[](https://www.paloaltonetworks.com/cortex?ts=markdown)  [](https://www.paloaltonetworks.com/cortex?ts=markdown) 
* [](https://www.paloaltonetworks.com/cortex?ts=markdown)
* [Industry Validation](https://www.paloaltonetworks.com/cortex/whycortex?ts=markdown)
* Products
 Products
Products
* [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown)
* [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)
* [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)
* [Cortex AgentiX](https://www.paloaltonetworks.com/cortex/agentix?ts=markdown)
* [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)
* [Cortex Exposure Management](https://www.paloaltonetworks.com/cortex/exposure-management?ts=markdown)
* [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)
* [Cortex Advanced Email Security](https://www.paloaltonetworks.com/cortex/advanced-email-security?ts=markdown)
* [Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)
* [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown)
* [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)
* [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)
* [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)
* [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)
* [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)
[
The Forrester Total Economic Impact^™^ of Cortex XSIAM
257% 3-year ROI and \<6-month payback for SOC transformation.
Get the facts](https://start.paloaltonetworks.com/forrester-total-economic-impact-xsiam)
* Solutions
 Solutions
[Threat Prevention, Detection \& Response](https://www.paloaltonetworks.com/cortex/detection-and-response?ts=markdown)
* [Cloud Detection and Response](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown)
* [Security Information and Event Management](https://www.paloaltonetworks.com/cortex/modernize-siem?ts=markdown)
* [Endpoint Protection](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown)
* [Endpoint Detection and Response](https://www.paloaltonetworks.com/cortex/endpoint-detection-and-response?ts=markdown)
* [Extended Detection \& Response](https://www.paloaltonetworks.com/cortex/detection-and-response?ts=markdown)
* [Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)
* [Managed Threat Hunting](https://www.paloaltonetworks.com/cortex/managed-threat-hunting?ts=markdown)
* [Ransomware Protection](https://www.paloaltonetworks.com/cortex/ransomware-protection?ts=markdown)
* [Digital Forensics](https://www.paloaltonetworks.com/cortex/digital-forensics?ts=markdown)
[Security Automation](https://www.paloaltonetworks.com/cortex/security-operations-automation?ts=markdown)
* [Network Security Automation](https://www.paloaltonetworks.com/cortex/network-security-automation?ts=markdown)
* [Incident Case Management](https://www.paloaltonetworks.com/cortex/incident-case-management?ts=markdown)
* [Security Operations Workflow Automation](https://www.paloaltonetworks.com/cortex/security-operations-automation?ts=markdown)
* [Threat Intel Management](https://www.paloaltonetworks.com/cortex/threat-intel-management?ts=markdown)
* [Extended Data Lake (XDL)](https://www.paloaltonetworks.com/cortex/cortex-xdl?ts=markdown)
* [Agentic Assistant](https://www.paloaltonetworks.com/cortex/cortex-agentic-assistant?ts=markdown)
[External Attack Surface Protection](https://www.paloaltonetworks.com/cortex/cortex-xpanse/attack-surface-management?ts=markdown)
* [Attack Surface Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse/attack-surface-management?ts=markdown)
* [Unmanaged Cloud Security](https://www.paloaltonetworks.com/cortex/cortex-xpanse/unmanaged-cloud-asset-management?ts=markdown)
* [Third-Party Security](https://www.paloaltonetworks.com/cortex/cortex-xpanse/attack-surface-management-for-third-party-and-supply-chain-security?ts=markdown)
* [Compliance Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse/compliance-management?ts=markdown)
* [Internet Operations Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse/internet-operations-management?ts=markdown)
* [Remote Network Security](https://www.paloaltonetworks.com/cortex/cortex-xpanse/asm-for-remote-workers?ts=markdown)
[Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)
* [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)
* [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)
* [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)
