[](https://www.paloaltonetworks.com/cortex?ts=markdown) ![x close icon to close mobile navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-black.svg) [![Cortex logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/cortex-logo-dark.svg)](https://www.paloaltonetworks.com/cortex?ts=markdown) ![magnifying glass search icon to open search field](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg) * [](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Industry Validation](https://www.paloaltonetworks.com/cortex/whycortex?ts=markdown) * Products ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Products Products * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex AgentiX](https://www.paloaltonetworks.com/cortex/agentix?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Exposure Management](https://www.paloaltonetworks.com/cortex/exposure-management?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Cortex Advanced Email Security](https://www.paloaltonetworks.com/cortex/advanced-email-security?ts=markdown) * [Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) [![The Forrester Total Economic Impact of Cortex XSIAM](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsiam/cortex-xsiam_forrester-tei_ROI_web_cyberpedia_300x300.jpg) The Forrester Total Economic Impact^™^ of Cortex XSIAM 257% 3-year ROI and \<6-month payback for SOC transformation. Get the facts](https://start.paloaltonetworks.com/forrester-total-economic-impact-xsiam) * Solutions ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Solutions [Threat Prevention, Detection \& Response](https://www.paloaltonetworks.com/cortex/detection-and-response?ts=markdown) * [Cloud Detection and Response](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown) * [Security Information and Event Management](https://www.paloaltonetworks.com/cortex/modernize-siem?ts=markdown) * [Endpoint Protection](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Endpoint Detection and Response](https://www.paloaltonetworks.com/cortex/endpoint-detection-and-response?ts=markdown) * [Extended Detection \& Response](https://www.paloaltonetworks.com/cortex/detection-and-response?ts=markdown) * [Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed Threat Hunting](https://www.paloaltonetworks.com/cortex/managed-threat-hunting?ts=markdown) * [Ransomware Protection](https://www.paloaltonetworks.com/cortex/ransomware-protection?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/cortex/digital-forensics?ts=markdown) [Security Automation](https://www.paloaltonetworks.com/cortex/security-operations-automation?ts=markdown) * [Network Security Automation](https://www.paloaltonetworks.com/cortex/network-security-automation?ts=markdown) * [Incident Case Management](https://www.paloaltonetworks.com/cortex/incident-case-management?ts=markdown) * [Security Operations Workflow Automation](https://www.paloaltonetworks.com/cortex/security-operations-automation?ts=markdown) * [Threat Intel Management](https://www.paloaltonetworks.com/cortex/threat-intel-management?ts=markdown) * [Extended Data Lake (XDL)](https://www.paloaltonetworks.com/cortex/cortex-xdl?ts=markdown) * [Agentic Assistant](https://www.paloaltonetworks.com/cortex/cortex-agentic-assistant?ts=markdown) [External Attack Surface Protection](https://www.paloaltonetworks.com/cortex/cortex-xpanse/attack-surface-management?ts=markdown) * [Attack Surface Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse/attack-surface-management?ts=markdown) * [Unmanaged Cloud Security](https://www.paloaltonetworks.com/cortex/cortex-xpanse/unmanaged-cloud-asset-management?ts=markdown) * [Third-Party Security](https://www.paloaltonetworks.com/cortex/cortex-xpanse/attack-surface-management-for-third-party-and-supply-chain-security?ts=markdown) * [Compliance Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse/compliance-management?ts=markdown) * [Internet Operations Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse/internet-operations-management?ts=markdown) * [Remote Network Security](https://www.paloaltonetworks.com/cortex/cortex-xpanse/asm-for-remote-workers?ts=markdown) [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) [![Tested. Reviewed. Proven](https://www.paloaltonetworks.com/content/dam/pan/en_US/northstar/cortex/cortex-nav/test-reviewed-proven.png) Tested. Reviewed. Proven See Industry Validation](https://www.paloaltonetworks.com/cortex/cortex-xdr-industry-validation?ts=markdown) * [Blog](https://www.paloaltonetworks.com/blog/security-operations/?ts=markdown) * Resources ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Resources Resources * [White Papers](https://www.paloaltonetworks.com/resources?q=cortex&_charset_=UTF-8&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fwhitepaper&ts=markdown) * [Cortex Partners](https://cortex.marketplace.pan.dev/marketplace/) * [Customer Stories](https://www.paloaltonetworks.com/cortex/customer-stories?ts=markdown) * [Cortex vs. The Competition](https://www.paloaltonetworks.com/cortex/cortex-vs-the-competition?ts=markdown) * [Cortex XSOAR Marketplace](https://xsoar.pan.dev/marketplace) * [Events](https://www.paloaltonetworks.com/resources/cortex-events?ts=markdown) * [Datasheets](https://www.paloaltonetworks.com/resources?q=Cortex&_charset_=UTF-8&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fdatasheet&ts=markdown) * [Research Reports](https://www.paloaltonetworks.com/resources?q=cortex&_charset_=UTF-8&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fresearch&ts=markdown) * [Videos](https://www.paloaltonetworks.com/resources?q=cortex&_charset_=UTF-8&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fvideo&ts=markdown) * [Cortex XDR Resource Center](https://www.paloaltonetworks.com/cortex/cortex-xdr-resource-center?ts=markdown) [![THE CORTEX PLATFORM](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/nav/soc-transformation-infographic.png) DIGITAL ASSET THE CORTEX PLATFORM](https://www.paloaltonetworks.com/resources/infographics/soc-transformation-infographic?ts=markdown) [![Cortex XSIAM Solution Brief](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/nav/cortex-xsiam.png) WHITEPAPER Cortex XSIAM Solution Brief](https://www.paloaltonetworks.com/resources/techbriefs/cortex-xsiam?ts=markdown) [![Unlock customized recommendations for transforming your SecOps.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/secops-24/cortex-nav-resources.jpg) REPORT Unlock customized recommendations for transforming your SecOps.](https://www.paloaltonetworks.com/cortex/secops-readiness-report?ts=markdown) * Get In Touch ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Get In Touch Get in Touch * [Request a Demo](https://www.paloaltonetworks.com/cortex/request-demo?ts=markdown) * [Contact us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Attend a Workshop](https://www.paloaltonetworks.com/cortex/cortex-xdr/hands-on-workshop?ts=markdown) * [Find a Partner](https://technologypartners.paloaltonetworks.com/English/directory) * [Join our Community](https://live.paloaltonetworks.com/) [![SecOps analyst: A day in the life.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xsoar/cortex-xsoar_product-tour_thumbnail_367x209.png) SecOps analyst: A day in the life. Start product tour](https://www.paloaltonetworks.com/resources/infographics/xsoar-product-tour?ts=markdown) * * [Request a Demo](https://www.paloaltonetworks.com/cortex/request-demo?ts=markdown) ![palo alto networks logo icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default.svg) ![white arrow icon pointing left to return to main Palo Alto Networks site](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-white.svg) [](https://www.paloaltonetworks.com/cortex?ts=markdown) Search All * [Tech Docs]() Close search modal *** ** * ** *** ULTIMATE SOC EVENT RETURNS"\> *THE ULTIMATE SOC EVENT RETURNS* --- ![symphont 26](https://www.paloaltonetworks.com/content/dam/pan/en_US/cortex-symphony/SYMPHONY26.svg)FEB 25/261 HOUR * [Count me in](https://start.paloaltonetworks.com/symphony2026) **cortex****cortex****cortex\*\*\*\*cortex** Forrester names Palo Alto Networks a Leader in Attack Surface Management === #### Ranked highest in the Strategy category of all evaluated vendors. * [See the data](https://start.paloaltonetworks.com/2024-forrester-xpanse-wave) * [Read the blog](https://www.paloaltonetworks.com/blog/2024/09/forrester-names-palo-alto-networks-a-leader-in-attack-surface-management/?ts=markdown) **cortex****cortex****cortex\*\*\*\*cortex** WEBINAR SERIES"\> ## *WEBINAR SERIES* *CORTEX* ![fwd image](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/cortex-webinar-series/cortex_webinar-series_microsite_desktop_3_fwd.svg) *Introducing Cortex AgentiX: Meet Your AI Agent Workforce* *Episode 1* * [Watch