Search
PRODUCT BULLETIN

What’s Next with Cortex

Unveiling the latest Cortex® features and innovations.

Gartner® Names Palo Alto Networks a Visionary for Cortex XDR

2022 Gartner® Magic Quadrant™ and Critical Capabilities for EPP reports.

Symphony'23

Journey to the
Modern SOC

The premier summit for security operations.

CORTEX XDR

Industry-First XDR

Stop attacks with the power of AI and full visibility.

Cortex XDR
Why Cortex XDR

Stop attacks with full visibility and analytics

Card Head Icon
Card Mobile Head Icon

Proven endpoint protection

Block advanced malware, exploits and fileless attacks with the industry’s most comprehensive endpoint security stack. Our lightweight agent stops threats with Behavioral Threat Protection, AI and cloud-based analysis.

Card Head Icon
Card Mobile Head Icon

Laser-accurate detection

Pinpoint evasive threats with patented behavioral analytics. Cortex XDR uses machine learning to profile behavior and detect anomalies indicative of attack. Analytics lets you spot adversaries attempting to blend in with legitimate users.

Card Head Icon
Card Mobile Head Icon

Lightning-fast investigation and response

Investigate threats quickly by getting a complete picture of each attack with incident management. You can view the root cause of any alert with a single click and swiftly stop attacks across your environment.

Sit back, relax and let Cortex XDR protect you

  • COMPLETE ENDPOINT SECURITY

    Safeguard your endpoints with NGAV, host firewall, disk encryption and USB device control.

  • ML-DRIVEN THREAT DETECTION

    Find hidden threats like insider abuse, credential attacks, malware and exfiltration using behavioral analytics.
    ML-DRIVEN THREAT DETECTION

  • INCIDENT MANAGEMENT

    Cut investigation time with intelligent alert grouping. Incident scoring lets you focus on the threats that matter.
    INCIDENT MANAGEMENT

  • AUTOMATED ROOT CAUSE ANALYSIS

    Swiftly verify threats by reviewing the root cause, sequence of events, intelligence and investigative details all in one place.
    AUTOMATED ROOT CAUSE ANALYSIS

  • DEEP FORENSICS

    Conduct deep internal and regulatory investigations, even if endpoints are not connected to the network.
    DEEP FORENSICS

  • FLEXIBLE RESPONSE

    Block fast-moving attacks, isolate endpoints, execute scripts and sweep across your entire environment to contain threats in real time.
    FLEXIBLE RESPONSE

  • EXTENDED THREAT HUNTING

    Conduct more granular and advanced threat hunting operations in your security environment using extended data collection and analysis.
    EXTENDED THREAT HUNTING
ML-DRIVEN THREAT DETECTION
INCIDENT MANAGEMENT
AUTOMATED ROOT CAUSE ANALYSIS
DEEP FORENSICS
FLEXIBLE RESPONSE
EXTENDED THREAT HUNTING

Simplify SecOps with one platform for detection and response across all data

Cortex XDR delivers enterprise-wide protection by analyzing data from any source to stop sophisticated attacks.

  • Eliminate blind spots with complete visibility
  • Simplify security operations to cut mean time to respond (MTTR)
  • Harness the scale of the cloud for AI and analytics
  • Lower costs by consolidating tools and improving SOC efficiency
Read the datasheet

Deeper visibility to enable advanced threat hunting

Take a proactive stance against advanced threats. The eXtended Threat Hunting (XTH) Data Module enhances visibility and data collection by Cortex XDR. This empowers SecOps to prevent and detect threats faster — and with more precision.

  • Unlock additional analytics and machine learning detectors.

  • Sharpen the ability to identify, prevent and block complex attacks.

  • Proactively hunt with advanced analytics and behavioral models.

  • Identify causality links between attacker actions and affected entities.

Read the solution brief

Best-in-class coverage for stealthy identity threats

Protect your organization without slowing down the business. The new advanced Identity Threat Detection and Response Module from Cortex XSIAM and XDR® provides best-in-class coverage for stealthy identity threat vectors, including compromised accounts and insider threats.