[
Tested. Reviewed. Proven
See Industry Validation](https://www.paloaltonetworks.com/cortex/cortex-xdr-industry-validation?ts=markdown)
* [Blog](https://www.paloaltonetworks.com/blog/security-operations/?ts=markdown)
* Resources
 Resources
Resources
* [White Papers](https://www.paloaltonetworks.com/resources?q=cortex&_charset_=UTF-8&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fwhitepaper&ts=markdown)
* [Cortex Partners](https://cortex.marketplace.pan.dev/marketplace/)
* [Customer Stories](https://www.paloaltonetworks.com/cortex/customer-stories?ts=markdown)
* [Cortex vs. The Competition](https://www.paloaltonetworks.com/cortex/cortex-vs-the-competition?ts=markdown)
* [Cortex XSOAR Marketplace](https://xsoar.pan.dev/marketplace)
* [Events](https://www.paloaltonetworks.com/resources/cortex-events?ts=markdown)
* [Datasheets](https://www.paloaltonetworks.com/resources?q=Cortex&_charset_=UTF-8&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fdatasheet&ts=markdown)
* [Research Reports](https://www.paloaltonetworks.com/resources?q=cortex&_charset_=UTF-8&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fresearch&ts=markdown)
* [Videos](https://www.paloaltonetworks.com/resources?q=cortex&_charset_=UTF-8&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fvideo&ts=markdown)
* [Cortex XDR Resource Center](https://www.paloaltonetworks.com/cortex/cortex-xdr-resource-center?ts=markdown)
[
DIGITAL ASSET
THE CORTEX PLATFORM](https://www.paloaltonetworks.com/resources/infographics/soc-transformation-infographic?ts=markdown)
[
WHITEPAPER
Cortex XSIAM Solution Brief](https://www.paloaltonetworks.com/resources/techbriefs/cortex-xsiam?ts=markdown)
[
REPORT
Unlock customized recommendations for transforming your SecOps.](https://www.paloaltonetworks.com/cortex/secops-readiness-report?ts=markdown)
* Get In Touch
 Get In Touch
Get in Touch
* [Request a Demo](https://www.paloaltonetworks.com/cortex/request-demo?ts=markdown)
* [Contact us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown)
* [Attend a Workshop](https://www.paloaltonetworks.com/cortex/cortex-xdr/hands-on-workshop?ts=markdown)
* [Find a Partner](https://technologypartners.paloaltonetworks.com/English/directory)
* [Join our Community](https://live.paloaltonetworks.com/)
[
SecOps analyst: A day in the life.
Start product tour](https://www.paloaltonetworks.com/resources/infographics/xsoar-product-tour?ts=markdown)
*
* [Request a Demo](https://www.paloaltonetworks.com/cortex/request-demo?ts=markdown)
 
[](https://www.paloaltonetworks.com/cortex?ts=markdown)
Search
All
* [Tech Docs]()
Close search modal
*** ** * ** ***
ULTIMATE SOC
EVENT RETURNS"\>
*THE ULTIMATE SOC
EVENT RETURNS*
---
FEB 25/261 HOUR
* [Count me in](https://start.paloaltonetworks.com/symphony2026)
**cortex****cortex****inherit\*\*\*\*cortex**
WEBINAR SERIES"\>
## *WEBINAR SERIES*
*CORTEX*
*Introducing Cortex AgentiX:
Meet Your AI Agent Workforce*
*Episode 1*
* [Watch now](https://www.paloaltonetworks.com/engage/cortex-forward-webinar-series/introducing-cortex-agentix)
**cortex****cortex****inherit\*\*\*\*cortex**
above the rest."\>
SOARing
above the rest.
---
#### SANS independent review: Cortex XSOAR^®^ capabilities.
* [Learn more](https://start.paloaltonetworks.com/cortex-xsoar-sans-review)
**cortex****cortex****inherit\*\*\*\*cortex**
## Palo Alto Networks: \#1 in SOC Automation
#### Cortex XSOAR^®^ ranked Overall Leader in SOAR by KuppingerCole.
* [See the analysis](https://start.paloaltonetworks.com/kuppingercole-soar-report.html)
**cortex****cortex****inherit\*\*\*\*cortex**
PrevNext
## Cortex AgentiX Early Access
The next generation of the world's #1 SOAR, re-architected for the era of autonomous AI agents.
[Sign up](https://www.paloaltonetworks.com/cortex/agentix-early-access?ts=markdown)
## EM360 Podcast Series With Cortex XSOAR.
Enhance your cybersecurity defenses with expert insights.
[Listen now](https://www.paloaltonetworks.com/resources/podcasts/the-automation-role-in-rapid-breach-response?ts=markdown)
### When it comes to incident response, SOC teams must shift their thinking to an automation-first mindset.
Putting humans at the frontlines of incident response is no longer sustainable. Modern SOCs are incorporating automation into their incident response workflows to maximize operational efficiencies.
