Palo Alto Networks Cortex XSOAR is an automation, orchestration, and incident management system that allows you to unify various tools into a single ecosystem, automate routine response processes, and centrally manage incidents. The solution integrates with a large number of security, analytics, ITSM, SIEM, cloud services, and more, using 1000+ pre-configured integrations and API connectors.
Functional features
Ability to create a separate environment for testing scripts and Playbooks
Playbooks Graphic Editor
Automatic detection and elimination of duplicate notifications and incidents
Automatic classification and prioritization of incidents
Automatic documentation of actions taken during the investigation
Availability of ChatOps for collaboration between analysts to investigate an incident
Benefits of the solution:
- A single platform to automate all stages of incident response
- 1000+ pre-configured Playbooks and the ability to create your own
- Integration with the unified Palo Alto Networks ecosystem
- Ability to deploy in on-premises, cloud, and hybrid environments
- Continuously updating detection mechanisms with Threat Intelligence from Unit 42 (Autofocus)
- Built-in AI assistant
- Support for automation of actions in CI/CD environments such as: GitHub, GitLab and Bitbucket
Available integrations with:
- Security solutions: IBM QRadar, Splunk, Qualys VM, Rapid7 InsightVM, Tenable.io, Cyberark Identity, AlienVault, VirusTotal, Akamai WAF, Bloodhound, Cisco ASA, Cloudflare, FireEye Helix, ForitGate, Forcepoint DLP, etc.
- Cloud services: AWS, GCP, Azure, Alibaba, Oracle, Dropbox
- Ticketing systems: Jira, ServiceNow, Remedy, Wolken
- You can view the full list of integrations at Cortex Marketplace
Palo Alto Networks Cortex XSOAR is a platform that combines orchestration, automation, centralized incident management, integration with threat intelligence sources, and support for teamwork during investigations. The solution helps increase the efficiency and speed of incident response, reducing the workload on analysts and reducing the time to remediate threats.
Entrust the security of your business to professionals! Get a free consultation from experts Seeton:
Get a consultation
Always in touch to ensure the continuity of your business!
Learn more and get consultation from Seeton Cyber Security Group!
PARTNER: