Breaknorm
Sign inStart free

Product

SignalsPeopleCompaniesLocal businessesMCP and API

Plays

Post engagersTeam build-outChampion movedHiring surgeNewly fundedLookalikesAll plays

Data

Coverage by countryHiring dataJob changesEmail verificationCompanies by toolWho is hiringMarket mapsOutboundCompany profilesCompare
PricingDatasetsDocsSign in
Compare · siem soar threat intel

ArcSight VS Cortex XSOAR

As of 4 November 2026, Cortex XSOAR is named by 119 companies and ArcSight by 104; ArcSight skews to companies under 200 people (34% vs 27%), Cortex XSOAR to companies over 1,000 (47% vs 43%).

As of 4 November 2026 · refreshed daily · counts move as websites, DNS and career sites are re-read.

The website-and-DNS footprint is not comparable between a marketing suite and a CRM: ArcSight's script and mail records show on hundreds of thousands of small sites, Cortex XSOAR rarely leaves a trace outside its own apps. Compare on the job-posting numbers; use the footprint for reach.

ArcSight: 2–200 employees
34%
Cortex XSOAR: 2–200 employees
27%
ArcSight: 1,000+ employees
43%
Cortex XSOAR: 1,000+ employees
47%
Postings per company, 90 days
3.1 · 3.2
Website or DNS footprint
0 · 0
104companies name ArcSight
119companies name Cortex XSOAR
10name both
320 · 375postings in 90 days, ArcSight · Cortex XSOAR
02Side by side

Who chooses which

Share of each tool's companies in every segment. "Leans" marks a gap of more than two points.

By company size
SegmentArcSightshareCortex XSOARshareLeans
Self-employed55%33%ArcSight
2-10 employees22%22%even
11-50 employees1111%1210%even
51-200 employees2221%1815%ArcSight
201-500 employees1010%1311%even
501-1000 employees99%1513%Cortex XSOAR
1001-5000 employees2928%2319%ArcSight
5001-10000 employees44%76%Cortex XSOAR
10,001+ employees1212%2622%Cortex XSOAR
By industry
SegmentArcSightshareCortex XSOARshareLeans
Technology & software5654%6353%even
Business & finance services1918%2218%even
Manufacturing & industry99%87%even
Consumer services & leisure55%65%even
Property & construction44%11%ArcSight
Public, community & associations33%11%ArcSight
Utilities & infrastructure33%54%even
Commerce & trade22%43%even
Media & content22%33%even
Transport, logistics & rental11%22%even
Automotive––22%outside top 12
Hospitality & travel––22%outside top 12
By country
SegmentArcSightshareCortex XSOARshareLeans
United States7370%8168%ArcSight
United Kingdom88%87%even
Czechia33%––outside top 12
India33%33%even
Singapore33%––outside top 12
France22%43%even
United Arab Emirates11%––outside top 12
Australia11%––outside top 12
Belgium11%33%even
Germany11%33%even
EG11%––outside top 12
Italy11%22%even
Canada––33%outside top 12
Spain––22%outside top 12
Austria––11%outside top 12
Brazil––11%outside top 12
Switzerland––11%outside top 12
Postings by team (share of each tool's postings)
SegmentArcSightshareCortex XSOARshareLeans
IT operations & business systems27262%24556%ArcSight
Data & AI164%113%even
Sales113%133%even
Customer service & success82%61%even
Software engineering72%399%Cortex XSOAR
Marketing & communications51%10%even
Product, program & project management41%133%Cortex XSOAR
Public safety and protective services31%––outside top 12
Skilled trades and field service20%––outside top 12
Design & UX10%––outside top 12
Engineering (non-software)10%10%even
Finance & accounting10%––outside top 12
Human resources10%––outside top 12
Facilities cleaning and security––51%outside top 12
General management & consulting––41%outside top 12
Cite this

Quote the sentence with the date and the link. The numbers change daily; the link always shows the current ones.

Cortex XSOAR is named by 119 companies in job postings and ArcSight by 104; 10 name both. (Breaknorm, 4 November 2026, https://breaknorm.co/compare/arcsight-vs-cortex-xsoar)
How we know

Read from the source, not self-reported

Every number on this page can be traced to a page we crawled or a posting we read. Full methodology →

  • Job postingsRead hourly from career sites. A tool counts when the employer's own text names it as the team's system; both tools can count for one company.
  • Website and DNSScripts and embeds on the company's pages, plus SPF, DKIM, MX and CNAME records of its domain that point at the vendor.
  • SegmentsCountry, size and industry from the company profile built from its website.
  • Not a reviewNo ratings, prices or feature claims. For those, read the vendors.
FAQ

ArcSight vs Cortex XSOAR: questions

Which is more used, ArcSight or Cortex XSOAR?

By companies naming it in their own job postings, Cortex XSOAR (119) over ArcSight (104). By website-and-DNS footprint, Cortex XSOAR (0 vs 0), because its scripts and mail records sit on many small company sites.

Who chooses ArcSight?

34% of ArcSight companies have 2 to 200 employees, against 27% for Cortex XSOAR. 43% of ArcSight companies have over 1,000 employees, against 47% for Cortex XSOAR.

Do companies run both?

10 companies name both in their postings, usually ArcSight in marketing and Cortex XSOAR in sales, or during a migration.

Where do these numbers come from?

From the employer's own text in job postings read hourly from career sites, and from scripts found on company websites in our crawl. No vendor data, no surveys.

Companies and people

Get either list your way

The same data as a search, over MCP and the API, as bulk files, or pushed to you as it changes.

Every company on either tool,
with the person who owns it

Filter on ArcSight or Cortex XSOAR. Start free, no card.

  1. 01Sign up, no card
  2. 02Connect Claude, ChatGPT or an API key
  3. 03Ask for your market