KUALA LUMPUR, December 17 – Palo Alto Networks, a leader in cybersecurity, has announced the release of Cortex XSIAM 2.0, enhancing its AI-driven security operations platform. Cortex XSIAM has been instrumental in transforming security operations centers (SOCs), with notable achievements such as a 270 times faster median time to resolution for a services company. The new version introduces a “bring-your-own machine learning” (BYOML) framework, allowing customers to integrate their custom AI models into the XSIAM data lake.
This framework leverages Palo Alto Networks’ extensive security data, exceeding 5 petabytes ingested daily. In addition to the BYOML framework, XSIAM 2.0 includes features addressing contemporary security challenges. The XSIAM Command Center provides a comprehensive view of data sources and alerts, simplifying the identification and prioritization of security incidents within a unified platform. The MITRE ATT&CK Coverage Dashboard enables organizations to assess their defense against various threat actor tactics and techniques. Gonen Fink, SVP of Cortex Products at Palo Alto Networks, highlighted the importance of AI and automation in closing operational gaps and accelerating incident remediation.
Recognized as a Leader and Outperformer in GigaOm’s 2023 Radar Report on Autonomous SOC, Cortex XSIAM offers a unified platform converging SOC capabilities such as XDR, SOAR, and SIEM. It has delivered significant results for various organizations, including a 75% reduction in incidents requiring investigation for an oil and gas company and a 10x improvement in incident closure rate for Imagination Technologies. Several organizations have reported positive outcomes with Cortex XSIAM 2.0. An oil and gas company experienced a 75% reduction in incidents requiring investigation, Boyne Resorts streamlined investigations by adding 20 more data sources into one platform, and Imagination Technologies achieved a remarkable 10x improvement in incident closure rate.
