Palo Alto Networks Cortex XSIAM vs Splunk:Which is more popular?
In September 2026, Splunk had more branded searches than Palo Alto Networks Cortex XSIAM among security operations platforms worldwide. Splunk had about 135,000 branded searches, while Palo Alto Networks Cortex XSIAM had 320. Splunk made up 48% of all security operations platform searches we track, and Palo Alto Networks Cortex XSIAM accounted for 0.11%. When we asked ChatGPT and Google AI Overviews about security operations platforms, Splunk appeared in four of the five answers and Palo Alto Networks Cortex XSIAM in two. Palo Alto Networks Cortex XSIAM and Splunk were each mentioned first in two of the four answers.
Who do people search for more?
Splunk, about 422 searches for every 1 for Palo Alto Networks Cortex XSIAM
Who does AI mention more?
Splunk, mentioned in 4 of 5 answers, Palo Alto Networks Cortex XSIAM in 2
Who does AI recommend more?
Each is named first in 2 of 4 answers.
Follow Palo Alto Networks Cortex XSIAM vs Splunk and get free monthly updates on what changed
By continuing you'll get index updates and occasional product news from Brandwave. Unsubscribe any time. Privacy
Top security operations platforms in ChatGPT and Google AI Overviews
In three ChatGPT questions and two Google AI Overviews, Splunk was mentioned in four out of five: in all three ChatGPT answers and in one of the two Google AI Overviews. Palo Alto Networks Cortex XSIAM was mentioned in two out of five: in two of the three ChatGPT answers, but not in either of the two Google AI Overviews. Palo Alto Networks Cortex XSIAM and Splunk were each listed first in two of the four answers.
Most recommended by AI
Brands get a higher ranking if they are mentioned earlier in the answers.
Mentioned by AI
Each dot is one answer, filled in when that answer mentions the brand.
Splunk4 of 5Named in 3 of 3 ChatGPT answersNamed in 1 of 2 Google answers
Microsoft Sentinel4 of 5Named in 3 of 3 ChatGPT answersNamed in 1 of 2 Google answers
CrowdStrike3 of 5Named in 3 of 3 ChatGPT answersNamed in 0 of 2 Google answers- Google Security Operations3 of 5Named in 2 of 3 ChatGPT answersNamed in 1 of 2 Google answers
- Wazuh2 of 5Named in 1 of 3 ChatGPT answersNamed in 1 of 2 Google answers
- Palo Alto Networks Cortex XSIAM2 of 5Named in 2 of 3 ChatGPT answersNamed in 0 of 2 Google answers
IBM QRadar1 of 5Named in 0 of 3 ChatGPT answersNamed in 1 of 2 Google answers
Sumo Logic0 of 5Named in 0 of 3 ChatGPT answersNamed in 0 of 2 Google answers
Securonix0 of 5Named in 0 of 3 ChatGPT answersNamed in 0 of 2 Google answers
Exabeam0 of 5Named in 0 of 3 ChatGPT answersNamed in 0 of 2 Google answers
See every answer about security operations platforms
5 answers
Asked ChatGPT
“Which security operations platform should I use?”
Asked ChatGPT
“What are the best security operations platforms?”
Asked ChatGPT
“What's the best security operations platform for security monitoring?”
Searched Google, AI Overview
“security operations platform”
Searched Google, AI Overview
“siem platform”
Not named in any answer:
Brands are shown in the order each answer named them. The survey took place in the United States on October 21, 2026.
Is Palo Alto Networks Cortex XSIAM or Splunk more popular in search?
This chart shows how often people search Google for Palo Alto Networks Cortex XSIAM and Splunk by name. Each line represents a brand's share of searches for all 11 security operations platforms we track, month by month, from English-language searches worldwide.
Share of searches by month for Splunk, Palo Alto Networks Cortex XSIAM. The figures are in the table below the chart.