now](https://www.paloaltonetworks.com/engage/cortex-forward-webinar-series/introducing-cortex-agentix) **cortex****cortex****cortex\*\*\*\*cortex** How to secure a moving target. === #### Explore dynamic attack surfaces and how to secure them. * [Download report](https://start.paloaltonetworks.com/2024-asm-threat-report.html) * [Read the blog](https://unit42.paloaltonetworks.com/2024-unit-42-attack-surface-threat-research-internet-connected-exposures/) **cortex****cortex****cortex\*\*\*\*cortex** PrevNext ![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-white.svg) ## Attackers have an unfair advantage Attackers scan the entire internet for vulnerabilities within 45 minutes. Meanwhile, enterprises take an average of 3+ weeks to find and fix them. They're actively looking for weaknesses. Are you? [Watch the webinar](https://www.paloaltonetworks.com/engage/attack-surface-management/persistence-of-unmanaged-attack-surface) [![Attack Surface Management (ASM) Approach](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/alt_2-icon.png)](#prismastickyimagecom_prisma-custom-background_prismacustombackgrou_cleanParsys_cortex-xpanse_cortex_en_US_pan_content_) ![Cortex XPanse](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/cortex-xpanse-unit-42_asm-threat-report-2024_web_cyberpedia_868x488_v2.png) Report ## 2024 Unit 42^®^ Attack Surface Threat Report Just three categories of exposures---IT and Networking Infrastructure, Business Operations Applications, and Remote Access Services---account for 73% of high-risk exposures and can be exploited for lateral movement and data exfiltration. [Get the report](https://start.paloaltonetworks.com/2024-asm-threat-report.html) ## Turn the odds in your favor The move to hybrid work and the cloud have scattered your IT infrastructure, creating cracks in your security programs. Attack surface management (ASM) actively discovers, learns and responds to your unknown risks in all connected systems and exposed services. Fight back with **Active Attack Surface Management**. [Read the datasheet](https://www.paloaltonetworks.com/engage/attack-surface-management/cortex-xpanse-datasheet-expander?utm_source=-cortex-global&utm_medium=product-webpage) [![Attack Surface Management (ASM) Approach](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/alt_4-icon.png)](#prismastickyimagecom_prisma-custom-background_prismacustombackgrou_1196164911_cleanParsys_cortex-xpanse_cortex_en_US_pan_content_) ![Get the report](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/5-value-drivers-asm-report-350x280.png) ## 70% of organizations experienced a cyberattack from unknown or unmanaged assets. [Get the report](https://www.paloaltonetworks.com/resources/whitepapers/esg-value-drivers-for-an-asm-program?ts=markdown) ## Resolve unknown exposures with automation Legacy vulnerability scanners scan infrequently. Security ratings and periodic pentesting are fine for your known assets. But what about the 30% or more assets that you're not monitoring? [Learn more](https://www.paloaltonetworks.com/resources/whitepapers/security-ratings-are-a-dangerous-fantasy?ts=markdown) [![Attack Surface Management (ASM) Approach](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/6-alt-competitive-landscape-chart_1200x850-C.png)](#prismastickyimagecom_prisma-custom-background_prismacustombackgrou_104875696_cleanParsys_cortex-xpanse_cortex_en_US_pan_content_) ## What Is Cortex Xpanse? Xpanse is an active attack surface management solution that helps your organization actively discover, learn about and respond to unknown risks in all connected systems and exposed services. ACTIVE DISCOVERYACTIVE LEARNINGACTIVE RESPONSE [ACTIVE DISCOVERY](#prismatabscomp_copy_prisma-custom-background_prismacustombackgrou_1960649688_cleanParsys_cortex-xpanse_cortex_en_US_pan_content_0)[ACTIVE LEARNING](#prismatabscomp_copy_prisma-custom-background_prismacustombackgrou_1960649688_cleanParsys_cortex-xpanse_cortex_en_US_pan_content_1)[ACTIVE RESPONSE](#prismatabscomp_copy_prisma-custom-background_prismacustombackgrou_1960649688_cleanParsys_cortex-xpanse_cortex_en_US_pan_content_2) ### Active discovery Automatically, continuously scan the entire internet. Actively discover and index your unknown risks in all connected systems and exposed services. ![ACTIVE DISCOVERY](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/8-1-discover-751x711.png) ### Active learning