SOAR platforms · November 2026 Edition
Cortex XSOAR vs Rapid7 InsightConnect
Two of fourteen models named Cortex XSOAR first on the direct prompt; one named Rapid7 InsightConnect. Cortex XSOAR was named by fourteen of the fourteen models and Rapid7 InsightConnect by ten and Cortex XSOAR carries 60 labels and Rapid7 InsightConnect 19, so the shares are not directly comparable.
Named in three categories this edition.
Named in two categories this edition.
First-choice share8%2%Of first choices across the direct, paraphrase, budget and scale prompts, 0 to 100.
Negative rate45%11%Negative labels as a share of the product's labels, 0 to 100.
Rank in category#4#8A position in a field of 13; printed, not drawn.
Labels6019A count; the two differ.
The two percentage rows are drawn on one 0 to 100 track, Cortex XSOAR reading right to left. Rank and label count are printed, not drawn.Tines was named alongside these two in twelve of the fourteen direct answers. Tines vs Cortex XSOAR · Tines vs Rapid7 InsightConnect · Shuffle vs Cortex XSOAR
Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the SOAR platforms page.
By framing
How many of the fourteen models made each the first choice, per way of asking, and how many argued against it.
Cortex XSOARFirst choices, of fourteen modelsRapid7 InsightConnect
Direct215 against Cortex XSOAR
Paraphrase205 against Cortex XSOAR
Comparative110
Budget-constrained003 against Cortex XSOAR
Scale-constrained003 against Cortex XSOAR
Negative0011 against Cortex XSOAR · 2 against Rapid7 InsightConnect
Bars are first choices, 0 to 14 each sideModels that argued againstA model can name both, so the two sides of a row do not sum to fourteen.
Across every category in the November 2026 Edition, Cortex XSOAR and Rapid7 InsightConnect were named in the same answer forty-one times, of the 188 answers naming Cortex XSOAR and the 60 naming Rapid7 InsightConnect. In those answers Rapid7 InsightConnect took the first choice three times and Cortex XSOAR seven.
Every model, every framing
The eighty-four answers behind the chart above, one cell each: where Cortex XSOAR and Rapid7 InsightConnect stood in it.
| Model | Direct | Paraphrase | Comparative | Budget-constrained | Scale-constrained | Negative |
|---|---|---|---|---|---|---|
| Claude Haiku 4.5 | | | | | ||
| GPT-5.4 mini | | | | |||
| Gemini 3.5 Flash | | | | | ||
| Perplexity Sonar | | | | | | |
| Grok 4.20 | | | | | | |
| Mistral Small | | | | | ||
| DeepSeek V4 Flash | | | | | | |
| Llama 4 Maverick | | | | |||
| Qwen 3.7 Flash | | | | | | |
| Kimi K2 | | | | | ||
| GLM 4.7 FlashX | | | | |||
| MiniMax M2.5 | | | | |||
| GPT-6 Luna | | |||||
| Muse Glimmer 30B | | | | | |
Cortex XSOAR Rapid7 InsightConnect first choice named as an alternative argued againstblank: not namedEach cell is one answer, Cortex XSOAR on the left and Rapid7 InsightConnect on the right.The direct prompt
The plain question, one answer per model, grouped by where Cortex XSOAR and Rapid7 InsightConnect stood in it.
