Cortex XDR applies machine learning at cloud scale to rich network, endpoint, and cloud data, so you can quickly find and stop targeted attacks, insider abuse, and compromised endpoints. Cortex XDR apps consume and correlate data from the Cortex Data Lake to reveal threat causalities and timelines—they're your mission control for complete visibility into network traffic and user behavior.

Latest Releases

Highlights Details
4 December 2019 Cortex XDR is jam-packed with new integrations including the all new Cortex XDR agent for advanced endpoint protection, external log ingestion from Fortinet and Cisco ASA firewall logs, and loads more!
30 October 2019 You can now ingest logs and alerts from external syslog sources such as Check Point firewalls.
24 September 2019 Configure a new incident starring policy to enable Cortex XDR to categorize incidents that contain characteristics that are important to you.
6 August 2019 Two apps become one! Cortex XDR now includes all investigation, response, and analytics capabilities. 
30 June 2019 Cortex XDR welcomes Demisto with new APIs to help you leverage Demisto for automated incident response and security orchestration.

Cortex XDR™ Documentation

Cortex XDR™ Prevent Administrator’s Guide


Cortex XDR Prevent provides integrated endpoint protection.

Cortex XDR™ API Reference


Cortex XDR APIs enable you to integrate with Demisto and other third-party tools to view and manage your incidents, endpoints, and Cortex XDR agents.

Cortex XDR™ Pro Administrator’s Guide


Provides comprehensive information for using Cortex XDR to accelerate investigations across your network, endpoint, and cloud data.

Cortex XDR™ Analytics Alert Reference


View all Cortex XDR Analytics alerts.

Cortex XDR™ Release Notes


Review the newest features and known issues for Cortex XDR.

Cortex XDR Agent

Cortex XDR™ Agent Administrator's Guide


Use this guide to install and use the Cortex XDR agent that protects your endpoints from exploits and malware.

Cortex XDR™ Agent Release Notes


Additional Resources

Live Community: Cortex XDR


Have questions about Cortex XDR? Join the Live Community to post your questions and get answers.

Palo Alto Networks® Compatibility Matrix


Find compatibility information for the Cortex XDR agent.