Palo Alto Cortex ASM (Attack Surface Management) - honest review after 6 months

Six months in, and I'm still looking for the ROI on Cortex ASM. The promise is big: map and prioritize your external attack surface. The reality feels like an expensive asset inventory tool we already had.

It finds things, I'll give it that. But "finding" isn't the same as "actionable." The critical vulnerabilities it flags are usually the same ones our vuln scanner caught weeks ago. The "business context" for prioritization is shallow. We're now paying a premium for a nicer dashboard on data we mostly already owned. For the price Palo Alto commands, I expected more automation, more unique insight, less overlap with existing tools. Has anyone else justified this as a net new value, and not just a consolidation play?