurity solutions, maintaining and valuing the digital way of life. It addresses the significant issue of maintaining digital security in an increasingly online-centric world. The company utilizes innovative approaches leveraging advancements in artificial intelligence, analytics, automation, and orchestration. Offering an integrated platform and bolstering a burgeoning ecosystem of collaborators, it assures protection across various platforms including clouds, networks, and mobile devices. The organization envisions a progressively safe and secure digital world each day.

Palo Alto Networks, the global cybersecurity leader, is shaping the cloud-centric future with technology that is transforming the way people and organizations operate. Our mission is to be the cybersecurity partner of choice, protecting our digital way of life. We help address the world's greatest security challenges with continuous innovation that seizes the latest breakthroughs in artificial intelligence, analytics, automation, and orchestration. By delivering an integrated platform and empowering a growing ecosystem of partners, we are at the forefront of protecting tens of thousands of organizations across clouds, networks, and mobile devices. Our vision is a world where each day is safer and more secure than the one before. For more information, visit www.paloaltonetworks.com.

Reviews

Ratings Overview

Overall experience with

Favorable Review

Strong and flexible solution with solid real - world performance in production environments.

Critical Review

Cortex XDR: a discreet yet effective solution for workstation security

Likes and dislikes about

likes

dislikes