*
#### Reduce alert noise and surface critical incidents
*
#### Eliminate repetitive, manual tasks
*
#### Facilitate analyst investigation and collaboration
*
#### Map external threats to SOC incidents
[Learn more](https://www.paloaltonetworks.com/engage/security-orchestration-automation-response)
[](#prismastickyimagecom_prisma-custom-background_prismacustombackgrou_956174660_cleanParsys_cortex-xsoar_cortex_en_US_pan_content_)
Why Cortex XSOAR
## Supercharge incident response across your SOC. Reduce time spent on incidents by 90%.\*
\*Reported time savings from aggregated customer use cases, including Palo Alto Networks SOC.
 
### Eliminate Busywork
Let automation reduce the noise and handle repetitive, time-consuming tasks so you get to focus on what's critical and on improving your security posture. We offer automation content packs across a wide range of use cases to help you accelerate deployment.
[Browse Marketplace](https://xsoar.pan.dev/marketplace)
 
### Speed Investigation
Everything you need to remediate an incident in one place -- incident data, indicators and threat intel are all fully integrated. You have a **war room** to collaborate in real time, manage tickets, and conduct post-incident analysis and reporting.
[Better investigations](https://www.paloaltonetworks.com/cortex/incident-case-management?ts=markdown)
 
### Orchestrate Across Your SOC
Automation alone is half the puzzle. You need a holistic approach that efficiently pulls together people, processes and technology. With XSOAR, you can orchestrate and centralize incident response across your teams, tools and networks.
[Top use cases](https://www.paloaltonetworks.com/resources/whitepapers/top-security-orchestration-use-cases?ts=markdown)
## Designed for Security Analysts
[Read the datasheet](https://www.paloaltonetworks.com/engage/security-orchestration-automation-response/cortex-xsoar-datasheet)[Watch Video](https://www.paloaltonetworks.com/resources/videos/introduction-to-xsoar?ts=markdown)
*
### Automate Your Manual WorkflowsAutomate Your Manual Workflows
900+ prebuilt integration and automation packs. 1,000s of security actions for DIY playbooks. Visual playbook editor for code-free automation.
\*
### Speed Up Your Incident InvestigationsSpeed Up Your Incident Investigations
Virtual war room for incident investigation and collaboration. ChatOps and CLI for on-the-fly investigation. Auto-documentation for knowledge sharing and audit reporting. Machine learning to aid analysts.
[](#mobile_image_prismaaccordioncomp_cleanParsys_cortex-xsoar_cortex_en_US_pan_content_1)
\*
### Act On Your Threat IntelAct On Your Threat Intel
Automate indicator processing and scoring. Map external threats to your incidents. Auto-push the latest indicators to EDLs. Unique high-fidelity threat intel from Unit 42™.
[!\[Act On Your Threat Intel\](https://www.paloaltonetworks.com/content/dam/pan/en\_US/images/cortex/redesign/xsoar/5\_3\_Dashboard-Threat Landscape.png)](#mobile_image_prismaaccordioncomp_cleanParsys_cortex-xsoar_cortex_en_US_pan_content_2)
\*
### Deploy Across Your StackDeploy Across Your Stack
Find what you need in the Marketplace to orchestrate incident response across your entire product stack.
[](#mobile_image_prismaaccordioncomp_cleanParsys_cortex-xsoar_cortex_en_US_pan_content_3)
[](#image_prismaaccordioncomp_cleanParsys_cortex-xsoar_cortex_en_US_pan_content_1)
[!\[Act On Your Threat Intel\](https://www.paloaltonetworks.com/content/dam/pan/en\_US/images/cortex/redesign/xsoar/5\_3\_Dashboard-Threat Landscape.png)](#image_prismaaccordioncomp_cleanParsys_cortex-xsoar_cortex_en_US_pan_content_2)
[](#image_prismaaccordioncomp_cleanParsys_cortex-xsoar_cortex_en_US_pan_content_3)
## A future-proof SOC for the public sector
### The State of North Dakota Information Technology (NDIT) supports the technology needs of state government, K--12 and higher education, and local communities. The scale and complexity of this network rivals that of a Fortune 30 company, making security as much of a challenge as it is a priority. To achieve its security goals, NDIT chose the Cortex platform as the foundation for its next-generation security operations center (SOC). NDIT leverages Cortex XSOAR automation to help streamline its operational workflows, allowing NDIT to achieve operational efficiencies equivalent to the addition of eight to 10 SOC analysts.