Use supervised machine-learning models to continuously map your attack surface and prioritize remediation efforts. Reduce MTTD and MTTR without additional analysts. ![ACTIVE LEARNING](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/8-2-learn-751x711.png) ### Active response Immediately reduce your attack surface risks with built-in automated playbooks instead of merely raising IT tickets. ![ACTIVE RESPONSE](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/8-3-respond-751x711.png) ## Automatically find and fix your risks IT tickets don't reduce your risk, but automation does. Fix your unknown exposures before attackers find them. * 500B+ PORTS SCANNED DAILY * 4\.3B IPv4 ADDRESSES SCANNED MULTIPLE TIMES A DAY * All 6 BRANCHES OF THE U.S. MILITARY USE XPANSE ## Category leader. Validated by your peers. ### Hear from Xpanse customers: [Gartner Peer Insights](https://www.gartner.com/reviews/market/vulnerability-assessment/vendor/palo-alto-networks). * ["Great team of architects that had the wisdom to look further out than we did." -- CTO, Finance](#cortex_cortextabscomp_copy__cleanParsys_cortex-xpanse_cortex_en_US_pan_content_0) * ["Special Armour kit for SOC." Special Armour kit for SOC.](#cortex_cortextabscomp_copy__cleanParsys_cortex-xpanse_cortex_en_US_pan_content_1) * ["Overall experience has been outstanding. This product has allowed us to discover assets that we were not monitoring." -- Security and Risk Management, Finance](#cortex_cortextabscomp_copy__cleanParsys_cortex-xpanse_cortex_en_US_pan_content_2) ![Palo Alto Networks Cortex Xpanse was named a Leader and Outperformer in the GigaOm Attack Surface Management Radar Report](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/xpanse-gigaom-1905X1905.jpg) ![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/11-1950x1950.png) ![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/11-1950x1950.png) *** ** * ** *** ## Attack surface management use cases * ### FIX SECURITY BLINDSPOTSFIX SECURITY BLINDSPOTS Automatically discover and eliminate risks from unmanaged IT infrastructure in your environments. [![FIX SECURITY BLINDSPOTS](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/12-1.png)](#mobile_image_prismaaccordioncomp__cleanParsys_cortex-xpanse_cortex_en_US_pan_content_0) \* ### PREVENT RANSOMWAREPREVENT RANSOMWARE Actively shut the door on ransomware attacks with automation. [![PREVENT RANSOMWARE](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/12-2.png)](#mobile_image_prismaaccordioncomp__cleanParsys_cortex-xpanse_cortex_en_US_pan_content_1) \* ### ELIMINATE SHADOW CLOUDELIMINATE SHADOW CLOUD Eliminate unsanctioned, rogue cloud sprawl. [![ELIMINATE SHADOW CLOUD](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/12-3.png)](#mobile_image_prismaaccordioncomp__cleanParsys_cortex-xpanse_cortex_en_US_pan_content_2) \* ### IMPROVE ZERO-DAY RESPONSEIMPROVE ZERO-DAY RESPONSE With just a click, assess and reduce your exposure to the latest CVE. [![IMPROVE ZERO-DAY RESPONSE](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/12-4.png)](#mobile_image_prismaaccordioncomp__cleanParsys_cortex-xpanse_cortex_en_US_pan_content_3) \* ### IMPROVE M\&A EVALUATIONIMPROVE M\&A EVALUATION Achieve better due diligence on security posture pre- and post-mergers and acquisitions. [![EVALUATE M\&A BETTER](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/12-5.png)](#mobile_image_prismaaccordioncomp__cleanParsys_cortex-xpanse_cortex_en_US_pan_content_4) \* ### INTERNET OPERATIONS MANAGEMENTINTERNET OPERATIONS MANAGEMENT Actively discover risks on all your internet-connected systems and services. [![INTERNET OPERATIONS MANAGEMENT](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/12-6.png)](#mobile_image_prismaaccordioncomp__cleanParsys_cortex-xpanse_cortex_en_US_pan_content_5) \* ### REDUCE CYBER INSURANCEREDUCE CYBER INSURANCE Eliminate unknown exposures to reduce insurance risk and premiums. [![REDUCE CYBER INSURANCE](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/12-7.png)](#mobile_image_prismaaccordioncomp__cleanParsys_cortex-xpanse_cortex_en_US_pan_content_6) [![FIX SECURITY BLINDSPOTS](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/12-1.png)](#image_prismaaccordioncomp__cleanParsys_cortex-xpanse_cortex_en_US_pan_content_0) [![PREVENT RANSOMWARE](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/12-2.png)](#image_prismaaccordioncomp__cleanParsys_cortex-xpanse_cortex_en_US_pan_content_1) [![ELIMINATE