Value Delivered

There are many ways the Cortex® Xpanse™ Expander API integrates with existing security and IT systems.
The Cortex® Xpanse™ Expander APIs facilitate tight integration into your security ecosystem. There are many ways the Cortex Xpanse Expander API integrates with existing security and IT systems. The following are current ways that Cortex Xpanse Expander customers leverage the Cortex Xpanse Expander API:
  • IT Service Management (ITSM)
    —Many Cortex Xpanse Expander customers integrate with an ITSM platform, such as ServiceNow, to automatically open trouble tickets for Cortex Xpanse Expander-identified exposures. See Expander APIs and Integrations for details.
  • Security Information and Event Management (SIEMs)
    —An Expander exposure can automatically generate an event in your SIEM. See Expander APIs and Integrations for details.
  • Configuration Management Database (CMDB)
    —Through direct CMDB integration, you can automatically add new Cortex Xpanse Expander-identified assets to your CMDB. See Expander APIs and Integrations for details.
  • Vulnerability Management Solutions (VM)
    —Vulnerability management systems, such as Nessus, Rapid7, and Qualys, only scan assets they can find. Integration with Cortex Xpanse Expander keeps VM systems up to date on all organizational assets, including critical assets exposed to the public Internet. See Expander APIs and Integrations for details.
  • IaaS Cloud Service Providers
    —Ensure all Cortex Xpanse-identified cloud assets are tracked and monitored in sanctioned IaaS accounts.
  • Direct integration for AWS
    —The Cortex Xpanse Cloud Monitoring Integration enables Cortex Xpanse Expander to show an audit of assets Cortex Xpanse was able to identify for your organization based on assets your organization is tracking in known and sanctioned AWS accounts. See AWS Cloud Connector for details.
  • Cloud Threat Detection
    —Cortex Xpanse Expander can update other cloud threat detection tools to make sure that threat assessment and response includes all Cortex Xpanse Expander-identified cloud assets.
  • Setting up custom alerts and dashboards
    —Using the Cortex Xpanse Expander API, you can set up custom alerts and dashboards for senior management, incident response (IR), and compliance teams.

Recommended For You