AI is fundamentally changing how organizations develop software, manage cloud environments and operate their businesses. AI coding assistants are accelerating development, autonomous agents are introducing new security risks, and SaaS applications are expanding the attack surface. At the same time, frontier AI is accelerating attacks, with Unit 42 research demonstrating that an AI-assisted attack could reach data exfiltration in just 25 minutes in a simulated scenario.
Cortex Cloud 2.3 advances our vision of a platform for autonomous cloud defense. The release introduces new capabilities to continuously reduce risk, defend in real time and start secure across modern cloud environments.
Here's a look at the key innovations.
Align Security Goals with Business Outcomes
New Security Initiatives help organizations drive measurable risk reduction by setting security goals, prioritizing remediation and tracking progress over time. Teams can create custom initiatives or use recommended goals based on posture and finding trends.
For example, a security team can set a goal to eliminate all critical and high-severity vulnerabilities from production applications by a specific date. With Security Initiatives, teams can coordinate remediation and track progress toward that goal, making it easier to measure and demonstrate risk reduction.
Extend Unified Security Across SaaS and Cloud
SaaS applications and cloud infrastructure are increasingly interconnected through shared identities, integrations and access to sensitive data. AI agents and third-party integrations are expanding these connections, creating new opportunities for attackers to exploit security gaps. Yet fragmented security across SaaS and cloud environments makes it difficult to identify connected risks and potential attack paths.
Introducing Cortex Cloud SaaS Security, bringing unified protection to 100 SaaS applications. By connecting SaaS posture, identity, data and AI security with broader cloud context, Cortex Cloud helps teams uncover connected risks, prioritize exposures and accelerate remediation from a single platform.
Learn more in our Cortex Cloud SaaS Security announcement.
Stop Threats in Real Time with a Cloud-Optimized Agent
The new Cortex Cloud Sensor brings lightweight, real-time threat prevention to Linux cloud workloads and Kubernetes environments. Built on eBPF technology, the sensor is optimized for cloud-native infrastructure, delivering active protection while using up to 75% fewer resources.
Combined with agentless scanning, Cortex Cloud enables organizations to proactively identify exposures and stop active threats in real time without sacrificing workload performance.
Start Secure by Connecting Security to AI Coding Agents
AI coding agents are accelerating software development. Rather than simply shifting security left to identify vulnerabilities earlier, Cortex Cloud enables developers to start secure by embedding security directly into code generation.
To accelerate secure development, Cortex Cloud brings security context and code scanning directly to AI coding agents through its MCP Server, with native integrations for Claude Code and Cursor. Agents can identify and address security weaknesses as they generate code, rather than relying on security checks later in development.
Ensure Only Trusted Software Reaches Production
The new Supply Chain Security Dashboard and Artifact Attestation help organizations ensure only trusted software reaches production. Teams can evaluate software trust based on vulnerabilities in the SBOM, the security posture of the development pipeline and artifact attestations that verify software integrity and provenance.
Open-source reachability analysis also helps teams cut through CVE noise by identifying vulnerable packages and functions that are actually reachable, so they can focus remediation on the risks that matter most.
More Innovations Across the Cortex Cloud Platform
Beyond these major advancements, the latest release brings even more value across the Cortex Cloud platform, helping security teams expand coverage, strengthen protection and simplify remediation.
- Unified Identity Security Dashboard: Investigate identity risks faster by connecting identity posture with real-time threat signals across cloud, SaaS and on-premises environments, including human identities, non-human identities and AI agents.
- Expanded AI Security for AWS and GCP: Secure more of the AI attack surface with visibility and risk detection across AI agents, datasets, identities and supporting infrastructure in AWS Bedrock AgentCore, AWS SageMaker and GCP Gemini Enterprise Agent Platform.
- Fix-Oriented Vulnerability Policies: Reduce ticket volume and accelerate remediation by grouping CVEs that share the same fix into a single issue.
- Expanded Cloud Support: Extend protection across more environments with posture management and compliance for IBM Cloud, and vulnerability management and real-time protection for Azure Container Apps.
- Kubernetes Advanced Admission Security Policies: Prevent risky deployments associated with active threats using security policies informed by Unit 42 research.
- Agentless File Integrity Monitoring: Detect unauthorized changes to system files, binaries and configurations across cloud workloads without deploying agents.
- DLP Harmonization: Simplify policy coverage analysis by consolidating DLP policies from Cortex Endpoint DLP and Microsoft Purview DLP into a unified inventory.
- MCP Server Discovery: Uncover risks in AI development infrastructure by discovering MCP servers and assessing associated security risks.
- GitHub Advanced Security Integration: Improve application risk prioritization by bringing GitHub Advanced Security SAST and SCA findings into Cortex Cloud for unified visibility.
Advance Your Cloud Defense with Cortex Cloud
From setting measurable security goals to protecting running workloads and securing AI-generated code, Cortex Cloud continues to make cloud defense more proactive, automated and effective.
See the latest innovations in action. Request a personalized demo to explore how Cortex Cloud can strengthen your security, or read the full release notes for a complete overview of what's new.