  • Make decisions faster with enhanced views of your organization’s risk posture

  • Gain forensic-level visibility into the asset to easily uncover hidden threats

  • Automate and customize the continuous analysis of user and host activities

  • Swiftly triage and investigate alerts with precise profile information

Read the solution brief

Tested. Reviewed. Proven.

Exceptional test results and praise from analysts and customers make it easy to trust Cortex XDR.

Get the Gartner report
Bar Graph of Protection and Analytics Detection Scores
Get the MITRE ATT&CK Guide
See the report

Drive better security outcomes

Accelerate threat response, streamline operations and increase SOC productivity with Cortex XDR.

Break the attack lifecycle

Drops the malicious file

1

Disables volume shadow copy

2

Modifies the registry

3

Extracts EaseUS drivers

4

Enumerates files and corrupts partition information

5
Blocked with Local Analysis, Yara rules, Behavioral Threat Protection and WildFire Blocked with Behavioral Threat Protection Detected with Analytics Blocked with Behavioral Threat Protection Blocked with Behavioral Threat Protection

Cortex XDR stops the most advanced threats, including Russia-Ukraine cyber activity and the SolarWinds supply chain attack as well as Log4Shell, SpringShell, and PrintNightmare vulnerability exploits. For an interactive demo, see the Log4j incident response simulation.

See how Cortex XDR beats the competition

Two powerful offerings. Comprehensive protection.

CORTEX XDR PREVENT
Next-Generation AntivirusBlock malware, ransomware, exploits and fileless attacks
Check Green
Endpoint ProtectionSafeguard endpoints with device control, firewall and disk encryption
Check Green
Detection and ResponsePinpoint attacks with AI-driven analytics and coordinate response
–
Managed Detection and Response Let Unit 42 experts work for you 24/7 to detect and respond to threats
–
Host InsightsFind vulnerabilities and sweep across endpoints to eradicate threats
–
ForensicsInvestigate incidents swiftly with comprehensive forensics evidence
–
eXtended Threat HuntingDeep endpoint telemetry to support advanced threat hunting operations
–
     CORTEX XDR PRO     
Next-Generation AntivirusBlock malware, ransomware, exploits and fileless attacks
Check Green
Endpoint ProtectionSafeguard endpoints with device control, firewall and disk encryption
Check Green
Detection and ResponsePinpoint attacks with AI-driven analytics and coordinate response
Check Green
Managed Detection and Response Let Unit 42 experts work for you 24/7 to detect and respond to threats
Optional
Host InsightsFind vulnerabilities and sweep across endpoints to eradicate threats
Optional
ForensicsInvestigate incidents swiftly with comprehensive forensics evidence
Optional
eXtended Threat HuntingDeep endpoint telemetry to support advanced threat hunting operations
Optional

Unrivaled innovation to outpace attackers

Cortex Time line
Swipe for More

Maximize ROI by boosting SOC efficiency

  • Eliminate siloed tools for a more efficient SOC

  • Reduce setup, tuning and operating costs with cloud-delivered services and out-of-the-box detection

  • Cut the cost of attacks with better protection and faster response

Get the ROI paper Calculate your risk
Maximize ROI by consolidating your operations

Trusted by companies worldwide

FEATURED CASE STUDY

State of North Dakota unifies security and filters out the noise with Cortex XDR

State of North Dakota
state of north dakota unifies security and filters out the noise with cortex xdr

Featured Resources

See all documents
DIGITAL ASSET

Cortex XDR Resource Center

Learn about XDR
WHITEPAPER

Cortex At a Glance

Read about XDR
DIGITAL ASSET

10 Must Haves for Detection and Response

Explore
VIRTUAL WORKSHOP

Threat Hunting and Investigations Hands-on Workshop

Get hands on
WHITE PAPER

Maximize the ROI of Detection and Response

Download
See all documents

Get the latest news, invites to events, and threat alerts

Popular Resources

Legal Notices

Popular Links

Report a Vulnerability