How ChatGPT Recommends Palo Alto Cortex

Across 100 endpoint security software questions, Palo Alto Cortex appeared in 16 answers (rank 8 among all brands named), was recommended in 13 (rank 8) and was ChatGPT's own pick in 13 (tied for rank 7). That is a pick rate of 81% of its appearances, close to the 8-brand median of 83.5% for brands named 10 or more times in this teardown.

When ChatGPT picked Palo Alto Cortex, it named it first among the brands it picked in 1 of those 13 answers. On the 20 direct advice questions ("which should I use"), ChatGPT never recommended or picked it.

These are the labels ChatGPT attached to Palo Alto Cortex in its endpoint security software answers, taken from "best for" table columns and scenario lists and quoted as written. We found 6 such labels for Palo Alto Cortex in this category; the most frequent are below.

• "Existing Palo Alto environment"
• "Organizations consolidating security operations"
• "Large enterprises, Palo Alto security shops, mature SOCs"
• "Large enterprise SOC focused on advanced detection and investigation"
• "Enterprises already using Palo Alto"
• "Organizations consolidating security tools"

If this is not how you describe your product, that gap is the first thing to fix: AI answers repeat the positioning they find most often across the sources they read.

In the one head-to-head endpoint security software question that named Palo Alto Cortex against CrowdStrike, ChatGPT picked both Palo Alto Cortex and CrowdStrike instead of declaring a single winner.

The 13 endpoint security software answers in which ChatGPT picked Palo Alto Cortex carried 39 source citations in total. The most-cited domains in those answers:

• paloaltonetworks.com (vendor site): 7
• crowdstrike.com (vendor site): 6
• gartner.com (review or media): 5
• microsoft.com (vendor site): 5
• sentinelone.com (vendor site): 5
• av-comparatives.org (other third party): 3

Palo Alto Cortex's own site (paloaltonetworks.com) was cited 8 times across all 100 answers in the category, in 8 different answers.

Google check: for 5 of the 13 questions where ChatGPT picked Palo Alto Cortex, paloaltonetworks.com also ranked in Google's top ten organic results for the same question. So most of these picks came on questions where its own site did not rank.

These are the brands ChatGPT named alongside Palo Alto Cortex most often in endpoint security software answers, and in how many of those answers ChatGPT picked them. This is the competitive set ChatGPT has built for it, which is not always the one a vendor would choose.

• CrowdStrike: in 15 of Palo Alto Cortex's 16 answers, picked in 12
• Microsoft Defender: in 15 of Palo Alto Cortex's 16 answers, picked in 12
• SentinelOne: in 13 of Palo Alto Cortex's 16 answers, picked in 10
• Sophos: in 11 of Palo Alto Cortex's 16 answers, picked in 6
• Bitdefender: in 10 of Palo Alto Cortex's 16 answers, picked in 5

Palo Alto Cortex is on ChatGPT's endpoint security software shortlist but is not one of its top three picks: it was recommended in 13 answers and picked in 13, against 62 picks for Microsoft Defender, the most-picked brand. Its weakest showing is on direct advice questions, where ChatGPT picked it in 0 of 20.

paloaltonetworks.com was the most-cited source in the answers that picked Palo Alto Cortex, so its own pages are doing real work in shaping how it is described.

In 8 of the 13 answers that picked Palo Alto Cortex, paloaltonetworks.com did not rank in Google's top ten for the same question, so Google rankings alone do not explain where ChatGPT sends buyers.

The ChatGPT data on Palo Alto Cortex comes from Teardown 11: endpoint security software. Each teardown runs 100 buyer questions (category, head-to-head, alternatives and advice phrasing) through ChatGPT with web search on, logged out, United States, English, one run per question.

Every answer was coded under codebook v2.0 by two independent AI readers working blind from the published reader protocol. Each reader coded every brand mention as picked, recommended, listed, passing or anchor; where the two disagreed, a third AI reader settled the code. Across all answers coded under v2.0, the two readers agreed on 97.8% of brand codes.

"Picked" means the answer made the brand its own verdict: "my pick", "choose X if", a shortlist it tells the buyer to act on, the #1 of its ranking, or the direct answer to a "which should I use" question. "Recommended" means the answer assigned the brand to a stated case or fit ("best for small teams") or picked it, so every picked brand also counts as recommended. "Appeared" counts answers where the brand was recommended or listed. Every count is a count of answers. Use-case labels are quoted from the answers as written. Google checks use the top ten organic results for the same question collected the same day.

Limits: one run per question, one country, one point in time. AI answers vary between runs, so treat these as frequencies for this sample, not fixed positions. High Salience has no commercial relationship with any brand on this page. If you work for this brand and see an error, write to hello@highsalience.com and we will check it against the dataset.

Full per-answer datasets (CSV) are on each teardown page.

The FAQs below are a short summary of Palo Alto Cortex in ChatGPT, all taken from the data on this page.

Does ChatGPT recommend Palo Alto Cortex?

In our endpoint security software teardown (web search on, United States, September 26, 2026), ChatGPT named Palo Alto Cortex in 16 of 100 buyer questions, recommended it in 13 and made it its own pick in 13.

What does ChatGPT say Palo Alto Cortex is best for?

The label ChatGPT used most often for Palo Alto Cortex was "Existing Palo Alto environment". Other labels included "Organizations consolidating security operations", "Large enterprises, Palo Alto security shops, mature SOCs", and "Large enterprise SOC focused on advanced detection and investigation".

Which brands does ChatGPT compare Palo Alto Cortex with?

In endpoint security software answers, the brands ChatGPT named most often alongside Palo Alto Cortex were CrowdStrike, Microsoft Defender, SentinelOne, and Sophos.

To see how ChatGPT describes your brand, as shown for Palo Alto Cortex on this page, start with the Category Salience Brief. It runs your category's buyer questions across Google and the AI surfaces, shows how each answer positions you against competitors, and ranks what to fix first.