TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Palo Alto Networks Cortex XSOAR

    Score7.1 out of 10
    N/ACortex XSOAR, formerly Demisto and now from Palo Alto Networks since it was acquired in March 2019, provides orchestration to enable security teams to ingest alerts across sources and execute standardized, automatable playbooks for accelerated incident response. Its playbooks are powered by hundreds of integrations and thousands of security actions, striking the right balance between rapid machine execution and nuanced human oversight.N/A

    Trellix Helix

    Score7 out of 10
    Enterprise companies (1,001+ employees)
    Trellix Helix (formerly FireEye Helix) is a SIEM solution providing a non-malware threat detection solution.

    $0

    Events per second

    Pricing
    Palo Alto Networks Cortex XSOARTrellix Helix
    Editions & Modules
    No answers on this topic
    Helix Console
    $0
    Events per second
    Helix Enterprise
    $0
    Events per second
    Offerings
    Pricing Offerings
    Palo Alto Networks Cortex XSOARTrellix Helix
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoYes
    Entry-level Setup FeeNo setup feeOptional
    Additional Details——
    More Pricing Information
    Community Pulse
    Palo Alto Networks Cortex XSOARTrellix Helix
    Considered Both Products
    Palo Alto Networks
    No answer on this topic
    Trellix (FireEye + McAfee)
    No answer on this topic
    Key User Insights
    Would buy again
    100%
    Would buy again
    8 Answers
    No answers on this topic
    Delivers good value for the price
    100%
    Delivers good value for the price
    6 Answers
    No answers on this topic
    Happy with the feature set
    100%
    Happy with the feature set
    8 Answers
    No answers on this topic
    Lived up to sales and marketing promises
    86%
    Lived up to sales and marketing promises
    6 Answers
    No answers on this topic
    Implementation went as expected
    100%
    Implementation went as expected
    7 Answers
    No answers on this topic
    Features
    Palo Alto Networks Cortex XSOARTrellix Helix
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Palo Alto Networks Cortex XSOAR and Trellix Helix
    Feature
    Palo Alto Networks Cortex XSOAR
    -
    Ratings
    Trellix Helix
    8.5
    4 Ratings
    9% above category average
    Centralized event and log data collection00 Ratings8.54 Ratings
    Correlation00 Ratings8.04 Ratings
    Event and log normalization/management00 Ratings8.54 Ratings
    Deployment flexibility00 Ratings8.44 Ratings
    Integration with Identity and Access Management Tools00 Ratings8.94 Ratings
    Custom dashboards and workspaces00 Ratings8.14 Ratings
    Host and network-based intrusion detection00 Ratings9.04 Ratings
    Best Alternatives
    Palo Alto Networks Cortex XSOARTrellix Helix
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    Splunk SOAR
    Score9 out of 10
    IBM Security QRadar SIEM
    Score9 out of 10
    Enterprises
    Splunk SOAR
    Score9 out of 10
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Palo Alto Networks Cortex XSOARTrellix Helix
    Likelihood to Recommend
    8.2
    (8 ratings)
    9.0
    (4 ratings)
    Likelihood to Renew
    10.0
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    -
    (0 ratings)
    9.0
    (1 ratings)
    Implementation Rating
    10.0
    (1 ratings)
    -
    (0 ratings)
    Ease of integration
    -
    (0 ratings)
    8.1
    (4 ratings)
    User Testimonials
    Palo Alto Networks Cortex XSOARTrellix Helix
    Likelihood to Recommend
    Palo Alto Networks
    XSOAR is well suited for phishing detection and response. Phishing alerts are as much of a
    problem today as they were decades ago. This is because: ●Attackers Can leverage automation to launch high-quantity phishing attacks with the click
    of a button.
    ●Spear Phishing attacks are sophisticated and sometimes indistinguishable from real
    emails, resulting in compromise through human error.
    ●Security Teams aren’t able to follow set processes while responding to phishing alerts.
    They must coordinate across email inboxes, threat intel, NGFW, ticketing, and
    other tools. Each tool has different consoles, data conventions, and contexts,
    making it difficult for security teams to fill in the gaps while minimizing
    errors. XSOAR is less suited for analyzing traffic.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    Great for organizations that are considering improving their operational security by utilizing their threats intelligence capabilities. It offers a great collection and analysis of security events and provides solutions to solve them. When considering a solution that is secure and can provide very extensive visualization of your environment for threats.
    Read full review
    Pros
    Palo Alto Networks
    • Automation with immediate security responses.
    • Comprehensive phishing protection and increased email protection.
    • Analysis and reporting feature.
    • Intuitive and easy-to-view panels.
    • Alerts by email and sms of incidents for the administration.
    • Centralized monitoring.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    • Single location for all security event management
    • Detect advanced threats
    • Provide audit artifacts to ensure compliance
    Incentivized
    Read full review
    Cons
    Palo Alto Networks
    • The XSOAR bot creates a lot of noise on the summary page of any XSOAR incident. Although the filter is available to reduce the view, by default this should not be visible cluttering the whole scenario.
    • The interface has too much data on a single pane. I would love to have many buttons to just click and do stuff.
    • Also, I would love to have search areas more interactive and easier to navigate.
    Read full review
    Trellix (FireEye + McAfee)
    • Additional integration points (API cloud integrations).
    Incentivized
    Read full review
    Likelihood to Renew
    Palo Alto Networks
    It has proven to be far to valuable and effective to consider getting rid of it. Until something better comes along, this is staying in our product stack.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Support Rating
    Palo Alto Networks
    No answers on this topic
    Trellix (FireEye + McAfee)
    We've been fairly happy with FireEye Helix support overall. Most issues are resolved the same day the case is opened.
    Incentivized
    Read full review
    Implementation Rating
    Palo Alto Networks
    It was much easier than we all anticipated.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Alternatives Considered
    Palo Alto Networks
    The quantity of integrations with security solutions is highest in Palo Alto Solution. The capacity to identify anomalous events is much better in Palo Alto Networks Cortex XSOAR. The flexibility of increased storage area is better as well. The dashboard is very intuitive about showing the most important incidents and how to resolve them.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    It offers extensive visibility thus easy detection of threats and easy mitigation practices. Utilization of its threats intelligence capabilities thus early detection of incidents and maximization of security investments. Offers great integration of cloud resources with existing security tools thus ensuring seamless performance and all-time security for the organizational resources.
    Read full review
    Return on Investment
    Palo Alto Networks
    • Demisto has Eased malware analysis and threat hunting
    • With Demisto, it is simple to create playbooks and scripts
    • This is helped automate policy configurations on our PA firewalls through Panorama
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    • Optimization of your security investments.
    • Operations are seamless and better with easy integrations that enhance performance.
    • Efficiency in running of incidences with enhanced case management for all its alerts.
    Read full review
    ScreenShots

    Trellix Helix Screenshots

    Screenshot of Helix Cloud IntegrationsScreenshot of Helix Asset Alert Correlation