Search
CORTEX
XDR 3.0: Next Has Arrived
The third generation of XDR secures against cloud and identity-based threats.
Carbanak+Fin7: MITRE ATT&CK Results Unpacked
Gartner Innovation Insight for Detection and Response
Why Cortex XDR
Stop attacks with full visibility and analytics
Sit back, relax and let Cortex XDR protect you
-
COMPLETE ENDPOINT SECURITY
Safeguard your endpoints with NGAV, host firewall, disk encryption and USB device control.![COMPLETE ENDPOINT SECURITY]()
-
ML-DRIVEN THREAT DETECTION
Find hidden threats like insider abuse, credential attacks, malware and exfiltration using behavioral analytics.![ML-DRIVEN THREAT DETECTION]()
-
INCIDENT MANAGEMENT
Cut investigation time with intelligent alert grouping. Incident scoring lets you focus on the threats that matter.![INCIDENT MANAGEMENT]()
-
DEEP FORENSICS
Conduct deep internal and regulatory investigations, even if endpoints are not connected to the network.![DEEP FORENSICS]()
-
FLEXIBLE RESPONSE
Block fast-moving attacks, isolate endpoints, execute scripts and sweep across your entire environment to contain threats in real time.![FLEXIBLE RESPONSE]()
Simplify SecOps with one platform for detection and response across all data
Cortex XDR delivers enterprise-wide protection by analyzing data from any source to stop sophisticated attacks.
- Eliminate blind spots with complete visibility
- Simplify security operations to cut mean time to respond (MTTR)
- Harness the scale of the cloud for AI and analytics
- Lower costs by consolidating tools and improving SOC efficiency
Tested. Reviewed. Proven.
Exceptional test results and praise from analysts and customers make it easy to trust Cortex XDR.
-
99%
Combined prevention and response capabilities score
-
100%
Reduction in Time to Respond (TTR)
The Palo Alto Networks XDR strategy “is the most comprehensive in this study, offering threat prevention, detection, and access controls spanning endpoint, IoT, network, and cloud apps."
Two powerful offerings. Comprehensive protection.
| CORTEX XDR PREVENT | CORTEX XDR PRO | |
|---|---|---|
| Data sourcesCollect comprehensive data for extended visibility |
Endpoint
|
Endpoint, network, cloud and third-party data resources
|
| Next-Generation AntivirusBlock malware, ransomware, exploits and fileless attacks |
|
|
| Endpoint protectionSecure your endpoints with device control, host firewall and disk encryption |
|
|
| Detection and responsePinpoint attacks with AI-driven analytics and coordinate response |
–
|
|
| Managed threat huntingLet Unit 42 experts hunt for threats in your environment |
–
|
|
| Host insightsFind vulnerabilities and sweep across endpoints to eradicate threats |
–
|
|
| ForensicsInvestigate incidents swiftly with comprehensive forensics evidence |
–
|
|
| Threat intelligenceEnrich investigations with tailored intelligence and in-depth context |
Wildfire analysis included; additional feeds optional
|
Wildfire analysis included; additional feeds optional
|
|
Data sourcesCollect comprehensive data for extended visibility
|
Endpoint
|
|---|---|
|
Next-Generation AntivirusBlock malware, ransomware, exploits and fileless attacks
|
|
|
Endpoint protectionSecure your endpoints with device control, host firewall and disk encryption
|
|
|
Detection and responsePinpoint attacks with AI-driven analytics and coordinate response
|
–
|
|
Managed threat huntingLet Unit 42 experts hunt for threats in your environment
|
–
|
|
Host insightsFind vulnerabilities and sweep across endpoints to eradicate threats
|
–
|
|
ForensicsInvestigate incidents swiftly with comprehensive forensics evidence
|
–
|
|
Threat intelligenceEnrich investigations with tailored intelligence and in-depth context
|
Wildfire analysis included; additional feeds optional
|
|
Data sourcesCollect comprehensive data for extended visibility
|
Endpoint, network, cloud and third-party data resources
|
|---|---|
|
Next-Generation AntivirusBlock malware, ransomware, exploits and fileless attacks
|
|
|
Endpoint protectionSecure your endpoints with device control, host firewall and disk encryption
|
|
|
Detection and responsePinpoint attacks with AI-driven analytics and coordinate response
|
|
|
Managed threat huntingLet Unit 42 experts hunt for threats in your environment
|
|
|
Host insightsFind vulnerabilities and sweep across endpoints to eradicate threats
|
|
|
ForensicsInvestigate incidents swiftly with comprehensive forensics evidence
|
|
|
Threat intelligenceEnrich investigations with tailored intelligence and in-depth context
|
Wildfire analysis included; additional feeds optional
|
Drive better security outcomes
Accelerate threat response, streamline operations and increase SOC productivity with Cortex XDR.
-
8x
faster investigations
Learn more -
98%
reduction in alerts
Learn more -
44%
lower cost
Get the ROI paper
Break the attack lifecycle
SolarWinds Orion downloads SUNBURST DLL file
1
SUNBURST “checks in” through DNS requests
2
SUNBURST downloads and executes Cobalt Strike
3
Cobalt Strike establishes C2
4
Lateral Movement
5
Exfiltration
6
Blocks with Threat Intel, Local Analysis, and WildFire
Blocks known SolarStorm domains
Blocks with Behavioral Threat Protection, Threat Intel, Local Analysis, and WildFire
Blocks known SolarStorm C2 domains
Blocks password theft and detects discovery with behavioral analytics
Detects exfil with behavioral analytics
Cortex XDR detects and stops the most advanced attacks to keep you safe. When Palo Alto Networks experienced an attempt to download Cobalt Strike on one of its IT SolarWinds servers, Cortex XDR prevented the SolarStorm attack with its Behavioral Threat Protection capability—before the attack was publicly disclosed. After the attack, additional defenses were added to fend off the risk of intrusion at every step.
Rewire security operations
Collect and integrate rich data and accelerate investigations to stop modern attacks.
Unrivaled innovation to outpace attackers
Our platform is built on constant innovation. As threats evolve, we’re committed to delivering new features that enhance security efficacy and streamline operations. With Cortex XDR, “We’ve Got Next.”
Maximize ROI by consolidating tools and simplifying SecOps
Cut costs by 44% when you leverage the combined capabilities of Cortex XDR
- Eliminate siloed, on-premises tools for a more efficient SOC
- Reduce setup, tuning and operating costs with cloud-delivered services and out-of-the-box detection
- Decrease threat hunting costs with powerful search tools and automation
- Cut the cost of attacks with better protection and faster response
With Cortex XDR, you can safeguard your business against breaches while lowering your costs.
