Cortex XSOAR VS Microsoft Sentinel_
As of 4 November 2026, Microsoft Sentinel is named by 1,349 companies and Cortex XSOAR by 119; Cortex XSOAR skews to companies under 200 people (27% vs 33%), Microsoft Sentinel to companies over 1,000 (39% vs 47%).
As of 4 November 2026 · refreshed daily · counts move as websites, DNS and career sites are re-read.
The website-and-DNS footprint is not comparable between a marketing suite and a CRM: Cortex XSOAR's script and mail records show on hundreds of thousands of small sites, Microsoft Sentinel rarely leaves a trace outside its own apps. Compare on the job-posting numbers; use the footprint for reach.
- Cortex XSOAR: 2–200 employees
- 27%
- Microsoft Sentinel: 2–200 employees
- 33%
- Cortex XSOAR: 1,000+ employees
- 47%
- Microsoft Sentinel: 1,000+ employees
- 39%
- Postings per company, 90 days
- 3.2 · 2.7
- Website or DNS footprint
- 0 · 0
Who chooses which
Share of each tool's companies in every segment. "Leans" marks a gap of more than two points.
| Segment | Cortex XSOAR | share | Microsoft Sentinel | share | Leans |
|---|---|---|---|---|---|
| Self-employed | 3 | 3% | 30 | 2% | even |
| 2-10 employees | 2 | 2% | 85 | 6% | Microsoft Sentinel |
| 11-50 employees | 12 | 10% | 135 | 10% | even |
| 51-200 employees | 18 | 15% | 220 | 16% | even |
| 201-500 employees | 13 | 11% | 202 | 15% | Microsoft Sentinel |
| 501-1000 employees | 15 | 13% | 153 | 11% | even |
| 1001-5000 employees | 23 | 19% | 278 | 21% | even |
| 5001-10000 employees | 7 | 6% | 76 | 6% | even |
| 10,001+ employees | 26 | 22% | 170 | 13% | Cortex XSOAR |
| Segment | Cortex XSOAR | share | Microsoft Sentinel | share | Leans |
|---|---|---|---|---|---|
| Technology & software | 63 | 53% | 564 | 42% | Cortex XSOAR |
| Business & finance services | 22 | 18% | 329 | 24% | Microsoft Sentinel |
| Manufacturing & industry | 8 | 7% | 131 | 10% | Microsoft Sentinel |
| Consumer services & leisure | 6 | 5% | 44 | 3% | even |
| Utilities & infrastructure | 5 | 4% | 46 | 3% | even |
| Commerce & trade | 4 | 3% | 37 | 3% | even |
| Media & content | 3 | 3% | 29 | 2% | even |
| Automotive | 2 | 2% | 14 | 1% | even |
| Hospitality & travel | 2 | 2% | – | – | outside top 12 |
| Transport, logistics & rental | 2 | 2% | 19 | 1% | even |
| Public, community & associations | 1 | 1% | 52 | 4% | Microsoft Sentinel |
| Property & construction | 1 | 1% | 35 | 3% | even |
| Health care | – | – | 37 | 3% | outside top 12 |
| Segment | Cortex XSOAR | share | Microsoft Sentinel | share | Leans |
|---|---|---|---|---|---|
| United States | 81 | 68% | 767 | 57% | Cortex XSOAR |
| United Kingdom | 8 | 7% | 133 | 10% | Microsoft Sentinel |
| France | 4 | 3% | 42 | 3% | even |
| Belgium | 3 | 3% | 16 | 1% | even |
| Canada | 3 | 3% | 40 | 3% | even |
| Germany | 3 | 3% | 57 | 4% | even |
| India | 3 | 3% | 30 | 2% | even |
| Spain | 2 | 2% | – | – | outside top 12 |
| Italy | 2 | 2% | – | – | outside top 12 |
| Austria | 1 | 1% | – | – | outside top 12 |
| Brazil | 1 | 1% | 15 | 1% | even |
| Switzerland | 1 | 1% | 18 | 1% | even |
| Australia | – | – | 30 | 2% | outside top 12 |
| Netherlands | – | – | 23 | 2% | outside top 12 |
| Sweden | – | – | 12 | 1% | outside top 12 |
| Segment | Cortex XSOAR | share | Microsoft Sentinel | share | Leans |
|---|---|---|---|---|---|
| IT operations & business systems | 245 | 56% | 3,118 | 68% | Microsoft Sentinel |
| Software engineering | 39 | 9% | 255 | 6% | Cortex XSOAR |
| Product, program & project management | 13 | 3% | 45 | 1% | even |
| Sales | 13 | 3% | 91 | 2% | even |
| Data & AI | 11 | 3% | 81 | 2% | even |
| Customer service & success | 6 | 1% | 29 | 1% | even |
| facilities cleaning and security | 5 | 1% | 33 | 1% | even |
