[](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) ![x close icon to close mobile navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-black.svg) [![Cortex Cloud logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/cortexcloud-logo-dark.svg)](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) ![magnifying glass search icon to open search field](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg)

* [](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* Use Cases  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Use Cases  
  Use Cases
  
  * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)  
    Real-time cloud security powered by unified data, AI and automation
  * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)  
    Prevent risks at the source
  * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)  
    Rapidly prioritize and remediate risks across any cloud
  * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)  
    Stop cloud attacks before they become breaches
  * [Security Operations](https://www.paloaltonetworks.com/cortex?ts=markdown)  
    Detect, investigate and respond to threats across enterprise and cloud

* Solutions  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Solutions  
  [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)
  
  * [Application Security Posture Management (ASPM)](https://www.paloaltonetworks.com/cortex/cloud/application-security-posture-management?ts=markdown)
  * [Software Supply Chain Security](https://www.paloaltonetworks.com/cortex/cloud/software-supply-chain-security?ts=markdown)
  * [IaC Security](https://www.paloaltonetworks.com/cortex/cloud/infrastructure-as-code-security?ts=markdown)
  * [Software Composition Analysis](https://www.paloaltonetworks.com/cortex/cloud/software-composition-analysis?ts=markdown)
  * [Secrets Security](https://www.paloaltonetworks.com/cortex/cloud/secrets-security?ts=markdown)
  * [Open Partner Ecosystem](https://www.paloaltonetworks.com/cortex/cloud/appsec-partner-ecosystem?ts=markdown)  
    [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)
  * [Cloud Security Posture Management (CSPM)](https://www.paloaltonetworks.com/cortex/cloud/cloud-security-posture-management?ts=markdown)
  * [Cloud Infrastructure Entitlement Management (CIEM)](https://www.paloaltonetworks.com/cortex/cloud/cloud-infrastructure-entitlement-management?ts=markdown)
  * [Data Security Posture Management (DSPM)](https://www.paloaltonetworks.com/cortex/cloud/data-security-posture-management?ts=markdown)
  * [AI Security Posture Management (AI-SPM)](https://www.paloaltonetworks.com/cortex/cloud/ai-security-posture-management?ts=markdown)
  * [Vulnerability Management](https://www.paloaltonetworks.com/cortex/cloud/vulnerability-management?ts=markdown)
  * [Cloud Attack Surface Management (ASM)](https://www.paloaltonetworks.com/cortex/cloud/attack-surface-management?ts=markdown)  
    [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)
  * [Cloud Detection and Response (CDR)](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown)
  * [Container \& Kubernetes Security](https://www.paloaltonetworks.com/cortex/cloud/container-security?ts=markdown)
  * [Cloud Workload Protection (CWP)](https://www.paloaltonetworks.com/cortex/cloud/cloud-workload-protection?ts=markdown)
  * [API Security](https://www.paloaltonetworks.com/cortex/cloud/api-security?ts=markdown)
  * [Web Application Security](https://www.paloaltonetworks.com/cortex/cloud/web-application-security?ts=markdown)  
    [Security Operations](https://www.paloaltonetworks.com/cortex/?ts=markdown)
  * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)
  * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)
  * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)
  * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)
  * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)  
    [Industries](https://www.paloaltonetworks.com/industry?ts=markdown)
  * [Government](https://www.paloaltonetworks.com/cortex/cloud/government?ts=markdown)

* [Product Tours](https://www.paloaltonetworks.com/cortex/cloud/product-tours?ts=markdown)

* Resources  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Resources  
  Learn
  
  * [Blog](https://www.paloaltonetworks.com/blog/cloud-security?ts=markdown)
  * [Cloud Research](https://www.paloaltonetworks.com/cortex/cloud/research?ts=markdown)
  * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
  * [Live Community](https://live.paloaltonetworks.com/)
  * [Interactive Workshops](https://www.paloaltonetworks.com/cortex/cloud/interactive-workshops?ts=markdown)  
    Product Information
  * [Technical Documentation](https://docs.paloaltonetworks.com/)
  * [Open Source Projects](https://www.paloaltonetworks.com/cortex/cloud/open-source-projects?ts=markdown)
  * [Support](https://support.paloaltonetworks.com/Support/Index)  
    Resources
  * [Technology Partners](https://www.paloaltonetworks.com/partners/technology-partners?ts=markdown)
  * [Customer Success Stories](https://www.paloaltonetworks.com/customers?ts=markdown)
  * [Resource Center](https://www.paloaltonetworks.com/resources?ts=markdown)
  * [Events](https://events.paloaltonetworks.com)

* 

* [Request a Demo](https://www.paloaltonetworks.com/cortex/cloud/demo?ts=markdown)  
  ![palo alto networks logo icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default.svg) ![white arrow icon pointing left to return to main Palo Alto Networks site](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-white.svg)  
  [](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)  
  Search  
  Close search modal

*** ** * ** ***

## Open-Source Projects

#### Cortex^®^ Cloud by Palo Alto Networks is committed to open source and the community behind our open-source tools and the tools we support.

* [Visit our GitHub page](https://github.com/PaloAltoNetworks)  
  **inherit**  
  ![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-white.svg)  
  {#why} Committed to Open Source

## We're dedicated to simplifying and securing your cloud-native applications, and open source is part of this mission. Our cutting-edge, open-source tools are designed to champion cloud-native best practices with a focus on enhancing security.

[Visit our GitHub page](https://github.com/bridgecrewio)  
OPEN SOURCE PROJECTS

## Key open-source contributions

Checkov

### Extensible policy as code

Checkov is a command-line interface (CLI) that scans infrastructure as code (IaC) for misconfigurations and exposed secrets. Coverage includes Terraform^®^, Terraform plan, CloudFormation, Kubernetes^®^, Dockerfile, serverless and ARM templates and more.