Cortex XSOAR first, Rapid7 InsightConnect an alternative
2 of 14 modelsRapid7 InsightConnect was named in the answer but not as the choice, or not at all.GLM 4.7 FlashXCortex XSOAR alternatives: ManageEngine Log360, Microsoft Sentinel, Splunk SOAR, Tines
MiniMax M2.5Cortex XSOAR, Swimlane Turbine alternatives: Microsoft Sentinel, Rapid7 InsightConnect
Rapid7 InsightConnect first, Cortex XSOAR not the choice
1 of 14 modelsCortex XSOAR was named in the answer but not as the choice, or not at all.Claude Haiku 4.5Rapid7 InsightConnect alternatives: Splunk SOAR, Swimlane Turbine
Neither was the first choice, one was named
6 of 14 modelsThe answer put something else first and named one of the two as an alternative.GPT-5.4 miniTines alternatives: Cortex XSOAR, FortiSOAR, Splunk SOAR
Perplexity SonarTines alternatives: ManageEngine Log360, Microsoft Sentinel, Rapid7 InsightConnect, Swimlane Turbine
Mistral SmallTines alternatives: Cortex XSOAR, Microsoft Sentinel, Swimlane Turbine
Llama 4 MaverickTines alternatives: Cortex XSOAR, IncMan SOAR, Logsign Unified SO Platform, Splunk SOAR, Torq
Kimi K2Tines alternatives: Cortex XSOAR, ORNA
Muse Glimmer 30BTines alternatives: ManageEngine Log360, Rapid7 InsightConnect, Shuffle, Swimlane Turbine
Neither was named
5 of 14 modelsThe answer made no first choice from these two in this category.Gemini 3.5 FlashTines alternatives: Microsoft Defender XDR, Microsoft Sentinel, Prophet Security, Simbian, Swimlane Turbine, Torq
Grok 4.20Tines alternatives: Microsoft Sentinel, Torq
DeepSeek V4 FlashTines alternatives: Splunk SOAR, Swimlane Turbine
Qwen 3.7 FlashSwimlane Turbine, Tines alternatives: Microsoft Sentinel
GPT-6 LunaTines alternatives: Defender, Microsoft Sentinel, Torq
Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment and they are never added together. The figures above are the mid-market standing, which is the one the category orders by.
Small business
Rapid7 InsightConnect leads by two points.
Rapid7 InsightConnect2%#8 of 13Cortex XSOAR0%#13 of 13Mid-marketThe figures above
The order flips: Cortex XSOAR leads at mid-market.
Cortex XSOAR8%#4 of 13Rapid7 InsightConnect2%#8 of 13Enterprise
Cortex XSOAR leads by fifty-five points.
Cortex XSOAR55%#1 of 11Rapid7 InsightConnect0%#– of 11What the models said about Cortex XSOAR
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of eight in this category shown.
“Avoid for tight budgets: Enterprise-heavy tools like Palo Alto Cortex XSOAR, Splunk SOAR, or FortiSOAR” Grok 4.20 · budget prompt · hard negative
“Palo Alto Cortex XSOAR – Powerful but expensive, complex... It's overkill for a small team.” DeepSeek V4 Flash · paraphrase prompt · hard negative
“you should be cautious about Cortex XSOAR, Splunk SOAR, Swimlane, IBM QRadar SOAR, and Torq” Mistral Small · negative prompt · hard negative
“Choose Cortex XSOAR if you have a complex enterprise environment, want native threat intelligence management, and need an expansive marketplace of out-of-the-box integrations.” Gemini 3.5 Flash · comparative prompt · first choice
“Currently widely considered the market leader... Choose Palo Alto Cortex XSOAR if you are an enterprise organization looking for the industry-standard, "do-it-all" powerhouse.” Qwen 3.7 Flash · comparative prompt · first choice
“For maximum flexibility and ecosystem depth: Choose Cortex XSOAR if you have a dedicated security team and can allocate a higher budget.” GLM 4.7 FlashX · direct prompt · first choice
What the models said about Rapid7 InsightConnect
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Five of six in this category shown.
“These platforms have received mixed-to-negative reviews from some users” MiniMax M2.5 · negative prompt · soft negative
“Rapid7 is more approachable but still requires significant tuning.” Grok 4.20 · negative prompt · soft negative
“Rapid7 InsightConnect (Best Overall for Mid-Market)” Claude Haiku 4.5 · direct prompt · first choice
“Practical no-code automation and natural integration with Rapid7 products; specifically positioned for mid-market teams.” Perplexity Sonar · direct prompt · alternative
“mentioned as options that provide a good balance of cost and functionality for small to mid-sized businesses” MiniMax M2.5 · budget prompt · alternative
Also compared
Tines vs Cortex XSOARTines vs Rapid7 InsightConnectShuffle vs Cortex XSOARShuffle vs Rapid7 InsightConnectSwimlane Turbine vs Cortex XSOARSwimlane Turbine vs Rapid7 InsightConnectCortex XSOAR vs ManageEngine Log360Cortex XSOAR vs Splunk SOARCortex XSOAR vs TorqManageEngine Log360 vs Rapid7 InsightConnectSplunk SOAR vs Rapid7 InsightConnectTorq vs Rapid7 InsightConnectAll twenty-eight head-to-head pages and the full SOAR standing
Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.