| General management & consulting | 4 | 1% | 12 | 0% | even |
| Engineering (non-software) | 1 | 0% | 193 | 4% | Microsoft Sentinel |
| Marketing & communications | 1 | 0% | 12 | 0% | even |
| Legal, compliance & risk | – | – | 51 | 1% | outside top 12 |
| research and science | – | – | 19 | 0% | outside top 12 |
| Quality, safety & environment | – | – | 17 | 0% | outside top 12 |
| healthcare clinical | – | – | 14 | 0% | outside top 12 |
| Business development & strategy | – | – | 13 | 0% | outside top 12 |
| Finance & accounting | – | – | 12 | 0% | outside top 12 |
| skilled trades and field service | – | – | 11 | 0% | outside top 12 |
| Unclassified | – | – | 10 | 0% | outside top 12 |
| construction and civil | – | – | 8 | 0% | outside top 12 |
| Education & training | – | – | 8 | 0% | outside top 12 |
| Administration & office | – | – | 7 | 0% | outside top 12 |
| logistics warehouse and transport | – | – | 6 | 0% | outside top 12 |
| procurement and purchasing | – | – | 6 | 0% | outside top 12 |
| public safety and protective services | – | – | 6 | 0% | outside top 12 |
| social care and community | – | – | 2 | 0% | outside top 12 |
| agriculture and environment | – | – | 1 | 0% | outside top 12 |
| arts media and entertainment | – | – | 1 | 0% | outside top 12 |
| Design & UX | – | – | 1 | 0% | outside top 12 |
| manufacturing and production | – | – | 1 | 0% | outside top 12 |
| Travel, leisure & events | – | – | 1 | 0% | outside top 12 |
The companies behind each column
Companies using Cortex XSOAR →
Companies using Microsoft Sentinel →
siem soar threat intel ranked →
Quote the sentence with the date and the link. The numbers change daily; the link always shows the current ones.
Microsoft Sentinel is named by 1,349 companies in job postings and Cortex XSOAR by 119; 95 name both. (Breaknorm, 4 November 2026, https://breaknorm.co/compare/cortex-xsoar-vs-microsoft-sentinel)
Read from the source, not self-reported
Every number on this page can be traced to a page we crawled or a posting we read. Full methodology →
- Job postingsRead hourly from career sites. A tool counts when the employer's own text names it as the team's system; both tools can count for one company.
- Website and DNSScripts and embeds on the company's pages, plus SPF, DKIM, MX and CNAME records of its domain that point at the vendor.
- SegmentsCountry, size and industry from the company profile built from its website.
- Not a reviewNo ratings, prices or feature claims. For those, read the vendors.
Cortex XSOAR vs Microsoft Sentinel: questions
Which is more used, Cortex XSOAR or Microsoft Sentinel?
By companies naming it in their own job postings, Microsoft Sentinel (1,349) over Cortex XSOAR (119). By website-and-DNS footprint, Microsoft Sentinel (0 vs 0), because its scripts and mail records sit on many small company sites.
Who chooses Cortex XSOAR?
27% of Cortex XSOAR companies have 2 to 200 employees, against 33% for Microsoft Sentinel. 47% of Cortex XSOAR companies have over 1,000 employees, against 39% for Microsoft Sentinel.
Do companies run both?
95 companies name both in their postings, usually Cortex XSOAR in marketing and Microsoft Sentinel in sales, or during a migration.
Where do these numbers come from?
From the employer's own text in job postings read hourly from career sites, and from scripts found on company websites in our crawl. No vendor data, no surveys.
Get either list your way
The same data as a search, over MCP and the API, as bulk files, or pushed to you as it changes.
Every company on either tool,
with the person who owns it
Filter on Cortex XSOAR or Microsoft Sentinel, and get 1,000 records free.