**196** playbooks help close over **60%** of incidents.
[a future-proof soc for the public sector:the state of north dakota information technology (ndit) supports the technology needs of state government, k--12 and higher education, and local communities. the scale and complexity of this network rivals that of a fortune 30 company, making security as much of a challenge as it is a priority. to achieve its security goals, ndit chose the cortex platform as the foundation for its next-generation security operations center (soc). ndit leverages cortex xsoar automation to help streamline its operational workflows, allowing ndit to achieve operational efficiencies equivalent to the addition of eight to 10 soc analysts.196 playbooks help close over 60% of incidents.](https://www.paloaltonetworks.com//players.brightcove.net/1050259881001/default_default/index.html?videoId=6363604280112&ts=markdown)
## A future-proof SOC for the public sector
### The State of North Dakota Information Technology (NDIT) supports the technology needs of state government, K--12 and higher education, and local communities. The scale and complexity of this network rivals that of a Fortune 30 company, making security as much of a challenge as it is a priority. To achieve its security goals, NDIT chose the Cortex platform as the foundation for its next-generation security operations center (SOC). NDIT leverages Cortex XSOAR automation to help streamline its operational workflows, allowing NDIT to achieve operational efficiencies equivalent to the addition of eight to 10 SOC analysts.
**196** playbooks help close over **60%** of incidents.
## See What XSOAR Can Do for You
Enrich data, improve alert triage and automate repetitive tasks to reduce your investigation time from hours to just minutes. Discover your potential ROI and operational efficiency gains based on your organization with a customized report.
* [Calculate your ROI](https://www.paloaltonetworks.com/resources/infographics/value-of-cortex-xsoar?ts=markdown)
* 90%
REDUCTION IN REMEDIATION TIME
* 89%
REDUCTION IN TIME SPENT INVESTIGATING MALWARE INCIDENTS
* 75%
FEWER INCIDENTS REQUIRING MANUAL INTERACTION
## Security Automation Hands-On Workshops
Learn how to automate security operations workflows to save time and effort.
[Sign up now](https://www.paloaltonetworks.com/resources/cortex-events?ts=markdown)
## Build Your Own Security Automation Program
Here are four tips we've garnered from working on thousands of SOAR deployments:
Before you SOARStart simpleBe predictableGet a champion
[Before you SOAR](#prismatabscomp_copy__prisma-custom-background_prismacustombackgrou_607574237_cleanParsys_cortex-xsoar_cortex_en_US_pan_content_0)[Start simple](#prismatabscomp_copy__prisma-custom-background_prismacustombackgrou_607574237_cleanParsys_cortex-xsoar_cortex_en_US_pan_content_1)[Be predictable](#prismatabscomp_copy__prisma-custom-background_prismacustombackgrou_607574237_cleanParsys_cortex-xsoar_cortex_en_US_pan_content_2)[Get a champion](#prismatabscomp_copy__prisma-custom-background_prismacustombackgrou_607574237_cleanParsys_cortex-xsoar_cortex_en_US_pan_content_3)
### Before you SOAR
What are your existing policies and processes? What tools do you use daily? Who needs to be involved in response and remediation? Standardize your processes so they are repeatable and consistent.
### Start simple
Are there time-consuming tasks that are part of a larger workflow? Are there tasks that impact operations if forgotten? Tackle these before you try automating a workflow end-to-end. Can't code? Start with pre-built playbooks and integrations. XSOAR has tons to choose from, covering a wide range of common use cases. A visual editor makes it easy to make edits without touching code.
### Be predictable
XSOAR ensures that processes produce the same outputs, the same way, every time. This speeds the onboarding of new SOC analysts, with documented best practices codified in playbooks. Consistent workflows make it easier to swap out point products, minimizing operational downtime.
## Get a champion
Starting small gets you quick wins to justify your investment. However, to take it to the next step, you need stakeholder buy-in to effect real digital transformation in your SOC. XSOAR users who succeed in transforming their SOCs dedicate resources to their teams to drive automation progress, and identify areas where automation can be a business enabler.
## Take It to the Next Level
### These are just a sample of things you are doing every day that can be automated. Our Cortex Customer Success and Professional Services teams can help you optimize your deployment to realize the full potential of your automation investment.
#### SOAR onboarding assistance
* Customer journey kickoff
* Onboarding assistance
* Service configuration
* Use case assistance
* Training, documentation and workshops
#### SOAR platform support
* Support community
* Support portal
* Telephone support
* Response time (S1)
* Slack DFIR private channel
#### Optimized SOAR experience
* Annual health check
* Customized success plans
* Periodic operations reviews
* Executive business reviews
## Not Ready to Go It Alone?
We partner with hundreds of Managed Service Providers worldwide to offer security automation as a service. If you are an MSSP looking to partner with the industry leader in SOAR, you can get more details about the program and our robust multitenant platform here.
