[](https://www.paloaltonetworks.com/?ts=markdown) * Sign In * Customer * Partner * Employee * [Login to download](https://www.paloaltonetworks.com/login?ts=markdown) * [Join us to become a member](https://www.paloaltonetworks.com/login?screenToRender=traditionalRegistration&ts=markdown) * EN * ![magnifying glass search icon to open search field](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg) ![x close icon to close mobile navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-black.svg) [![Palo Alto Networks logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)](https://www.paloaltonetworks.com/?ts=markdown) ![magnifying glass search icon to open search field](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg) * [](https://www.paloaltonetworks.com/?ts=markdown) * [Industry Validation](https://www.paloaltonetworks.com/cortex/whycortex?ts=markdown) * Products ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Products [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex AgentiX](https://www.paloaltonetworks.com/cortex/agentix?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Exposure Management](https://www.paloaltonetworks.com/cortex/exposure-management?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Cortex Advanced Email Security](https://www.paloaltonetworks.com/cortex/advanced-email-security?ts=markdown) * [Cortex Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) * [Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Identity Threat Detection and Response](https://www.paloaltonetworks.com/cortex/itdr?ts=markdown) [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) [Data Security](https://www.paloaltonetworks.com/cortex/data-security?ts=markdown) * [Data Security Posture Management](https://www.paloaltonetworks.com/cortex/data-security#dspm?ts=markdown) * [Data Detection and Response](https://www.paloaltonetworks.com/cortex/data-security#ddr?ts=markdown) * [Data Loss Prevention](https://www.paloaltonetworks.com/cortex/data-security#dlp?ts=markdown) [![The Forrester Total Economic Impact™ of Cortex XSIAM](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam/cortex-xsiam_forrester-tei_ROI_web_cyberpedia_300x300.jpg) The Forrester Total Economic Impact^™^ of Cortex XSIAM 257% 3-year ROI and \<6-month payback for SOC transformation. Get the facts](https://start.paloaltonetworks.com/forrester-total-economic-impact-xsiam) * Solutions ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Solutions [Threat Prevention, Detection \& Response](https://www.paloaltonetworks.com/cortex/detection-and-response?ts=markdown) * [Cloud Detection and Response](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown) * [Security Information and Event Management](https://www.paloaltonetworks.com/cortex/modernize-siem?ts=markdown) * [Endpoint Protection](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Endpoint Detection and Response](https://www.paloaltonetworks.com/cortex/endpoint-detection-and-response?ts=markdown) * [Extended Detection \& Response](https://www.paloaltonetworks.com/cortex/detection-and-response?ts=markdown) * [Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed Threat Hunting](https://www.paloaltonetworks.com/cortex/managed-threat-hunting?ts=markdown) * [Ransomware Protection](https://www.paloaltonetworks.com/cortex/ransomware-protection?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/cortex/digital-forensics?ts=markdown) [Security Automation](https://www.paloaltonetworks.com/cortex/security-operations-automation?ts=markdown) * [Network Security Automation](https://www.paloaltonetworks.com/cortex/network-security-automation?ts=markdown) * [Incident Case Management](https://www.paloaltonetworks.com/cortex/incident-case-management?ts=markdown) * [Security Operations Workflow Automation](https://www.paloaltonetworks.com/cortex/security-operations-automation?ts=markdown) * [Threat Intel Management](https://www.paloaltonetworks.com/cortex/threat-intel-management?ts=markdown) * [Extended Data Lake (XDL)](https://www.paloaltonetworks.com/cortex/cortex-xdl?ts=markdown) * [Agentic Assistant](https://www.paloaltonetworks.com/cortex/cortex-agentic-assistant?ts=markdown) [External Attack Surface Protection](https://www.paloaltonetworks.com/cortex/cortex-xpanse/attack-surface-management?ts=markdown) * [Attack Surface Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse/attack-surface-management?ts=markdown) * [Unmanaged Cloud Security](https://www.paloaltonetworks.com/cortex/cortex-xpanse/unmanaged-cloud-asset-management?ts=markdown) * [Third-Party Security](https://www.paloaltonetworks.com/cortex/cortex-xpanse/attack-surface-management-for-third-party-and-supply-chain-security?ts=markdown) * [Compliance Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse/compliance-management?ts=markdown) * [Internet Operations Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse/internet-operations-management?ts=markdown) * [Remote