# Palo Alto Networks Cortex XSIAM alternatives: what AI models name instead, October 2026

IT AI Recommendation Index, October 2026 Edition. 233 of the 252 answers in the 1 category where Palo Alto Networks Cortex XSIAM holds a standing named it neither first nor as an alternative; these are the first choices those answers made. Page: https://it-ai-index.com/vendors/palo-alto-networks-cortex-xsiam/alternatives/

## Named instead, most often (every category and segment added)

- Microsoft Sentinel: 67
- Blumira: 31
- Wazuh: 17
- Splunk Enterprise Security: 16
- Rapid7 InsightIDR: 13
- ManageEngine Log360: 11

## SIEM platforms

**Small business**: 84 of 84 answers did not name Palo Alto Networks Cortex XSIAM.

- Blumira: first choice in 29 of those 84
- Microsoft Sentinel: first choice in 23 of those 84
- ManageEngine Log360: first choice in 9 of those 84
- Wazuh: first choice in 6 of those 84
- Huntress Managed SIEM: first choice in 5 of those 84
- Rapid7 InsightIDR: first choice in 4 of those 84
- Elastic Security: first choice in 2 of those 84
- Sumo Logic Cloud SIEM: first choice in 2 of those 84

**Mid-market**: 78 of 84 answers did not name Palo Alto Networks Cortex XSIAM (Palo Alto Networks Cortex XSIAM is #11 of 15 at 0%).

- Microsoft Sentinel: first choice in 24 of those 78
- Wazuh: first choice in 11 of those 78
- Rapid7 InsightIDR: first choice in 9 of those 78
- Blumira: first choice in 2 of those 78
- Elastic Security: first choice in 2 of those 78
- ManageEngine Log360: first choice in 2 of those 78
- Splunk Enterprise Security: first choice in 2 of those 78
- Sumo Logic Cloud SIEM: first choice in 2 of those 78

**Enterprise**: 71 of 84 answers did not name Palo Alto Networks Cortex XSIAM (Palo Alto Networks Cortex XSIAM is #10 of 12 at 0%).

- Microsoft Sentinel: first choice in 20 of those 71
- Splunk Enterprise Security: first choice in 14 of those 71
- Google Security Operations: first choice in 5 of those 71
- Exabeam: first choice in 3 of those 71
- IBM QRadar: first choice in 3 of those 71
- Google Chronicle SIEM: first choice in 1 of those 71
- Google SecOps Enterprise or Enterprise Plus: first choice in 1 of those 71
- LogRhythm: first choice in 1 of those 71

Published under CC BY 4.0. The output is the models' output; nothing here is a recommendation by the index.