5 categories · RankedPalo Alto Networks Cortex XDR
Palo Alto Networks Cortex XDR is an endpoint protection and extended detection and response product from Palo Alto Networks · paloaltonetworks.com ↗
Strongest at enterprise. Ranked 71 of 71 for small business buyers.
The standing depends on who is buying. Every model is asked the same questions for each company size.
Microsoft Defender XDR is first at 36%.
Microsoft Defender XDR is first at 48%. 0 of 14 models made it the first choice when asked directly.
Microsoft Defender XDR is first at 58%.
Why models recommend it
“Choose Palo Alto Cortex XDR for deep cross-domain correlation and enterprise SOC consolidation.”Perplexity Sonar · Comparative question · first choice
“Often ranked as the top overall XDR platform in recent evaluations.”DeepSeek V4 Flash · Comparative question · first choice
“Palo Alto Cortex XDR scores highest in our 2026 evaluation”Muse Glimmer 30B · Comparative question · first choice
“Best native correlation: Palo Alto Cortex XDR”Kimi K2 · Comparative question · first choice
What gives them pause
“Two privilege escalation vulnerabilities (CVE-2024-5907, CVE-2024-9469)”GLM 4.7 FlashX · Negative question · warning
“end-user experience can be frustrating without a dedicated SOC team”Qwen 3.7 Flash · Negative question · warning
“avoid CrowdStrike or Palo Alto Cortex XDR”GLM 4.7 FlashX · Negative question · warning
“Leading enterprise vendors (e.g., Palo Alto Networks Cortex XDR, Microsoft Defender XDR) offer powerful "Native XDR" solutions. However, they are designed to perform best when you use their proprietary firewalls”Gemini 3.5 Flash · Negative question · warning
Also on the shortlist
The products named in the same answers as Palo Alto Networks Cortex XDR, over the 278 answers that named it, and how often each was the first choice instead.
| Product | Named together | Picked instead | |
|---|---|---|---|
| 194 | 16 | View → | |
| 123 | 3 | View → | |
| 117 | 28 | View → | |
| 112 | 48 | View → | |
| 112 | 18 | View → | |
| 65 | 39 | View → | |
| 64 | 0 | View → | |
| 51 | 26 | View → | |
| 36 | 0 | View → | |
| 30 | 5 | View → |
What the models named instead of Palo Alto Networks Cortex XDR →
A side-by-side page exists where both products are among a category's top eight.
At a glance
Stated on Palo Alto Networks Cortex XDR's own site, not checked by Gane.
- For
- your business’s endpoints
- Customers named
- Asante Health, NDIT, Kavak, Wits University, Glacier Bancorp
- Also from Palo Alto Networks
- Palo Alto Networks Cortex Cloud, Palo Alto Networks Cortex XSIAM, Palo Alto Networks Cortex XSOAR, Palo Alto Networks DLP, Palo Alto Networks DNS Security, Palo Alto Networks Enterprise DLP and 23 more
How this is measured
Fourteen AI models from 12 labs are asked the same buying questions six ways, for three company sizes. Standings refresh every edition.
Gane sells AI visibility software. No company can pay to change a result.
Read the method →Sources returned with these answers
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted. These counts come from 251 of the 278 answers that named Palo Alto Networks Cortex XDR and are not a share of its labels.
Domains cited
529 of the 605 domain citations in answers naming Palo Alto Networks Cortex XDR came from a third party's page.
Pages cited
Pages are listed as the models cited them.
By model
| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 1 | 4 | 0 | 5 |
| GPT-5.4 mini | 0 | 5 | 0 | 0 | 5 |
| Gemini 3.5 Flash | 0 | 3 | 0 | 3 | 6 |
| Perplexity Sonar | 1 | 4 | 0 | 1 | 6 |
| Grok 4.20 | 0 | 7 | 4 | 1 | 12 |
| Mistral Small | 0 | 2 | 4 | 2 | 8 |
| DeepSeek V4 Flash | 1 | 4 | 0 | 2 | 7 |
| Llama 4 Maverick | 0 | 0 | 3 | 0 | 3 |
| Qwen 3.7 Flash | 0 | 3 | 1 | 2 | 6 |
| Kimi K2 | 1 | 6 | 1 | 2 | 10 |
| GLM 4.7 FlashX | 0 | 3 | 1 | 2 | 6 |
| MiniMax M2.5 | 0 | 5 | 2 | 0 | 7 |
| GPT-6 Luna | 0 | 3 | 1 | 0 | 4 |
| Muse Glimmer 30B | 1 | 2 | 1 | 3 | 7 |