Cortex

50×

reduction in alert volume

8×

faster investigation

44%

lower cost

95%

response automation

Solution components

The industry’s most comprehensive product suite for security operations, empowering enterprises with the best-in-class detection, investigation, automation and response capabilities.

Cortex XDR Pro

The only detection and response platform that runs on integrated endpoint, network and cloud data supporting third-party feeds

Cortex XSOAR

The industry's leading security orchestration, automation and response platform

Cortex Data Lake

Collect, transform and integrate your enterprise’s security data to enable Palo Alto Networks' solutions

Cortex XDR Prevent

A single, cloud-delivered agent for endpoint protection, detection and response

AutoFocus

High-fidelity threat intelligence to power up prevention, investigation and response

Managed Threat Hunting

The industry’s first threat hunting service operating across integrated endpoint, network and cloud data

Crypsis Group

CRRM services designed to proactively identifying and assessing cybersecurity risks across people, processes and technology

Expanse

Extend Cortex's capabilities across exposed and untracked external assets that might compromise your attack surface

Key benefits of Cortex

Quick service set-up

Set up value-added detection and response services quickly, without needing to deploy and manage on-premise equipment

Third-party feed support

Cortex supports third-party feeds, offering cross and upsell opportunities with nearly all customers

Stand out from the competition

Cortex offers unique capabilities that differentiate Palo Alto Networks products over competitors’ security solutions, thereby differentiating you from your competition

Increase customer retention

Selling Cortex can increase customer retention and motivate customers to standardise their security operating platform

Drive additional sales

Positioning Cortex can drive additional product and services sales, eg purchases of additional firewalls to gain full visibility into internal network traffic (endpoints to datacentre servers)

Build custom apps

Leverage Cortex to build custom apps for your customers, supporting the expansion of your value-added managed services

Get your customers hands-on with Cortex XDR

Schedule a hands-on investigation and threat-hunting workshop delivered by Palo Alto Networks experts, developed with you for your customers.

Example activities

Investigate and respond to reveal attack chain and root cause
Investigate suspicious user behaviour and a stealthy attack
Reveal root cause and potential damage
Investigate alerts from NGFW, Cortex XDR Prevent and BIOCs
Hunt for threats across the environment
BIOC creation from lessons learned in prior exercises

Schedule a workshop

Cortex XDR new support and service model

Buy a Cortex XDR subscription and receive Palo Alto Networks standard customer success offering as part of the subscription.

Find out more

Cortex XSOAR in less than five minutes

Watch the video to find out all about Cortex XSOAR in less than five minutes.

Watch now

Palo Alto Networks has completed acquisition of Expanse

Expanse brings a unique level of visibility to security through the continuous scanning of exposed assets.

Find out more

Introducing Cortex XSOAR

Watch the recording of Palo Alto Networks NextWave Insights webinar.
(requires log-in to Palo Alto Networks' partner portal)

Watch now

Cortex XSOAR Marketplace

Increase automation to streamline workflows and maximise efficiency.

Discover effective, prebuilt and validated security content that integrates across the stack.

Find out more

Palo Alto Networks has completed acquisition of The Crypsis Group

The integration of The Crypsis Group's security consulting and forensics capabilities will strengthen Cortex XDR's ability to collect rich security telemetry, manage breaches and initiate rapid response actions.

Find out more