View monthly share of searches table
| Month | Splunk | Wazuh | Microsoft Sentinel | Sumo Logic | Securonix | Exabeam | LogRhythm | IBM QRadar | CrowdStrike | Google Security Operations | Palo Alto Networks Cortex XSIAM |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Oct 2025 | 55.9% | 25.2% | 6.2% | 4.1% | 1.8% | 2.3% | 2.3% | 1.5% | 0.45% | 0.28% | 0.03% |
| Nov 2025 | 51.6% | 28.3% | 7% | 4.6% | 1.7% | 2.1% | 2.1% | 1.7% | 0.5% | 0.41% | 0.02% |
| Dec 2025 | 52.1% | 28.6% | 5.7% | 3.8% | 3.8% | 2.1% | 1.7% | 1.4% | 0.41% | 0.32% | 0.03% |
| Jan 2026 | 51.7% | 28.3% | 7% | 4.6% | 2.1% | 2.1% | 2.1% | 1.4% | 0.5% | 0.31% | 0.03% |
| Feb 2026 | 52% | 28.5% | 7% | 3.8% | 2.1% | 2.1% | 2.1% | 1.4% | 0.5% | 0.5% | 0.07% |
| Mar 2026 | 51.5% | 28.3% | 6.9% | 4.6% | 2.1% | 2.1% | 2.1% | 1.7% | 0.41% | 0.31% | 0.07% |
| Apr 2026 | 52% | 28.5% | 7% | 3.8% | 2.1% | 2.1% | 2.1% | 1.7% | 0.41% | 0.31% | 0.08% |
| May 2026 | 46.9% | 31.4% | 7.7% | 5.1% | 2.3% | 2.3% | 1.9% | 1.5% | 0.45% | 0.35% | 0.11% |
| Jun 2026 | 52.2% | 28.6% | 7% | 3.8% | 2.1% | 2.1% | 1.7% | 1.4% | 0.32% | 0.51% | 0.19% |
| Jul 2026 | 48.1% | 32.3% | 7.9% | 3.5% | 1.9% | 1.9% | 1.9% | 1.3% | 0.36% | 0.57% | 0.17% |
| Aug 2026 | 48.2% | 32.3% | 7.9% | 3.5% | 2.4% | 1.9% | 1.9% | 1% | 0.36% | 0.36% | 0.11% |
| Sep 2026 | 48% | 32.2% | 7.9% | 3.5% | 2.3% | 1.9% | 1.9% | 1.3% | 0.46% | 0.31% | 0.11% |
How has the Palo Alto Networks Cortex XSIAM and Splunk comparison changed over the last 12 months?
3 findings
- Splunk was ahead of Palo Alto Networks Cortex XSIAM in every measured month of the 12 months ending September 2026.
- Across the 12 months ending September 2026, Palo Alto Networks Cortex XSIAM’s share of searches among security operations platforms worldwide moved from 0.03% to 0.11%, and its estimated monthly branded searches moved from 90 to 320.
- Across the 12 months ending September 2026, Splunk’s share of searches among security operations platforms worldwide moved from 55.9% to 48%, and its estimated monthly branded searches moved from 201K to 135K.
How did search popularity change for security operations platforms worldwide in September 2026?
2 changes
Estimated monthly branded searches for Palo Alto Networks Cortex XSIAM worldwide rose 255.6% over 12 measured months, from 90 to 320 in September 2026.

Estimated monthly branded searches for Splunk worldwide fell 32.8% over 12 measured months, from 201K to 135K in September 2026.
How are branded searches counted?
2 search terms
Brandwave collects information about searches that people make online using Palo Alto Networks Cortex XSIAM’s and Splunk’s names. When viewed over time, estimated search volumes for these branded terms can be used to understand whether interest in the brands is growing, holding steady, or fading.
Palo Alto Networks Cortex XSIAM
1 branded search term
- palo alto networks cortex xsiam
Splunk
1 branded search term
- splunk
Other head-to-heads among security operations platforms

Put your own brand in this comparison
Brandwave tracks your branded demand next to the rival you actually watch, with your campaigns, spend and outcomes on the same timeline.