Palo Alto Networks Introduces New Autonomous Security Platform

A major challenge in cybersecurity today is our inability to leverage massive scales of data for our defense. To meet this challenge, Palo Alto Networks on Wednesday announced Cortex® XSIAM: an AI-driven platform that can revolutionise the way data, analytics and automation are deployed by security organisations. Extended Security Intelligence & Automation Management (XSIAM) turns widespread infrastructure telemetry into an intelligent data foundation to fuel best-in-class artificial intelligence and dramatically accelerate threat response.

"Organisations are still taking hours, or even days or months, to remediate threats — those are hours and days we no longer have given the speed and sophistication of attacks that are now commonplace. The SIEM space has been frozen and still relies heavily on human-driven workflows," said Nikesh Arora, CEO and chairman of Palo Alto Networks. "This is not an area where we need an evolutionary approach. This is an area where we need a revolutionary approach. We have to radically reimagine how we run cybersecurity using AI, so that an enterprise is able to respond to all attacks in real time, not days, not weeks, not months."

Cortex XSIAM enables organisations to:

• Build an intelligent data foundation while reducing costs.
   Cortex XSIAM can natively ingest, normalise and integrate granular data across the security infrastructure at nearly half the list cost of legacy security products attempting to solve the problem.
• Respond in minutes rather than days.
   By providing multiple layers of AI-driven analytics based on the data foundation, Cortex XSIAM detects emerging threats across the entire security infrastructure, automates correlation of alerts and data into incidents, and leverages a self-learning recommendation engine to determine response next-steps.
• Proactively outpace threats.
   Cortex XSIAM will enable continuous discovery of vulnerabilities through native attack surface management and automate response based integrated threat intelligence from tens of thousands of Palo Alto Networks customers.

Availability: Cortex XSIAM is now available to a limited set of customers and is expected to be generally available later this year.