SHADOW CLOUD](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/12-3.png)](#image_prismaaccordioncomp__cleanParsys_cortex-xpanse_cortex_en_US_pan_content_2) [![IMPROVE ZERO-DAY RESPONSE](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/12-4.png)](#image_prismaaccordioncomp__cleanParsys_cortex-xpanse_cortex_en_US_pan_content_3) [![EVALUATE M\&A BETTER](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/12-5.png)](#image_prismaaccordioncomp__cleanParsys_cortex-xpanse_cortex_en_US_pan_content_4) [![INTERNET OPERATIONS MANAGEMENT](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/12-6.png)](#image_prismaaccordioncomp__cleanParsys_cortex-xpanse_cortex_en_US_pan_content_5) [![REDUCE CYBER INSURANCE](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/12-7.png)](#image_prismaaccordioncomp__cleanParsys_cortex-xpanse_cortex_en_US_pan_content_6) # Field-tested and deployed at scale by the world's largest, most-demanding organizations like yours ![logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/accenture_160x100.svg) ![logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/CVS_Logo_2016.svg) ![logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/redesign/xpanse/deparrtment-defense-logo-case-study_160x100.svg) ![logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/AIG_logo.png) ![logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/att-logo.png) ![logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/Goldman-Sachs-A-160x100.svg) ![logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/Pfizer_Logo_Color_RGB.svg) ![logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/hhs-logo-2022.webp) ![logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xpanse/nbc-logo.png) [Cortex Customer Stories](https://www.paloaltonetworks.com/cortex/customer-stories?ts=markdown) {#modules} ## Build your own ASM program ### For CISOs [CISO's Guide to ASM](https://www.paloaltonetworks.com/cyberpedia/a-cisos-guide-to-attack-surface-management?ts=markdown) ### For Vulnerability Managers [VM's Guide to ASM](https://start.paloaltonetworks.com/vm-guide-to-asm.html) ### For SOC Directors [SOC's Guide to ASM](https://start.paloaltonetworks.com/soc-guide-to-asm) ### For All [Attack Surface Assessment](https://www.paloaltonetworks.com/unit42/assess/attack-surface-assessment?ts=markdown) {#why} ## How Xpanse Helps the Palo Alto Networks SOC Sleep Better Watch Matt Mellen, Director of Security Operations, Palo Alto Networks [![white triangle](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/video-play-white.svg)](https://www.youtube.com/embed/F9SxWNCf2u8) ![Cortex XPanse](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/redesign/xpanse/Cortex-XPANSE-map-2x-min.png) Cortex Xpanse Cortex^®^ Xpanse^™^ routinely discovers assets that an organization's IT staff is unaware of and are not monitoring. Connect with our team to see what attackers see in an interactive demo. [Get a demo](https://start.paloaltonetworks.com/demo-request) ## Featured Resources [See all documents](https://www.paloaltonetworks.com/resources?q=expanse&_charset_=UTF-8&ts=markdown) REPORT ### Forrester names Palo Alto Networks a Leader in Attack Surface Management. [See the data](https://start.paloaltonetworks.com/2024-forrester-xpanse-wave) Infographic ### From Blind Spots to Protected Assets [Read now](https://www.paloaltonetworks.com/resources/infographics/from-blind-spots-to-protected-assets?ts=markdown) White Paper ### CISO's Guide to Attack Surface Management [Read now](https://www.paloaltonetworks.com/cyberpedia/a-cisos-guide-to-attack-surface-management?ts=markdown) White Paper ### Buyer's Guide to ASM [Learn more](https://start.paloaltonetworks.com/attack-surface-management-buyers-guide-things-to-consider.html) USE CASE ### Acquisition-Ready Architecture for Healthcare With Cortex Xpanse [Read now](https://www.paloaltonetworks.com/resources/guides/use-case-acquisition-ready-architecture-for-healthcare?ts=markdown) PrevNext [See all documents](https://www.paloaltonetworks.com/resources?q=expanse&_charset_=UTF-8&ts=markdown) {#footer} ## Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown) ## Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) ## Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2025 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language