Network Security](https://www.paloaltonetworks.com/cortex/cortex-xpanse/asm-for-remote-workers?ts=markdown) [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) [![Tested. Reviewed. Proven](https://www.paloaltonetworks.com/content/dam/pan/en_US/northstar/cortex/cortex-nav/test-reviewed-proven.png) Tested. Reviewed. Proven See Industry Validation](https://www.paloaltonetworks.com/cortex/cortex-xdr-industry-validation?ts=markdown) * [Blog](https://www.paloaltonetworks.com/blog/security-operations/?ts=markdown) * Resources ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Resources Resources * [White Papers](https://www.paloaltonetworks.com/resources?q=cortex&_charset_=UTF-8&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fwhitepaper&ts=markdown) * [Cortex Partners](https://cortex.marketplace.pan.dev/marketplace/) * [Customer Stories](https://www.paloaltonetworks.com/cortex/customer-stories?ts=markdown) * [Cortex vs. The Competition](https://www.paloaltonetworks.com/cortex/cortex-vs-the-competition?ts=markdown) * [Cortex XSOAR Marketplace](https://xsoar.pan.dev/marketplace) * [Events](https://www.paloaltonetworks.com/resources/cortex-events?ts=markdown) * [Datasheets](https://www.paloaltonetworks.com/resources?q=Cortex&_charset_=UTF-8&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fdatasheet&ts=markdown) * [Research Reports](https://www.paloaltonetworks.com/resources?q=cortex&_charset_=UTF-8&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fresearch&ts=markdown) * [Videos](https://www.paloaltonetworks.com/resources?q=cortex&_charset_=UTF-8&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fvideo&ts=markdown) * [Cortex XDR Resource Center](https://www.paloaltonetworks.com/cortex/cortex-xdr-resource-center?ts=markdown) [![THE CORTEX PLATFORM](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/nav/soc-transformation-infographic.png) DIGITAL ASSET THE CORTEX PLATFORM](https://www.paloaltonetworks.com/resources/infographics/soc-transformation-infographic?ts=markdown) [![Cortex XSIAM Solution Brief](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/nav/cortex-xsiam.png) WHITEPAPER Cortex XSIAM Solution Brief](https://www.paloaltonetworks.com/resources/techbriefs/cortex-xsiam?ts=markdown) [![Unlock customized recommendations for transforming your SecOps.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/secops-24/cortex-nav-resources.jpg) REPORT Unlock customized recommendations for transforming your SecOps.](https://www.paloaltonetworks.com/cortex/secops-readiness-report?ts=markdown) * Get In Touch ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Get In Touch Get in Touch * [Request a Demo](https://www.paloaltonetworks.com/cortex/request-demo?ts=markdown) * [Contact us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Attend a Workshop](https://www.paloaltonetworks.com/cortex/cortex-xdr/hands-on-workshop?ts=markdown) * [Find a Partner](https://technologypartners.paloaltonetworks.com/English/directory) * [Join our Community](https://live.paloaltonetworks.com/) [![SecOps analyst: A day in the life.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsoar/cortex-xsoar_product-tour_thumbnail_367x209.png) SecOps analyst: A day in the life. Start product tour](https://www.paloaltonetworks.com/resources/infographics/xsoar-product-tour?ts=markdown) * Sign In ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Sign In * Customer * Partner * Employee * [Login to download](https://www.paloaltonetworks.com/login?ts=markdown) * [Join us to become a member](https://www.paloaltonetworks.com/login?screenToRender=traditionalRegistration&ts=markdown) * EN ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Language * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [What's New](https://www.paloaltonetworks.com/resources?ts=markdown) * [Get support](https://support.paloaltonetworks.com/SupportAccount/MyAccount) * [Under Attack?](https://start.paloaltonetworks.com/contact-unit42.html) * [Request a Demo](https://www.paloaltonetworks.com/cortex/request-demo?ts=markdown) Search All * [Tech Docs]() Close search modal Cortex xsiam # Unlock the Agentic SOC ## Unparalleled data. Unbeatable AI. The most advanced SOC platform. * [Watch on demand](https://www.paloaltonetworks.com/unit42/combat-risks-frontier-ai?ts=markdown) * [Fight AI with AI](https://www.paloaltonetworks.com/cortex/fight-ai-with-ai?ts=markdown) SolutionsProduct PortfolioProven SuccessResourcesFAQEngage with Us [Solutions](#solutions) [Product Portfolio](#products) [Proven Success](#proven-success) [Resources](#resources) [FAQ](#faq) [Engage with Us](#prevent-breaches) {#solutions} ## Say goodbye to siloed SOC tools, endless alerts and manual processes ## Enter a new era of security operations - powered by unified data, industry-leading automation and AI. ## Cortex XSIAM^®^ cuts through the noise, surfaces real threats and slashes response time with AI-driven efficiency. ## Unleash machine speed and precision with the autonomous SOC built to stop tomorrow's threats. 