[Learn more](https://www.paloaltonetworks.com/cortex/cortex-xsoar-mssp?ts=markdown)
## Hear from our customers
[](https://www.paloaltonetworks.com/customers/logicalis?ts=markdown)
[](https://www.paloaltonetworks.com/customers/Infosys?ts=markdown)
[](https://www.paloaltonetworks.com/customers/esri?ts=markdown)
[](https://www.paloaltonetworks.com/customers/naranja-xs-innovation-and-customer-data-protected-with-a-comprehensive-security-orchestration-strategy?ts=markdown)
[](https://www.paloaltonetworks.com/customers/flex?ts=markdown)
[](https://www.paloaltonetworks.com/customers/pldt-and-smart-communications-fortify-child-protection-with-a-custom-built-solution?ts=markdown)
[](https://www.paloaltonetworks.com/customers/turkcell-cyber-defence-center-soars-with-palo-alto-networks?ts=markdown)
[](https://www.paloaltonetworks.com/customers/security-exemplified-for-resolution-life-australasia?ts=markdown)
[](https://www.paloaltonetworks.com/customers/inspiras-cyber-fusion-centers-automate-incident-response-with-cortex-xsoar?ts=markdown)
[](https://www.paloaltonetworks.com/customers/caring-for-cybersecurity-at-one-of-belgiums-leading-hospitals?ts=markdown)
[](https://www.paloaltonetworks.com/customers/automation-first-managed-detection-and-response-centre-helps-saudi-information-technology-company?ts=markdown)
[](https://www.paloaltonetworks.com/customers/digital-first-homeownership-company-adopts-a-consolidation-strategy-to-modernize-security?ts=markdown)
[](https://www.paloaltonetworks.com/customers/automating-cloud-security-control-for-korea-credit-data?ts=markdown)
[](https://www.paloaltonetworks.com/customers/axitea-disrupts-the-italian-soc-market-with-cortex-xsoar?ts=markdown)
[](https://www.paloaltonetworks.com/customers/schlumberger-limited-optimizes-cybersecurity-with-palo-alto-networks?ts=markdown)
[](https://www.paloaltonetworks.com/customers/pague-menos-and-extrafarma-transform-retail-security-operations?ts=markdown)
[](https://www.paloaltonetworks.com/customers/playtika-manages-security-with-fewer-resources-using-palo-alto-networks-cortex-xsoar?ts=markdown)
[](https://www.paloaltonetworks.com/customers/north-dakota-it-safeguards-citizens-with-ai-driven-secops?ts=markdown)
[](https://www.paloaltonetworks.com/customers/forvia-faurecia-puts-security-automation-in-the-driving-seat-with-palo-alto-networks?ts=markdown)
[](https://www.paloaltonetworks.com/customers/growpro-consulting?ts=markdown)
[](https://www.paloaltonetworks.com/customers/pokemon-company-international-xsoar?ts=markdown)
[](https://www.paloaltonetworks.com/customers/sitecore-achieves-90-percentage-soc-automation-with-cortex-xsoar?ts=markdown)
[Cortex Customer Stories](https://www.paloaltonetworks.com/cortex/customer-stories?ts=markdown)
## Featured Resources
[See all documents](https://www.paloaltonetworks.com/resources?q=xsoar&_charset_=UTF-8&ts=markdown)
Report
### Palo Alto Networks: \#1 in SOC Automation
[See the analysis](https://start.paloaltonetworks.com/kuppingercole-soar-report.html)
PODCAST
### The Role of Automation in Rapid Breach Response
[Listen now](https://www.paloaltonetworks.com/resources/podcasts/the-automation-role-in-rapid-breach-response?ts=markdown)
Case Study
### Nuffield helps protect network of hospitals
[Learn More](https://www.paloaltonetworks.com/customers/nuffield-health-protects-network-of-hospitals-medical-facilities-and-wellness-centres?ts=markdown)
Video
### A Day in the Life of a Security Architect
[Watch now](https://www.paloaltonetworks.com/resources/videos/a-day-in-the-life-of-a-security-architect-with-cortex-xsoar?ts=markdown)
Video
### Introduction to XSOAR
[Watch now](https://www.paloaltonetworks.com/resources/videos/introduction-to-xsoar?ts=markdown)
Video
### XSOAR Default Playbook: Use cases and improvements
[Watch now](https://www.paloaltonetworks.com/resources/videos/xsoar-default-playbook?ts=markdown)
DATASHEET
### XSOAR Privacy Datasheet
[Learn More](https://www.paloaltonetworks.com/resources/datasheets/cortex-xsoar-privacy?ts=markdown)
DATASHEET
### Cortex XSOAR Datasheet
[Learn about XSOAR](https://www.paloaltonetworks.com/engage/security-orchestration-automation-response/cortex-xsoar-datasheet)
REPORT
### KuppingerCole Leadership Compass of SOAR
[Read the report](https://start.paloaltonetworks.com/kuppingercole-soar-report.html)
E-BOOK
### Security Orchestration for Dummies
[Download](https://start.paloaltonetworks.com/your-guide-to-security-orchestration)
WHITEPAPER
### State of SOAR Report
[Read the report](https://start.paloaltonetworks.com/The-State-of-SOAR-Automation)
VIDEO
### SOC Automation Tour
[Watch now](https://start.paloaltonetworks.com/SOC-Automation-Tour)
DATASHEET
### Cortex XSOAR Threat Intelligence Management
[Learn More](https://www.paloaltonetworks.com/resources/datasheets/cortex-xsoar-threat-intelligence-management?ts=markdown)
PrevNext
[See all documents](https://www.paloaltonetworks.com/resources?q=xsoar&_charset_=UTF-8&ts=markdown)
{#must-have-contact-form}
Cortex XSOAR allowed us to orchestrate all the activities we used to perform manually, resulting in the optimization of all the processes.
Head of Cyber Security Prevention and Transformation,
BNL
## Request your Personal Cortex XSOAR Demo
First Name \*
Last Name \*
Email \*
Company \*
Job Level \*Job Level
Job Function/Focus Area \*Job Function/Focus Area
Phone \*
Country \*Country
Department \*
StateState
ProvinceProvince
Zip Code \*
recaptcha
