From Cortex XDR you can uninstall the Cortex XDR agent on an endpoint (see Uninstall the Cortex XDR Agent in the

Cortex XDR Administrator’s Guide

). You can also uninstall the agent from the endpoint directly. On Mac endpoints, you can use the Mac installation program (in this case, the Cortex XDR Agent Installer) to uninstall a program. To uninstall the agent, you must also supply the uninstall password. After you uninstall the agent, the endpoint is no longer protected by your company’s security policies and the license returns to the pool of available licenses.