1. Sprawl and noise 2. A new approach 3. A stronger defense 4. Autonomous future 5. 6. 7. 8. ## Resolve threats in minutes, not hours, with automated triage and guided actions. [Learn how](https://www.paloaltonetworks.com/resources/guides/upgrade-your-siem-guide?ts=markdown) 98% reduction in MTTR ## Uncover every threat with 10,000+ detections and 2,600+ analytics models. [Get the guide](https://www.paloaltonetworks.com/resources/guides/the-essential-guide-mitre-attack-round-6?ts=markdown) 100% MITRE ATT\&CK^®^ detection coverage ## Save millions by consolidating tools, automating tasks, and boosting efficiency. [See case study](https://www.paloaltonetworks.com/customers/louisiana-scales-security-using-ai-driven-cortex-xsiam?ts=markdown) 300% return on investment ## Trusted by the Best ![ADT Logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/adt.svg) ![NHL](https://www.paloaltonetworks.com/content/dam/pan/en_US/customer-nhl/nhl-color-banner.png) ![Cognizant](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/customer/white-logos/cognizant-logo.svg) ![InfoSys Logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/partners/nextwave-for-gsi/infosys/infosys-logo-wht.svg) ![Louisiana State Seal](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/cortex-2025/louisianastate-logo-gray.svg) ![Schlumberger Logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/slb.svg) ![Ministry of Justice](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/ministry-of-justice.svg) ![State of North Dakota](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/north-dakota.svg) ![ADT Logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/adt.svg) ![NHL](https://www.paloaltonetworks.com/content/dam/pan/en_US/customer-nhl/nhl-color-banner.png) ![Cognizant](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/customer/white-logos/cognizant-logo.svg) ![InfoSys Logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/partners/nextwave-for-gsi/infosys/infosys-logo-wht.svg) ![Louisiana State Seal](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/cortex-2025/louisianastate-logo-gray.svg) ![Schlumberger Logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/slb.svg) ![Ministry of Justice](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/ministry-of-justice.svg) ![State of North Dakota](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/north-dakota.svg) ![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/XSIAM-Logo.svg) ## The \#1 AI-driven SOC platform powered by unified data Cortex AgentiX Agentic AI and Automation Extended Capabilities [Email Security](https://www.paloaltonetworks.com/cortex/advanced-email-security?ts=markdown) [Exposure Management](https://www.paloaltonetworks.com/cortex/exposure-management?ts=markdown) [TIP](https://www.paloaltonetworks.com/cortex/threat-intel-management?ts=markdown) ITDR + Future Foundational capabilities SIEM SOAR EDR NDR CDR Cortex XDLUnified Data • AI • Automation ![Endpoint](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/icon-endpoint.png) Endpoint ![Network \& SASE](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/icon-network-sase.png) Network ![Identity](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/icon-identity.png) Identity ![Code to Cloud™](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/icon-code-cloud.png) Cloud ![Exposure \& Misconfigurations](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/icon-exposure.png) Exposures \& Misconfigurations ![Exposure and attack surface](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/icon-exposure.svg) Exposure and attack surface ![Open Ecosystem, Any source](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/icon-endpoint.png) Open Ecosystem, Any source {#products} CAPABILITIES Every SOC capability on one platform. Who says you can't have it all? --- ## Cut the noise. Find what matters. The first AI-driven SOC platform that unifies proactive and reactive security to see every asset, threat and exposure with up to 99% less noise. [Learn more](https://www.paloaltonetworks.com/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resources/techbriefs/cortex-xsiam) ## Prevent attacks with a 3x Gartner Leader. Legacy SIEMs leave you exposed, but Cortex XSIAM --- with integrated XDR --- keeps you safe. Recognized by Gartner^®^ and Forrester^®^ and proven in MITRE ATT\&CK, it blocks the world's most advanced threats. [Learn more](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) ## Uncover Every Threat, Instantly. Start with better data --- triple the EDR telemetry plus enriched firewall logs --- and apply 2,900+ ML models to stop advanced attacks. With 13,300+ up-to-date detections, XSIAM's always ready for what's next. ## Investigate in minutes, not hours. Forget the swivel chair. Everything you need is in one place. AI turns