SIEM and SOC analytics redefined: Palo Alto Networks introduces Cortex XSIAM autonomous security platform. New AI-driven platform cuts threat response time from days to minutes, providing a modern alternative to SIEM.
One of the biggest cybersecurity challenges today is the inability of organizations to leverage massive amounts of data for their defense. To address this challenge, Palo Alto Networks (NASDAQ: PANW) today introduced Cortex XSIAM: an AI-driven platform that has the potential to revolutionize the way security organizations use data, analytics and automation.
Extended Security Intelligence & Automation Management (XSIAM) turns widespread infrastructure telemetry into an intelligent data foundation that enables best-in-class artificial intelligence and dramatically accelerates threat response. Built from the ground up as an autonomous security platform, XSIAM will turn the multi-billion dollar SIEM category on its head by providing a modern alternative that can stay ahead of today's threat landscape.
Autonomous Security Platform
“It still takes organizations hours, days, or months to remediate threats—hours and days we no longer have given the speed and sophistication of attacks that are commonplace today. The SIEM space is deadlocked and still relies heavily on human-driven workflows,” said Nikesh Arora, CEO and Chairman of Palo Alto Networks. “This is not an area where we need an evolutionary approach. In this area we need a revolutionary approach. We need to radically transform the way we do cybersecurity using AI, so that an organization is able to respond to any attack in real time, not days, weeks, or months.”
Transform cybersecurity with AI
Cortex XSIAM (Extended Security Intelligence & Automation Management) an autonomous security platform (Palo Alto Networks).
For many years, the SIEM category has served security departments as a way to collect and analyze alerts and logs, with incremental improvements in security results. As a result, security teams kept acquiring new tools that promised to solve specific problems, resulting in a fragmented and ineffective security architecture. As computing power and data storage have improved exponentially, it's critical that we radically reimagine how to provide real-time security that stands up to the ubiquitous, AI-powered cyberattacks.
XSIAM is a revolutionary approach that collects granular data - not just logs and alerts - to enable machine learning. This is for autonomous response actions such as cross-correlating alerts and data, detecting advanced emerging threats, and automatically remediating issues based on native threat intelligence and attack surface data.
Security operations at Cortex XSIAM
- Building an intelligent data basis while reducing costs at the same time. Cortex XSIAM is able to natively ingest, normalize, and integrate granular data across the security infrastructure at nearly half the list cost of traditional security products attempting to solve the problem.
- Response in minutes instead of days. By providing multiple layers of AI-driven analytics on top of the data, Cortex XSIAM detects emerging threats across the security infrastructure, automates the correlation of alerts and incident data, and leverages a self-learning recommendation engine to determine next response steps.
- Proactively anticipate threats. Cortex XSIAM enables continuous vulnerability detection through native attack surface management and automated responses based on integrated threat intelligence from tens of thousands of Palo Alto Networks customers.
About Palo Alto Networks Palo Alto Networks, the global leader in cybersecurity solutions, is shaping the cloud-based future with technologies that transform the way people and businesses work. Our mission is to be the preferred cybersecurity partner and protect our digital way of life. We help you address the world's biggest security challenges with continuous innovation leveraging the latest breakthroughs in artificial intelligence, analytics, automation, and orchestration. By delivering an integrated platform and empowering a growing ecosystem of partners, we are the leaders in protecting tens of thousands of businesses across clouds, networks and mobile devices. Our vision is a world where every day is safer than the one before.