Cortex XSOAR

What differentiates Cortex XSOAR from other similar products?

Cortex XSOAR is especially efficient at automating security operations, reducing manpower drastically. What makes them different from other applications, additionally, is their ability to integrate with a very broad array of security tools and customizable playbooks allow them to provide a solution that is very tuned to an organization's needs.

What is your favorite aspect of this product?

The seamless integration capability complements the existing security infrastructure for a more roundtable view of incident management.

What do you dislike most about this product?

While strong, Cortex XSOAR can be fairly complex to get set up, and there's an assumption you know how existing work is done. It also provides substantial customization, which means the process is costly and can potentially delay full deployment and optimization in rapidly developing environments.

What recommendations would you give to someone considering this product?

We are working with Cortex XSOAR to change the way we handle security incidents. We have minimized its reaction times and lowered the workload on our security team with its automation capabilities. The instructions are customizable, allowing us to tailor the system to our needs for better overall security effectiveness. Leaving behind ADX, our journey towards a more secure and more efficient operation has been marked by the transition to Cortex XSOAR.

What differentiates Cortex XSOAR from other similar products?

Compared to other SOAR tools, Cortex XSOAR includes built-in case management, allowing admins to track, investigate, and resolve incidents by using it's war room feature through it's real time collaboration and all these features are available in a single platform instead of relying on multiple platforms. And moreover its seamless automation reduces the need for manual intervention, streamlining workflows and ensuring faster incident resolution.

What is your favorite aspect of this product?

My favorite aspect of Cortex XSOAR is its War Room feature and it's stramlined workflows of Case management, which enhances teamwork between third-party systems and clients by enabling real-time investigation of issues reported by stakeholders. It ensures corrective and preventive actions are taken while implementing strategies that do not impact other applications. This helps resolve production issues immediately preventing escalations.

What do you dislike most about this product?

One thing I can say it's Initial setup and Implementations with Salesforce was bit complex. However once setup is done it will significantly improves the Security and Case Management efficiently unlike any other products.

What recommendations would you give to someone considering this product?

Product knowledge and experience in Python scripting are beneficial for fully utilizing its capabilities. While anyone can learn it quickly, prior knowledge enables users to maximize its potential more effectively.