Palo Alto Networks launches AI-powered Cortex Cloud platform

Palo Alto Networks has announced the launch of Cortex Cloud, integrating AI-driven capabilities to enhance real-time security for cloud environments.

Research conducted by Unit 42, the threat intelligence arm of Palo Alto Networks, indicates that a significant 80% of security vulnerabilities are found within cloud attack surfaces. There has also been a noted 66% increase in threats directed towards cloud-based environments. This has been attributed to the rising adoption of cloud services and AI technologies, highlighting the need for advanced security measures.

Cortex Cloud aims to unify data, automate workflows, and utilise AI-driven insights to mitigate risk, block threats, and halt attacks instantaneously. It is designed to seamlessly ingest and analyse data from external tools, providing a cohesive view and remedial action across the broader cloud security ecosystem.

Lee Klarich, Chief Product Officer of Palo Alto Networks, stated: "As more critical business applications move to the cloud, cloud security must expand to include industry-leading runtime protection. And to make it as easy as possible for our customers to adopt end-to-end cloud security, we're including CNAPP at no additional cost for every Cortex Cloud Runtime Security customer. With Cortex Cloud, we are delivering the next generation of cloud security — enabling organisations to swiftly prevent, detect, investigate, and respond to evolving threats across their entire enterprise."

The Cortex Cloud initiative aligns with Palo Alto Networks' broader platformisation strategy, rearchitecting its security solutions on the AI-centric Cortex SecOps framework to offer an integrated user experience with targeted dashboards and workflows. The offering promises enhanced protection at a reduced total cost of ownership, offering new features such as:

• Application Security: Enhancements that ensure applications are secure throughout development, identifying issues before they become vulnerabilities.
• Cloud Posture: An improved multi-cloud management approach with AI-powered prioritisation and automated fixes.
• Cloud Runtime: Real-time threat prevention through native integration with advanced analytics.
• SOC Platform: Optimised for enterprise and cloud, significantly reducing response times to threats.

Melinda Marks from Enterprise Strategy Group commented: "Security teams need to mitigate risk to reduce the chance of cybersecurity incidents, and if and when an incident occurs, they need to respond as quickly as possible. Our research shows that security teams struggle with remediation efficiency because application security, cloud security, and security operations tools and processes have been historically siloed. With the introduction of Cortex Cloud, Palo Alto Networks delivers a unified code-to-cloud-to-SOC platform giving security teams the context to prioritise and drive remediation actions with the highest impact on reducing risk, while speeding up detection and response for security operations."

For existing users, the transition to Cortex Cloud will be smooth, offering enhanced capabilities without disruption. Prisma Cloud customers will receive a direct upgrade, allowing them to benefit from real-time security advancements. Similarly, current Cortex XSIAM users integrating Cortex Cloud will naturally adopt CNAPP features as part of the enterprise-to-cloud SecOps platform.

Palo Alto Networks has collaborated with several partners, including CyberCX, Deloitte, IBM, and Orange Cyberdefense, to roll out Cortex Cloud to customers. These partnerships aim to enhance SecOps transformation across enterprises, maximising operational efficiency and threat prevention.