Palo Alto Networks launched Cortex AgentiX, positioning it as the industry’s most secure and robust platform for building, deploying, and governing the next generation of automated workforces known as “AI Agents” or the Agentic Workforce.
Cortex AgentiX, the successor to Cortex XSOAR®, addresses the critical challenge enterprises face: the need to leverage Agentic AI for productivity while ensuring complex integrations and robust security controls are maintained.
Starting in the Security Operations Center (SOC), AgentiX is set to revolutionize automation to combat sophisticated threats that can be launched up to 100 times faster by AI-powered adversaries. The platform utilizes powerful prebuilt AI Agents capable of dynamic planning, reasoning, and expert-level execution, giving security analysts a decisive advantage.
“Unleashing autonomous agents without tight control is a recipe for disaster. That’s why we built AgentiX on our proven Cortex platform, delivering the full power of agentic AI with the control, traceability and permission management every enterprise demands.” – Gonen Fink, EVP of Products, Cortex, Palo Alto Networks
Ultimately, AgentiX promises to deliver significant operational improvements for SOC teams, including up to a 98% reduction in Mean Time To Response (MTTR) and 75% less manual work, freeing analysts for strategic initiatives.
Key Features of Cortex AgentiX
Unlike siloed automation tools, AgentiX provides end-to-end workflow autonomy. It is built on a decade of security automation leadership, trained on 1.2 billion real-world playbook executions, and offers over 1,000 prebuilt integrations plus native Model Context Protocol (MCP) support for seamless enterprise compatibility.
With Cortex AgentiX, organizations gain three core capabilities:
1. Deploy the Industry’s Most Experienced Security Agents
AgentiX introduces powerful prebuilt agents designed to act as a seamless extension of security operations. The initial set includes:
- Threat Intelligence Agent: Aggregates and enriches threat data to uncover emerging adversary techniques.
- Email Investigation Agent: Automates full-spectrum email threat response, from analysis to containment.
- Endpoint Investigation Agent: Provides rapid analysis, forensics collection, and host containment across all major Endpoint Detection and Response (EDR) platforms.
- Network Security Agent: Orchestrates threat response and policy control across Palo Alto Networks and third-party firewalls.
- Cloud Security Agent: Delivers end-to-end security for cloud environments, covering posture, application protection, detection, and response.
- IT Agent: Streamlines enterprise IT operations by automating tasks like upgrades, patching, and user onboarding.
2. Build Custom No-Code Agents with Robust Guardrails
Organizations can rapidly create their own powerful AI agents using an elegant GenAI builder. This process leverages the platform’s extensive integrations and native MCP support, all within robust guardrails for total control.
3. Govern Autonomous Action with Enterprise-Grade Control
Security is paramount. AgentiX ensures safe operation through Role-Based Access Controls (RBAC) and the ability to require human-in-the-loop approval for high-impact actions. Every agent action is fully auditable, satisfying the strictest compliance and security requirements.
Francis Odum, Founder of Software Analyst Cyber Research (SACR), noted the key differentiator: “Cortex AgentiX stands apart by building its agentic workforce on Palo Alto Networks existing SecOps backbone and a decade of SOAR maturity. This foundation is crucial: It ensures agents operate within a fully governed automation framework.”
Cortex AgentiX is available immediately in Cortex Cloud™ and Cortex XSIAM®. Availability for Cortex XDR® and the standalone AgentiX platform is planned for early 2026.
WeTV unveils ‘3C’ plan to dominate Asian streaming, Names Ding Yuxi ambassador
Gartner Identifies Top 10 Strategic Technology Trends for 2026