* Integrate as a guardrail for CI/CD pipelines.

* Include graph-based analysis for context-aware policies.

* Add custom policies in Python or YAML.

[Learn more](https://github.com/bridgecrewio/checkov)  
[![Checkov](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/prisma/cloud/open-source-projects/4_checkov.gif)](#prismastickyimagecom_prisma-custom-background_prismacustombackgrou_1312211708_cleanParsys_open-source-projects_cloud_cortex_en_US_pan_content_)  
Yor

### Automated tag-and-trace

Yor tags IaC templates with attribution and ownership details, unique IDs that get carried across to cloud resources, improving root cause analysis, operational efficiency and financial attribution.

* Automate tagging as a pre-commit hook or in a CI/CD pipeline.

* Include tracing details to decrease mean time to resolution (MTTR).

* Add custom tags for your own attribute needs.

[Learn more](https://github.com/bridgecrewio/yor)  
[![Yor](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/prisma/cloud/open-source-projects/5_Yor.jpg)](#prismastickyimagecom_1280391578_prisma-custom-background_prismacustombackgrou_1312211708_cleanParsys_open-source-projects_cloud_cortex_en_US_pan_content_)  
CI/CD Goat

### Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags.

The CI/CD Goat project offers a practical, engaging way to learn CI/CD security with 11 hands-on challenges in a real CI/CD environment. Participants can deepen their expertise across various security risks through scenarios that progressively increase in difficulty.

* Tackle 11 targeted challenges in an authentic CI/CD setting.

* Learn to mitigate the OWASP Top 10 CI/CD Security Risks through interactive, scenario-based exercises.

* Enjoy a unique learning experience with each challenge themed after a character from "Alice in Wonderland."

[Learn more](https://github.com/cider-security-research/cicd-goat)  
[![CI/CD Goat](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/prisma/cloud/open-source-projects/6_CI_CD-GOAT.jpg)](#prismastickyimagecom_631297434_prisma-custom-background_prismacustombackgrou_1312211708_cleanParsys_open-source-projects_cloud_cortex_en_US_pan_content_)  
AirIAM

### Least privilege AWS^®^ IAM using Terraform

AirIAM scans AWS IAM for activity and generates a Terraform template with least-privilege access.

* Reduce the attack surface by identifying unused users, roles and permissions.

* Generate usage-based policies for least-privileged access.

* Create Terraform code for IAM policies for version control and collaboration.

[Learn more](https://github.com/bridgecrewio/airiam)  
[![AirIAM](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/prisma/cloud/open-source-projects/7_airiam-recording.gif)](#prismastickyimagecom_1805890827_prisma-custom-background_prismacustombackgrou_1312211708_cleanParsys_open-source-projects_cloud_cortex_en_US_pan_content_)  
{#modules}

## Additional Open-Source Projects

### TerraGoat

Vulnerable-by-design Terraform files for training and learning.  
[Learn more](https://github.com/bridgecrewio/terragoat)

### WireLurkerDetector

Script for detecting the WireLurker malware family.  
[Learn more](https://github.com/PaloAltoNetworks/WireLurkerDetector)

### RBAC-Police

Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego.  
[Learn more](https://github.com/PaloAltoNetworks/rbac-police)

### IronSkillet

IronSkillet is a set of day-one configuration templates for PAN-OS^®^ to enable alignment with security best practices.  
[Learn more](https://github.com/PaloAltoNetworks/iron-skillet)

### CFNGoat

Vulnerable-by-design CloudFormation files for training and learning.  
[Learn more](https://github.com/bridgecrewio/cfngoat)

### CDKGoat

Vulnerable-by-design AWS CDK files for training and learning.  
[Learn more](https://github.com/bridgecrewio/cdkgoat)

### Cloud Offensive Breach and Risk Assessment (COBRA)

Simulate attacks across multi-cloud environments to provide a thorough assessment of security controls.  
[Learn more](https://github.com/PaloAltoNetworks/cobra-tool)  
{#footer}

## Products and Services

* [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown)

* [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown)

* [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown)

* [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown)

* [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown)

* [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown)

* [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown)

* [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown)

* [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown)

* [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown)

* [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown)

* [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown)

* [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown)

* [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown)

* [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown)

* [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown)

* [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown)

* [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown)

* [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown)

* [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown)

* [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown)

* [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown)

* [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)

* [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)

* [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)

* [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown)

* [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)

* [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)

* [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)

* [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)

* [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)

* [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown)

* [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown)

* [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown)

* [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown)

* [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown)

* [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown)

## Company

* [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown)
* [Careers](https://jobs.paloaltonetworks.com/en/)
* [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown)
* [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown)
* [Customers](https://www.paloaltonetworks.com/customers?ts=markdown)
* [Investor Relations](https://investors.paloaltonetworks.com/)
* [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown)
* [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown)

## Popular Links

* [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown)
* [Communities](https://www.paloaltonetworks.com/communities?ts=markdown)
* [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown)
* [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
* [Event Center](https://events.paloaltonetworks.com/)
* [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center)
* [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown)
* [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown)
* [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown)
* [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown)
* [Tech Docs](https://docs.paloaltonetworks.com/)
* [Unit 42](https://unit42.paloaltonetworks.com/)
* [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd)
  ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)
* [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown)
* [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown)
* [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown)
* [Documents](https://www.paloaltonetworks.com/legal?ts=markdown)

Copyright © 2025 Palo Alto Networks. All Rights Reserved

* [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks)
* [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown)
* [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/)
* [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks)
* [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks)
* EN  
  Select your language