thousands of alerts into a few prioritized cases and shows you the full attack story --- including root cause --- so you can make the right call, right away. ## Respond Instantly with Agentic AI. Command a limitless AI agent workforce to plan, reason, and act, while staying fully in control with enterprise-grade guardrails. Stop threats faster and cut manual work by 75% with industry-leading automation. Get 24/7 SOC excellence with Unit 42 managed services --- *** ** * ** *** ![threat hunter](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/cortex-2025/icons/threat-hunter-white-new.svg) ### Managed Threat Hunting Uncover hidden threats anywhere in your environment --- stopping breaches before they happen. [Dive Deeper](https://www.paloaltonetworks.com/cortex/managed-threat-hunting?ts=markdown) ![silhouettes of people](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/cortex-2025/cortex-teaser-icon-2.svg) ### Managed Detection and Response Detect, hunt and respond to threats faster with 24/7 elite expertise powered by threat intel and Cortex^®^ advanced AI. [Get Started](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) ![detective silhouette](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/cortex-2025/cortex-teaser-icon-3.svg) ### Managed XSIAM Defend every attack surface with 24/7 expert-led MDR, advanced threat hunting and continuous SOC engineering. [See how we can help](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) *** ** * ** *** {#product-tour} ### Product Tour {#proven-success} Customer Success ## Real results from real Cortex XSIAM customers *** ** * ** *** ### Automate away busywork. The Green Bay Packers tackle cyberthreats with AI-powered Cortex XSIAM [Read the full story](https://www.paloaltonetworks.com/customers/securing-the-green-bay-packers-through-an-ai-driven-platform-approach?ts=markdown) ### Gain greater visibility; make smarter decisions. CBTS resolves incidents in seconds with platformization featuring Cortex XSIAM [Read the full story](https://www.paloaltonetworks.com/customers/cbts-resolves-incidents-in-seconds-with-platformization?ts=markdown) ### Slash MTTR. Oneida Nation cuts median time to resolution to 43 seconds with Cortex XSIAM [Read the full story](https://www.paloaltonetworks.com/customers/safeguarding-tradition-in-the-digital-age-oneida-nation-security-transformation?ts=markdown) ### Give analysts time back. The NHL drives SOC efficiency with AI and automation [Read the full story](https://www.paloaltonetworks.com/customers/nhl-stays-ahead-of-the-game-with-palo-alto-networks?ts=markdown) ### Eliminate security silos. Doing digital justice: MoJ's network and security transformation with Palo Alto Networks [Read the full story](https://www.paloaltonetworks.com/customers/mojs-network-and-security-transformation-with-palo-alto-networks?ts=markdown) ![Green Bay Packers](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/customer-stories-1.webp)play Green Bay Packers Automate away busywork ![CBTS](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/customer-stories-2.webp)play CBTS Gain greater visibility, make smarter decisions ![Oneida Nation](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/customer-stories-3.webp)play Oneida Nation Slash MTTR ![NHL](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/cortex-xsiam.webp)play NHL Give analysts time back ![MoJ](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/customer-stories-5.webp)play MoJ Eliminate security silos PreviousNext *** ** * ** *** {#resources} ## Expert resources you can trust [![Frontline Adversary Insights to Defend Your Organization](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/whycortex/threat-vector-webpage-hero-image.jpg) ![mobile Frontline Adversary Insights to Defend Your Organization](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/whycortex/threat-vector-webpage-hero-image.jpg) Threat Vector Investigates Frontline Adversary Insights to Defend Your Organization WATCH NOW](https://www.paloaltonetworks.com/unit42/threat-vector-investigates?ts=markdown) [![Introducing Cortex AgentiX: Meet Your AI Agent Workforce](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/cortex-webinar-series/cortex-webinar-series_featured_pf_Episdode_1_400x300_Girl.jpg) ![mobile Introducing Cortex AgentiX: Meet Your AI Agent Workforce](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/cortex-webinar-series/cortex-webinar-series_featured_pf_Episdode_1_400x300_Girl.jpg) VIRTUAL EVENT Introducing Cortex AgentiX: Meet Your AI Agent Workforce Watch](https://www.paloaltonetworks.com/cortex/cortex-forward-series?ts=markdown) [![The Forrester Total Economic Impact™ of Cortex XSIAM](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam/cortex-xsiam_forrester-tei_ROI_web_promo-card_583x630.jpg) ![mobile The Forrester Total Economic Impact™ of Cortex XSIAM](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam/cortex-xsiam_forrester-tei_ROI_web_promo-card_583x630.jpg) ANALYST