# Palo Alto Cortex: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 6 judge labels across 5 categories by 5 of 14 models. Page: https://www.gane.ai/index/it/vendors/palo-alto-cortex

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Managed detection and response](https://www.gane.ai/index/it/security/managed-detection-and-response/index.md) | 0% | 39 | 0% | 2 |
| [API security platforms](https://www.gane.ai/index/it/security/api-security-platforms/index.md) | 0% | 85 | 0% | 1 |
| [Application security posture management](https://www.gane.ai/index/it/developer/application-security-posture-management/index.md) | 0% | 42 | 0% | 1 |
| [Cloud security posture management](https://www.gane.ai/index/it/cloud/cloud-security-posture-management/index.md) | 0% | 71 | 100% | 1 |
| [Vulnerability management platforms](https://www.gane.ai/index/it/security/vulnerability-management-platforms/index.md) | 0% | 89 | 100% | 1 |

## What the models said for it

- "Bundles application security with broader CNAPP and cloud-security capabilities" (Perplexity Sonar, ASPM)

## And against it

- "Platforms to Avoid in Mid-Market ... historically complex to deploy, agent-heavy, and operationally burdensome" (Gemini 3.5 Flash, CSPM)
- "Avoid for tight budgets: Enterprise-heavy tools like ... Palo Alto Cortex" (Grok 4.20, Vuln management)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 1 | 1 |
| Perplexity Sonar | 0 | 1 | 0 | 0 | 1 |
| Grok 4.20 | 0 | 0 | 1 | 1 | 2 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 1 | 0 | 1 |
| Kimi K2 | 0 | 0 | 0 | 0 | 0 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 0 | 1 | 0 | 1 |

## Sources returned with these answers

The sites and pages cited by the answers that named Palo Alto Cortex, from 17 of the 18 answers that named it (only the models that return a source list).

### Domains cited

- g2.com: 7
- ciopages.com: 4
- csoonline.com: 4
- cybersecuritynews.com: 4
- capterra.com: 3
- checkmarx.com: 3
- cipherssecurity.com: 3
- cyberpress.org: 3
- fortinet.com: 3
- gane.ai/index: 3

### Pages cited

- https://cipherssecurity.com/best-edr-software-enterprises-2026: 2
- https://csoonline.com/article/657138/how-to-choose-the-best-cloud-security-posture-management-tools.html: 2
- https://cybersecuritynews.com/best-edr-solutions: 2
- https://g2.com/categories/risk-based-vulnerability-management/small-business: 2
- https://iomergent.com/best-cspm-tools: 2
- https://microsoft.com/en-us/security/business/endpoint-security/microsoft-defender-endpoint: 2
- https://spotsaas.com/list/vulnerability-management-software/for-small-business: 2
- https://upwind.io/glossary/best-api-security-tools: 2

## In its own words

What Palo Alto Cortex's own pages state, read 2026-10-06. Stated by the vendor, not checked by the index.

- Positioning: Automate security operations with Cortex XSOAR, unifying incident response, threat intel, and workflow automation to enhance SOC efficiency and reduce remediation time. (https://www.paloaltonetworks.com/cortex/cortex-xsoar)
- For: Security Analysts (https://www.paloaltonetworks.com/cortex/cortex-xsoar)
- Integrations claimed: 900 (https://www.paloaltonetworks.com/cortex/cortex-xsoar); 1000 (https://www.paloaltonetworks.com/cortex/modernize-siem) (pages disagree)
- Certifications: FedRAMP, HIPAA
- Customers named: The State of North Dakota Information Technology (NDIT), BNL, Logicalis, Infosys, Esri, Naranja, Flex, PLDT

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.