Enhanced platform combines the power of agentic AI with the safety of enterprise-grade guardrails
SINGAPORE, November 3, 2025 — As enterprises race to adopt agentic AI for productivity gains, they are challenged with complex ecosystem integrations and a lack of control. Today, Palo Alto Networks (NASDAQ: PANW), the global cybersecurity leader, is launching Cortex® AgentiX™ to solve this problem. As the next generation of Cortex XSOAR®, AgentiX is the industry’s most secure platform to build, deploy and govern the AI agent workforce of the future.
Starting with the SOC, AgentiX is revolutionizing automation to counter adversaries who can launch attacks up to 100x faster with AI. Its powerful prebuilt agents are able to dynamically plan, reason, and execute solutions just as an expert would, giving security analysts a decisive advantage. Ultimately, AgentiX delivers up to a 98% reduction in MTTR with 75% less manual work, freeing time up for strategic initiatives.
Gonen Fink, EVP of Products, Cortex, Palo Alto Networks
“Unleashing autonomous agents without tight control is a recipe for disaster. That’s why we built AgentiX on our proven Cortex platform, delivering the full power of agentic AI with the control, traceability and permission management every enterprise demands. When applied to security teams, this isn’t just automation; it’s the end of manual toil. We’re freeing your experts to transform the SOC, not just chase alerts.”
Unlike siloed approaches that focus on automating individual SOC tasks, AgentiX delivers end-to-end workflow autonomy. It’s the only agentic AI platform built on a decade of security automation leadership and trained on 1.2 billion real-world playbook executions. Additionally, to help ensure seamless support for all critical enterprise tools, AgentiX comes with over 1,000 prebuilt integrations and native MCP support.
With Cortex AgentiX, organizations can:
- Deploy the industry’s most experienced security agents: Go beyond rigid playbooks with prebuilt agents that work as a seamless extension of your operations, with the first set including:
– Threat Intelligence Agent: Aggregates and enriches threat intelligence to uncover related cases and emerging adversary techniques.
– Email Investigation Agent: Automates a full-spectrum email threat response, from search and analysis to containment, across all platforms.
– Endpoint Investigation Agent: Delivers rapid analysis, forensics collection and host containment across every major EDR platform.
– Network Security Agent: Orchestrates threat response, policy control, and network management across Palo Alto Networks and third-party firewalls.
- Build your own custom no-code agents: Rapidly create powerful AI agents with an elegant GenAI builder that leverages over 1,000 prebuilt integrations, native MCP support as well as robust guardrails for total control.
- Orchestrate complex workflows across the entire enterprise: Launch context-aware agents directly from any Cortex product or orchestrate complex, enterprise-wide actions from the standalone AgentiX platform.
- Govern autonomous action with enterprise-grade guardrails: Safely operate AI agents with role-based access controls and require human-in-the-loop approval for impactful actions, helping ensure agentic workflows are safe and reliable. Every agent action comes with full auditability to support the strictest compliance and security requirements.
Francis Odum, Founder of Software Analyst Cyber Research (SACR)
“Cortex AgentiX stands apart by building its agentic workforce on Palo Alto Networks existing SecOps backbone and a decade of SOAR maturity. This foundation is crucial: It ensures agents operate within a fully governed automation framework, unlike newer entrants that often lack enterprise-grade policy enforcement and traceability. By deploying natively across XSIAM, XDR, and Cortex Cloud, Palo Alto Networks is uniquely positioned as the leader in agentic AI, delivering the scale, breadth and compliance standards required for the autonomous enterprise.”
Cortex AgentiX is available today in Cortex Cloud, Cortex XSIAM® and Cortex XDR®. The standalone AgentiX platform will be available in early 2026. To learn more, read the blog. Then, register for Ignite: What’s Next and hear more about all the upcoming innovations from Palo Alto Networks on Tuesday, October 28, at 9 a.m. PT. Visit our official news center for the latest announcements, news and developments from Ignite: What’s Next.