STUDY The Forrester Total Economic Impact^™^ of Cortex XSIAM Get the facts](https://start.paloaltonetworks.com/forrester-total-economic-impact-xsiam) [![Cortex XSIAM Datasheet](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/resource-datasheet.png) ![mobile Cortex XSIAM Datasheet](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/resource-datasheet.png) DATASHEET Cortex XSIAM Datasheet Read now](https://www.paloaltonetworks.com/resources/datasheets/cortex-xsiam?ts=markdown) [![Hunting Threats in Developer Environments](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/resource-podcast.png) ![mobile Hunting Threats in Developer Environments](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/resource-podcast.png) PODCAST Hunting Threats in Developer Environments Listen now](https://thecyberwire.com/podcasts/threat-vector/74/notes) [![Cortex XSIAM ROI Calculator](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/resourse-4.png) ![mobile Cortex XSIAM ROI Calculator](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/resourse-4.png) BUSINESS VALUE ESTIMATOR Cortex XSIAM ROI Calculator See results](https://www.paloaltonetworks.com/resources/infographics/cortex-xsiam-roi-calculator?ts=markdown) [![AI-Driven SOC Transformation with Cortex XSIAM](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/resources/thumbnails/ai-driven-soc.png) ![mobile AI-Driven SOC Transformation with Cortex XSIAM](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/resources/thumbnails/ai-driven-soc.png) E-BOOK AI-Driven SOC Transformation with Cortex XSIAM Read now](https://www.paloaltonetworks.com/resources/ebooks/ai-driven-soc-transformation-with-cortex-xsiam?ts=markdown) [![Think You Have Visibility? Think Again.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/blog-think-you-have-visibility.jpeg) ![mobile Think You Have Visibility? Think Again.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/blog-think-you-have-visibility.jpeg) BLOG POST Think You Have Visibility? Think Again. Read now](https://www.paloaltonetworks.com/blog/security-operations/think-you-have-visibility-think-again/?ts=markdown) [![Beyond SIEM: Fast‑Track to an AI‑Driven SOC](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/beyond-siem.webp) ![mobile Beyond SIEM: Fast‑Track to an AI‑Driven SOC](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam3-0-new/beyond-siem.webp) WEBCAST Beyond SIEM: Fast‑Track to an AI‑Driven SOC Watch now](https://www.brighttalk.com/webcast/10903/649340?utm_source=PaloAltoNetworks&utm_medium=brighttalk&utm_campaign=649340) PreviousNext {#faq} ## Frequently Asked Questions What is Cortex XSIAM? Cortex XSIAM is an AI-driven security operations platform that replaces traditional SIEM by unifying broad SOC functionality into a holistic solution. How does XSIAM operate differently from traditional products? It automatically prepares and enriches collected data, stitches it into security intelligence, and immediately applies machine learning detection analytics. What capabilities are included in Cortex XSIAM? It includes data centralization, intelligent stitching, analytics-based detection, incident management, threat intelligence, and automation. How does XSIAM reduce manual analyst work? By leveraging intelligent automation and AI, it reduces alert noise, prioritizes high-risk incidents, and drives response from the same platform. Does XSIAM integrate with other security tools? Yes, it brings telemetry from endpoints, networks, identities, cloud, and third-party sources into one centralized platform for comprehensive visibility. {#prevent-breaches} ## Engage with us Get the latest news, invites to events and threat alerts. First NameLast NameBusiness EmailCompanyJob LevelSelect a job levelJob RoleSelect a job functionPhoneCountryCountryStateStateProvinceProvinceZip CodeDepartment Continue Sign me up to receive news, product updates, sales outreach, event information and special offers about Palo Alto Networks and its partners. By submitting this form, I understand my personal data will be processed in accordance with [Palo Alto Networks Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) and [Terms of Use.](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. Back Experience the Future ## THANK YOU! A Palo Alto Networks specialist will reach out to you shortly. We look forward to connecting with you! {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Prepare for Emerging Risks](https://www.paloaltonetworks.com/unit42/prepare-for-emerging-risks/continuous-frontier-ai-defense?ts=markdown) * [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Understand the Adversary](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Respond to a Cyber Attack](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![Palo Alto Networks Logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language