Palo Alto Networks Cortex XSIAM is a commercial extended detection and response solution by Palo Alto Networks. Wazuh is a free extended detection and response solution. Features, integrations, deployment and the company behind each one, side by side.
Hi Citrix. Hide VPNs. Hide Windows on a LAN. Knocknoc solves this. Just in time identity linked allow-listing. DIY, on-premise or SaaS. Prevent attacks fast.
VisitAI-driven SOC platform combining SIEM, SOAR, EDR, NDR, and CDR capabilities
Wazuh is an open-source security platform offering unified XDR and SIEM protection for endpoints and cloud workloads, integrating various security functions into a single architecture.
See more solutions in this category, or build a security stack from your picks.
Based on what each listing shows: deployment, company size, price and open source.
Palo Alto Networks Cortex XSIAM fits if you want a cloud product.
Wazuh fits if you need both cloud and on-premises options, you are a startup or a small business and you need a free product.
Common questions when comparing Palo Alto Networks Cortex XSIAM vs Wazuh for extended detection and response.
Palo Alto Networks Cortex XSIAM: AI-driven SOC platform combining SIEM, SOAR, EDR, NDR, and CDR capabilities, built by Palo Alto Networks.
Wazuh: Wazuh is an open-source security platform offering unified XDR and SIEM protection for endpoints and cloud workloads, integrating various security functions into a single architecture.
The table above shows where their features, integrations, deployment and company size fit differ.
Often, yes. Palo Alto Networks Cortex XSIAM and Wazuh are both Extended Detection and Response products. Key differences: Palo Alto Networks Cortex XSIAM is Commercial while Wazuh is Free. Use the table above to see where features, deployment and company size fit differ.
No Extended Detection and Response shortlist yet. This is the closest one.
Updated 2026-11-01
See the shortlist