Sign me up to receive news, product updates, sales outreach, event information and special offers about Palo Alto Networks and its partners.
By submitting this form, I understand my personal data will be processed in accordance with [Palo Alto Networks Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) and [Terms of Use.](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown)
This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply.
Submit
#### Thank you for submitting your information. Your request has been received and is being routed to your local representative.
For immediate assistance, please call 866.320.4788 or 408.753.4000
{#footer}
## Products and Services
* [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown)
* [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown)
* [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown)
* [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown)
* [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown)
* [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown)
* [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown)
* [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown)
* [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown)
* [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)
* [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown)
* [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)
* [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)
* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)
* [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown)
* [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown)
* [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown)
* [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown)
* [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown)
* [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown)
* [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown)
* [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown)
* [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown)
* [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown)
* [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown)
* [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)
* [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown)
* [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown)
* [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown)
* [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown)
* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)
* [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown)
* [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)
* [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)
* [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)
* [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)
* [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)
* [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown)
* [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown)
* [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)
* [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)
* [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)
* [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)
* [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)
* [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown)
* [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown)
* [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown)
* [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown)
* [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown)
* [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown)
## Company
* [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown)
* [Careers](https://jobs.paloaltonetworks.com/en/)
* [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown)
* [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown)
* [Customers](https://www.paloaltonetworks.com/customers?ts=markdown)
* [Investor Relations](https://investors.paloaltonetworks.com/)
* [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown)
* [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown)
## Popular Links
* [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown)
* [Communities](https://www.paloaltonetworks.com/communities?ts=markdown)
* [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown)
* [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
* [Event Center](https://events.paloaltonetworks.com/)
* [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center)
* [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown)
* [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown)
* [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown)
* [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown)
* [Tech Docs](https://docs.paloaltonetworks.com/)
* [Unit 42](https://unit42.paloaltonetworks.com/)
* [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd)
* [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown)
* [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown)
* [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown)
* [Documents](https://www.paloaltonetworks.com/legal?ts=markdown)
Copyright © 2025 Palo Alto Networks. All Rights Reserved
* [](https://www.youtube.com/user/paloaltonetworks)
* [](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown)
* [](https://www.facebook.com/PaloAltoNetworks/)
* [](https://www.linkedin.com/company/palo-alto-networks)
* [](https://twitter.com/PaloAltoNtwks)
* EN
Select your language