# Cortex by Palo Alto Networks

> Cortex is Palo Alto Networks' AI-driven security operations platform, combining endpoint defense, security analytics, automation, attack-surface management, threat intelligence and cloud protection. Its defining bet is that a security operations center works faster when data, detections and response live in one system rather than a loose collection of consoles.

- **Founded:** 2005
- **Headquarters:** Santa Clara, United States
- **Founders:** Nir Zuk (Founder and Chief Technology Officer)
- **Products:** Cortex XDR, Cortex XSOAR, Cortex Xpanse, Cortex XSIAM, Cortex Cloud
- **Notable:** Demisto grew its customer count by a reported 300% in 2017 before raising a $43 million Series C., Palo Alto Networks acquired Demisto for $560 million in 2019 and made its automation technology central to Cortex., Cortex XDR achieved 100% detection in a recent MITRE ATT&CK evaluation cited by Palo Alto Networks.

## Products & services

- **Cortex XDR** — Extended detection and response across endpoint, network, cloud and identity data, with prevention, analytics and investigation tools.
- **Cortex XSOAR** — The evolved Demisto platform for case management, threat intelligence and playbook-driven security orchestration, automation and response.
- **Cortex Xpanse** — Attack-surface management that continuously discovers internet-facing assets and risky exposures.
- **Cortex XSIAM** — An AI-driven SOC platform combining security data, SIEM, XDR, SOAR, analytics and automation in one operating layer.
- **Cortex Cloud** — Real-time cloud security combining cloud-native application protection and cloud detection and response from code through runtime and the SOC.
- **Cortex AgentiX** — A platform for building, deploying and governing specialized AI agents across Cortex security workflows.
- **Cortex Advanced Email Security** — AI-driven email protection integrated into the Cortex security operations portfolio.

## Achievements

- Demisto grew its customer count by a reported 300% in 2017 before raising a $43 million Series C.
- Palo Alto Networks acquired Demisto for $560 million in 2019 and made its automation technology central to Cortex.
- Cortex XDR achieved 100% detection in a recent MITRE ATT&CK evaluation cited by Palo Alto Networks.
- Palo Alto Networks reports more than 1,300 prebuilt Cortex XSOAR playbooks and integrations.
- A Forrester commissioned study modeled a 70% reduction in incidents needing SOC attention and an 85% reduction in mean time to resolution by year three for a composite XSIAM customer.
- A North American freight customer reported moving from 6,000 unresolved incidents to closing its daily escalated queue, with median resolution around one hour.

## Latest updates

- **2026-07** — Cortex XSIAM 3.6 added natural-language dashboard creation, extended threat intelligence and broader agentic response capabilities; Cortex AgentiX also received FedRAMP Moderate and High authorization.
- **2026-06** — Palo Alto Networks announced support for multiple frontier AI models across Cortex for investigations and autonomous workflows.
- **2025-10** — Cortex Cloud 2.0 was announced with a redesigned command center and expanded cloud detection and response capabilities for early 2026 availability.
- **2025-04** — Cortex XSIAM 3.0 added proactive exposure management and advanced email security to the platform.
- **2025-02** — Palo Alto Networks introduced Cortex Cloud, combining the next version of Prisma Cloud with cloud detection and response on the Cortex platform.

## Links

- Website: https://www.paloaltonetworks.com/cortex
- LinkedIn: https://www.linkedin.com/showcase/cortex-by-palo-alto-networks/
- Twitter/X: https://x.com/PaloAltoNtwks
- GitHub: https://github.com/demisto/content
- YouTube: https://www.youtube.com/@paloaltonetworks
- Instagram: https://www.instagram.com/paloaltonetworks/
- Facebook: https://www.facebook.com/PaloAltoNetworks/

---

Profile page: https://yespress.io/cortex-by-palo-alto
Published by YesPress — https://yespress.io
Last updated: 2026-09-26