The standing depends on who is buying. Every model is asked the same questions for each company size.
Tines is first at 41%.
Tines is first at 47%. 2 of 14 models made it the first choice when asked directly.
Ranked first. Next is Tines at 9%.
“Choose Cortex XSOAR if you have a complex enterprise environment, want native threat intelligence management, and need an expansive marketplace of out-of-the-box integrations.”Gemini 3.5 Flash · Comparative question · first choice
“Currently widely considered the market leader... Choose Palo Alto Cortex XSOAR if you are an enterprise organization looking for the industry-standard, "do-it-all" powerhouse.”Qwen 3.7 Flash · Comparative question · first choice
“For maximum flexibility and ecosystem depth: Choose Cortex XSOAR if you have a dedicated security team and can allocate a higher budget.”GLM 4.7 FlashX · Direct question · first choice
“Choose Cortex XSOAR if: You have a complex security tool stack, need extensive integrations, and have dedicated SOAR engineers.”GLM 4.7 FlashX · Comparative question · first choice
“Avoid for tight budgets: Enterprise-heavy tools like Palo Alto Cortex XSOAR, Splunk SOAR, or FortiSOAR”Grok 4.20 · Budget-constrained question · warning
“Palo Alto Cortex XSOAR – Powerful but expensive, complex... It's overkill for a small team.”DeepSeek V4 Flash · Paraphrase question · warning
“you should be cautious about Cortex XSOAR, Splunk SOAR, Swimlane, IBM QRadar SOAR, and Torq”Mistral Small · Negative question · warning
“typically start at $10K–$100K+ per year, making them unsuitable for limited budgets”DeepSeek V4 Flash · Budget-constrained question · warning
The products named in the same answers as Cortex XSOAR, over the 188 answers that named it, and how often each was the first choice instead.
| Product | Named together | Picked instead | |
|---|---|---|---|
| 167 | 2 | Compare → | |
| 136 | 53 | Compare → | |
| 113 | 3 | View → | |
| 101 | 5 | Compare → | |
| 88 | 4 | View → | |
| 84 | 6 | Compare → | |
| 44 | 1 | View → | |
| 41 | 3 | Compare → | |
| 35 | 1 | View → | |
| 32 | 4 | Compare → |
What the models named instead of Cortex XSOAR →
A side-by-side page exists where both products are among a category's top eight.
Stated on Cortex XSOAR's own site, not checked by Gane.
Fourteen AI models from 12 labs are asked the same buying questions six ways, for three company sizes. Standings refresh every edition.
Gane sells AI visibility software. No company can pay to change a result.
Read the method →Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted. These counts come from 165 of the 188 answers that named Cortex XSOAR and are not a share of its labels.
425 of the 466 domain citations in answers naming Cortex XSOAR came from a third party's page. Forty-one were to the publisher's own pages (the Gane Index), which the models cite like any other source; they are not counted as a third party.
Pages are listed as the models cited them.
| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 1 | 0 | 1 | 1 | 3 |
| GPT-5.4 mini | 1 | 2 | 0 | 0 | 3 |
| Gemini 3.5 Flash | 1 | 1 | 0 | 3 | 5 |
| Perplexity Sonar | 1 | 0 | 1 | 4 | 6 |
| Grok 4.20 | 1 | 1 | 1 | 4 | 7 |
| Mistral Small | 1 | 1 | 4 | 1 | 7 |
| DeepSeek V4 Flash | 0 | 0 | 1 | 5 | 6 |
| Llama 4 Maverick | 1 | 1 | 2 | 1 | 5 |
| Qwen 3.7 Flash | 1 | 0 | 0 | 4 | 5 |
| Kimi K2 | 1 | 1 | 1 | 2 | 5 |
| GLM 4.7 FlashX | 3 | 0 | 0 | 0 | 3 |
| MiniMax M2.5 | 1 | 0 | 1 | 1 | 3 |
| GPT-6 Luna | 1 | 0 | 0 | 0 | 1 |
| Muse Glimmer 30B | 1 | 1 | 0 | 1 | 3 |
| Kind | Pages | Last 90 days | 2025-10 to 2026-09 | Latest | Categories named |
|---|---|---|---|---|---|
| Blog | 324 | 7 | 2026-08-11 | IaC, Patching | |
| Report or ebook | 66 | 0 | 2026-06-16 | ||
| Glossary or explainer | 32 | 1 | 2026-09-03 | ||
| Podcast or video | 24 | 6 | 2026-09-10 | ||
| Comparison | 16 | 1 | 2026-08-18 | ||
| Case study | 15 | 2 | 2026-08-05 | ||
| Webinar or virtual event | 2 | 0 | 2026-01-27 | ||
| Conference or event | 2 | 0 | 2025-06-18 | ||
| Template or tool | 2 | 0 | 2026-01-14 |
As the event pages on cortex.io state them, read September 28, 2026.
Every page cortex.io exposes, subdomains included. Kind is read from the address and title. The last 90 days, the latest date and the twelve months count pages by when they were published, from the site's feeds, a date in the address, or the page's own publication date, read from up to a hundred of its most recently changed pages; a page that says only when it last changed is counted in its kind but not in when, so the recent counts are a floor, and a kind none of whose pages gives a publication date reads undated. An event counts as online when its address or title says so (webinar, on demand, virtual or online summit); a conference, summit, trade show, expo or roadshow that does not say so is counted as a conference or event, which on a vendor's site is mostly in person. Read September 29, 2026.